last executing test programs: 53.732242132s ago: executing program 2 (id=1228): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 53.473478294s ago: executing program 3 (id=1229): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0xd1}, 0xe) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x4, 0x0, &(0x7f0000000000)) 53.243729042s ago: executing program 3 (id=1230): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) 53.025842287s ago: executing program 3 (id=1231): r0 = mq_open(&(0x7f0000000040)='!seli\x1a\x1d!\xa7\x00\x00inux\x00G\xd0\xc6(X', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedreceive(r0, &(0x7f00000017c0)=""/86, 0x56, 0x8000000000002001, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) 52.719951947s ago: executing program 3 (id=1232): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x804c4700, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x9, "3eccd8000000000000000010000000040100"}) 52.538524047s ago: executing program 3 (id=1233): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000300)={0x806, 0x2}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="180000005a00010000000000000000000000000004"], 0x18}}, 0x0) 52.381716256s ago: executing program 3 (id=1234): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x8080000, 0x1d000, 0x2}) 41.412876042s ago: executing program 2 (id=1257): r0 = socket(0x15, 0x5, 0x0) unshare(0x22020600) getsockopt(r0, 0x200000000114, 0x2718, &(0x7f0000000340)=""/17, &(0x7f0000000000)=0x11) 40.958196657s ago: executing program 4 (id=1259): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0xff05, 0x0) 40.842320629s ago: executing program 0 (id=1260): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)={0x20, r1, 0x1, 0xffffffff, 0x0, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x703d33dc4b18a98e}, 0x4040814) 40.405362846s ago: executing program 4 (id=1262): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x2, 0x10000, 0x4, 0x4, 0x0, 0x8, 0x7, 0xa, 0x0, 0x2, 0x1, 0x1, 0x800, 0x6, 0xb4c, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x1, 0x0, 0xfffffff8]}) ioctl$COMEDI_SUBDINFO(r0, 0x80486402, 0x0) 40.356166732s ago: executing program 0 (id=1263): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) syz_clone3(&(0x7f0000000300)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 39.978498604s ago: executing program 4 (id=1265): r0 = socket(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e1d, 0x4, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x2}, 0x1c) getsockopt$sock_buf(r0, 0x1, 0x19, &(0x7f0000001640)=""/219, &(0x7f0000000280)=0xdb) 39.473647371s ago: executing program 4 (id=1267): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8}]}}]}, 0x3c}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) 39.411828627s ago: executing program 0 (id=1268): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001500000029bd700000000000647262675f70725f686d61635f736861333834"], 0xe0}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) 39.053877388s ago: executing program 4 (id=1270): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0303000000000000000006000000080003001c60"], 0x1c}}, 0x2000c0c0) 38.986884855s ago: executing program 0 (id=1271): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x28, 0x100, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1, {[@ra={0x94, 0x4, 0x1}]}}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0xc0, 0x100}}}}}}}, 0x0) 38.631326287s ago: executing program 4 (id=1272): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x23f, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 37.160090674s ago: executing program 32 (id=1234): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x8080000, 0x1d000, 0x2}) 32.936211975s ago: executing program 2 (id=1275): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) poll(&(0x7f0000000040)=[{r0, 0x1122}], 0x1, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 32.866462457s ago: executing program 0 (id=1276): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f0000000100), 0x4000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 32.464318256s ago: executing program 2 (id=1277): r0 = msgget(0x0, 0x2c4) msgsnd(r0, &(0x7f0000000100)=ANY=[@ANYRESOCT=r0], 0x2000, 0x0) msgctl$IPC_RMID(r0, 0x0) 32.295193494s ago: executing program 0 (id=1278): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x94}}, 0x0) 31.945687426s ago: executing program 2 (id=1279): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000000000000}, 0x1}) 31.59706057s ago: executing program 2 (id=1281): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x50}}, 0x40) 23.136092864s ago: executing program 33 (id=1272): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x23f, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 17.375318079s ago: executing program 1 (id=1290): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, r1, 0x331, 0x70bd2a, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) 17.112469628s ago: executing program 34 (id=1278): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x94}}, 0x0) 17.091066046s ago: executing program 1 (id=1292): r0 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0xe133, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_LINKAT={0x27, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000380)='./bus\x00', &(0x7f0000000200)='./bus\x00', 0xffffffffffffffff, 0x1200, 0x1}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) 16.761196031s ago: executing program 1 (id=1293): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x7e, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x3c}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 16.371269836s ago: executing program 1 (id=1294): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000140), 0x256f16877c9c3f29, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000200)=0x7) 16.17217163s ago: executing program 35 (id=1281): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x50}}, 0x40) 15.945714432s ago: executing program 1 (id=1296): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0d030000000000000000130000001c0009"], 0x30}}, 0x0) 15.464708052s ago: executing program 1 (id=1297): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0x16}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "09000020000000008f29d158039b90627d7b60f0d5ca47f33eed46409b7c8722ce020df6b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346363d2c639c76000067af25166c2f0f85f36aa8867406119c010400002e31dea98204000000d560eae59ea49ef95d73202a6e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b5142ddf36e2a876a4fc871207bf12a84f1d4d132f5bb7edcf2d08d677e6a7268e106b6ced3c7f53df24092ddb9e0fac6a1153c3fc88bfd1404fef22cf3e825a6e19c6a48a5444eabb459ac3ec9a278df4011773d2f2e6529ed0ad424b47ec67522477f979360b76d1008000"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x81, 0xc, 0xb, 0x14, 0x5}}]}}]}, 0x148}}, 0x0) 0s ago: executing program 36 (id=1297): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0x16}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "09000020000000008f29d158039b90627d7b60f0d5ca47f33eed46409b7c8722ce020df6b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346363d2c639c76000067af25166c2f0f85f36aa8867406119c010400002e31dea98204000000d560eae59ea49ef95d73202a6e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b5142ddf36e2a876a4fc871207bf12a84f1d4d132f5bb7edcf2d08d677e6a7268e106b6ced3c7f53df24092ddb9e0fac6a1153c3fc88bfd1404fef22cf3e825a6e19c6a48a5444eabb459ac3ec9a278df4011773d2f2e6529ed0ad424b47ec67522477f979360b76d1008000"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x81, 0xc, 0xb, 0x14, 0x5}}]}}]}, 0x148}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.197' (ED25519) to the list of known hosts. [ 102.675978][ T5826] cgroup: Unknown subsys name 'net' [ 102.931860][ T5826] cgroup: Unknown subsys name 'cpuset' [ 102.986797][ T5826] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 105.123048][ T5826] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 109.170070][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 109.173346][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 109.174116][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 109.187153][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 109.189185][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 109.190173][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 109.212249][ T5155] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 109.222077][ T5155] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 109.223372][ T5155] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 109.224231][ T5155] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 109.224393][ T5155] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 109.226400][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 109.226581][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 109.247533][ T5155] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 109.379281][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 109.416520][ T5850] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 109.419948][ T5850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 109.420831][ T5850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 109.422088][ T5850] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 109.424625][ T5850] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 109.445199][ T5850] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 109.466810][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 109.467816][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 109.469285][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 109.471646][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 110.335559][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 110.741327][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 110.771037][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 110.792344][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 110.937924][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 111.327695][ T59] Bluetooth: hci1: command tx timeout [ 111.358078][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.359540][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.360218][ T5844] bridge_slave_0: entered allmulticast mode [ 111.363684][ T5844] bridge_slave_0: entered promiscuous mode [ 111.405840][ T59] Bluetooth: hci2: command tx timeout [ 111.440511][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.440687][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.440921][ T5844] bridge_slave_1: entered allmulticast mode [ 111.444219][ T5844] bridge_slave_1: entered promiscuous mode [ 111.485955][ T59] Bluetooth: hci4: command tx timeout [ 111.486181][ T59] Bluetooth: hci3: command tx timeout [ 111.487329][ T59] Bluetooth: hci0: command tx timeout [ 112.142885][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.236942][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.237190][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.237392][ T5847] bridge_slave_0: entered allmulticast mode [ 112.240096][ T5847] bridge_slave_0: entered promiscuous mode [ 112.343308][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.427946][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.428197][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.428427][ T5851] bridge_slave_0: entered allmulticast mode [ 112.431859][ T5851] bridge_slave_0: entered promiscuous mode [ 112.433820][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.433972][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.434187][ T5847] bridge_slave_1: entered allmulticast mode [ 112.440674][ T5847] bridge_slave_1: entered promiscuous mode [ 112.443072][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.443332][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.443606][ T5854] bridge_slave_0: entered allmulticast mode [ 112.448524][ T5854] bridge_slave_0: entered promiscuous mode [ 112.659312][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.659598][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.659843][ T5851] bridge_slave_1: entered allmulticast mode [ 112.662848][ T5851] bridge_slave_1: entered promiscuous mode [ 112.747217][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.747377][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.747529][ T5854] bridge_slave_1: entered allmulticast mode [ 112.749633][ T5854] bridge_slave_1: entered promiscuous mode [ 112.903247][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.903389][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.903578][ T5852] bridge_slave_0: entered allmulticast mode [ 112.907883][ T5852] bridge_slave_0: entered promiscuous mode [ 113.140330][ T5844] team0: Port device team_slave_0 added [ 113.143659][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.143822][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.144072][ T5852] bridge_slave_1: entered allmulticast mode [ 113.148300][ T5852] bridge_slave_1: entered promiscuous mode [ 113.247500][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.349496][ T5844] team0: Port device team_slave_1 added [ 113.416031][ T59] Bluetooth: hci1: command tx timeout [ 113.422387][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.430037][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.454412][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.496030][ T59] Bluetooth: hci2: command tx timeout [ 113.566188][ T5155] Bluetooth: hci0: command tx timeout [ 113.566199][ T5848] Bluetooth: hci4: command tx timeout [ 113.566290][ T59] Bluetooth: hci3: command tx timeout [ 113.642852][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.738155][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.820976][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.300495][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.300515][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.300545][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.310153][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.391580][ T5847] team0: Port device team_slave_0 added [ 114.489484][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.489509][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.489530][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.570453][ T5851] team0: Port device team_slave_0 added [ 114.574700][ T5847] team0: Port device team_slave_1 added [ 114.590393][ T5854] team0: Port device team_slave_0 added [ 114.690220][ T5851] team0: Port device team_slave_1 added [ 114.768088][ T5854] team0: Port device team_slave_1 added [ 114.772489][ T5852] team0: Port device team_slave_0 added [ 115.041455][ T5852] team0: Port device team_slave_1 added [ 115.118338][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.118358][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.118385][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.388493][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.388514][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.388544][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.390085][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.390112][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.390141][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.486343][ T59] Bluetooth: hci1: command tx timeout [ 115.543573][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.543595][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.543617][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.575142][ T59] Bluetooth: hci2: command tx timeout [ 115.645882][ T59] Bluetooth: hci4: command tx timeout [ 115.646031][ T59] Bluetooth: hci3: command tx timeout [ 115.646060][ T59] Bluetooth: hci0: command tx timeout [ 115.716107][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.716124][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.716154][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.718727][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.718743][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.718772][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.734426][ T5844] hsr_slave_0: entered promiscuous mode [ 115.737813][ T5844] hsr_slave_1: entered promiscuous mode [ 115.767124][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.767144][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.767174][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.959243][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.959260][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.959281][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.251683][ T5847] hsr_slave_0: entered promiscuous mode [ 116.253255][ T5847] hsr_slave_1: entered promiscuous mode [ 116.254739][ T5847] debugfs: 'hsr0' already exists in 'hsr' [ 116.254904][ T5847] Cannot create hsr debugfs directory [ 116.559221][ T5851] hsr_slave_0: entered promiscuous mode [ 116.560661][ T5851] hsr_slave_1: entered promiscuous mode [ 116.561751][ T5851] debugfs: 'hsr0' already exists in 'hsr' [ 116.561779][ T5851] Cannot create hsr debugfs directory [ 116.809701][ T5854] hsr_slave_0: entered promiscuous mode [ 116.811271][ T5854] hsr_slave_1: entered promiscuous mode [ 116.812394][ T5854] debugfs: 'hsr0' already exists in 'hsr' [ 116.812421][ T5854] Cannot create hsr debugfs directory [ 117.055174][ T5852] hsr_slave_0: entered promiscuous mode [ 117.062831][ T5852] hsr_slave_1: entered promiscuous mode [ 117.063794][ T5852] debugfs: 'hsr0' already exists in 'hsr' [ 117.063824][ T5852] Cannot create hsr debugfs directory [ 117.575934][ T5155] Bluetooth: hci1: command tx timeout [ 117.647639][ T5155] Bluetooth: hci2: command tx timeout [ 117.725900][ T5155] Bluetooth: hci0: command tx timeout [ 117.727274][ T5155] Bluetooth: hci3: command tx timeout [ 117.727310][ T5155] Bluetooth: hci4: command tx timeout [ 118.821386][ T5844] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 118.881416][ T5844] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 118.901316][ T5844] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 118.966334][ T5844] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 119.119814][ T5851] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 119.174591][ T5851] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 119.215117][ T5851] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 119.304734][ T5851] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 119.488799][ T5847] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 119.524347][ T5847] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 119.590497][ T5847] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 119.643196][ T5847] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 119.825059][ T5854] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 119.879493][ T5854] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 119.908189][ T5854] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 119.986618][ T5854] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 120.198378][ T5852] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 120.243632][ T5852] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 120.290288][ T5852] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 120.340163][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.345879][ T5852] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 120.519263][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.522452][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.624612][ T3576] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.626861][ T3576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.692125][ T3576] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.692283][ T3576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.734314][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.802715][ T3576] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.802882][ T3576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.853025][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.865640][ T3576] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.865913][ T3576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.051695][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.065451][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.135102][ T1136] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.135268][ T1136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.197521][ T1136] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.197838][ T1136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.259583][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.350128][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.375300][ T3576] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.375573][ T3576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.509803][ T2992] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.510093][ T2992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.652734][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.759176][ T3576] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.759433][ T3576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.834711][ T3576] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.835562][ T3576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.110278][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.129357][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.580071][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.671818][ T5844] veth0_vlan: entered promiscuous mode [ 122.705296][ T5851] veth0_vlan: entered promiscuous mode [ 122.721984][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.774521][ T5844] veth1_vlan: entered promiscuous mode [ 122.819520][ T5851] veth1_vlan: entered promiscuous mode [ 123.119388][ T5854] veth0_vlan: entered promiscuous mode [ 123.120616][ T5851] veth0_macvtap: entered promiscuous mode [ 123.150041][ T5844] veth0_macvtap: entered promiscuous mode [ 123.179293][ T5851] veth1_macvtap: entered promiscuous mode [ 123.197053][ T5844] veth1_macvtap: entered promiscuous mode [ 123.229600][ T5854] veth1_vlan: entered promiscuous mode [ 123.237532][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.319765][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.355410][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.381995][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.402174][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.450295][ T2992] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.479441][ T2992] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.497104][ T2992] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.523411][ T2992] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.542744][ T2992] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.562697][ T2992] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.581567][ T5854] veth0_macvtap: entered promiscuous mode [ 123.644462][ T2992] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.677496][ T2992] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.680592][ T5847] veth0_vlan: entered promiscuous mode [ 123.758883][ T5854] veth1_macvtap: entered promiscuous mode [ 123.993942][ T5847] veth1_vlan: entered promiscuous mode [ 124.081755][ T5852] veth0_vlan: entered promiscuous mode [ 124.157549][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.208841][ T5852] veth1_vlan: entered promiscuous mode [ 124.233695][ T3642] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.233727][ T3642] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.241744][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.358269][ T2992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.358296][ T2992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.395531][ T67] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.437320][ T67] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.443964][ T67] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.493545][ T67] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.495003][ T3576] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.495026][ T3576] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.633892][ T5847] veth0_macvtap: entered promiscuous mode [ 124.648543][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.648568][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.752741][ T5847] veth1_macvtap: entered promiscuous mode [ 124.887469][ T5852] veth0_macvtap: entered promiscuous mode [ 124.966571][ T5852] veth1_macvtap: entered promiscuous mode [ 125.115257][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.180801][ T2992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.180824][ T2992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.208587][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.279591][ T155] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.309795][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.340349][ T155] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.372300][ T155] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.394209][ T155] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.409470][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.464009][ T38] audit: type=1326 audit(1757890319.261:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5959 comm="syz.3.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f346e9ceba9 code=0x7ffc0000 [ 125.464070][ T38] audit: type=1326 audit(1757890319.261:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5959 comm="syz.3.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f346e9ceba9 code=0x7ffc0000 [ 125.465527][ T38] audit: type=1326 audit(1757890319.261:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5959 comm="syz.3.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f346e9ceba9 code=0x7ffc0000 [ 125.467446][ T3576] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.467470][ T3576] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.487671][ T3576] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.535870][ T38] audit: type=1326 audit(1757890319.331:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5959 comm="syz.3.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f346e9ceba9 code=0x7ffc0000 [ 125.540031][ T38] audit: type=1326 audit(1757890319.341:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5959 comm="syz.3.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f346e9ceba9 code=0x7ffc0000 [ 125.595040][ T38] audit: type=1326 audit(1757890319.391:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5959 comm="syz.3.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f346e9ceba9 code=0x7ffc0000 [ 125.595103][ T38] audit: type=1326 audit(1757890319.391:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5959 comm="syz.3.6" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f346e9ceba9 code=0x7ffc0000 [ 125.700428][ T3576] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.745991][ T3576] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.762977][ T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.494569][ T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.494587][ T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.613247][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.613271][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.727828][ T1232] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 126.821517][ T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.821645][ T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.905796][ T1136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.905823][ T1136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.946162][ T1232] usb 2-1: Using ep0 maxpacket: 8 [ 126.970204][ T1232] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 126.970242][ T1232] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 126.970269][ T1232] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 126.970296][ T1232] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 126.996057][ T1232] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 126.996099][ T1232] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.996136][ T1232] usb 2-1: Product: syz [ 126.996154][ T1232] usb 2-1: Manufacturer: syz [ 126.996172][ T1232] usb 2-1: SerialNumber: syz [ 127.256703][ T1232] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 127.258478][ T1232] usbtest 2-1:1.0: Linux user mode ISO test driver [ 127.258501][ T1232] usbtest 2-1:1.0: high-speed {control iso-in iso-out} tests (+alt) [ 127.526935][ T1232] usb 2-1: USB disconnect, device number 2 [ 128.179802][ T38] audit: type=1800 audit(1757890321.951:9): pid=5993 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.16" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 128.347696][ T5995] pim6reg: entered allmulticast mode [ 129.075139][ T6016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.27'. [ 129.082151][ T6016] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 129.082237][ T6016] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 129.880732][ T6034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.36'. [ 130.818213][ T6055] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 132.207781][ T5926] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 132.361452][ T5926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 132.361493][ T5926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.363708][ T5926] usb 5-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 132.363740][ T5926] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 132.363762][ T5926] usb 5-1: Manufacturer: syz [ 132.510138][ T5926] usb 5-1: config 0 descriptor?? [ 133.172987][ T5926] cougar 0003:060B:700A.0001: unknown main item tag 0x0 [ 133.173042][ T5926] cougar 0003:060B:700A.0001: unknown main item tag 0x0 [ 133.173072][ T5926] cougar 0003:060B:700A.0001: unknown main item tag 0x0 [ 133.173100][ T5926] cougar 0003:060B:700A.0001: unknown main item tag 0x0 [ 133.173127][ T5926] cougar 0003:060B:700A.0001: unknown main item tag 0x0 [ 133.417725][ T5926] cougar 0003:060B:700A.0001: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 133.511889][ T5926] usb 5-1: USB disconnect, device number 2 [ 134.198753][ T6119] fido_id[6119]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 134.225945][ T5926] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 134.400530][ T5926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 134.400569][ T5926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.400611][ T5926] usb 2-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 134.400635][ T5926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.493521][ T6127] syz.4.76 (6127) used greatest stack depth: 16760 bytes left [ 134.559609][ T5926] usb 2-1: config 0 descriptor?? [ 135.009059][ T5926] elecom 0003:056E:00FD.0002: unknown main item tag 0x0 [ 135.009104][ T5926] elecom 0003:056E:00FD.0002: unknown main item tag 0x0 [ 135.038663][ T5926] elecom 0003:056E:00FD.0002: hidraw0: USB HID v0.03 Device [HID 056e:00fd] on usb-dummy_hcd.1-1/input0 [ 135.229845][ T9] usb 2-1: USB disconnect, device number 3 [ 135.556143][ T6150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.85'. [ 135.561600][ T6141] fido_id[6141]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 136.468505][ T6172] pimreg: entered allmulticast mode [ 136.764541][ T6178] program syz.2.98 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 137.720512][ T38] audit: type=1326 audit(1757890331.521:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6203 comm="syz.3.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f346e9ceba9 code=0x7ffc0000 [ 137.720566][ T38] audit: type=1326 audit(1757890331.521:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6203 comm="syz.3.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f346e9ceba9 code=0x7ffc0000 [ 137.791586][ T38] audit: type=1326 audit(1757890331.581:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6203 comm="syz.3.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f346e9ceba9 code=0x7ffc0000 [ 137.791635][ T38] audit: type=1326 audit(1757890331.581:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6203 comm="syz.3.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f346e9ceba9 code=0x7ffc0000 [ 137.791673][ T38] audit: type=1326 audit(1757890331.581:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6203 comm="syz.3.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f346e9ceba9 code=0x7ffc0000 [ 137.791711][ T38] audit: type=1326 audit(1757890331.581:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6203 comm="syz.3.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=143 compat=0 ip=0x7f346e9ceba9 code=0x7ffc0000 [ 137.791747][ T38] audit: type=1326 audit(1757890331.581:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6203 comm="syz.3.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f346e9ceba9 code=0x7ffc0000 [ 137.791787][ T38] audit: type=1326 audit(1757890331.581:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6203 comm="syz.3.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f346e9ceba9 code=0x7ffc0000 [ 137.930740][ T6201] sp0: Synchronizing with TNC [ 138.059106][ T6209] sp0: Found TNC [ 138.264007][ T6215] Bluetooth: MGMT ver 1.23 [ 138.548771][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.548893][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.746010][ T5859] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 138.906865][ T6227] syz.1.119 (6227) used greatest stack depth: 16696 bytes left [ 138.938715][ T5859] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 138.938756][ T5859] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 138.938786][ T5859] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 138.938841][ T5859] usb 5-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 138.938866][ T5859] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.952284][ T5859] usb 5-1: config 0 descriptor?? [ 138.976554][ T6222] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 139.413848][ T5859] aureal 0003:0755:2626.0003: fixing Aureal Cy se W-01RN USB_V3.1 report descriptor. [ 139.415188][ T5859] aureal 0003:0755:2626.0003: unknown main item tag 0x6 [ 139.415228][ T5859] aureal 0003:0755:2626.0003: report_id 29495 is invalid [ 139.415246][ T5859] aureal 0003:0755:2626.0003: item 0 2 1 8 parsing failed [ 139.456606][ T5859] aureal 0003:0755:2626.0003: probe with driver aureal failed with error -22 [ 139.663492][ T5926] usb 5-1: USB disconnect, device number 3 [ 140.580239][ T6266] netlink: 4 bytes leftover after parsing attributes in process `syz.1.136'. [ 140.916986][ T6275] Driver unsupported XDP return value 0 on prog (id 11) dev N/A, expect packet loss! [ 140.992905][ T6279] netlink: 'syz.0.143': attribute type 30 has an invalid length. [ 143.495887][ T6328] capability: warning: `syz.0.165' uses deprecated v2 capabilities in a way that may be insecure [ 144.425902][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 144.576976][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 144.584323][ T10] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 144.584357][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.584380][ T10] usb 5-1: Product: syz [ 144.584395][ T10] usb 5-1: Manufacturer: syz [ 144.584411][ T10] usb 5-1: SerialNumber: syz [ 144.614771][ T10] usb 5-1: config 0 descriptor?? [ 144.694342][ T10] gspca_main: sq930x-2.14.0 probing 2770:930c [ 145.295830][ T10] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 145.295972][ T10] sq930x 5-1:0.0: probe with driver sq930x failed with error -71 [ 145.342241][ T10] usb 5-1: USB disconnect, device number 4 [ 146.272919][ T6386] team0: Device gtp0 is of different type [ 147.049725][ T6399] tipc: Started in network mode [ 147.049756][ T6399] tipc: Node identity 4, cluster identity 4711 [ 147.049770][ T6399] tipc: Node number set to 4 [ 147.169350][ T6402] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 147.647793][ T6419] netlink: 'syz.0.205': attribute type 10 has an invalid length. [ 148.136295][ T6419] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 148.170366][ T6416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 149.146746][ T6453] netlink: 'syz.4.223': attribute type 1 has an invalid length. [ 149.146771][ T6453] netlink: 4 bytes leftover after parsing attributes in process `syz.4.223'. [ 149.315870][ T5775] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 149.516709][ T5775] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 149.516749][ T5775] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 149.516778][ T5775] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 149.516824][ T5775] usb 2-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 149.516849][ T5775] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.584312][ T5775] usb 2-1: config 0 descriptor?? [ 149.585434][ T6449] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 150.108129][ T5775] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 150.108173][ T5775] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 150.108202][ T5775] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 150.108230][ T5775] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 150.108256][ T5775] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 150.108284][ T5775] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 150.108310][ T5775] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 150.108338][ T5775] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 150.108365][ T5775] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 150.108393][ T5775] aureal 0003:0755:2626.0004: unknown main item tag 0x0 [ 150.166509][ T67] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.169637][ T6464] Zero length message leads to an empty skb [ 150.190829][ T3576] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.190896][ T3576] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.190943][ T3576] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.261806][ T5775] aureal 0003:0755:2626.0004: hidraw0: USB HID v0.00 Device [HID 0755:2626] on usb-dummy_hcd.1-1/input0 [ 150.312963][ T5775] usb 2-1: USB disconnect, device number 4 [ 150.714783][ T6468] fido_id[6468]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 150.933443][ T38] audit: type=1800 audit(1757890344.731:18): pid=6482 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.235" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 151.176477][ T6484] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 151.658881][ T6495] netlink: 'syz.1.241': attribute type 1 has an invalid length. [ 152.510271][ T6521] netlink: 104 bytes leftover after parsing attributes in process `syz.3.254'. [ 152.566058][ T6524] capability: warning: `syz.2.255' uses 32-bit capabilities (legacy support in use) [ 152.935854][ T5926] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 153.010858][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 153.088624][ T5926] usb 2-1: Using ep0 maxpacket: 32 [ 153.091428][ T5926] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 153.091459][ T5926] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 153.091480][ T5926] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 153.091504][ T5926] usb 2-1: config 1 has no interface number 0 [ 153.091567][ T5926] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 153.091598][ T5926] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 153.091644][ T5926] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 153.091669][ T5926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.189947][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 153.198361][ T10] usb 1-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 153.198388][ T10] usb 1-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 153.198409][ T10] usb 1-1: config 5 has 1 interface, different from the descriptor's value: 2 [ 153.198467][ T10] usb 1-1: config 5 interface 0 altsetting 255 endpoint 0xD has invalid wMaxPacketSize 0 [ 153.198493][ T10] usb 1-1: config 5 interface 0 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 153.198598][ T10] usb 1-1: config 5 interface 0 altsetting 255 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 153.198626][ T10] usb 1-1: config 5 interface 0 altsetting 255 endpoint 0x84 has invalid wMaxPacketSize 0 [ 153.198650][ T10] usb 1-1: config 5 interface 0 has no altsetting 0 [ 153.252066][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=9f.21 [ 153.252104][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.252129][ T10] usb 1-1: Product: syz [ 153.252144][ T10] usb 1-1: Manufacturer: syz [ 153.252161][ T10] usb 1-1: SerialNumber: syz [ 153.351723][ T5926] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 153.735265][ T10] usb 1-1: USB disconnect, device number 2 [ 153.738560][ T5859] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 153.798937][ T5926] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 153.886960][ T5859] usb 3-1: Using ep0 maxpacket: 32 [ 153.925044][ T5859] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.925077][ T5859] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.925113][ T5859] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 153.925133][ T5859] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.972846][ T5859] usb 3-1: config 0 descriptor?? [ 154.012874][ T5919] usb 2-1: USB disconnect, device number 5 [ 154.039982][ T5919] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 154.440037][ T5926] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 154.514445][ T5859] koneplus 0003:1E7D:2D51.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.2-1/input0 [ 154.601607][ T5926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.601644][ T5926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.601668][ T5926] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 154.601714][ T5926] usb 4-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 154.601739][ T5926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.654968][ T5859] koneplus 0003:1E7D:2D51.0005: couldn't init struct koneplus_device [ 154.655039][ T5859] koneplus 0003:1E7D:2D51.0005: couldn't install mouse [ 154.701921][ T5859] koneplus 0003:1E7D:2D51.0005: probe with driver koneplus failed with error -71 [ 154.707225][ T5926] usb 4-1: config 0 descriptor?? [ 154.815855][ T5859] usb 3-1: USB disconnect, device number 2 [ 155.040001][ T6548] fido_id[6548]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 155.259164][ T5926] chicony 0003:04F2:1236.0006: hidraw0: USB HID v0.00 Device [HID 04f2:1236] on usb-dummy_hcd.3-1/input0 [ 155.415429][ T5859] usb 4-1: USB disconnect, device number 2 [ 155.433888][ T6559] Bluetooth: MGMT ver 1.23 [ 155.502879][ T6560] fido_id[6560]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 156.284563][ T6580] netlink: 12 bytes leftover after parsing attributes in process `syz.0.281'. [ 156.565838][ T10] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 156.718893][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 156.718936][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.721678][ T10] usb 4-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 156.721712][ T10] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 156.721734][ T10] usb 4-1: Manufacturer: syz [ 156.756522][ T10] usb 4-1: config 0 descriptor?? [ 157.230856][ T10] hid_parser_main: 59 callbacks suppressed [ 157.230884][ T10] cougar 0003:060B:700A.0007: unknown main item tag 0x0 [ 157.230920][ T10] cougar 0003:060B:700A.0007: unknown main item tag 0x0 [ 157.230950][ T10] cougar 0003:060B:700A.0007: unknown main item tag 0x0 [ 157.230976][ T10] cougar 0003:060B:700A.0007: unknown main item tag 0x0 [ 157.231004][ T10] cougar 0003:060B:700A.0007: unknown main item tag 0x0 [ 157.258703][ T10] cougar 0003:060B:700A.0007: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 157.300815][ T6603] netlink: 140 bytes leftover after parsing attributes in process `syz.2.292'. [ 157.300901][ T6603] netlink: 16 bytes leftover after parsing attributes in process `syz.2.292'. [ 157.300925][ T6603] netlink: 5 bytes leftover after parsing attributes in process `syz.2.292'. [ 157.440063][ T5919] usb 4-1: USB disconnect, device number 3 [ 157.486009][ T59] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 157.569580][ T59] Bluetooth: hci2: command 0x0401 tx timeout [ 158.012778][ T6612] fido_id[6612]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 158.901267][ T6645] ieee802154 phy0 wpan0: encryption failed: -22 [ 159.495124][ T6664] netlink: 12 bytes leftover after parsing attributes in process `syz.0.321'. [ 160.495849][ T6692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.335'. [ 160.495876][ T6692] netlink: 4 bytes leftover after parsing attributes in process `syz.0.335'. [ 160.496341][ T6692] netlink: 'syz.0.335': attribute type 12 has an invalid length. [ 160.734699][ T6699] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 161.345987][ T5942] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 161.500182][ T5942] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 161.500223][ T5942] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.500267][ T5942] usb 4-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 161.500292][ T5942] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.509549][ T5942] usb 4-1: config 0 descriptor?? [ 161.970362][ T5942] elecom 0003:056E:00FD.0008: unknown main item tag 0x0 [ 161.970406][ T5942] elecom 0003:056E:00FD.0008: unknown main item tag 0x0 [ 161.992481][ T5942] elecom 0003:056E:00FD.0008: hidraw0: USB HID v0.03 Device [HID 056e:00fd] on usb-dummy_hcd.3-1/input0 [ 162.186658][ T10] usb 4-1: USB disconnect, device number 4 [ 162.625966][ T5942] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 162.675298][ T38] audit: type=1326 audit(1757890356.471:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6744 comm="syz.1.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bade7eba9 code=0x7ffc0000 [ 162.675621][ T38] audit: type=1326 audit(1757890356.471:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6744 comm="syz.1.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bade7eba9 code=0x7ffc0000 [ 162.681425][ T38] audit: type=1326 audit(1757890356.481:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6744 comm="syz.1.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f0bade7eba9 code=0x7ffc0000 [ 162.681927][ T38] audit: type=1326 audit(1757890356.481:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6744 comm="syz.1.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bade7eba9 code=0x7ffc0000 [ 162.682266][ T38] audit: type=1326 audit(1757890356.481:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6744 comm="syz.1.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bade7eba9 code=0x7ffc0000 [ 162.684767][ T38] audit: type=1326 audit(1757890356.481:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6744 comm="syz.1.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f0bade7eba9 code=0x7ffc0000 [ 162.745470][ T38] audit: type=1326 audit(1757890356.541:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6744 comm="syz.1.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bade7eba9 code=0x7ffc0000 [ 162.759458][ T38] audit: type=1326 audit(1757890356.541:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6744 comm="syz.1.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bade7eba9 code=0x7ffc0000 [ 162.793270][ T5942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 162.793311][ T5942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 162.793344][ T5942] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 162.793395][ T5942] usb 3-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 162.793422][ T5942] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.859210][ T5942] usb 3-1: config 0 descriptor?? [ 162.860884][ T6738] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 163.301342][ T6749] Bluetooth: MGMT ver 1.23 [ 163.386662][ T5942] aureal 0003:0755:2626.0009: fixing Aureal Cy se W-01RN USB_V3.1 report descriptor. [ 163.388276][ T5942] aureal 0003:0755:2626.0009: unknown main item tag 0x6 [ 163.388316][ T5942] aureal 0003:0755:2626.0009: report_id 29495 is invalid [ 163.388333][ T5942] aureal 0003:0755:2626.0009: item 0 2 1 8 parsing failed [ 163.389272][ T5942] aureal 0003:0755:2626.0009: probe with driver aureal failed with error -22 [ 163.565958][ T5775] usb 3-1: USB disconnect, device number 3 [ 164.198276][ T1232] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 164.379615][ T1232] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 164.379650][ T1232] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.379672][ T1232] usb 5-1: Product: syz [ 164.379687][ T1232] usb 5-1: Manufacturer: syz [ 164.379716][ T1232] usb 5-1: SerialNumber: syz [ 164.433709][ T1232] usb 5-1: config 0 descriptor?? [ 164.448705][ T1232] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 165.044384][ T6787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.380'. [ 165.093792][ T6787] ip6gretap0: entered promiscuous mode [ 165.098858][ T6786] IPVS: ip_vs_edit_dest(): server weight less than zero [ 165.108708][ T5926] IPVS: starting estimator thread 0... [ 165.117211][ T5942] usb 5-1: USB disconnect, device number 5 [ 165.174584][ T6787] ip6gretap0: left promiscuous mode [ 165.206390][ T6789] IPVS: using max 6 ests per chain, 14400 per kthread [ 165.513310][ T6794] xt_l2tp: v2 sid > 0xffff: 1114112 [ 165.554112][ T6796] netlink: 12 bytes leftover after parsing attributes in process `syz.0.383'. [ 165.567972][ T6796] 8021q: VLANs not supported on gre0 [ 167.025876][ T1232] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 167.085541][ T6838] ======================================================= [ 167.085541][ T6838] WARNING: The mand mount option has been deprecated and [ 167.085541][ T6838] and is ignored by this kernel. Remove the mand [ 167.085541][ T6838] option from the mount to silence this warning. [ 167.085541][ T6838] ======================================================= [ 167.195983][ T1232] usb 4-1: Using ep0 maxpacket: 8 [ 167.198749][ T1232] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 167.204018][ T1232] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 167.204053][ T1232] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 167.204076][ T1232] usb 4-1: Product: syz [ 167.204092][ T1232] usb 4-1: Manufacturer: syz [ 167.204107][ T1232] usb 4-1: SerialNumber: syz [ 167.339336][ T6842] autofs: Bad value for 'fd' [ 167.507999][ T1232] usb 4-1: Handspring Visor / Palm OS: No valid connect info available [ 167.508028][ T1232] usb 4-1: Handspring Visor / Palm OS: port 163, is for unknown use [ 167.508050][ T1232] usb 4-1: Handspring Visor / Palm OS: port 51, is for unknown use [ 167.508070][ T1232] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2 [ 167.597508][ T6848] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 167.597542][ T6848] CIFS mount error: No usable UNC path provided in device string! [ 167.597542][ T6848] [ 167.597843][ T6848] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 167.717030][ T1232] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 167.758924][ T1232] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 167.787319][ T1232] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 168.042911][ T5942] usb 4-1: USB disconnect, device number 5 [ 168.141632][ T5942] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 168.207145][ T5942] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 168.227851][ T5942] visor 4-1:1.0: device disconnected [ 168.747510][ T6870] futex_wake_op: syz.0.416 tries to shift op by 32; fix this program [ 168.855574][ T6872] mmap: syz.1.415 (6872) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 169.083398][ T6878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.420'. [ 169.406841][ T6889] netlink: 80 bytes leftover after parsing attributes in process `syz.2.424'. [ 169.406888][ T6889] netlink: 16 bytes leftover after parsing attributes in process `syz.2.424'. [ 169.406909][ T6889] tipc: MTU too low for tipc bearer [ 170.044439][ T6904] netlink: 348 bytes leftover after parsing attributes in process `syz.2.432'. [ 170.441827][ T10] kernel write not supported for file /media3 (pid: 10 comm: kworker/0:1) [ 170.989656][ T6929] netlink: 24 bytes leftover after parsing attributes in process `syz.0.445'. [ 171.076262][ T6929] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 171.166295][ T5942] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 171.336990][ T5942] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 171.337023][ T5942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.367512][ T5942] usb 2-1: config 0 descriptor?? [ 171.382707][ T5942] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 171.464035][ T6944] netlink: 104 bytes leftover after parsing attributes in process `syz.3.453'. [ 171.784733][ T5942] gspca_cpia1: usb_control_msg 03, error -32 [ 171.785171][ T5942] gspca_cpia1: usb_control_msg 03, error -71 [ 171.785600][ T5942] gspca_cpia1: usb_control_msg 01, error -71 [ 171.785615][ T5942] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 171.790387][ T5942] usb 2-1: USB disconnect, device number 6 [ 172.063817][ T6954] netlink: 'syz.0.457': attribute type 1 has an invalid length. [ 172.063842][ T6954] netlink: 'syz.0.457': attribute type 2 has an invalid length. [ 172.063864][ T6954] netlink: 1172 bytes leftover after parsing attributes in process `syz.0.457'. [ 172.725775][ T6968] netlink: 240 bytes leftover after parsing attributes in process `syz.1.463'. [ 173.160516][ T6975] sp0: Synchronizing with TNC [ 173.160590][ T6980] sp0: Found TNC [ 174.015497][ T7004] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 174.015561][ T7004] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 174.022551][ T7004] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 174.022810][ T7004] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 174.022874][ T7004] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 174.022937][ T7004] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 174.023098][ T7004] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 174.023156][ T7004] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 174.023212][ T7004] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 174.023344][ T7004] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 174.023407][ T7004] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 174.023467][ T7004] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 174.023596][ T7004] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 174.023664][ T7004] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 174.023737][ T7004] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 174.023798][ T7004] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4) [ 174.023860][ T7004] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4) [ 174.023952][ T7004] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 174.024071][ T7004] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 174.605763][ T7020] futex_wake_op: syz.2.488 tries to shift op by -1; fix this program [ 174.900865][ T7030] netlink: 16 bytes leftover after parsing attributes in process `syz.0.491'. [ 175.847599][ T7056] tipc: Enabled bearer , priority 10 [ 179.076675][ T5775] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0 [ 179.076720][ T5775] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0 [ 179.076749][ T5775] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0 [ 179.147596][ T5775] hid-generic 0000:0004:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 179.274761][ T7146] netlink: 12 bytes leftover after parsing attributes in process `syz.1.547'. [ 179.635016][ T7155] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 179.677658][ T7150] fido_id[7150]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 180.335267][ T7175] netlink: 12 bytes leftover after parsing attributes in process `syz.3.558'. [ 181.029986][ T7196] Bluetooth: MGMT ver 1.23 [ 181.227737][ T5942] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 181.396376][ T5942] usb 1-1: Using ep0 maxpacket: 8 [ 181.399908][ T5942] usb 1-1: config 0 has too many interfaces: 65, using maximum allowed: 32 [ 181.399937][ T5942] usb 1-1: config 0 has an invalid interface number: 150 but max is 64 [ 181.399960][ T5942] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.399980][ T5942] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 65 [ 181.400002][ T5942] usb 1-1: config 0 has no interface number 0 [ 181.400076][ T5942] usb 1-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 181.400103][ T5942] usb 1-1: config 0 interface 150 has no altsetting 0 [ 181.400138][ T5942] usb 1-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 181.400163][ T5942] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.495267][ T5942] usb 1-1: config 0 descriptor?? [ 181.821713][ T7210] sp0: Synchronizing with TNC [ 181.840384][ T7215] sp0: Found TNC [ 181.867897][ T7209] [U] è` [ 181.872113][ T7217] netlink: 'syz.2.579': attribute type 23 has an invalid length. [ 182.003567][ T5942] usb 1-1: USB disconnect, device number 3 [ 182.285147][ T7220] netlink: 8 bytes leftover after parsing attributes in process `syz.4.581'. [ 183.257531][ T38] audit: type=1326 audit(1757890377.061:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7244 comm="syz.3.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f346e9ceba9 code=0x7ffc0000 [ 183.257589][ T38] audit: type=1326 audit(1757890377.061:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7244 comm="syz.3.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f346e9ceba9 code=0x7ffc0000 [ 183.261679][ T38] audit: type=1326 audit(1757890377.061:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7244 comm="syz.3.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f346e9cd510 code=0x7ffc0000 [ 183.261736][ T38] audit: type=1326 audit(1757890377.061:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7244 comm="syz.3.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f346e9ceba9 code=0x7ffc0000 [ 183.261800][ T38] audit: type=1326 audit(1757890377.061:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7244 comm="syz.3.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f346e9ceba9 code=0x7ffc0000 [ 183.297922][ T38] audit: type=1326 audit(1757890377.101:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7244 comm="syz.3.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f346e9ceba9 code=0x7ffc0000 [ 183.299074][ T38] audit: type=1326 audit(1757890377.101:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7244 comm="syz.3.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f346e9ceba9 code=0x7ffc0000 [ 183.299137][ T38] audit: type=1326 audit(1757890377.101:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7244 comm="syz.3.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f346e9ceba9 code=0x7ffc0000 [ 183.777507][ T7261] netlink: 'syz.0.600': attribute type 29 has an invalid length. [ 183.795827][ T7261] netlink: 'syz.0.600': attribute type 29 has an invalid length. [ 183.925940][ T5775] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 184.080427][ T5775] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.080464][ T5775] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.080508][ T5775] usb 4-1: New USB device found, idVendor=258a, idProduct=6a80, bcdDevice= 0.00 [ 184.080536][ T5775] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.094166][ T5775] usb 4-1: config 0 descriptor?? [ 184.593554][ T5775] hid-generic 0003:258A:6A80.000B: hidraw0: USB HID v0.00 Device [HID 258a:6a80] on usb-dummy_hcd.3-1/input0 [ 184.775223][ T5775] usb 4-1: USB disconnect, device number 6 [ 185.074911][ T7284] fido_id[7284]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 186.315839][ T5775] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 186.405903][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 186.470155][ T5775] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.470194][ T5775] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.470240][ T5775] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 186.470266][ T5775] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.518911][ T5775] usb 5-1: config 0 descriptor?? [ 186.576699][ T10] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 186.576736][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 186.591661][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 186.591701][ T10] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 186.591726][ T10] usb 2-1: Product: syz [ 186.591745][ T10] usb 2-1: Manufacturer: syz [ 186.591762][ T10] usb 2-1: SerialNumber: syz [ 186.611775][ T10] usb 2-1: config 0 descriptor?? [ 186.623861][ T10] usb 2-1: selecting invalid altsetting 0 [ 186.981758][ T5775] pyra 0003:1E7D:2CF6.000C: unknown main item tag 0x2 [ 187.017084][ T5775] pyra 0003:1E7D:2CF6.000C: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 187.083327][ T10] usb 2-1: USB disconnect, device number 7 [ 187.171676][ T5775] pyra 0003:1E7D:2CF6.000C: couldn't init struct pyra_device [ 187.171738][ T5775] pyra 0003:1E7D:2CF6.000C: couldn't install mouse [ 187.187078][ T5775] pyra 0003:1E7D:2CF6.000C: probe with driver pyra failed with error -71 [ 187.211640][ T5775] usb 5-1: USB disconnect, device number 6 [ 187.315137][ T7339] fido_id[7339]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 187.614548][ T5974] udevd[5974]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 187.654218][ T7345] overlayfs: workdir and upperdir must be separate subtrees [ 187.675622][ T7348] Invalid source name [ 187.767376][ T7349] process 'syz.1.642' launched '/dev/fd/3' with NULL argv: empty string added [ 188.171807][ T7360] smb3: Bad value for 'source' [ 188.316330][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 188.471546][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 188.471604][ T9] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3264, bcdDevice= 0.00 [ 188.471629][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.505092][ T9] usb 1-1: config 0 descriptor?? [ 188.968110][ T9] isku 0003:1E7D:3264.000D: unknown main item tag 0x0 [ 188.968156][ T9] isku 0003:1E7D:3264.000D: unknown main item tag 0x0 [ 188.968186][ T9] isku 0003:1E7D:3264.000D: unknown main item tag 0x0 [ 188.968215][ T9] isku 0003:1E7D:3264.000D: unknown main item tag 0x0 [ 188.968243][ T9] isku 0003:1E7D:3264.000D: unknown main item tag 0x0 [ 188.968272][ T9] isku 0003:1E7D:3264.000D: unknown main item tag 0x0 [ 188.968301][ T9] isku 0003:1E7D:3264.000D: unknown main item tag 0x0 [ 189.029887][ T9] isku 0003:1E7D:3264.000D: hidraw0: USB HID vf.fe Device [HID 1e7d:3264] on usb-dummy_hcd.0-1/input0 [ 189.197492][ T5775] usb 1-1: USB disconnect, device number 4 [ 189.503770][ T7383] fido_id[7383]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 189.559517][ T7389] netlink: 277 bytes leftover after parsing attributes in process `syz.3.659'. [ 189.932479][ T7401] usb usb1: check_ctrlrecip: process 7401 (syz.1.663) requesting ep 01 but needs 81 [ 190.406693][ T7411] netlink: 'syz.2.671': attribute type 2 has an invalid length. [ 190.767434][ T7420] netlink: 'syz.3.675': attribute type 16 has an invalid length. [ 191.178312][ T7435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.682'. [ 191.178339][ T7435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.682'. [ 191.178370][ T7435] netlink: 'syz.1.682': attribute type 12 has an invalid length. [ 191.178386][ T7435] netlink: 'syz.1.682': attribute type 13 has an invalid length. [ 192.092563][ T7464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.695'. [ 192.092611][ T7464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.695'. [ 192.092742][ T7464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.695'. [ 192.776002][ T5775] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 192.955886][ T5775] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 192.955918][ T5775] usb 2-1: config 0 has no interface number 0 [ 192.955978][ T5775] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 192.956012][ T5775] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.000114][ T5775] usb 2-1: config 0 descriptor?? [ 193.027694][ T5775] usb 2-1: selecting invalid altsetting 1 [ 193.029054][ T5775] dvb_ttusb_budget: ttusb_init_controller: error [ 193.029474][ T5775] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 193.357122][ T5775] DVB: Unable to find symbol cx22700_attach() [ 193.696154][ T5775] DVB: Unable to find symbol tda10046_attach() [ 193.696172][ T5775] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 193.730881][ T5775] usb 2-1: USB disconnect, device number 8 [ 193.920787][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 194.078726][ T10] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.078759][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 194.078795][ T10] usb 5-1: New USB device found, idVendor=056a, idProduct=0333, bcdDevice= 0.00 [ 194.078818][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.102408][ T10] usb 5-1: config 0 descriptor?? [ 194.583975][ T10] wacom 0003:056A:0333.000E: hidraw0: USB HID v0.00 Device [HID 056a:0333] on usb-dummy_hcd.4-1/input0 [ 194.775074][ T10] usb 5-1: USB disconnect, device number 7 [ 194.925801][ T5155] Bluetooth: hci1: command 0x0406 tx timeout [ 194.989637][ T7529] fido_id[7529]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 197.384473][ T7584] netlink: 20 bytes leftover after parsing attributes in process `syz.4.743'. [ 197.689729][ T7595] netlink: 36 bytes leftover after parsing attributes in process `syz.3.748'. [ 197.874116][ T7599] netlink: 'syz.4.751': attribute type 2 has an invalid length. [ 198.726036][ T7625] binder: 7624:7625 ioctl 541b 0 returned -22 [ 199.280716][ T7643] netlink: 128 bytes leftover after parsing attributes in process `syz.3.772'. [ 199.280788][ T7643] netlink: 16 bytes leftover after parsing attributes in process `syz.3.772'. [ 199.976893][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.976976][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.402994][ T7676] netlink: 56 bytes leftover after parsing attributes in process `syz.1.786'. [ 200.936004][ T7689] netlink: 8 bytes leftover after parsing attributes in process `syz.4.793'. [ 201.795861][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 201.872533][ T7714] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 201.955948][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 201.961532][ T10] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 201.961564][ T10] usb 2-1: config 0 has no interface number 0 [ 201.964825][ T10] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 201.964857][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.964880][ T10] usb 2-1: Product: syz [ 201.964895][ T10] usb 2-1: Manufacturer: syz [ 201.964912][ T10] usb 2-1: SerialNumber: syz [ 202.048791][ T10] usb 2-1: config 0 descriptor?? [ 202.086254][ T10] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 202.131924][ T7717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.805'. [ 202.699969][ T10] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 202.826879][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 202.935993][ T10] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 202.985827][ T10] usb 2-1: USB disconnect, device number 9 [ 203.023535][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 203.086988][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 203.088132][ T10] quatech2 2-1:0.51: device disconnected [ 204.259701][ T7758] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 206.015881][ T5919] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 206.178435][ T5919] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 206.178507][ T5919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.178535][ T5919] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 206.178582][ T5919] usb 5-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 206.178606][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.209661][ T5919] usb 5-1: config 0 descriptor?? [ 206.655969][ T5919] uclogic 0003:5543:0064.000F: item fetching failed at offset 0/3 [ 206.658159][ T5919] uclogic 0003:5543:0064.000F: parse failed [ 206.658401][ T5919] uclogic 0003:5543:0064.000F: probe with driver uclogic failed with error -22 [ 206.857786][ T5926] usb 5-1: USB disconnect, device number 8 [ 207.085873][ T5775] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 207.238933][ T5775] usb 4-1: Using ep0 maxpacket: 32 [ 207.241653][ T5775] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.241689][ T5775] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.241745][ T5775] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1d00, bcdDevice= 0.00 [ 207.241769][ T5775] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.306933][ T5775] usb 4-1: config 0 descriptor?? [ 207.802382][ T5775] corsair-cpro 0003:1B1C:1D00.0010: hidraw0: USB HID v0.07 Device [HID 1b1c:1d00] on usb-dummy_hcd.3-1/input0 [ 207.861021][ T5775] corsair-cpro 0003:1B1C:1D00.0010: probe with driver corsair-cpro failed with error -38 [ 207.874925][ T7844] CIFS mount error: No usable UNC path provided in device string! [ 207.874925][ T7844] [ 207.875061][ T7844] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 208.004474][ T9] usb 4-1: USB disconnect, device number 7 [ 208.116682][ T7846] mkiss: ax0: crc mode is auto. [ 208.386461][ T7850] fido_id[7850]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 208.965884][ T5919] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 209.136511][ T5919] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 209.136542][ T5919] usb 2-1: config 0 has no interface number 0 [ 209.136587][ T5919] usb 2-1: config 0 interface 128 has no altsetting 0 [ 209.144890][ T5919] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=95.91 [ 209.144923][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.144945][ T5919] usb 2-1: Product: syz [ 209.144961][ T5919] usb 2-1: Manufacturer: syz [ 209.144977][ T5919] usb 2-1: SerialNumber: syz [ 209.228147][ T5919] usb 2-1: config 0 descriptor?? [ 209.253227][ T5919] radio-si470x 2-1:0.128: could not find interrupt in endpoint [ 209.253324][ T5919] radio-si470x 2-1:0.128: probe with driver radio-si470x failed with error -5 [ 209.253932][ T5919] usbhid 2-1:0.128: couldn't find an input interrupt endpoint [ 209.527735][ T10] usb 2-1: USB disconnect, device number 10 [ 209.695919][ T5919] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 209.855921][ T5919] usb 4-1: Using ep0 maxpacket: 32 [ 209.858392][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.858428][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.858478][ T5919] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 209.858502][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.864708][ T5919] usb 4-1: config 0 descriptor?? [ 209.938247][ T5919] hub 4-1:0.0: USB hub found [ 209.975893][ T1232] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 210.125823][ T1232] usb 5-1: Using ep0 maxpacket: 8 [ 210.128491][ T1232] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 210.141504][ T1232] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 210.141540][ T1232] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.141563][ T1232] usb 5-1: Product: syz [ 210.141581][ T1232] usb 5-1: Manufacturer: syz [ 210.141598][ T1232] usb 5-1: SerialNumber: syz [ 210.153612][ T1232] usb 5-1: config 0 descriptor?? [ 210.188221][ T5919] hub 4-1:0.0: 29 ports detected [ 210.188744][ T5919] hub 4-1:0.0: insufficient power available to use all downstream ports [ 210.190980][ T1232] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 210.191038][ T1232] usb 5-1: setting power ON [ 210.247931][ T1232] dvb-usb: bulk message failed: -22 (2/0) [ 210.317506][ T1232] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 210.328786][ T1232] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 210.328865][ T1232] usb 5-1: media controller created [ 210.397469][ T7887] dvb-usb: bulk message failed: -22 (3/0) [ 210.397498][ T7887] cxusb: i2c wr: len=80 is too big! [ 210.397498][ T7887] [ 210.568794][ T1232] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 210.627733][ T5919] usb 4-1: USB disconnect, device number 8 [ 210.780892][ T1232] usb 5-1: selecting invalid altsetting 6 [ 210.780919][ T1232] usb 5-1: digital interface selection failed (-22) [ 210.780935][ T1232] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 210.789586][ T1232] usb 5-1: setting power OFF [ 210.789887][ T1232] dvb-usb: bulk message failed: -22 (2/0) [ 210.789908][ T1232] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 210.789921][ T1232] (NULL device *): no alternate interface [ 211.024034][ T1232] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 211.068826][ T1232] usb 5-1: USB disconnect, device number 9 [ 212.117073][ T7929] vivid-004: disconnect [ 212.120486][ T7928] vivid-004: reconnect [ 212.233933][ T7932] rdma_op ffff888031b1e270 conn xmit_rdma 0000000000000000 [ 212.376050][ T1232] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 212.528657][ T1232] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.528690][ T1232] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 212.528736][ T1232] usb 2-1: New USB device found, idVendor=056a, idProduct=0336, bcdDevice= 0.00 [ 212.528761][ T1232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.572348][ T1232] usb 2-1: config 0 descriptor?? [ 213.059157][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 213.106607][ T1232] wacom 0003:056A:0336.0011: hidraw0: USB HID v0.00 Device [HID 056a:0336] on usb-dummy_hcd.1-1/input0 [ 213.235769][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 213.251472][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.251507][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.251550][ T10] usb 3-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 213.251574][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.302063][ T1232] usb 2-1: USB disconnect, device number 11 [ 213.332646][ T10] usb 3-1: config 0 descriptor?? [ 213.364042][ T7955] fido_id[7955]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 213.741552][ T10] hid (null): unknown global tag 0xe [ 213.787678][ T1232] IPVS: starting estimator thread 0... [ 213.796758][ T10] aquacomputer_d5next 0003:0C70:F0B6.0012: unknown global tag 0xe [ 213.796786][ T10] aquacomputer_d5next 0003:0C70:F0B6.0012: item 0 1 1 14 parsing failed [ 213.797773][ T10] aquacomputer_d5next 0003:0C70:F0B6.0012: probe with driver aquacomputer_d5next failed with error -22 [ 213.876021][ T7964] IPVS: using max 7 ests per chain, 16800 per kthread [ 213.959871][ T5942] usb 3-1: USB disconnect, device number 4 [ 214.192782][ T7972] netlink: 56 bytes leftover after parsing attributes in process `syz.0.921'. [ 214.314931][ T7976] program syz.3.924 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 215.794753][ T8022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.946'. [ 215.794781][ T8022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.946'. [ 215.794810][ T8022] netlink: 'syz.0.946': attribute type 14 has an invalid length. [ 215.794828][ T8022] netlink: 'syz.0.946': attribute type 11 has an invalid length. [ 217.118094][ T5919] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 217.289623][ T5919] usb 3-1: config 0 interface 0 altsetting 237 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 217.289662][ T5919] usb 3-1: config 0 interface 0 altsetting 237 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.289686][ T5919] usb 3-1: config 0 interface 0 has no altsetting 0 [ 217.289723][ T5919] usb 3-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 217.289747][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.346541][ T5919] usb 3-1: config 0 descriptor?? [ 217.809145][ T5919] sony 0003:054C:024B.0013: unbalanced delimiter at end of report description [ 217.810070][ T5919] sony 0003:054C:024B.0013: parse failed [ 217.810187][ T5919] sony 0003:054C:024B.0013: probe with driver sony failed with error -22 [ 218.032960][ T5919] usb 3-1: USB disconnect, device number 5 [ 218.545045][ T8075] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 218.545074][ T8075] UDF-fs: Scanning with blocksize 512 failed [ 218.561846][ T8075] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 218.561874][ T8075] UDF-fs: Scanning with blocksize 1024 failed [ 218.562553][ T8075] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 218.562572][ T8075] UDF-fs: Scanning with blocksize 2048 failed [ 218.563508][ T8075] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 218.563529][ T8075] UDF-fs: Scanning with blocksize 4096 failed [ 219.099701][ T8088] netlink: 256 bytes leftover after parsing attributes in process `syz.0.978'. [ 219.099731][ T8088] netlink: 40 bytes leftover after parsing attributes in process `syz.0.978'. [ 219.105948][ T5775] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 219.277036][ T5775] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.277076][ T5775] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.277121][ T5775] usb 4-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 219.277147][ T5775] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.306498][ T5775] usb 4-1: config 0 descriptor?? [ 219.536086][ T8098] netlink: 32 bytes leftover after parsing attributes in process `syz.1.980'. [ 219.836441][ T5775] stadia 0003:18D1:9400.0014: hidraw0: USB HID v0.00 Device [HID 18d1:9400] on usb-dummy_hcd.3-1/input0 [ 219.836477][ T5775] stadia 0003:18D1:9400.0014: no inputs found [ 219.836490][ T5775] stadia 0003:18D1:9400.0014: force feedback init failed [ 219.921824][ T8108] nbd: must specify a size in bytes for the device [ 220.035343][ T5919] usb 4-1: USB disconnect, device number 9 [ 220.865061][ T8124] fido_id[8124]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 220.943784][ T8132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.998'. [ 221.304609][ T8140] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1001'. [ 221.342252][ T8141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1002'. [ 222.456064][ T5919] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 222.621997][ T5919] usb 4-1: Using ep0 maxpacket: 32 [ 222.625500][ T5919] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.625568][ T5919] usb 4-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 222.625603][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.671685][ T5919] usb 4-1: config 0 descriptor?? [ 222.685939][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 222.704480][ T5919] dvb-usb: found a 'TeVii S662' in warm state. [ 222.704541][ T5919] dw2102: su3000_power_ctrl: 1, initialized 0 [ 222.704565][ T5919] dvb-usb: bulk message failed: -22 (2/0) [ 222.751858][ T5919] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 222.766494][ T5919] dvbdev: DVB: registering new adapter (TeVii S662) [ 222.766561][ T5919] usb 4-1: media controller created [ 222.767037][ T5919] dvb-usb: bulk message failed: -22 (6/0) [ 222.767057][ T5919] dw2102: i2c transfer failed. [ 222.767076][ T5919] dvb-usb: bulk message failed: -22 (6/0) [ 222.767092][ T5919] dw2102: i2c transfer failed. [ 222.767112][ T5919] dvb-usb: bulk message failed: -22 (6/0) [ 222.767128][ T5919] dw2102: i2c transfer failed. [ 222.767148][ T5919] dvb-usb: bulk message failed: -22 (6/0) [ 222.767164][ T5919] dw2102: i2c transfer failed. [ 222.767200][ T5919] dvb-usb: bulk message failed: -22 (6/0) [ 222.767215][ T5919] dw2102: i2c transfer failed. [ 222.767232][ T5919] dvb-usb: bulk message failed: -22 (6/0) [ 222.767246][ T5919] dw2102: i2c transfer failed. [ 222.767256][ T5919] dvb-usb: MAC address: 02:02:02:02:02:02 [ 222.895041][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 222.895070][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 222.895092][ T9] usb 2-1: config 1 has no interface number 0 [ 222.895145][ T9] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 222.895364][ T8170] dw2102: i2c rd: len=257 is too big! [ 222.895364][ T8170] [ 222.904463][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 222.904498][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.904520][ T9] usb 2-1: Product: syz [ 222.904543][ T9] usb 2-1: Manufacturer: syz [ 222.904558][ T9] usb 2-1: SerialNumber: syz [ 223.023798][ T5919] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 223.084133][ T9] usb 2-1: selecting invalid altsetting 1 [ 223.183455][ T5919] dvb-usb: bulk message failed: -22 (3/0) [ 223.183495][ T5919] dw2102: command 0x0e transfer failed. [ 223.183576][ T5919] dvb-usb: bulk message failed: -22 (3/0) [ 223.183593][ T5919] dw2102: command 0x0e transfer failed. [ 223.486507][ T5919] dvb-usb: bulk message failed: -22 (3/0) [ 223.486549][ T5919] dw2102: command 0x0e transfer failed. [ 223.486560][ T5919] dvb-usb: bulk message failed: -22 (3/0) [ 223.486575][ T5919] dw2102: command 0x0e transfer failed. [ 223.486585][ T5919] dvb-usb: bulk message failed: -22 (1/0) [ 223.486599][ T5919] dw2102: command 0x51 transfer failed. [ 223.486609][ T5919] dvb-usb: bulk message failed: -22 (5/0) [ 223.486624][ T5919] dw2102: i2c probe for address 0x68 failed. [ 223.486636][ T5919] dvb-usb: bulk message failed: -22 (5/0) [ 223.486651][ T5919] dw2102: i2c probe for address 0x69 failed. [ 223.486663][ T5919] dvb-usb: bulk message failed: -22 (5/0) [ 223.486677][ T5919] dw2102: i2c probe for address 0x6a failed. [ 223.486689][ T5919] dw2102: probing for demodulator failed. Is the external power switched on? [ 223.486700][ T5919] dvb-usb: no frontend was attached by 'TeVii S662' [ 223.498462][ T9] usb 2-1: selecting invalid altsetting 1 [ 223.498552][ T9] cdc_ncm 2-1:1.1: bind() failure [ 223.697698][ T5919] rc_core: IR keymap rc-tt-1500 not found [ 223.697723][ T5919] Registered IR keymap rc-empty [ 223.701274][ T5919] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 223.705468][ T5919] input: TeVii S662 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input13 [ 223.708157][ T8199] binder: BINDER_SET_CONTEXT_MGR already set [ 223.708172][ T8199] binder: 8197:8199 ioctl 40046207 0 returned -16 [ 223.732601][ T5775] usb 2-1: USB disconnect, device number 12 [ 223.872007][ T5919] dvb-usb: schedule remote query interval to 250 msecs. [ 223.872035][ T5919] dw2102: su3000_power_ctrl: 0, initialized 1 [ 223.872050][ T5919] dvb-usb: TeVii S662 successfully initialized and connected. [ 223.906410][ T5919] usb 4-1: USB disconnect, device number 10 [ 224.398467][ T5919] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 224.577709][ T8221] warning: `syz.1.1039' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 224.741282][ T8227] random: crng reseeded on system resumption [ 225.291763][ T8241] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1049'. [ 225.318454][ T8243] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 226.151185][ T8255] option changes via remount are deprecated (pid=8251 comm=syz.4.1053) [ 226.194566][ T8259] syz.2.1057 uses obsolete (PF_INET,SOCK_PACKET) [ 226.530005][ T59] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 227.186114][ T5942] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 227.265896][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 227.348767][ T5942] usb 3-1: Using ep0 maxpacket: 16 [ 227.351478][ T5942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.351513][ T5942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.351537][ T5942] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 227.351583][ T5942] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 227.351608][ T5942] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.362620][ T5942] usb 3-1: config 0 descriptor?? [ 227.462611][ T9] usb 5-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 227.462711][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.462734][ T9] usb 5-1: Product: syz [ 227.462749][ T9] usb 5-1: Manufacturer: syz [ 227.462765][ T9] usb 5-1: SerialNumber: syz [ 227.586781][ T9] usb 5-1: config 0 descriptor?? [ 227.672217][ T9] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 227.925945][ T5942] HID 045e:07da: Invalid code 65791 type 1 [ 227.927769][ T5942] HID 045e:07da: Invalid code 768 type 1 [ 227.927794][ T5942] HID 045e:07da: Invalid code 769 type 1 [ 227.927809][ T5942] HID 045e:07da: Invalid code 770 type 1 [ 227.927823][ T5942] HID 045e:07da: Invalid code 771 type 1 [ 227.927837][ T5942] HID 045e:07da: Invalid code 772 type 1 [ 227.927851][ T5942] HID 045e:07da: Invalid code 773 type 1 [ 227.928326][ T5942] HID 045e:07da: Invalid code 774 type 1 [ 227.928345][ T5942] HID 045e:07da: Invalid code 775 type 1 [ 227.928359][ T5942] HID 045e:07da: Invalid code 776 type 1 [ 228.095547][ T5942] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0015/input/input15 [ 228.208369][ T9] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 228.208474][ T9] sq905c 5-1:0.0: probe with driver sq905c failed with error -71 [ 228.224900][ T9] usb 5-1: USB disconnect, device number 10 [ 228.243175][ T8307] program syz.3.1078 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 228.387363][ T5942] microsoft 0003:045E:07DA.0015: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 228.424916][ T5942] usb 3-1: USB disconnect, device number 6 [ 228.528418][ T8309] fido_id[8309]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 229.861446][ T8334] ALSA: seq fatal error: cannot create timer (-19) [ 230.296081][ T8353] can0: slcan on ttynull. [ 230.336015][ T9] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 230.502296][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 230.502335][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.502380][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 230.502404][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.570896][ T9] usb 5-1: config 0 descriptor?? [ 230.608718][ T9] hub 5-1:0.0: USB hub found [ 230.684168][ T8351] can0 (unregistered): slcan off ttynull. [ 230.798983][ T9] hub 5-1:0.0: 2 ports detected [ 231.256475][ T9] usb 5-1: USB disconnect, device number 11 [ 231.435879][ T1232] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 231.463848][ T8377] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 231.464009][ T8377] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 231.484648][ T8377] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 231.484760][ T8377] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 231.488784][ T8377] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 231.488904][ T8377] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 231.496991][ T8377] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 231.497099][ T8377] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 231.497452][ T8377] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 231.497545][ T8377] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 231.599101][ T1232] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 231.599132][ T1232] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 231.599154][ T1232] usb 3-1: config 1 has no interface number 0 [ 231.599205][ T1232] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 231.602592][ T1232] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 231.602624][ T1232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.602645][ T1232] usb 3-1: Product: syz [ 231.602660][ T1232] usb 3-1: Manufacturer: syz [ 231.602675][ T1232] usb 3-1: SerialNumber: syz [ 231.708827][ T1232] usb 3-1: selecting invalid altsetting 1 [ 232.154511][ T8386] xt_l2tp: unknown flags: 10 [ 232.177368][ T1232] usb 3-1: selecting invalid altsetting 1 [ 232.177438][ T1232] cdc_ncm 3-1:1.1: bind() failure [ 232.444892][ T5919] usb 3-1: USB disconnect, device number 7 [ 232.773033][ T5845] Bluetooth: hci1: command 0x0406 tx timeout [ 232.773081][ T5845] Bluetooth: hci2: command 0x0401 tx timeout [ 232.773135][ T59] Bluetooth: hci3: command 0x0406 tx timeout [ 232.816305][ T9] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 232.979996][ T9] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 232.980029][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.998147][ T9] usb 4-1: config 0 descriptor?? [ 233.049766][ T9] cp210x 4-1:0.0: cp210x converter detected [ 233.474215][ T9] usb 4-1: cp210x converter now attached to ttyUSB0 [ 233.645575][ T5775] usb 4-1: USB disconnect, device number 11 [ 233.757429][ T5775] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 233.835435][ T8418] vim2m vim2m.0: vidioc_s_fmt queue busy [ 233.896815][ T5775] cp210x 4-1:0.0: device disconnected [ 233.930630][ T8420] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1132'. [ 234.488205][ T5775] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 234.660220][ T5775] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 234.660258][ T5775] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 234.660277][ T5775] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 234.660296][ T5775] usb 2-1: config 220 has no interface number 2 [ 234.660421][ T5775] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 234.660450][ T5775] usb 2-1: config 220 interface 0 has no altsetting 0 [ 234.660469][ T5775] usb 2-1: config 220 interface 76 has no altsetting 0 [ 234.660487][ T5775] usb 2-1: config 220 interface 1 has no altsetting 0 [ 234.756858][ T5775] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 234.756893][ T5775] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.756916][ T5775] usb 2-1: Product: syz [ 234.756932][ T5775] usb 2-1: Manufacturer: syz [ 234.756949][ T5775] usb 2-1: SerialNumber: syz [ 235.009523][ T5775] usb 2-1: selecting invalid altsetting 0 [ 235.036712][ T5775] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 235.036761][ T5775] usb 2-1: No valid video chain found. [ 235.066559][ T5919] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 235.094644][ T5775] usb 2-1: selecting invalid altsetting 0 [ 235.094692][ T5775] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 235.113704][ T5775] usb 2-1: USB disconnect, device number 13 [ 235.265790][ T5919] usb 4-1: Using ep0 maxpacket: 8 [ 235.270016][ T5919] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 235.270046][ T5919] usb 4-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 235.270087][ T5919] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 235.270111][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.406780][ T10] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 235.581256][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 235.581294][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 235.581342][ T10] usb 5-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 235.581369][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.638642][ T5775] usb 4-1: USB disconnect, device number 12 [ 235.745160][ T10] usb 5-1: config 0 descriptor?? [ 235.762823][ T8456] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1151'. [ 236.065814][ T5919] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 236.223078][ T5919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 236.223118][ T5919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.223161][ T5919] usb 2-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 236.223186][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.275288][ T10] mcp2200 0003:04D8:00DF.0016: item fetching failed at offset 5/7 [ 236.287066][ T10] mcp2200 0003:04D8:00DF.0016: can't parse reports [ 236.287191][ T10] mcp2200 0003:04D8:00DF.0016: probe with driver mcp2200 failed with error -22 [ 236.301362][ T5919] usb 2-1: config 0 descriptor?? [ 236.415287][ T8468] mmap: syz.0.1155 (8468): VmData 37474304 exceed data ulimit 5. Update limits or use boot option ignore_rlimit_data. [ 236.531936][ T5942] usb 5-1: USB disconnect, device number 12 [ 236.730056][ T5919] bigben 0003:146B:0902.0017: unexpected rdesc, please submit for review [ 236.744053][ T5919] bigben 0003:146B:0902.0017: hidraw0: USB HID v0.01 Device [HID 146b:0902] on usb-dummy_hcd.1-1/input0 [ 236.744106][ T5919] bigben 0003:146B:0902.0017: not enough fields in HID_OUTPUT_REPORT 0 [ 236.744130][ T5919] bigben 0003:146B:0902.0017: no output report found [ 236.948569][ T5926] usb 2-1: USB disconnect, device number 14 [ 237.323075][ T8475] fido_id[8475]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 237.675886][ T5775] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 237.825927][ T5775] usb 5-1: Using ep0 maxpacket: 8 [ 237.828898][ T5775] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.828934][ T5775] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.828958][ T5775] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 237.829005][ T5775] usb 5-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 237.829039][ T5775] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.902613][ T5775] usb 5-1: config 0 descriptor?? [ 237.916391][ T10] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 238.080619][ T10] usb 4-1: config 4 has an invalid interface number: 231 but max is 0 [ 238.080651][ T10] usb 4-1: config 4 has no interface number 0 [ 238.084520][ T10] usb 4-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 238.084628][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.084661][ T10] usb 4-1: Product: syz [ 238.084677][ T10] usb 4-1: Manufacturer: syz [ 238.084694][ T10] usb 4-1: SerialNumber: syz [ 238.163550][ T10] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 238.388860][ T5775] elecom 0003:056E:00FE.0018: unknown main item tag 0x4 [ 238.388900][ T5775] elecom 0003:056E:00FE.0018: unknown main item tag 0x6 [ 238.388929][ T5775] elecom 0003:056E:00FE.0018: unknown main item tag 0x0 [ 238.388956][ T5775] elecom 0003:056E:00FE.0018: unknown main item tag 0x0 [ 238.388992][ T5775] elecom 0003:056E:00FE.0018: unknown main item tag 0x0 [ 238.389019][ T5775] elecom 0003:056E:00FE.0018: unknown main item tag 0x0 [ 238.389046][ T5775] elecom 0003:056E:00FE.0018: unknown main item tag 0x0 [ 238.389073][ T5775] elecom 0003:056E:00FE.0018: unknown main item tag 0x0 [ 238.389100][ T5775] elecom 0003:056E:00FE.0018: unknown main item tag 0x0 [ 238.389128][ T5775] elecom 0003:056E:00FE.0018: unknown main item tag 0x0 [ 238.477478][ T5775] elecom 0003:056E:00FE.0018: hidraw0: USB HID v0.00 Device [HID 056e:00fe] on usb-dummy_hcd.4-1/input0 [ 238.527383][ T8504] ALSA: seq fatal error: cannot create timer (-22) [ 238.571917][ T10] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 238.571970][ T10] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 238.656549][ T10] usb 5-1: USB disconnect, device number 13 [ 238.807098][ T5775] usb 4-1: USB disconnect, device number 13 [ 239.072291][ T6001] udevd[6001]: 'fido_id' [8512] terminated by signal 33 (Unknown signal 33) [ 239.368831][ T8522] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.664044][ T8529] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1181'. [ 239.975905][ T5926] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 240.126089][ T5926] usb 5-1: Using ep0 maxpacket: 32 [ 240.133835][ T5926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.133872][ T5926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.133917][ T5926] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 240.133942][ T5926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.225351][ T5926] usb 5-1: config 0 descriptor?? [ 240.265478][ T5926] hub 5-1:0.0: USB hub found [ 240.466975][ T5926] hub 5-1:0.0: 29 ports detected [ 240.469966][ T5926] hub 5-1:0.0: insufficient power available to use all downstream ports [ 240.865830][ T10] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 240.939136][ T5926] usb 5-1: USB disconnect, device number 14 [ 241.107661][ T10] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 241.107699][ T10] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 241.107728][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 241.107765][ T10] usb 3-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 241.107789][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.260853][ T10] usb 3-1: config 0 descriptor?? [ 241.263096][ T8550] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 241.761777][ T8567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1202'. [ 241.766866][ T10] hid-u2fzero 0003:10C4:8ACF.0019: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.2-1/input0 [ 241.803198][ T10] hid-u2fzero 0003:10C4:8ACF.0019: U2F Zero LED initialised [ 241.803517][ T10] hid-u2fzero 0003:10C4:8ACF.0019: U2F Zero RNG initialised [ 242.026764][ T5919] usb 3-1: USB disconnect, device number 8 [ 242.354485][ T8575] fido_id[8575]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 243.503052][ T38] audit: type=1326 audit(1757890437.243:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8594 comm="syz.1.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bade7eba9 code=0x7ffc0000 [ 243.503113][ T38] audit: type=1326 audit(1757890437.293:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8594 comm="syz.1.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bade7eba9 code=0x7ffc0000 [ 243.503164][ T38] audit: type=1326 audit(1757890437.293:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8594 comm="syz.1.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0bade7eba9 code=0x7ffc0000 [ 243.503213][ T38] audit: type=1326 audit(1757890437.293:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8594 comm="syz.1.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bade7eba9 code=0x7ffc0000 [ 243.503262][ T38] audit: type=1326 audit(1757890437.293:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8594 comm="syz.1.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bade7eba9 code=0x7ffc0000 [ 243.503311][ T38] audit: type=1326 audit(1757890437.293:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8594 comm="syz.1.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f0bade7eba9 code=0x7ffc0000 [ 243.503359][ T38] audit: type=1326 audit(1757890437.293:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8594 comm="syz.1.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bade7eba9 code=0x7ffc0000 [ 243.503408][ T38] audit: type=1326 audit(1757890437.293:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8594 comm="syz.1.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bade7eba9 code=0x7ffc0000 [ 244.810986][ T44] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 244.999004][ T44] usb 3-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 244.999040][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.054203][ T44] usb 3-1: config 0 descriptor?? [ 245.120230][ T44] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 245.155195][ T44] dvb_usb_af9015 3-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 245.294667][ T44] usb 3-1: USB disconnect, device number 9 [ 247.735652][ C0] sched: DL replenish lagged too much [ 252.367449][ T38] audit: type=1400 audit(1757890446.163:43): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=8645 comm="syz.4.1240" src=1 dest=20000 netif=wpan0 [ 252.665061][ T8647] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 254.497649][ T5775] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 254.684510][ T5775] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 254.684541][ T5775] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 254.684561][ T5775] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 254.684582][ T5775] usb 5-1: config 220 has no interface number 2 [ 254.684673][ T5775] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 254.684712][ T5775] usb 5-1: config 220 interface 0 has no altsetting 0 [ 254.684732][ T5775] usb 5-1: config 220 interface 76 has no altsetting 0 [ 254.684751][ T5775] usb 5-1: config 220 interface 1 has no altsetting 0 [ 254.773606][ T5775] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 254.773641][ T5775] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.773662][ T5775] usb 5-1: Product: syz [ 254.773677][ T5775] usb 5-1: Manufacturer: syz [ 254.773702][ T5775] usb 5-1: SerialNumber: syz [ 255.208293][ T5775] usb 5-1: selecting invalid altsetting 0 [ 255.231945][ T5775] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 255.231984][ T5775] usb 5-1: No valid video chain found. [ 255.289592][ T5775] usb 5-1: selecting invalid altsetting 0 [ 255.289638][ T5775] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 255.336410][ T5775] usb 5-1: USB disconnect, device number 15 [ 256.175960][ T5775] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 256.328376][ T5775] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.328413][ T5775] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.328438][ T5775] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 256.328484][ T5775] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 256.328509][ T5775] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.391382][ T5775] usb 5-1: config 0 descriptor?? [ 256.859516][ T5775] plantronics 0003:047F:FFFF.001A: collection stack underflow [ 256.859559][ T5775] plantronics 0003:047F:FFFF.001A: item 0 1 0 12 parsing failed [ 256.860451][ T5775] plantronics 0003:047F:FFFF.001A: parse failed [ 256.860576][ T5775] plantronics 0003:047F:FFFF.001A: probe with driver plantronics failed with error -22 [ 257.094359][ T5775] usb 5-1: USB disconnect, device number 16 [ 258.018816][ T8679] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1253'. [ 261.314793][ T8706] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1264'. [ 261.589058][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.589146][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.025447][ T8714] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1268'. [ 265.084747][ T5848] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 265.114058][ T5848] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 265.136370][ T5848] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 265.151891][ T5848] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 265.165032][ T5848] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 266.385938][ T8727] chnl_net:caif_netlink_parms(): no params data found [ 267.246016][ T5155] Bluetooth: hci5: command tx timeout [ 269.326018][ T5155] Bluetooth: hci5: command tx timeout [ 269.613477][ T8757] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1280'. [ 269.613680][ T8757] net_ratelimit: 1052 callbacks suppressed [ 269.613696][ T8757] openvswitch: netlink: nsh attribute has 5260 unknown bytes. [ 269.613733][ T8757] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 270.166070][ T44] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 270.324873][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 270.324928][ T44] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 270.324953][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.383813][ T44] usb 2-1: config 0 descriptor?? [ 270.388641][ T8761] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 270.852676][ T44] hid_parser_main: 49 callbacks suppressed [ 270.852701][ T44] elan 0003:04F3:0755.001B: unknown main item tag 0x0 [ 270.852735][ T44] elan 0003:04F3:0755.001B: item fetching failed at offset 3/5 [ 270.853594][ T44] elan 0003:04F3:0755.001B: Hid Parse failed [ 270.853708][ T44] elan 0003:04F3:0755.001B: probe with driver elan failed with error -22 [ 271.071532][ T1232] usb 2-1: USB disconnect, device number 15 [ 271.405964][ T5155] Bluetooth: hci5: command tx timeout [ 273.486017][ T5155] Bluetooth: hci5: command tx timeout [ 279.364191][ T5848] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 279.389365][ T5848] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 279.391416][ T5848] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 279.392964][ T5848] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 279.393940][ T5848] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 281.487500][ T5848] Bluetooth: hci6: command tx timeout [ 282.295962][ T5926] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 282.451897][ T5926] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 282.451933][ T5926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.484080][ T5926] usb 2-1: config 0 descriptor?? [ 282.512462][ T5926] cp210x 2-1:0.0: cp210x converter detected [ 283.013480][ T5926] usb 2-1: cp210x converter now attached to ttyUSB0 [ 283.189723][ T5926] usb 2-1: USB disconnect, device number 16 [ 283.227060][ T5926] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 283.566015][ T5848] Bluetooth: hci6: command tx timeout [ 285.546816][ T8797] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1296'. [ 285.650205][ T5848] Bluetooth: hci6: command tx timeout [ 286.307108][ T5155] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 286.334352][ T5155] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 286.344745][ T5155] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 286.362505][ T5155] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 286.382787][ T5155] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 287.004477][ T5848] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 287.026153][ T5848] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 287.030245][ T5848] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 287.033015][ T5848] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 287.063730][ T5848] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 287.726089][ T5848] Bluetooth: hci6: command tx timeout [ 288.526684][ T5848] Bluetooth: hci7: command tx timeout [ 289.165990][ T5848] Bluetooth: hci8: command tx timeout [ 289.434170][ T5926] cp210x 2-1:0.0: device disconnected [ 290.606251][ T5848] Bluetooth: hci7: command tx timeout [ 291.254497][ T5848] Bluetooth: hci8: command tx timeout [ 292.686210][ T5848] Bluetooth: hci7: command tx timeout [ 293.336105][ T5848] Bluetooth: hci8: command tx timeout [ 294.766416][ T5848] Bluetooth: hci7: command tx timeout [ 295.411639][ T5848] Bluetooth: hci8: command tx timeout [ 299.330803][ T5155] Bluetooth: hci4: command 0x0405 tx timeout [ 302.161434][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 302.183643][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 302.185044][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 302.210257][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 302.212328][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 307.488602][ T5850] Bluetooth: hci0: command tx timeout [ 309.581470][ T5850] Bluetooth: hci0: command tx timeout [ 311.645936][ T5850] Bluetooth: hci0: command tx timeout [ 313.735881][ T5848] Bluetooth: hci0: command tx timeout [ 322.853370][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.853467][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 325.525016][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 325.549647][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 325.551784][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 325.573381][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 325.586910][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 327.646171][ T5850] Bluetooth: hci1: command tx timeout [ 329.737167][ T5850] Bluetooth: hci1: command tx timeout [ 331.805931][ T5848] Bluetooth: hci1: command tx timeout [ 333.896009][ T5850] Bluetooth: hci1: command tx timeout [ 338.879587][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 338.894115][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 338.905475][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 338.934535][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 338.944499][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 341.009964][ T5848] Bluetooth: hci2: command tx timeout [ 343.085930][ T5848] Bluetooth: hci2: command tx timeout [ 345.171310][ T5848] Bluetooth: hci2: command tx timeout [ 345.347545][ T5850] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 345.373043][ T5850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 345.384850][ T5850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 345.404377][ T5850] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 345.413752][ T5850] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 346.391719][ T5850] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 346.412634][ T5850] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 346.413941][ T5850] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 346.437956][ T5850] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 346.438935][ T5850] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 347.249079][ T5850] Bluetooth: hci2: command tx timeout [ 347.486114][ T5850] Bluetooth: hci3: command tx timeout [ 348.525901][ T5850] Bluetooth: hci9: command tx timeout [ 349.565825][ T5850] Bluetooth: hci3: command tx timeout [ 350.605921][ T5850] Bluetooth: hci9: command tx timeout [ 351.646020][ T5850] Bluetooth: hci3: command tx timeout [ 352.695845][ T5850] Bluetooth: hci9: command tx timeout [ 353.726456][ T5850] Bluetooth: hci3: command tx timeout [ 354.765954][ T5850] Bluetooth: hci9: command tx timeout [ 362.868321][ T5848] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 362.890434][ T5848] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 362.891810][ T5848] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 362.893730][ T5848] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 362.894646][ T5848] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 365.007821][ T5850] Bluetooth: hci10: command tx timeout [ 367.086453][ T5850] Bluetooth: hci10: command tx timeout [ 369.166000][ T5850] Bluetooth: hci10: command tx timeout [ 371.246260][ T5850] Bluetooth: hci10: command tx timeout [ 384.301264][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.301360][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 386.317557][ T5848] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 386.321779][ T5848] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 386.323176][ T5848] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 386.349816][ T5848] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 386.355318][ T5848] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 388.526086][ T5848] Bluetooth: hci11: command tx timeout [ 390.605876][ T5848] Bluetooth: hci11: command tx timeout [ 391.498033][ T5848] Bluetooth: hci5: command 0x0406 tx timeout [ 392.685940][ T5848] Bluetooth: hci11: command tx timeout [ 394.766157][ T5848] Bluetooth: hci11: command tx timeout [ 399.938861][ T5855] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 399.968535][ T5855] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 399.969876][ T5855] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 399.971621][ T5855] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 399.972736][ T5855] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 401.738328][ T5155] Bluetooth: hci6: command 0x0406 tx timeout [ 402.046288][ T5155] Bluetooth: hci12: command tx timeout [ 404.125997][ T5155] Bluetooth: hci12: command tx timeout [ 405.803701][ T5155] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 405.834746][ T5155] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 405.838005][ T5155] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 405.860191][ T5155] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 405.860983][ T5155] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 406.205915][ T5155] Bluetooth: hci12: command tx timeout [ 407.077471][ T5155] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 407.116115][ T5155] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 407.118930][ T5155] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 407.120308][ T5155] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 407.121286][ T5155] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 408.285853][ T5155] Bluetooth: hci12: command tx timeout [ 408.945814][ T5848] Bluetooth: hci13: command tx timeout [ 409.255856][ T5848] Bluetooth: hci14: command tx timeout [ 410.526117][ T39] INFO: task syz.3.1234:8633 blocked for more than 143 seconds. [ 410.526152][ T39] Not tainted syzkaller #0 [ 410.526164][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 410.526178][ T39] task:syz.3.1234 state:D stack:25128 pid:8633 tgid:8633 ppid:5851 task_flags:0x400040 flags:0x00004006 [ 410.526260][ T39] Call Trace: [ 410.526269][ T39] [ 410.526286][ T39] __schedule+0x16f3/0x4c20 [ 410.526352][ T39] ? __lock_acquire+0xab9/0xd20 [ 410.526384][ T39] ? __pfx___schedule+0x10/0x10 [ 410.526435][ T39] ? schedule+0x91/0x360 [ 410.526470][ T39] schedule+0x165/0x360 [ 410.526503][ T39] schedule_timeout+0x9a/0x270 [ 410.526534][ T39] ? __pfx_schedule_timeout+0x10/0x10 [ 410.526580][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 410.526613][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 410.526642][ T39] ? wait_for_completion+0x267/0x5d0 [ 410.526677][ T39] wait_for_completion+0x2bf/0x5d0 [ 410.526724][ T39] ? __pfx_wait_for_completion+0x10/0x10 [ 410.526759][ T39] ? __raw_spin_lock_init+0x45/0x100 [ 410.526797][ T39] rcu_barrier+0x463/0x570 [ 410.526833][ T39] kvm_mmu_uninit_vm+0x53/0x90 [ 410.526865][ T39] kvm_arch_destroy_vm+0x23d/0x280 [ 410.526896][ T39] kvm_put_kvm+0xf8e/0x1670 [ 410.526934][ T39] ? __pfx_kvm_vm_release+0x10/0x10 [ 410.526964][ T39] kvm_vm_release+0x46/0x50 [ 410.526992][ T39] __fput+0x45b/0xa80 [ 410.527029][ T39] task_work_run+0x1d4/0x260 [ 410.527056][ T39] ? __pfx_task_work_run+0x10/0x10 [ 410.527086][ T39] ? exit_to_user_mode_loop+0x40/0x110 [ 410.527121][ T39] exit_to_user_mode_loop+0xec/0x110 [ 410.527151][ T39] do_syscall_64+0x2bd/0x3b0 [ 410.527170][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 410.527202][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.527225][ T39] ? clear_bhb_loop+0x60/0xb0 [ 410.527252][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.527279][ T39] RIP: 0033:0x7f346e9ceba9 [ 410.527303][ T39] RSP: 002b:00007ffefd0fbfa8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 410.527326][ T39] RAX: 0000000000000000 RBX: 000000000003ca4b RCX: 00007f346e9ceba9 [ 410.527340][ T39] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 410.527353][ T39] RBP: 00007f346ec17da0 R08: 0000000000000001 R09: 00000003fd0fc29f [ 410.527367][ T39] R10: 0000001b31120000 R11: 0000000000000246 R12: 00007f346ec15fac SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 410.527382][ T39] R13: 00007f346ec15fa0 R14: ffffffffffffffff R15: 00007ffefd0fc0c0 [ 410.527419][ T39] [ 410.527454][ T39] [ 410.527454][ T39] Showing all locks held in the system: [ 410.527465][ T39] 4 locks held by kworker/0:0/9: [ 410.527477][ T39] #0: ffff88805b91b538 ((wq_completion)wg-crypt-wg1#2){+.+[ 410.527477][ T39] #0: ffff88805b91b538 ((wq_completion)wg-crypt-wg1#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 410.527543][ T39] #1: ffffc900000e7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 410.527619][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 410.527675][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 410.527733][ T39] 4 locks held by kworker/0:1/10: [ 410.527745][ T39] #0: ffff88805b9d0538 ((wq_completion)wg-crypt-wg0#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 410.527807][ T39] #1: ffffc900000f7bc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 410.527871][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 410.527927][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 410.527984][ T39] 2 locks held by ksoftirqd/0/15: [ 410.527996][ T39] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 410.528051][ T39] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 410.528107][ T39] 8 locks held by ktimers/0/16: [ 410.528122][ T39] 1 lock held by khungtaskd/39: [ 410.528133][ T39] #0: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 410.528185][ T39] 2 locks held by kworker/1:1/44: [ 410.528197][ T39] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 410.528253][ T39] #1: ffffc90000b57bc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 410.528318][ T39] 4 locks held by kworker/0:2/993: [ 410.528330][ T39] #0: ffff88805bca9538 ((wq_completion)wg-crypt-wg0){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 410.530556][ T39] #1: ffffc9000495fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 410.530639][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 410.530696][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 410.530775][ T39] 3 locks held by kworker/u8:10/3533: [ 410.530788][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 410.530845][ T39] #1: ffffc9000d58fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 410.530919][ T39] #2: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 410.530972][ T39] 3 locks held by kworker/u8:11/3576: [ 410.530985][ T39] #0: ffff88814cf1a138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 410.531043][ T39] #1: ffffc9000d69fbc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 410.531102][ T39] #2: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 410.531163][ T39] 2 locks held by getty/5593: [ 410.531175][ T39] #0: ffff88823bf940a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 410.531239][ T39] #1: ffffc90003e7e2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 410.531299][ T39] 3 locks held by kworker/u9:3/5848: [ 410.531311][ T39] #0: ffff888028f35138 ((wq_completion)hci7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 410.531368][ T39] #1: ffffc90004be7bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 410.531427][ T39] #2: ffff888060face80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 410.531506][ T39] 3 locks held by kworker/u9:4/5850: [ 410.531519][ T39] #0: ffff888060edd938 ((wq_completion)hci8){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 410.531575][ T39] #1: ffffc90004c07bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 410.531633][ T39] #2: ffff88804a548e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 410.531694][ T39] 3 locks held by kworker/1:4/5926: [ 410.531707][ T39] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 410.531764][ T39] #1: ffffc90005137bc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 410.531820][ T39] #2: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 410.531881][ T39] 4 locks held by kworker/0:6/5942: [ 410.531894][ T39] #0: ffff88805bca9538 ((wq_completion)wg-crypt-wg0){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 410.531949][ T39] #1: ffffc90005197bc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 410.532008][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 410.532064][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 410.532122][ T39] 1 lock held by syz.3.1234/8633: [ 410.532134][ T39] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 410.532188][ T39] 4 locks held by kworker/0:7/8666: [ 410.532200][ T39] #0: ffff888019899138 ((wq_completion)events_long){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 410.532257][ T39] #1: ffffc900041a7bc0 ((work_completion)(&(&ipvs->defense_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 410.532316][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 410.532373][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 410.532430][ T39] 2 locks held by kworker/0:8/8671: [ 410.532444][ T39] 4 locks held by kworker/0:9/8672: [ 410.532456][ T39] #0: ffff88805b91b538 ((wq_completion)wg-crypt-wg1#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 410.532518][ T39] #1: ffffc90004277bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 410.532610][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 410.532669][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 410.532729][ T39] 4 locks held by kworker/0:10/8673: [ 410.532741][ T39] #0: ffff88805bcbcd38 ((wq_completion)wg-crypt-wg1){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 410.532801][ T39] #1: ffffc900042c7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 410.532891][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 410.532948][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 410.533008][ T39] 1 lock held by syz.4.1272/8721: [ 410.533020][ T39] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 410.533074][ T39] 2 locks held by kworker/0:12/8742: [ 410.533088][ T39] 2 locks held by kworker/0:13/8743: [ 410.533102][ T39] 2 locks held by kworker/0:15/8746: [ 410.533115][ T39] 1 lock held by syz.0.1278/8752: [ 410.533128][ T39] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 410.533182][ T39] 1 lock held by syz.2.1281/8759: [ 410.533194][ T39] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 410.533259][ T39] 2 locks held by syz-executor/8768: [ 410.533270][ T39] #0: ffffffff8ecc6700 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 410.533331][ T39] #1: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2ab/0x800 [ 410.533391][ T39] 1 lock held by syz.1.1297/8799: [ 410.533404][ T39] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 410.533468][ T39] 1 lock held by syz-executor/8816: [ 410.533482][ T39] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 410.533537][ T39] 1 lock held by syz-executor/8825: [ 410.533550][ T39] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 410.533604][ T39] 1 lock held by syz-executor/8831: [ 410.533616][ T39] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 410.533670][ T39] 1 lock held by syz-executor/8835: [ 410.533684][ T39] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 410.533739][ T39] 1 lock held by syz-executor/8840: [ 410.533752][ T39] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 410.533807][ T39] 1 lock held by syz-executor/8846: [ 410.533820][ T39] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 410.533881][ T39] 1 lock held by syz-executor/8857: [ 410.533894][ T39] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 410.533950][ T39] 1 lock held by syz-executor/8863: [ 410.533962][ T39] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 410.534016][ T39] 1 lock held by syz-executor/8866: [ 410.534029][ T39] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 410.534086][ T39] [ 410.534091][ T39] ============================================= [ 410.534091][ T39] [ 410.534121][ T39] NMI backtrace for cpu 1 [ 410.534154][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 410.534185][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 410.534198][ T39] Call Trace: [ 410.534207][ T39] [ 410.534217][ T39] dump_stack_lvl+0x189/0x250 [ 410.534256][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 410.534290][ T39] ? __pfx__printk+0x10/0x10 [ 410.534330][ T39] nmi_cpu_backtrace+0x39e/0x3d0 [ 410.534364][ T39] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 410.534395][ T39] ? __pfx__printk+0x10/0x10 [ 410.534425][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 410.534457][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 410.534490][ T39] watchdog+0xf93/0xfe0 [ 410.534526][ T39] ? watchdog+0x1de/0xfe0 [ 410.534562][ T39] kthread+0x70e/0x8a0 [ 410.534600][ T39] ? __pfx_watchdog+0x10/0x10 [ 410.534628][ T39] ? __pfx_kthread+0x10/0x10 [ 410.534669][ T39] ? __pfx_kthread+0x10/0x10 [ 410.534705][ T39] ret_from_fork+0x439/0x7d0 [ 410.534739][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 410.534777][ T39] ? __switch_to_asm+0x39/0x70 [ 410.534797][ T39] ? __switch_to_asm+0x33/0x70 [ 410.534817][ T39] ? __pfx_kthread+0x10/0x10 [ 410.534860][ T39] ret_from_fork_asm+0x1a/0x30 [ 410.534901][ T39] [ 410.534909][ T39] Sending NMI from CPU 1 to CPUs 0: [ 410.534945][ C0] NMI backtrace for cpu 0 [ 410.534961][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 410.534983][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 410.534995][ C0] RIP: 0010:lock_release+0x89/0x3e0 [ 410.535023][ C0] Code: 5d 81 0d 00 0f 84 44 02 00 00 65 8b 05 80 6c 5a 10 85 c0 0f 85 35 02 00 00 65 4c 8b 3c 25 08 40 f6 91 41 83 bf 1c 0b 00 00 00 <0f> 85 1e 02 00 00 49 81 3e 00 f3 b9 92 0f 84 11 02 00 00 48 c7 44 [ 410.535040][ C0] RSP: 0018:ffffc90000156610 EFLAGS: 00000246 [ 410.535056][ C0] RAX: 0000000000000000 RBX: ffffffff902a6c01 RCX: 59bfe3523220be00 [ 410.535071][ C0] RDX: ffffc90000156701 RSI: ffffffff8b6215e0 RDI: ffffffff8b6215a0 [ 410.535085][ C0] RBP: dffffc0000000000 R08: ffffc90000156f90 R09: 0000000000000000 [ 410.535099][ C0] R10: ffffc90000156798 R11: fffff5200002acf5 R12: ffffc90000156fa0 [ 410.535113][ C0] R13: ffffffff8172c165 R14: ffffffff8d9a8d80 R15: ffff88801ae85940 [ 410.535128][ C0] FS: 0000000000000000(0000) GS:ffff8881268bc000(0000) knlGS:0000000000000000 [ 410.535144][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 410.535157][ C0] CR2: 00007fc6096b5000 CR3: 0000000037240000 CR4: 00000000003526f0 [ 410.535175][ C0] Call Trace: [ 410.535181][ C0] [ 410.535189][ C0] ? deref_stack_reg+0x19f/0x230 [ 410.535220][ C0] ? unwind_next_frame+0xa5/0x2390 [ 410.535247][ C0] unwind_next_frame+0x19a9/0x2390 [ 410.535277][ C0] ? unwind_next_frame+0xa5/0x2390 [ 410.535304][ C0] ? synproxy_send_client_synack+0x8bb/0xe20 [ 410.535338][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 410.535361][ C0] arch_stack_walk+0x11c/0x150 [ 410.535392][ C0] ? nft_synproxy_eval_v4+0x36e/0x560 [ 410.535417][ C0] stack_trace_save+0x9c/0xe0 [ 410.535437][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 410.535463][ C0] ref_tracker_alloc+0x195/0x450 [ 410.535495][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 410.535522][ C0] ? dst_init+0xd9/0x450 [ 410.535544][ C0] ? dst_alloc+0x12a/0x170 [ 410.535562][ C0] ? ip_route_output_key_hash_rcu+0x1560/0x23e0 [ 410.535584][ C0] ? ip_route_output_key_hash+0x1b9/0x2e0 [ 410.535612][ C0] ? ip_route_output_flow+0x2a/0x150 [ 410.535629][ C0] ? ip_route_me_harder+0x6d2/0x1030 [ 410.535651][ C0] ? synproxy_send_tcp+0x359/0x6c0 [ 410.535677][ C0] ? synproxy_send_client_synack+0x8bb/0xe20 [ 410.535710][ C0] ? dst_alloc+0x105/0x170 [ 410.535729][ C0] ? dst_alloc+0x105/0x170 [ 410.535749][ C0] dst_init+0xd9/0x450 [ 410.535770][ C0] dst_alloc+0x12a/0x170 [ 410.535791][ C0] ip_route_output_key_hash_rcu+0x1560/0x23e0 [ 410.535818][ C0] ? ip_route_output_key_hash+0xde/0x2e0 [ 410.535840][ C0] ip_route_output_key_hash+0x1b9/0x2e0 [ 410.535861][ C0] ? __lock_acquire+0xab9/0xd20 [ 410.535887][ C0] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 410.535912][ C0] ? ip_route_me_harder+0x4ad/0x1030 [ 410.535938][ C0] ip_route_output_flow+0x2a/0x150 [ 410.535956][ C0] ? ip_route_me_harder+0x6c0/0x1030 [ 410.535979][ C0] ip_route_me_harder+0x6d2/0x1030 [ 410.536009][ C0] ? __pfx_ip_route_me_harder+0x10/0x10 [ 410.536049][ C0] synproxy_send_tcp+0x359/0x6c0 [ 410.536082][ C0] synproxy_send_client_synack+0x8bb/0xe20 [ 410.536121][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 410.536149][ C0] ? nft_tunnel_get_reduce+0x548/0x640 [ 410.536175][ C0] ? synproxy_pernet+0x45/0x270 [ 410.536200][ C0] nft_synproxy_eval_v4+0x36e/0x560 [ 410.536224][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 410.536246][ C0] ? nf_ip_checksum+0x13c/0x510 [ 410.536270][ C0] nft_synproxy_do_eval+0x345/0x570 [ 410.536294][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 410.536326][ C0] nft_do_chain+0x409/0x1920 [ 410.536345][ C0] ? unwind_next_frame+0xa5/0x2390 [ 410.536381][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 410.536404][ C0] ? stack_trace_save+0x9c/0xe0 [ 410.536436][ C0] ? try_to_take_rt_mutex+0x840/0xb00 [ 410.536466][ C0] nft_do_chain_inet+0x25d/0x340 [ 410.536487][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 410.536506][ C0] ? __lock_acquire+0xab9/0xd20 [ 410.536558][ C0] ? NF_HOOK+0x9a/0x3a0 [ 410.536585][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 410.536614][ C0] nf_hook_slow+0xc5/0x220 [ 410.536647][ C0] NF_HOOK+0x206/0x3a0 [ 410.536674][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 410.536702][ C0] ? NF_HOOK+0x9a/0x3a0 [ 410.536729][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 410.536754][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 410.536784][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 410.536814][ C0] ? skb_dst+0x4f/0xd0 [ 410.536841][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 410.536871][ C0] NF_HOOK+0x309/0x3a0 [ 410.536900][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 410.536927][ C0] ? NF_HOOK+0x9a/0x3a0 [ 410.536952][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 410.536981][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 410.537015][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 410.537040][ C0] __netif_receive_skb+0x143/0x380 [ 410.537065][ C0] ? rt_spin_unlock+0x65/0x80 [ 410.537092][ C0] ? process_backlog+0x27b/0x900 [ 410.537117][ C0] process_backlog+0x31e/0x900 [ 410.537152][ C0] __napi_poll+0xb3/0x540 [ 410.537179][ C0] net_rx_action+0x707/0xe00 [ 410.537217][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 410.537267][ C0] handle_softirqs+0x22f/0x710 [ 410.537299][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 410.537330][ C0] run_ktimerd+0xcf/0x190 [ 410.537358][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 410.537383][ C0] ? schedule+0x91/0x360 [ 410.537415][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 410.537439][ C0] smpboot_thread_fn+0x53f/0xa60 [ 410.537465][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 410.537495][ C0] kthread+0x70e/0x8a0 [ 410.537528][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 410.537552][ C0] ? __pfx_kthread+0x10/0x10 [ 410.537585][ C0] ? __pfx_kthread+0x10/0x10 [ 410.537621][ C0] ret_from_fork+0x439/0x7d0 [ 410.537648][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 410.537678][ C0] ? __switch_to_asm+0x39/0x70 [ 410.537704][ C0] ? __switch_to_asm+0x33/0x70 [ 410.537722][ C0] ? __pfx_kthread+0x10/0x10 [ 410.537752][ C0] ret_from_fork_asm+0x1a/0x30 [ 410.537781][ C0] [ 410.855811][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 410.855837][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 410.855865][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 410.855880][ T39] Call Trace: [ 410.855890][ T39] [ 410.855901][ T39] dump_stack_lvl+0x99/0x250 [ 410.855940][ T39] ? __asan_memcpy+0x40/0x70 [ 410.855965][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 410.855999][ T39] ? __pfx__printk+0x10/0x10 [ 410.856040][ T39] vpanic+0x281/0x750 [ 410.856076][ T39] ? __pfx_vpanic+0x10/0x10 [ 410.856107][ T39] ? preempt_schedule+0xae/0xc0 [ 410.856142][ T39] ? preempt_schedule_common+0x83/0xd0 [ 410.856182][ T39] panic+0xb9/0xc0 [ 410.856215][ T39] ? __pfx_panic+0x10/0x10 [ 410.856249][ T39] ? preempt_schedule_thunk+0x16/0x30 [ 410.856284][ T39] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 410.856331][ T39] watchdog+0xfd2/0xfe0 [ 410.856366][ T39] ? watchdog+0x1de/0xfe0 [ 410.856401][ T39] kthread+0x70e/0x8a0 [ 410.856438][ T39] ? __pfx_watchdog+0x10/0x10 [ 410.856465][ T39] ? __pfx_kthread+0x10/0x10 [ 410.856504][ T39] ? __pfx_kthread+0x10/0x10 [ 410.856538][ T39] ret_from_fork+0x439/0x7d0 [ 410.856571][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 410.856608][ T39] ? __switch_to_asm+0x39/0x70 [ 410.856637][ T39] ? __switch_to_asm+0x33/0x70 [ 410.856658][ T39] ? __pfx_kthread+0x10/0x10 [ 410.856693][ T39] ret_from_fork_asm+0x1a/0x30 [ 410.856732][ T39] [ 410.857083][ T39] Kernel Offset: disabled