last executing test programs: 42.937099384s ago: executing program 1 (id=24174): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r0, r0, 0x0, 0x200000) 42.38653284s ago: executing program 1 (id=24188): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000170000004c0006"], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 42.15179693s ago: executing program 1 (id=24193): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) flistxattr(r0, 0x0, 0x0) 41.954946333s ago: executing program 1 (id=24197): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000001b80)="4476c8a3c3af5369bdfd752ec45c83c8", 0x10) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000003340)="3cce99e332fbe9f77af308688d5ea0e9", 0x10) 41.765407839s ago: executing program 1 (id=24200): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1000, 0x6, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xd, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0x8, "4d5bc864"}, @global=@item_012={0x1, 0x1, 0x4, 'O'}]}}, 0x0}, 0x0) 41.045297872s ago: executing program 4 (id=24216): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4, 0x3ff, @empty, 0xfffffffe}, 0x1c) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 40.890808831s ago: executing program 3 (id=24218): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000cc0)=0x10001, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f00000017c0), r0) 40.143182467s ago: executing program 3 (id=24223): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) 39.959161002s ago: executing program 4 (id=24225): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r0, @ANYRES32], 0x50) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0182101, &(0x7f00000004c0)) 39.440677337s ago: executing program 1 (id=24226): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0xc048aec8, &(0x7f0000000700)={0x6, 0x0, @ioapic={0x10000, 0x3, 0xff, 0x7, 0x0, [{0x6, 0x80}, {0xe6, 0xc4, 0xfb, '\x00', 0x7f}, {0x0, 0x9, 0xc, '\x00', 0xa}, {0x2, 0xc6, 0xd, '\x00', 0xfa}, {0x0, 0x3, 0x7, '\x00', 0x9}, {0x45, 0x8, 0x6, '\x00', 0x1}, {0x16, 0x3, 0x6, '\x00', 0xcc}, {0x2, 0x4, 0x2, '\x00', 0x48}, {0x9, 0x3, 0x1a, '\x00', 0x7}, {0x4, 0x8, 0xdb, '\x00', 0x1}, {0x32, 0x7, 0x5, '\x00', 0x74}, {0x8, 0x0, 0xb, '\x00', 0x2f}, {0x2, 0x0, 0x9, '\x00', 0xc3}, {0x9, 0x9, 0x6, '\x00', 0x85}, {0x2, 0x80, 0x6, '\x00', 0x8}, {0x9, 0x9, 0x2, '\x00', 0x1}, {0x5c, 0xc0, 0x40, '\x00', 0x8}, {0x4a, 0x6, 0x8, '\x00', 0x6}, {0x2, 0x3, 0x2, '\x00', 0x14}, {0x6, 0x4, 0x80, '\x00', 0x46}, {0x7, 0x4, 0xf1, '\x00', 0x8}, {0x6, 0xf9, 0xf, '\x00', 0x10}, {0x8, 0x8, 0x81, '\x00', 0x2}, {0xfb, 0x7f, 0x7, '\x00', 0x2}]}}) 38.963554317s ago: executing program 3 (id=24228): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc03fe}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) userfaultfd(0x801) 38.872845712s ago: executing program 4 (id=24229): getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e20, @private=0xa010100}}}, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc2c45513, &(0x7f0000000040)={0xb, 0x3, 0x1, 0x5, '\x00', 0x6}) 38.812919561s ago: executing program 4 (id=24230): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = socket(0x40000000015, 0x5, 0x0) syncfs(r0) 38.704661333s ago: executing program 3 (id=24231): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) mkdir(&(0x7f0000000180)='./file0\x00', 0x163) mknod$loop(&(0x7f00000002c0)='./file0/../file0/file0\x00', 0xffffc000, 0x0) 38.612724805s ago: executing program 3 (id=24232): r0 = memfd_secret(0x0) fcntl$setlease(r0, 0x400, 0x1) fremovexattr(r0, &(0x7f0000000280)=@known='system.posix_acl_default\x00') 38.505984559s ago: executing program 4 (id=24233): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, &(0x7f0000000040)={r1}) 38.423120402s ago: executing program 3 (id=24234): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM(r1, 0x4068aea3, &(0x7f00000001c0)={0xc1, 0x0, r1}) 38.293833972s ago: executing program 4 (id=24235): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, 0x6}) 26.541563183s ago: executing program 0 (id=24259): set_mempolicy(0x3, &(0x7f00000002c0)=0x1ff, 0x5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) 26.454317528s ago: executing program 0 (id=24260): epoll_create1(0x80000) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000002080)={0x2020}, 0x54) 26.366563716s ago: executing program 0 (id=24261): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x103381) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0xa0000018}) 26.283752433s ago: executing program 0 (id=24262): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000014c0)={r0}, 0x4) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r0, 0x0) 26.198901483s ago: executing program 0 (id=24263): r0 = getpgrp(0x0) r1 = syz_pidfd_open(r0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000080)) 26.119715032s ago: executing program 0 (id=24264): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000100)=0x5, 0x4) 24.031351519s ago: executing program 32 (id=24226): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0xc048aec8, &(0x7f0000000700)={0x6, 0x0, @ioapic={0x10000, 0x3, 0xff, 0x7, 0x0, [{0x6, 0x80}, {0xe6, 0xc4, 0xfb, '\x00', 0x7f}, {0x0, 0x9, 0xc, '\x00', 0xa}, {0x2, 0xc6, 0xd, '\x00', 0xfa}, {0x0, 0x3, 0x7, '\x00', 0x9}, {0x45, 0x8, 0x6, '\x00', 0x1}, {0x16, 0x3, 0x6, '\x00', 0xcc}, {0x2, 0x4, 0x2, '\x00', 0x48}, {0x9, 0x3, 0x1a, '\x00', 0x7}, {0x4, 0x8, 0xdb, '\x00', 0x1}, {0x32, 0x7, 0x5, '\x00', 0x74}, {0x8, 0x0, 0xb, '\x00', 0x2f}, {0x2, 0x0, 0x9, '\x00', 0xc3}, {0x9, 0x9, 0x6, '\x00', 0x85}, {0x2, 0x80, 0x6, '\x00', 0x8}, {0x9, 0x9, 0x2, '\x00', 0x1}, {0x5c, 0xc0, 0x40, '\x00', 0x8}, {0x4a, 0x6, 0x8, '\x00', 0x6}, {0x2, 0x3, 0x2, '\x00', 0x14}, {0x6, 0x4, 0x80, '\x00', 0x46}, {0x7, 0x4, 0xf1, '\x00', 0x8}, {0x6, 0xf9, 0xf, '\x00', 0x10}, {0x8, 0x8, 0x81, '\x00', 0x2}, {0xfb, 0x7f, 0x7, '\x00', 0x2}]}}) 22.944969656s ago: executing program 33 (id=24234): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM(r1, 0x4068aea3, &(0x7f00000001c0)={0xc1, 0x0, r1}) 22.740334347s ago: executing program 34 (id=24235): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, 0x6}) 15.39691629s ago: executing program 2 (id=24271): r0 = syz_open_dev$media(&(0x7f0000000680), 0x8, 0x8000) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000006c0)=0xffffffffffffffff) ioctl$FIONREAD(r1, 0x541b, 0x0) 9.968517077s ago: executing program 2 (id=24272): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r0, &(0x7f0000000080)=[{0x32, 0x8, 0x0, 0xfd, @tick, {}, {0xe}, @connect}], 0x1c) 9.968308085s ago: executing program 2 (id=24273): r0 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2fffffffd}, 0xc) close(r0) 9.968166451s ago: executing program 2 (id=24274): r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x2) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, 0x0) 9.968039197s ago: executing program 2 (id=24275): r0 = socket(0xa, 0x5, 0x0) listen(r0, 0x100) sendmsg$inet_sctp(r0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@sndrcv={0x30, 0x84, 0x1, {0xf4, 0x1, 0x8208, 0x26f06993, 0xffffffff, 0x5, 0x3, 0xa}}], 0x30, 0x8000}, 0x20000000) 9.967874993s ago: executing program 2 (id=24276): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000060a010400000000000000000a0000010900010073797a31000000002c0004802800018007000100637400001c0002800500030006000000080002400000000808000140000000090900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 4.144194525s ago: executing program 35 (id=24264): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000100)=0x5, 0x4) 0s ago: executing program 36 (id=24276): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000060a010400000000000000000a0000010900010073797a31000000002c0004802800018007000100637400001c0002800500030006000000080002400000000808000140000000090900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) kernel console output (not intermixed with test programs): s in process `syz.0.22481'. [ 1342.877241][ T3059] radio-usb-si4713 4-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 1342.906588][ T3059] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1342.947262][ T3059] usb 4-1: USB disconnect, device number 101 [ 1342.958513][ T6232] usb 5-1: USB disconnect, device number 91 [ 1343.015360][ T6232] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 1343.046136][ T30] audit: type=1326 audit(1754122521.075:4148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22331 comm="syz.0.22485" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x0 [ 1343.270482][T18942] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1343.437510][T18942] usb 2-1: too many endpoints for config 0 interface 0 altsetting 185: 33, using maximum allowed: 30 [ 1343.467060][T18942] usb 2-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1343.483233][T18942] usb 2-1: config 0 interface 0 altsetting 185 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 1343.519416][T18942] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1343.536937][T18942] usb 2-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 1343.557300][T18942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1343.584364][T18942] usb 2-1: config 0 descriptor?? [ 1343.601157][T22363] netlink: 20 bytes leftover after parsing attributes in process `syz.4.22495'. [ 1344.019558][T18942] pantherlord 0003:0810:0001.001B: hidraw0: USB HID v8.00 Device [HID 0810:0001] on usb-dummy_hcd.1-1/input0 [ 1344.080650][T18942] pantherlord 0003:0810:0001.001B: Force feedback for PantherLord/GreenAsia devices by Anssi Hannula [ 1344.227533][T18942] usb 2-1: USB disconnect, device number 86 [ 1344.254028][T22380] fido_id[22380]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0810:0001.001B/report_descriptor': No such file or directory [ 1344.358856][T22401] netlink: 16 bytes leftover after parsing attributes in process `syz.4.22503'. [ 1346.330949][ T6246] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1346.500985][ T6246] usb 3-1: Using ep0 maxpacket: 8 [ 1346.504024][T22510] netlink: 'syz.4.22545': attribute type 29 has an invalid length. [ 1346.509135][ T6246] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1346.522962][T22510] netlink: 'syz.4.22545': attribute type 29 has an invalid length. [ 1346.546047][T22510] netlink: 'syz.4.22545': attribute type 29 has an invalid length. [ 1346.550407][ T6246] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1346.562769][T22510] netlink: 'syz.4.22545': attribute type 29 has an invalid length. [ 1346.572816][T22510] netlink: 'syz.4.22545': attribute type 29 has an invalid length. [ 1346.583099][T22510] netlink: 'syz.4.22545': attribute type 29 has an invalid length. [ 1346.592975][T22510] netlink: 'syz.4.22545': attribute type 29 has an invalid length. [ 1346.600847][ T6246] usb 3-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 1346.607061][T22510] netlink: 'syz.4.22545': attribute type 29 has an invalid length. [ 1346.620164][ T6246] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1346.650614][ T6246] usb 3-1: config 0 descriptor?? [ 1346.656242][T22510] netlink: 'syz.4.22545': attribute type 29 has an invalid length. [ 1346.694732][T22510] netlink: 'syz.4.22545': attribute type 29 has an invalid length. [ 1346.991072][ T6232] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1347.084121][ T6246] saitek 0003:06A3:0CCD.001C: unknown main item tag 0x0 [ 1347.092571][ T6246] saitek 0003:06A3:0CCD.001C: unknown main item tag 0x0 [ 1347.099673][ T6246] saitek 0003:06A3:0CCD.001C: unknown main item tag 0x0 [ 1347.108136][ T6246] saitek 0003:06A3:0CCD.001C: unknown main item tag 0x0 [ 1347.116249][ T6246] saitek 0003:06A3:0CCD.001C: unknown main item tag 0x0 [ 1347.123907][ T6246] saitek 0003:06A3:0CCD.001C: unknown main item tag 0x0 [ 1347.131190][ T6246] saitek 0003:06A3:0CCD.001C: unknown main item tag 0x0 [ 1347.138187][ T6246] saitek 0003:06A3:0CCD.001C: unknown main item tag 0x0 [ 1347.145914][ T6246] saitek 0003:06A3:0CCD.001C: unknown main item tag 0x0 [ 1347.153325][ T6246] saitek 0003:06A3:0CCD.001C: unknown main item tag 0x0 [ 1347.164851][ T6246] saitek 0003:06A3:0CCD.001C: hidraw0: USB HID v0.00 Device [HID 06a3:0ccd] on usb-dummy_hcd.2-1/input0 [ 1347.178872][ T6232] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1347.197610][ T6232] usb 4-1: New USB device found, idVendor=05ac, idProduct=024f, bcdDevice= 0.00 [ 1347.215775][ T6232] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1347.231965][ T6232] usb 4-1: config 0 descriptor?? [ 1347.300544][ T3059] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1347.329360][ T6246] usb 3-1: USB disconnect, device number 72 [ 1347.452879][ T3059] usb 2-1: config 0 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 1347.466972][ T3059] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1347.483782][ T3059] usb 2-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 1347.493875][ T3059] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1347.512791][ T3059] usb 2-1: config 0 descriptor?? [ 1347.666566][ T6232] apple 0003:05AC:024F.001D: reserved main item tag 0xd [ 1347.674195][ T6232] apple 0003:05AC:024F.001D: unexpected long global item [ 1347.687647][ T6232] apple 0003:05AC:024F.001D: parse failed [ 1347.693771][ T6232] apple 0003:05AC:024F.001D: probe with driver apple failed with error -22 [ 1347.730509][ T44] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1347.870413][ T6232] usb 4-1: USB disconnect, device number 102 [ 1347.880983][ T44] usb 5-1: Using ep0 maxpacket: 32 [ 1347.890503][ T44] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 1347.890538][ T44] usb 5-1: config 0 has no interface number 0 [ 1347.890584][ T44] usb 5-1: config 0 interface 12 has no altsetting 0 [ 1347.899648][ T44] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1347.899683][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1347.899708][ T44] usb 5-1: Product: syz [ 1347.899726][ T44] usb 5-1: Manufacturer: syz [ 1347.899744][ T44] usb 5-1: SerialNumber: syz [ 1347.910089][ T44] usb 5-1: config 0 descriptor?? [ 1347.974236][T22591] netlink: 12 bytes leftover after parsing attributes in process `syz.2.22558'. [ 1347.974573][ T3059] nintendo 0003:057E:200E.001E: hidraw0: USB HID v81.03 Device [HID 057e:200e] on usb-dummy_hcd.1-1/input0 [ 1348.136342][ T3059] nintendo 0003:057E:200E.001E: Failed charging grip handshake [ 1348.136430][ T3059] nintendo 0003:057E:200E.001E: Failed to initialize controller; ret=-110 [ 1348.173189][ T3059] nintendo 0003:057E:200E.001E: probe - fail = -110 [ 1348.251210][ T3059] nintendo 0003:057E:200E.001E: probe with driver nintendo failed with error -110 [ 1348.274612][ T3059] usb 2-1: USB disconnect, device number 87 [ 1348.533508][ T44] f81534 5-1:0.12: f81534_set_register: reg: 1003 data: e0 failed: -71 [ 1348.533582][ T44] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 1348.533604][ T44] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1348.533691][ T44] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 1348.548018][ T44] usb 5-1: USB disconnect, device number 92 [ 1348.842110][T22624] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1349.359460][T22646] netlink: 56 bytes leftover after parsing attributes in process `syz.4.22573'. [ 1349.389604][T22646] netlink: 16 bytes leftover after parsing attributes in process `syz.4.22573'. [ 1350.067353][ T30] audit: type=1326 audit(1754122528.095:4149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22677 comm="syz.2.22586" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 1350.089736][ C0] vkms_vblank_simulate: vblank timer overrun [ 1350.165943][ T30] audit: type=1326 audit(1754122528.095:4150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22677 comm="syz.2.22586" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 1350.188221][ C0] vkms_vblank_simulate: vblank timer overrun [ 1350.273110][T22684] pim6reg: left allmulticast mode [ 1350.278304][ T30] audit: type=1326 audit(1754122528.135:4151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22677 comm="syz.2.22586" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 1350.352596][ T30] audit: type=1326 audit(1754122528.135:4152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22677 comm="syz.2.22586" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 1350.374811][ C0] vkms_vblank_simulate: vblank timer overrun [ 1350.441078][ T30] audit: type=1326 audit(1754122528.135:4153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22677 comm="syz.2.22586" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 1350.505226][ T30] audit: type=1326 audit(1754122528.135:4154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22677 comm="syz.2.22586" exe="/root/syz-executor" sig=0 arch=40000003 syscall=220 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 1350.570434][ T30] audit: type=1326 audit(1754122528.135:4155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22677 comm="syz.2.22586" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 1350.592779][ C0] vkms_vblank_simulate: vblank timer overrun [ 1350.910913][T18942] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1351.060770][T18942] usb 2-1: Using ep0 maxpacket: 16 [ 1351.068397][T18942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1351.091018][T18942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1351.120597][T18942] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1351.133549][ T6232] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1351.160577][T18942] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1351.169696][T18942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1351.209698][T18942] usb 2-1: config 0 descriptor?? [ 1351.254024][T22719] vivid-002: ================= START STATUS ================= [ 1351.266104][T22719] vivid-002: Radio HW Seek Mode: Bounded [ 1351.274042][T22719] vivid-002: Radio Programmable HW Seek: false [ 1351.281175][ T6232] usb 5-1: Using ep0 maxpacket: 32 [ 1351.287700][T22719] vivid-002: RDS Rx I/O Mode: Block I/O [ 1351.295753][ T6232] usb 5-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 1351.305978][ T6232] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1351.315781][T22719] vivid-002: Generate RBDS Instead of RDS: false [ 1351.333550][ T6232] usb 5-1: config 0 descriptor?? [ 1351.341604][T22719] vivid-002: RDS Reception: true [ 1351.346922][T22719] vivid-002: RDS Program Type: 0 inactive [ 1351.373790][T22719] vivid-002: RDS PS Name: inactive [ 1351.379387][T22719] vivid-002: RDS Radio Text: inactive [ 1351.386724][T22719] vivid-002: RDS Traffic Announcement: false inactive [ 1351.394285][T22719] vivid-002: RDS Traffic Program: false inactive [ 1351.402513][T22719] vivid-002: RDS Music: false inactive [ 1351.408413][T22719] vivid-002: ================== END STATUS ================== [ 1351.676422][T18942] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.001F/input/input206 [ 1351.750474][ T44] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1351.772972][T18942] microsoft 0003:045E:07DA.001F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1351.805052][ T6232] uclogic 0003:5543:0005.0020: hidraw1: USB HID v0.f5 Device [HID 5543:0005] on usb-dummy_hcd.4-1/input0 [ 1351.910878][ T44] usb 4-1: Using ep0 maxpacket: 16 [ 1351.933806][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1351.951116][T18942] usb 2-1: USB disconnect, device number 88 [ 1351.976605][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1352.036752][ T6232] usb 5-1: USB disconnect, device number 93 [ 1352.056869][ T44] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1352.097479][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1352.115495][T22738] fido_id[22738]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1352.145743][ T44] usb 4-1: config 0 descriptor?? [ 1352.178848][T22567] hid-generic 0003:8000:0002.0021: item fetching failed at offset 0/1 [ 1352.209246][T22567] hid-generic 0003:8000:0002.0021: probe with driver hid-generic failed with error -22 [ 1352.433710][T22786] netlink: 'syz.0.22610': attribute type 11 has an invalid length. [ 1352.589280][ T44] hid_parser_main: 2 callbacks suppressed [ 1352.589306][ T44] hid-multitouch 0003:1FD2:6007.0022: unknown main item tag 0x0 [ 1352.634974][ T44] hid-multitouch 0003:1FD2:6007.0022: item fetching failed at offset 4/5 [ 1352.672709][ T44] hid-multitouch 0003:1FD2:6007.0022: probe with driver hid-multitouch failed with error -22 [ 1352.741639][T22798] netlink: 27 bytes leftover after parsing attributes in process `syz.4.22617'. [ 1352.825771][ T44] usb 4-1: USB disconnect, device number 103 [ 1352.931198][T18942] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1353.032817][T22826] netlink: 'syz.1.22623': attribute type 11 has an invalid length. [ 1353.088885][T22833] netlink: 20 bytes leftover after parsing attributes in process `syz.0.22625'. [ 1353.104080][T18942] usb 3-1: Using ep0 maxpacket: 16 [ 1353.122112][T18942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1353.142814][T18942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1353.157408][T18942] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1353.173253][T18942] usb 3-1: New USB device found, idVendor=045e, idProduct=9994, bcdDevice=fc.3c [ 1353.182998][T18942] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1353.201729][T18942] usb 3-1: config 0 descriptor?? [ 1353.300549][ T6211] usb 5-1: new full-speed USB device number 94 using dummy_hcd [ 1353.463126][ T6211] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1353.475133][ T6211] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1353.487847][ T6211] usb 5-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 1353.505305][ T6211] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1353.518128][ T6211] usb 5-1: config 0 descriptor?? [ 1353.525737][T22828] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1353.627952][T18942] hid-multitouch 0003:045E:9994.0023: unknown main item tag 0x2 [ 1353.636883][T18942] hid-multitouch 0003:045E:9994.0023: unknown main item tag 0x0 [ 1353.644919][T18942] hid-multitouch 0003:045E:9994.0023: unknown main item tag 0x0 [ 1353.653344][T18942] hid-multitouch 0003:045E:9994.0023: unknown main item tag 0x0 [ 1353.661435][T18942] hid-multitouch 0003:045E:9994.0023: unknown main item tag 0x0 [ 1353.669354][T18942] hid-multitouch 0003:045E:9994.0023: unknown main item tag 0x0 [ 1353.677542][T18942] hid-multitouch 0003:045E:9994.0023: unknown main item tag 0x0 [ 1353.685829][T18942] hid-multitouch 0003:045E:9994.0023: unknown main item tag 0x0 [ 1353.694018][T18942] hid-multitouch 0003:045E:9994.0023: unknown main item tag 0x0 [ 1353.705900][T18942] hid-multitouch 0003:045E:9994.0023: hidraw0: USB HID v0.00 Device [HID 045e:9994] on usb-dummy_hcd.2-1/input0 [ 1353.859167][T22567] usb 3-1: USB disconnect, device number 73 [ 1353.955851][ T6211] greenasia 0003:0E8F:0012.0024: hidraw0: USB HID v0.04 Device [HID 0e8f:0012] on usb-dummy_hcd.4-1/input0 [ 1353.974435][ T6211] greenasia 0003:0E8F:0012.0024: no inputs found [ 1354.174464][ T44] usb 5-1: USB disconnect, device number 94 [ 1354.938603][ T30] audit: type=1326 audit(1754122532.965:4156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22915 comm="syz.2.22643" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 1355.015936][ T30] audit: type=1326 audit(1754122532.965:4157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22915 comm="syz.2.22643" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 1355.038488][ C0] vkms_vblank_simulate: vblank timer overrun [ 1355.102675][ T30] audit: type=1326 audit(1754122532.965:4158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22915 comm="syz.2.22643" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 1355.124998][ C0] vkms_vblank_simulate: vblank timer overrun [ 1355.152470][T22930] random: crng reseeded on system resumption [ 1355.166941][ T30] audit: type=1326 audit(1754122532.965:4159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22915 comm="syz.2.22643" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 1355.189249][ C0] vkms_vblank_simulate: vblank timer overrun [ 1355.255987][ T30] audit: type=1326 audit(1754122532.965:4160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22915 comm="syz.2.22643" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 1355.326131][ T30] audit: type=1326 audit(1754122532.965:4161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22915 comm="syz.2.22643" exe="/root/syz-executor" sig=0 arch=40000003 syscall=379 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 1355.380847][ T30] audit: type=1326 audit(1754122532.965:4162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22915 comm="syz.2.22643" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 1355.380913][ T30] audit: type=1326 audit(1754122532.965:4163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22915 comm="syz.2.22643" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 1355.441523][ C0] vkms_vblank_simulate: vblank timer overrun [ 1356.960872][T23014] sctp: [Deprecated]: syz.4.22686 (pid 23014) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1356.960872][T23014] Use struct sctp_sack_info instead [ 1357.172553][T23020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22688'. [ 1357.431754][T23065] team0: Device gtp1 is of different type [ 1357.670640][ T44] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1357.830471][ T44] usb 4-1: Using ep0 maxpacket: 32 [ 1357.842929][ T44] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1357.861884][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1357.886014][ T44] usb 4-1: config 0 descriptor?? [ 1358.350612][ T6211] usb 3-1: new full-speed USB device number 74 using dummy_hcd [ 1358.352518][ T44] uclogic 0003:28BD:0071.0025: interface is invalid, ignoring [ 1358.515742][ T6211] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1358.543215][ T6211] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1358.576638][ T44] usb 4-1: USB disconnect, device number 104 [ 1358.580240][ T6211] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1358.623940][ T6211] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1358.683614][ T6211] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1358.707767][ T6211] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1358.730854][ T6211] usb 3-1: Manufacturer: syz [ 1358.751938][ T6211] usb 3-1: config 0 descriptor?? [ 1358.828049][T23142] validate_nla: 34 callbacks suppressed [ 1358.828070][T23142] netlink: 'syz.4.22719': attribute type 1 has an invalid length. [ 1358.842910][T23142] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1358.850290][T23142] IPv6: NLM_F_CREATE should be set when creating new route [ 1358.857634][T23142] IPv6: NLM_F_CREATE should be set when creating new route [ 1359.042634][T18942] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1359.064858][ T6211] rc_core: IR keymap rc-hauppauge not found [ 1359.071111][ T6211] Registered IR keymap rc-empty [ 1359.076223][ T6211] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1359.100892][ T6211] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1359.122817][ T6211] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1359.139394][ T6211] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input207 [ 1359.176596][ T6211] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1359.202002][ T6211] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1359.220306][T18942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1359.240686][T18942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1359.251470][ T6211] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1359.259011][T18942] usb 2-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 1359.268732][T18942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1359.277625][ T6211] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1359.307877][T18942] usb 2-1: config 0 descriptor?? [ 1359.313764][ T6211] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1359.350869][ T44] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1359.352048][ T6211] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1359.381189][ T6211] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1359.403425][ T6211] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1359.431224][ T6211] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1359.450987][ T6211] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1359.473587][ T6211] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1359.483214][ T6211] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1359.503623][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1359.512294][ T6211] usb 3-1: USB disconnect, device number 74 [ 1359.533493][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1359.544136][ T44] usb 5-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 1359.555911][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1359.585963][ T44] usb 5-1: config 0 descriptor?? [ 1359.660714][T22567] usb 4-1: new full-speed USB device number 105 using dummy_hcd [ 1359.748654][T18942] hid_mf 0003:0079:1846.0026: invalid report_count 1106850242 [ 1359.756931][T18942] hid_mf 0003:0079:1846.0026: item 0 4 1 9 parsing failed [ 1359.768074][T18942] hid_mf 0003:0079:1846.0026: HID parse failed. [ 1359.777260][T18942] hid_mf 0003:0079:1846.0026: probe with driver hid_mf failed with error -22 [ 1359.834302][T22567] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1359.846376][T22567] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1359.857917][T22567] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1359.864748][T22567] usb 4-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 1359.874553][T22567] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1359.888278][T22567] usb 4-1: config 0 descriptor?? [ 1359.895728][T23178] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 1359.947343][T18942] usb 2-1: USB disconnect, device number 89 [ 1360.020942][ T44] hid_mf 0003:0079:1846.0027: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.4-1/input0 [ 1360.032915][ T44] hid_mf 0003:0079:1846.0027: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler [ 1360.217038][ T44] usb 5-1: USB disconnect, device number 95 [ 1360.334914][T22567] hid-retrode 0003:0403:97C1.0028: unbalanced collection at end of report description [ 1360.351930][T22567] hid-retrode 0003:0403:97C1.0028: probe with driver hid-retrode failed with error -22 [ 1360.575034][T18942] usb 4-1: USB disconnect, device number 105 [ 1361.670256][T23309] netlink: 'syz.3.22761': attribute type 3 has an invalid length. [ 1361.716501][ T30] audit: type=1326 audit(1754122539.745:4164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23310 comm="syz.1.22762" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 1361.738748][ C0] vkms_vblank_simulate: vblank timer overrun [ 1361.788702][ T30] audit: type=1326 audit(1754122539.745:4165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23310 comm="syz.1.22762" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 1361.862972][ T30] audit: type=1326 audit(1754122539.745:4166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23310 comm="syz.1.22762" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 1361.950138][ T30] audit: type=1326 audit(1754122539.745:4167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23310 comm="syz.1.22762" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 1361.972411][ C0] vkms_vblank_simulate: vblank timer overrun [ 1362.007515][ T30] audit: type=1326 audit(1754122539.745:4168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23310 comm="syz.1.22762" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 1362.045262][ T30] audit: type=1326 audit(1754122539.745:4169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23310 comm="syz.1.22762" exe="/root/syz-executor" sig=0 arch=40000003 syscall=303 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 1362.140893][ T30] audit: type=1326 audit(1754122539.745:4170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23310 comm="syz.1.22762" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 1362.741418][T18942] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1362.901797][T18942] usb 5-1: Using ep0 maxpacket: 32 [ 1362.919350][T18942] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 1362.938671][T18942] usb 5-1: config 0 has no interface number 0 [ 1362.945307][T18942] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1362.957379][T18942] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1362.967127][T18942] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1362.975248][T18942] usb 5-1: Product: syz [ 1362.979585][T18942] usb 5-1: Manufacturer: syz [ 1362.991935][T18942] usb 5-1: SerialNumber: syz [ 1363.001650][T18942] usb 5-1: config 0 descriptor?? [ 1363.019699][T18942] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1363.035786][T18942] em28xx 5-1:0.132: Video interface 132 found: [ 1363.142064][ T6211] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1363.160443][T22567] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1363.263345][T23396] netlink: 'syz.1.22791': attribute type 1 has an invalid length. [ 1363.272010][T23396] netlink: 56 bytes leftover after parsing attributes in process `syz.1.22791'. [ 1363.303693][ T6211] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1363.321526][T22567] usb 4-1: Using ep0 maxpacket: 8 [ 1363.323688][ T6211] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1363.329464][T22567] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1363.357493][ T6211] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1363.367335][T22567] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1363.367394][T22567] usb 4-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 1363.367422][T22567] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1363.392879][T22567] usb 4-1: config 0 descriptor?? [ 1363.436310][T18942] em28xx 5-1:0.132: chip ID is em2884 [ 1363.448596][ T6211] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1363.463300][ T6211] usb 3-1: config 0 descriptor?? [ 1363.692779][T18942] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1363.708207][T18942] em28xx 5-1:0.132: board has no eeprom [ 1363.772777][T18942] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1363.787283][T18942] em28xx 5-1:0.132: analog set to bulk mode. [ 1363.793702][ T3059] em28xx 5-1:0.132: Registering V4L2 extension [ 1363.819192][T18942] usb 5-1: USB disconnect, device number 96 [ 1363.859299][T18942] em28xx 5-1:0.132: Disconnecting em28xx [ 1363.882997][T22567] uclogic 0003:5543:0004.0029: hidraw0: USB HID v0.00 Device [HID 5543:0004] on usb-dummy_hcd.3-1/input0 [ 1363.893383][ T6211] kovaplus 0003:1E7D:2D50.002A: item fetching failed at offset 4/5 [ 1363.934204][ T6211] kovaplus 0003:1E7D:2D50.002A: parse failed [ 1363.957599][ T6211] kovaplus 0003:1E7D:2D50.002A: probe with driver kovaplus failed with error -22 [ 1364.091316][T22567] usb 4-1: USB disconnect, device number 106 [ 1364.185237][ T6211] usb 3-1: USB disconnect, device number 75 [ 1364.216168][ T3059] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 1364.224135][T23449] netlink: 28 bytes leftover after parsing attributes in process `syz.1.22800'. [ 1364.224241][ T3059] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 1364.278289][ T3059] em28xx 5-1:0.132: No AC97 audio processor [ 1364.298812][ T3059] usb 5-1: Decoder not found [ 1364.304761][ T3059] em28xx 5-1:0.132: failed to create media graph [ 1364.317177][ T3059] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 1364.332375][ T3059] em28xx 5-1:0.132: Remote control support is not available for this card. [ 1364.342666][T18942] em28xx 5-1:0.132: Closing input extension [ 1364.359737][T18942] em28xx 5-1:0.132: Freeing device [ 1364.840844][T18942] usb 5-1: new full-speed USB device number 97 using dummy_hcd [ 1364.923108][T22567] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1365.007926][T18942] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 1365.020879][T18942] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1365.038753][T18942] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 1365.052016][T18942] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 1365.063747][T18942] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1365.083452][T22567] usb 4-1: too many endpoints for config 0 interface 0 altsetting 48: 65, using maximum allowed: 30 [ 1365.094843][T18942] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1365.104791][T22567] usb 4-1: config 0 interface 0 altsetting 48 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1365.106307][T18942] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1365.129799][T22567] usb 4-1: config 0 interface 0 altsetting 48 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1365.131750][T18942] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1365.153282][T18942] usb 5-1: Product: syz [ 1365.157546][T18942] usb 5-1: Manufacturer: syz [ 1365.163720][T18942] usb 5-1: SerialNumber: syz [ 1365.177967][T22567] usb 4-1: config 0 interface 0 altsetting 48 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 1365.180765][T18942] usb 5-1: config 0 descriptor?? [ 1365.207883][T22567] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1365.212179][T23477] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1365.231395][T22567] usb 4-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 1365.232588][T18942] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1365.262461][T18942] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1365.270851][T22567] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1365.282269][T22567] usb 4-1: config 0 descriptor?? [ 1365.606359][T18942] usb 5-1: USB disconnect, device number 97 [ 1365.621501][T18942] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 1365.763345][T22567] uclogic 0003:5543:0522.002B: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.3-1/input0 [ 1365.964500][T22567] usb 4-1: USB disconnect, device number 107 [ 1366.251046][ T6211] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1366.433257][ T6211] usb 3-1: config 0 has an invalid interface number: 16 but max is 0 [ 1366.461899][ T6211] usb 3-1: config 0 has no interface number 0 [ 1366.468166][ T6211] usb 3-1: config 0 interface 16 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1366.488869][ T6211] usb 3-1: config 0 interface 16 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1366.530845][ T6211] usb 3-1: config 0 interface 16 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1366.584959][ T6211] usb 3-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 1366.613786][ T6211] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1366.638036][ T6211] usb 3-1: config 0 descriptor?? [ 1366.887395][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1366.894765][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1367.081162][ T6211] uclogic 0003:28BD:0905.002C: interface is invalid, ignoring [ 1367.301055][T22567] usb 3-1: USB disconnect, device number 76 [ 1367.825045][T23687] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22873'. [ 1367.843315][T23687] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22873'. [ 1367.868648][T23687] netlink: 'syz.3.22873': attribute type 12 has an invalid length. [ 1368.539413][T23721] syz.3.22886 (23721): drop_caches: 3 [ 1368.560768][ T6211] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1368.621013][T22567] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1368.725339][ T6211] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1368.736457][ T6211] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 1368.747724][ T6211] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1368.760732][ T6211] usb 2-1: config 0 descriptor?? [ 1368.792522][T22567] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1368.816562][T22567] usb 3-1: config 0 has no interface number 0 [ 1368.824561][T22567] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1368.845265][T22567] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1368.858899][T22567] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1368.869735][T22567] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1368.893412][T22567] usb 3-1: config 0 descriptor?? [ 1369.204469][ T6211] lenovo 0003:17EF:6047.002D: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.1-1/input0 [ 1369.336313][T22567] prodikeys 0003:041E:2801.002E: item fetching failed at offset 3/7 [ 1369.337190][T22567] prodikeys 0003:041E:2801.002E: hid parse failed [ 1369.337301][T22567] prodikeys 0003:041E:2801.002E: probe with driver prodikeys failed with error -22 [ 1369.387864][ T6211] lenovo 0003:17EF:6047.002D: Failed to switch F7/9/11 mode: -71 [ 1369.389483][ T6211] lenovo 0003:17EF:6047.002D: Failed to switch middle button: -71 [ 1369.391514][ T6211] lenovo 0003:17EF:6047.002D: Fn-lock setting failed: -71 [ 1369.392177][ T6211] lenovo 0003:17EF:6047.002D: Sensitivity setting failed: -71 [ 1369.410018][ T6211] usb 2-1: USB disconnect, device number 90 [ 1369.542805][T18942] usb 3-1: USB disconnect, device number 77 [ 1369.632676][T23763] fido_id[23763]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1369.900557][ T6211] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1370.056634][ T6211] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1370.061025][T23811] tipc: Enabling of bearer rejected, failed to enable media [ 1370.098847][ T6211] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1370.129794][ T6211] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 1370.146073][ T6211] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1370.178842][ T6211] usb 5-1: config 0 descriptor?? [ 1370.482749][T23835] trusted_key: encrypted_key: key user:syz not found [ 1370.628980][ T6211] kone 0003:1E7D:2CED.002F: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.4-1/input0 [ 1370.807586][ T30] audit: type=1326 audit(1754122548.835:4171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23852 comm="syz.2.22920" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f92539 code=0x0 [ 1370.836855][T22567] usb 5-1: USB disconnect, device number 98 [ 1371.022876][T23875] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1371.534756][T23905] netlink: 8 bytes leftover after parsing attributes in process `syz.4.22938'. [ 1371.761839][ T6211] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1371.950931][ T6211] usb 4-1: Using ep0 maxpacket: 8 [ 1371.982246][ T6211] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1372.024782][ T6211] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 1372.048565][ T6211] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1372.075089][ T6211] usb 4-1: config 0 descriptor?? [ 1372.487940][ T6211] corsair 0003:1B1C:1B09.0030: unbalanced delimiter at end of report description [ 1372.529589][ T6211] corsair 0003:1B1C:1B09.0030: parse failed [ 1372.546475][ T6211] corsair 0003:1B1C:1B09.0030: probe with driver corsair failed with error -22 [ 1372.687463][ T44] usb 4-1: USB disconnect, device number 108 [ 1372.841379][ T6211] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1373.012784][ T6211] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 1373.012819][ T6211] usb 2-1: config 0 has no interface number 0 [ 1373.012867][ T6211] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1373.012897][ T6211] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1373.015337][ T6211] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1373.015368][ T6211] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1373.015392][ T6211] usb 2-1: Product: syz [ 1373.015409][ T6211] usb 2-1: Manufacturer: syz [ 1373.015427][ T6211] usb 2-1: SerialNumber: syz [ 1373.018997][ T6211] usb 2-1: config 0 descriptor?? [ 1373.022541][T23959] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1373.025341][ T6211] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1373.038624][ T6211] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1373.487850][ T6211] usb 2-1: USB disconnect, device number 91 [ 1373.507395][ T6211] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1373.513142][ T6211] cyberjack 2-1:0.69: device disconnected [ 1373.781118][T22567] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1373.952651][T22567] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1373.964866][T22567] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1374.001039][T22567] usb 3-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 1374.017562][T24040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22980'. [ 1374.027126][T22567] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1374.031140][T22567] usb 3-1: config 0 descriptor?? [ 1374.103479][T24040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22980'. [ 1374.473653][T22567] hid_parser_main: 4 callbacks suppressed [ 1374.473678][T22567] ortek 0003:1223:3F07.0031: unknown main item tag 0x6 [ 1374.511924][T22567] ortek 0003:1223:3F07.0031: report_id 29495 is invalid [ 1374.539542][T22567] ortek 0003:1223:3F07.0031: item 0 2 1 8 parsing failed [ 1374.561952][T22567] ortek 0003:1223:3F07.0031: probe with driver ortek failed with error -22 [ 1374.702347][ T3059] usb 3-1: USB disconnect, device number 78 [ 1375.055127][T24093] netlink: 16 bytes leftover after parsing attributes in process `syz.1.22998'. [ 1375.363491][T24109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23006'. [ 1375.379642][T24109] netlink: 12 bytes leftover after parsing attributes in process `syz.2.23006'. [ 1375.573502][T24123] netlink: 'syz.0.23013': attribute type 1 has an invalid length. [ 1375.600992][T24123] netlink: 'syz.0.23013': attribute type 2 has an invalid length. [ 1375.619150][T24123] netlink: 1172 bytes leftover after parsing attributes in process `syz.0.23013'. [ 1375.805694][T24136] netlink: 8 bytes leftover after parsing attributes in process `syz.4.23018'. [ 1375.835397][T24136] openvswitch: netlink: nsh attribute has 5276 unknown bytes. [ 1375.861009][T24136] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1376.099545][T24150] batadv0: entered promiscuous mode [ 1376.121081][T24150] macvtap1: entered promiscuous mode [ 1376.145267][T24150] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1376.199193][T24150] batadv0: left promiscuous mode [ 1376.932100][T24197] gretap0: entered promiscuous mode [ 1376.937866][T24197] vlan1: entered promiscuous mode [ 1377.324526][ T30] audit: type=1326 audit(1754122555.345:4172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24213 comm="syz.2.23051" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 1377.390524][ T30] audit: type=1326 audit(1754122555.345:4173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24213 comm="syz.2.23051" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 1377.490853][ T30] audit: type=1326 audit(1754122555.385:4174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24213 comm="syz.2.23051" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 1377.590798][ T30] audit: type=1326 audit(1754122555.385:4175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24213 comm="syz.2.23051" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 1377.671561][ T30] audit: type=1326 audit(1754122555.385:4176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24213 comm="syz.2.23051" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 1377.752919][ T30] audit: type=1326 audit(1754122555.385:4177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24213 comm="syz.2.23051" exe="/root/syz-executor" sig=0 arch=40000003 syscall=341 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 1377.871675][ T30] audit: type=1326 audit(1754122555.385:4178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24213 comm="syz.2.23051" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 1377.940585][ T30] audit: type=1326 audit(1754122555.385:4179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24213 comm="syz.2.23051" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 1378.664665][ T6211] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1378.781487][T24294] tipc: Enabling of bearer rejected, failed to enable media [ 1378.863700][ T6211] usb 3-1: Using ep0 maxpacket: 8 [ 1378.882490][ T6211] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1378.908398][ T6211] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1378.920159][ T6211] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1378.932482][ T6211] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 1378.944355][ T6211] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1378.955415][ T6211] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1378.966305][ T6211] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1378.992668][ T6211] usb 3-1: config 0 descriptor?? [ 1379.001114][T22567] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1379.010954][T24263] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1379.201301][T22567] usb 4-1: Using ep0 maxpacket: 8 [ 1379.203541][T22567] usb 4-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 1379.203603][T22567] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1379.207520][T22567] usb 4-1: config 0 descriptor?? [ 1379.334274][T24310] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1379.334576][T24310] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1379.334636][T24310] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1379.334694][T24310] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1379.334753][T24310] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1379.535751][ T44] usb 3-1: USB disconnect, device number 79 [ 1379.541310][ T6144] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 1379.624145][T22567] nti 0003:0757:0A00.0032: reserved main item tag 0xd [ 1379.656822][T22567] nti 0003:0757:0A00.0032: unexpected long global item [ 1379.657676][T22567] nti 0003:0757:0A00.0032: probe with driver nti failed with error -22 [ 1379.827129][ T44] usb 4-1: USB disconnect, device number 109 [ 1380.668851][T24391] tipc: Enabling of bearer rejected, failed to enable media [ 1380.878791][ T30] audit: type=1326 audit(1754122558.905:4180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24403 comm="syz.1.23124" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70be539 code=0x0 [ 1381.145244][T24419] [U] V3Fپ"S/4:XTZWTLW= [ 1381.165084][T24419] [U] J"E:" [ 1383.724398][T24516] netlink: 8 bytes leftover after parsing attributes in process `syz.4.23173'. [ 1383.928336][T24526] usb usb1: check_ctrlrecip: process 24526 (syz.3.23179) requesting ep 01 but needs 81 [ 1384.437347][T24554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.23193'. [ 1384.921332][T24588] netlink: 4 bytes leftover after parsing attributes in process `syz.4.23203'. [ 1385.431820][T24611] tipc: Started in network mode [ 1385.436860][T24611] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 1385.465892][T24611] tipc: Enabled bearer , priority 10 [ 1386.095837][T24643] vivid-003: disconnect [ 1386.115371][T24641] vivid-003: reconnect [ 1386.357370][T24657] usb usb8: usbfs: process 24657 (syz.2.23225) did not claim interface 0 before use [ 1386.379447][T24660] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1386.463505][T22567] tipc: Node number set to 10136234 [ 1386.651336][T24675] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1386.745141][T24679] netlink: 'syz.4.23235': attribute type 29 has an invalid length. [ 1386.763183][T24679] netlink: 'syz.4.23235': attribute type 29 has an invalid length. [ 1386.915066][T24692] [U]  [ 1386.917934][T24692] [U] K{ [ 1386.920999][T24692] [U] t 1ŠFfˊ`GJgo/mC [ 1386.927973][T24692] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 1386.943544][T24692] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 1386.954016][T24692] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 1386.989945][T24692] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 1387.013588][T24692] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 1387.024732][T24692] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 1387.036290][T24692] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 1387.198586][T24692] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 1387.207111][T24692] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 1387.220660][T24692] [U] 22Ʃx?0;3u [ 1387.225098][T24692] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 1387.250016][T24692] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 1387.259314][T24692] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 1387.268009][T24692] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 1387.274185][T24692] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 1387.287291][T24692] [U] ec [ 1387.290423][T24692] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 1387.328592][T24690] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 1387.475626][T24704] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23243'. [ 1387.949869][T24733] netlink: 212388 bytes leftover after parsing attributes in process `syz.4.23257'. [ 1387.959716][T24733] openvswitch: netlink: Message has 5 unknown bytes. [ 1388.341123][ T6211] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1388.500812][ T6211] usb 2-1: Using ep0 maxpacket: 16 [ 1388.518557][ T6211] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1388.551054][ T6211] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1388.566925][ T30] audit: type=1326 audit(1754122566.595:4181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24771 comm="syz.3.23271" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 1388.589128][ C0] vkms_vblank_simulate: vblank timer overrun [ 1388.621360][ T6211] usb 2-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 1388.638772][ T6211] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1388.651857][ T30] audit: type=1326 audit(1754122566.595:4182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24771 comm="syz.3.23271" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 1388.674234][ C0] vkms_vblank_simulate: vblank timer overrun [ 1388.698106][ T6211] usb 2-1: config 0 descriptor?? [ 1388.705066][ T30] audit: type=1326 audit(1754122566.595:4183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24771 comm="syz.3.23271" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 1388.747657][ T30] audit: type=1326 audit(1754122566.595:4184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24771 comm="syz.3.23271" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 1388.747711][ T30] audit: type=1326 audit(1754122566.595:4185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24771 comm="syz.3.23271" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 1388.747757][ T30] audit: type=1326 audit(1754122566.595:4186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24771 comm="syz.3.23271" exe="/root/syz-executor" sig=0 arch=40000003 syscall=146 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 1388.747807][ T30] audit: type=1326 audit(1754122566.595:4187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24771 comm="syz.3.23271" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 1388.747856][ T30] audit: type=1326 audit(1754122566.595:4188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24771 comm="syz.3.23271" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 1388.787354][ C0] vkms_vblank_simulate: vblank timer overrun [ 1389.143155][ T6211] nintendo 0003:057E:2019.0033: item fetching failed at offset 3/5 [ 1389.181901][ T6211] nintendo 0003:057E:2019.0033: HID parse failed [ 1389.211613][ T3059] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1389.220779][ T6211] nintendo 0003:057E:2019.0033: probe - fail = -22 [ 1389.228170][ T6211] nintendo 0003:057E:2019.0033: probe with driver nintendo failed with error -22 [ 1389.266314][T24804] netlink: 12 bytes leftover after parsing attributes in process `syz.2.23282'. [ 1389.279162][T24804] netlink: 'syz.2.23282': attribute type 2 has an invalid length. [ 1389.288200][T24804] netlink: 'syz.2.23282': attribute type 1 has an invalid length. [ 1389.297455][T24804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23282'. [ 1389.369466][T22567] usb 2-1: USB disconnect, device number 92 [ 1389.371033][ T3059] usb 4-1: Using ep0 maxpacket: 32 [ 1389.398347][ T3059] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 1389.422842][ T3059] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1389.454794][ T3059] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 1389.475410][ T3059] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 79, changing to 10 [ 1389.490062][ T3059] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 34258, setting to 1024 [ 1389.510962][ T3059] usb 4-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 1389.520092][ T3059] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1389.535955][ T3059] usb 4-1: Product: syz [ 1389.540178][ T3059] usb 4-1: Manufacturer: syz [ 1389.547154][ T3059] usb 4-1: SerialNumber: syz [ 1389.576121][ T3059] usb 4-1: config 0 descriptor?? [ 1389.585559][T24786] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1389.615952][ T3059] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input210 [ 1389.629712][ T5217] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1389.668479][ T5217] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1389.728691][ T5217] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1389.758009][ T5217] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1389.832546][ T3059] usb 4-1: USB disconnect, device number 110 [ 1390.058826][T24840] netlink: 'syz.2.23286': attribute type 4 has an invalid length. [ 1391.123094][T24872] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23302'. [ 1391.163043][T24874] netlink: 16 bytes leftover after parsing attributes in process `syz.4.23304'. [ 1391.409866][T24874] gretap0: entered promiscuous mode [ 1391.419895][T24874] gretap0: left promiscuous mode [ 1392.009424][T24923] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23318'. [ 1392.172140][T24928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.23320'. [ 1392.480652][ C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1392.505436][T24928] bridge0: port 3(macsec0) entered disabled state [ 1393.497282][T25009] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 1393.887836][T25025] sch_tbf: burst 0 is lower than device gretap0 mtu (65511) ! [ 1394.139179][T25034] netlink: 'syz.4.23363': attribute type 1 has an invalid length. [ 1394.390146][T25046] IPVS: ip_vs_edit_dest(): server weight less than zero [ 1394.974577][T25078] netlink: 4 bytes leftover after parsing attributes in process `syz.3.23381'. [ 1395.126746][T25088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.23387'. [ 1395.407312][T25102] netlink: 5064 bytes leftover after parsing attributes in process `syz.3.23394'. [ 1395.425082][ C1] sd 0:0:1:0: [sda] tag#1572 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1395.435723][ C1] sd 0:0:1:0: [sda] tag#1572 CDB: Write(6) 0a 10 00 00 ff ff ff ff 00 00 00 00 [ 1396.321005][ T3059] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1396.636518][ T3059] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 1396.650580][ T3059] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1396.690066][T25148] netlink: 60 bytes leftover after parsing attributes in process `syz.3.23413'. [ 1396.696462][ T3059] usb 5-1: config 0 has no interface number 0 [ 1396.729625][ T3059] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1396.748909][ T3059] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1396.798981][ T3059] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1396.809094][ T3059] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1396.827919][ T3059] usb 5-1: Product: syz [ 1396.833230][ T3059] usb 5-1: Manufacturer: syz [ 1396.837905][ T3059] usb 5-1: SerialNumber: syz [ 1396.881298][ T3059] usb 5-1: config 0 descriptor?? [ 1396.938548][T25155] cgroup: fork rejected by pids controller in /syz3 [ 1397.526549][ T3059] usb 5-1: USB disconnect, device number 99 [ 1398.838585][T25215] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23434'. [ 1399.338804][T24310] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1399.351943][T24310] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1399.362137][T24310] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1399.375980][T24310] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1399.385093][T24310] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1399.431439][T22567] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1399.595163][T22567] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1399.619570][T22567] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1399.632195][T22567] usb 5-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 1399.664751][T22567] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1399.692551][T22567] usb 5-1: config 0 descriptor?? [ 1400.142732][T22567] holtek 0003:1241:5015.0034: item fetching failed at offset 1/5 [ 1400.156877][T22526] dvmrp0 (unregistering): left allmulticast mode [ 1400.179599][T22567] holtek 0003:1241:5015.0034: parse failed [ 1400.198929][T22567] holtek 0003:1241:5015.0034: probe with driver holtek failed with error -22 [ 1400.358705][ T3059] usb 5-1: USB disconnect, device number 100 [ 1400.996876][T22526] team0: Port device bond0 removed [ 1401.004691][T22526] bond0 (unregistering): (slave 1!): Releasing backup interface [ 1401.015754][T22526] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1401.026789][T22526] bond0 (unregistering): (slave ): Releasing backup interface [ 1401.036684][T22526] bond0 (unregistering): Released all slaves [ 1401.055261][T22526] bond1 (unregistering): Released all slaves [ 1401.073037][T22526] bond2 (unregistering): Released all slaves [ 1401.091447][T22526] bond3 (unregistering): Released all slaves [ 1401.206468][T22567] usb 5-1: new low-speed USB device number 101 using dummy_hcd [ 1401.239541][T22526] bond4 (unregistering): Released all slaves [ 1401.255611][T22526] bond5 (unregistering): Released all slaves [ 1401.271305][T22526] bond6 (unregistering): Released all slaves [ 1401.305086][T22526] bond7 (unregistering): Released all slaves [ 1401.318412][T22526] bond8 (unregistering): Released all slaves [ 1401.336611][T22526] bond9 (unregistering): Released all slaves [ 1401.383194][T22567] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1401.417682][T22567] usb 5-1: config 0 has no interface number 0 [ 1401.440982][ T6144] Bluetooth: hci2: command tx timeout [ 1401.454864][T22567] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1401.484403][T22567] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1401.521271][T22567] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1401.533226][T22567] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1401.567603][T22567] usb 5-1: config 0 descriptor?? [ 1401.578331][T25287] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1401.638020][T22567] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1402.001370][ T6232] usb 5-1: USB disconnect, device number 101 [ 1402.188924][T25245] chnl_net:caif_netlink_parms(): no params data found [ 1402.409894][T25245] bridge0: port 1(bridge_slave_0) entered blocking state [ 1402.419235][T25245] bridge0: port 1(bridge_slave_0) entered disabled state [ 1402.428674][T25245] bridge_slave_0: entered allmulticast mode [ 1402.438398][T25245] bridge_slave_0: entered promiscuous mode [ 1402.449176][T25245] bridge0: port 2(bridge_slave_1) entered blocking state [ 1402.458223][T25245] bridge0: port 2(bridge_slave_1) entered disabled state [ 1402.466087][T25245] bridge_slave_1: entered allmulticast mode [ 1402.487713][T25245] bridge_slave_1: entered promiscuous mode [ 1402.675906][T25245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1402.723284][T25245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1402.946450][T25245] team0: Port device team_slave_0 added [ 1402.975343][T25547] netlink: 28 bytes leftover after parsing attributes in process `syz.4.23460'. [ 1403.021946][T25245] team0: Port device team_slave_1 added [ 1403.291320][T22526] _Z`Ԁ@: left promiscuous mode [ 1403.436413][T25245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1403.488700][T25245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1403.530472][ T6144] Bluetooth: hci2: command tx timeout [ 1403.553765][T25245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1403.590425][ T3059] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1403.599957][T25245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1403.607292][T25245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1403.638378][T25245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1403.679972][T22526] : left promiscuous mode [ 1403.780506][ T3059] usb 3-1: Using ep0 maxpacket: 8 [ 1403.791251][ T3059] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1403.824932][ T3059] usb 3-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1403.826623][ T30] audit: type=1326 audit(1754122581.855:4189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25607 comm="syz.1.23470" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 1403.882178][ T30] audit: type=1326 audit(1754122581.855:4190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25607 comm="syz.1.23470" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 1403.910568][ T3059] usb 3-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1403.932971][ T3059] usb 3-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1403.948155][ T30] audit: type=1326 audit(1754122581.885:4191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25607 comm="syz.1.23470" exe="/root/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 1403.989440][ T3059] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1403.993021][ T30] audit: type=1326 audit(1754122581.885:4192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25607 comm="syz.1.23470" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 1404.020921][ T30] audit: type=1326 audit(1754122581.885:4193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25607 comm="syz.1.23470" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 1404.044801][ T30] audit: type=1326 audit(1754122581.895:4194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25607 comm="syz.1.23470" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 1404.052648][ T3059] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 1404.101007][ T30] audit: type=1326 audit(1754122581.895:4195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25607 comm="syz.1.23470" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 1404.121018][ T3059] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1404.144796][T22526] tipc: Disabling bearer [ 1404.176943][ T30] audit: type=1326 audit(1754122581.895:4196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25607 comm="syz.1.23470" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 1404.184261][ T3059] usb 3-1: config 0 descriptor?? [ 1404.240447][T22526] tipc: Left network mode [ 1404.253808][T25245] hsr_slave_0: entered promiscuous mode [ 1404.280095][T25245] hsr_slave_1: entered promiscuous mode [ 1404.307404][T25245] debugfs: 'hsr0' already exists in 'hsr' [ 1404.322322][T25245] Cannot create hsr debugfs directory [ 1404.771100][ T3059] ryos 0003:1E7D:3232.0035: hidraw0: USB HID vff.ff Device [HID 1e7d:3232] on usb-dummy_hcd.2-1/input0 [ 1404.827908][T25709] netlink: 20 bytes leftover after parsing attributes in process `syz.1.23480'. [ 1405.125357][T22567] usb 3-1: USB disconnect, device number 80 [ 1405.601073][ T6144] Bluetooth: hci2: command tx timeout [ 1406.465807][T22526] hsr_slave_0: left promiscuous mode [ 1406.501595][T22526] hsr_slave_1: left promiscuous mode [ 1406.508195][T22526] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1406.531814][T22526] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1406.551623][T22526] batman_adv: batadv0: Removing interface: team0 [ 1406.571737][T25846] netlink: 40 bytes leftover after parsing attributes in process `syz.1.23513'. [ 1406.948620][T22526] team0 (unregistering): Port device macvlan0 removed [ 1407.683545][ T6144] Bluetooth: hci2: command tx timeout [ 1407.716233][T22526] team0 (unregistering): Port device team_slave_1 removed [ 1407.814772][T22526] team0 (unregistering): Port device C removed [ 1408.280813][ T3059] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1408.295690][T22526] team0 (unregistering): Port device 5 removed [ 1408.430847][ T3059] usb 2-1: Using ep0 maxpacket: 32 [ 1408.449521][ T3059] usb 2-1: config 0 has an invalid interface number: 247 but max is 0 [ 1408.459164][ T3059] usb 2-1: config 0 has no interface number 0 [ 1408.470724][ T3059] usb 2-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 1408.479935][ T3059] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 1408.498741][ T3059] usb 2-1: Product: syz [ 1408.521528][ T3059] usb 2-1: Manufacturer: syz [ 1408.552281][ T3059] usb 2-1: config 0 descriptor?? [ 1408.747073][T25906] netlink: 'syz.0.23520': attribute type 1 has an invalid length. [ 1408.789609][T25906] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1408.954864][T25245] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1408.960876][ T6232] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1409.014945][T25245] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1409.052081][T25245] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1409.086623][T25245] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1409.165180][ T6232] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1409.180076][ T6232] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1409.193793][ T6232] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1409.204200][ T6232] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1409.217666][ T6232] usb 5-1: config 0 descriptor?? [ 1409.280790][ T3059] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1409.441436][ T3059] usb 3-1: Using ep0 maxpacket: 32 [ 1409.467134][ T3059] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1409.497234][ T3059] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1409.508711][T25245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1409.538676][ T3059] usb 3-1: config 0 descriptor?? [ 1409.587527][ T3059] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1409.615140][T25245] 8021q: adding VLAN 0 to HW filter on device team0 [ 1409.644277][ T6232] pyra 0003:1E7D:2CF6.0036: unknown main item tag 0x0 [ 1409.661719][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1409.668975][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1409.670064][ T6232] pyra 0003:1E7D:2CF6.0036: unknown main item tag 0x0 [ 1409.713530][ T6232] pyra 0003:1E7D:2CF6.0036: unknown main item tag 0x0 [ 1409.716552][T25411] bridge0: port 2(bridge_slave_1) entered blocking state [ 1409.727623][T25411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1409.741789][ T6232] pyra 0003:1E7D:2CF6.0036: unknown main item tag 0x0 [ 1409.761093][ T6232] pyra 0003:1E7D:2CF6.0036: unknown main item tag 0x0 [ 1409.778317][ T6232] pyra 0003:1E7D:2CF6.0036: unknown main item tag 0x0 [ 1409.808872][ T6232] pyra 0003:1E7D:2CF6.0036: unknown main item tag 0x0 [ 1409.853147][ T6232] pyra 0003:1E7D:2CF6.0036: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 1409.918452][ T6232] usb 5-1: USB disconnect, device number 102 [ 1409.964164][T22567] usb 2-1: USB disconnect, device number 93 [ 1410.088115][T25245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1410.149978][T25956] fido_id[25956]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1410.207254][ T3059] gspca_vc032x: reg_w err -71 [ 1410.215214][ T3059] gspca_vc032x: I2c Bus Busy Wait 00 [ 1410.248799][ T3059] gspca_vc032x: I2c Bus Busy Wait 00 [ 1410.267706][ T3059] gspca_vc032x: I2c Bus Busy Wait 00 [ 1410.278305][T25245] veth0_vlan: entered promiscuous mode [ 1410.294565][ T3059] gspca_vc032x: I2c Bus Busy Wait 00 [ 1410.299906][ T3059] gspca_vc032x: I2c Bus Busy Wait 00 [ 1410.330078][T25245] veth1_vlan: entered promiscuous mode [ 1410.339100][ T3059] gspca_vc032x: I2c Bus Busy Wait 00 [ 1410.348852][ T3059] gspca_vc032x: I2c Bus Busy Wait 00 [ 1410.381408][ T3059] gspca_vc032x: I2c Bus Busy Wait 00 [ 1410.387620][ T3059] gspca_vc032x: I2c Bus Busy Wait 00 [ 1410.413717][ T3059] gspca_vc032x: I2c Bus Busy Wait 00 [ 1410.419190][ T3059] gspca_vc032x: I2c Bus Busy Wait 00 [ 1410.450518][ T3059] gspca_vc032x: I2c Bus Busy Wait 00 [ 1410.492363][T25245] veth0_macvtap: entered promiscuous mode [ 1410.510527][ T3059] gspca_vc032x: I2c Bus Busy Wait 00 [ 1410.516842][ T3059] gspca_vc032x: I2c Bus Busy Wait 00 [ 1410.539698][T25245] veth1_macvtap: entered promiscuous mode [ 1410.546587][ T3059] gspca_vc032x: I2c Bus Busy Wait 00 [ 1410.560669][ T3059] gspca_vc032x: I2c Bus Busy Wait 00 [ 1410.566018][ T3059] gspca_vc032x: I2c Bus Busy Wait 00 [ 1410.589557][ T3059] gspca_vc032x: I2c Bus Busy Wait 00 [ 1410.628541][T25245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1410.641423][ T3059] gspca_vc032x: Unknown sensor... [ 1410.646592][ T3059] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 1410.666095][T25245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1410.686821][ T3059] usb 3-1: USB disconnect, device number 81 [ 1410.786685][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1410.840729][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1410.905622][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1410.944246][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1411.136106][T22526] IPVS: stop unused estimator thread 0... [ 1411.457759][T25417] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1411.500160][T25417] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1411.637341][T22526] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1411.681237][T22526] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1412.536990][T26066] sch_tbf: burst 6 is lower than device gretap0 mtu (65499) ! [ 1414.073326][T26118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23565'. [ 1414.110673][T26118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.23565'. [ 1414.144343][T26118] netlink: 'syz.0.23565': attribute type 15 has an invalid length. [ 1414.714239][T26145] netlink: 20 bytes leftover after parsing attributes in process `syz.4.23575'. [ 1415.597821][ T44] usb 2-1: new full-speed USB device number 94 using dummy_hcd [ 1415.770495][ T3059] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1415.817504][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1415.830672][ T44] usb 2-1: New USB device found, idVendor=056a, idProduct=0317, bcdDevice= 0.00 [ 1415.839759][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1415.902688][ T44] usb 2-1: config 0 descriptor?? [ 1415.930468][ T3059] usb 3-1: Using ep0 maxpacket: 16 [ 1415.952021][ T3059] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1415.992071][ T3059] usb 3-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 1416.020464][ T3059] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1416.062041][ T3059] usb 3-1: config 0 descriptor?? [ 1416.357919][ T44] wacom 0003:056A:0317.0037: Unknown device_type for 'HID 056a:0317'. Assuming pen. [ 1416.418246][ T44] wacom 0003:056A:0317.0037: hidraw0: USB HID v0.01 Device [HID 056a:0317] on usb-dummy_hcd.1-1/input0 [ 1416.466550][ T44] input: Wacom Intuos Pro L Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0317.0037/input/input213 [ 1416.491128][ T3059] apple 0003:05AC:024B.0038: fixing up MacBook JIS keyboard report descriptor [ 1416.555344][ T3059] apple 0003:05AC:024B.0038: item fetching failed at offset 2/69 [ 1416.596584][ T3059] apple 0003:05AC:024B.0038: parse failed [ 1416.603080][ T44] usb 2-1: USB disconnect, device number 94 [ 1416.633677][ T3059] apple 0003:05AC:024B.0038: probe with driver apple failed with error -22 [ 1416.763230][ T3059] usb 3-1: USB disconnect, device number 82 [ 1416.816546][T26232] fido_id[26232]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 1417.337254][ T3059] hid-generic 0002:0004:0009.0039: unknown main item tag 0x0 [ 1417.382239][ T3059] hid-generic 0002:0004:0009.0039: unknown main item tag 0x0 [ 1417.411158][ T3059] hid-generic 0002:0004:0009.0039: unknown main item tag 0x0 [ 1417.453062][ T3059] hid-generic 0002:0004:0009.0039: unknown main item tag 0x0 [ 1417.468807][ T3059] hid-generic 0002:0004:0009.0039: unknown main item tag 0x0 [ 1417.478274][ T3059] hid-generic 0002:0004:0009.0039: unknown main item tag 0x0 [ 1417.486286][ T3059] hid-generic 0002:0004:0009.0039: unknown main item tag 0x0 [ 1417.494970][ T3059] hid-generic 0002:0004:0009.0039: unknown main item tag 0x0 [ 1417.502989][ T3059] hid-generic 0002:0004:0009.0039: unknown main item tag 0x0 [ 1417.515478][ T3059] hid-generic 0002:0004:0009.0039: unknown main item tag 0x0 [ 1417.552469][ T3059] hid-generic 0002:0004:0009.0039: hidraw0: HID v0.04 Device [syz0] on syz0 [ 1417.752753][T26297] fido_id[26297]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1418.631072][T18942] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1418.763423][T26381] netlink: 'syz.0.23637': attribute type 322 has an invalid length. [ 1418.841997][T18942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1418.867947][T18942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1418.888059][T18942] usb 2-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 1418.920275][T18942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1418.941779][T18942] usb 2-1: config 0 descriptor?? [ 1419.403909][T18942] aquacomputer_d5next 0003:0C70:F0BD.003A: hidraw0: USB HID v0.00 Device [HID 0c70:f0bd] on usb-dummy_hcd.1-1/input0 [ 1419.656439][T22567] usb 2-1: USB disconnect, device number 95 [ 1421.175631][T22567] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1421.332811][T22567] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1421.364980][T22567] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1421.390708][T22567] usb 5-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 1421.400073][T22567] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1421.432593][T22567] usb 5-1: config 0 descriptor?? [ 1421.778564][T26529] xt_limit: Overflow, try lower: 604147548/4200216962 [ 1421.858104][T22567] logitech-djreceiver 0003:046D:C534.003B: unbalanced delimiter at end of report description [ 1421.898530][T22567] logitech-djreceiver 0003:046D:C534.003B: logi_dj_probe: parse failed [ 1421.928786][T22567] logitech-djreceiver 0003:046D:C534.003B: probe with driver logitech-djreceiver failed with error -22 [ 1422.087772][T22567] usb 5-1: USB disconnect, device number 103 [ 1422.412292][T26572] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.23705'. [ 1422.423243][T26571] netlink: 5 bytes leftover after parsing attributes in process `syz.2.23706'. [ 1422.437077][T26572] netlink: zone id is out of range [ 1422.443906][T26572] netlink: zone id is out of range [ 1422.449092][T26572] netlink: zone id is out of range [ 1422.460164][T26572] netlink: zone id is out of range [ 1422.467807][T26572] netlink: get zone limit has 8 unknown bytes [ 1426.131205][ T6232] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1426.313519][ T6232] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1426.323615][ T6232] usb 5-1: config 0 has no interface number 0 [ 1426.329782][ T6232] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1426.342343][ T6232] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1426.352655][ T6232] usb 5-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1426.367649][ T6232] usb 5-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 1426.379563][ T6232] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1426.380817][ T6211] usb 4-1: new full-speed USB device number 111 using dummy_hcd [ 1426.407711][T26788] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23796'. [ 1426.425944][ T6232] usb 5-1: config 0 descriptor?? [ 1426.573830][ T6211] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1426.587331][ T6211] usb 4-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 1426.597004][ T6211] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1426.609108][ T6211] usb 4-1: config 0 descriptor?? [ 1426.700676][ T3059] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1426.796375][T18942] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1426.850632][ T3059] usb 2-1: Using ep0 maxpacket: 8 [ 1426.858632][ T3059] usb 2-1: config 2 has an invalid interface number: 31 but max is 0 [ 1426.877217][ T3059] usb 2-1: config 2 has no interface number 0 [ 1426.883903][ T3059] usb 2-1: config 2 interface 31 has no altsetting 0 [ 1426.899105][ T3059] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1426.908861][ T3059] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1426.917629][ T3059] usb 2-1: Product: syz [ 1426.921946][ T3059] usb 2-1: Manufacturer: syz [ 1426.926603][ T3059] usb 2-1: SerialNumber: syz [ 1426.950461][T18942] usb 3-1: Using ep0 maxpacket: 32 [ 1426.957570][T18942] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1426.977730][T18942] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1426.988462][T18942] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1427.004467][T18942] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1427.013731][T18942] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1427.022710][T18942] usb 3-1: Product: syz [ 1427.029057][T18942] usb 3-1: Manufacturer: syz [ 1427.038591][T18942] usb 3-1: SerialNumber: syz [ 1427.045111][ T6211] kye 0003:0458:4018.003D: hidraw0: USB HID v0.03 Device [HID 0458:4018] on usb-dummy_hcd.3-1/input0 [ 1427.074846][ T6232] uclogic 0003:28BD:0042.003C: failed retrieving string descriptor #100: -71 [ 1427.093106][T18942] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input217 [ 1427.108329][ T6232] uclogic 0003:28BD:0042.003C: failed retrieving pen parameters: -71 [ 1427.128469][ T6232] uclogic 0003:28BD:0042.003C: pen probing failed: -71 [ 1427.148339][ T6232] uclogic 0003:28BD:0042.003C: failed probing parameters: -71 [ 1427.168351][ T6232] uclogic 0003:28BD:0042.003C: probe with driver uclogic failed with error -71 [ 1427.185438][ T6232] usb 5-1: USB disconnect, device number 104 [ 1427.233394][T22773] usb 4-1: USB disconnect, device number 111 [ 1427.313341][ T6211] usb 3-1: USB disconnect, device number 83 [ 1427.375330][ T6211] appletouch 3-1:1.0: input: appletouch disconnected [ 1427.562175][ T3059] ch9200 2-1:2.31: probe with driver ch9200 failed with error -22 [ 1427.586234][ T3059] usb 2-1: USB disconnect, device number 96 [ 1427.788227][T26875] xt_socket: unknown flags 0xe4 [ 1428.300828][ T3059] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 1428.326106][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.333616][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1428.473265][ T3059] usb 4-1: Using ep0 maxpacket: 32 [ 1428.495661][ T3059] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1428.516848][ T3059] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1428.538552][ T3059] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1428.556755][ T3059] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1428.572605][ T3059] usb 4-1: config 0 descriptor?? [ 1428.585206][ T3059] hub 4-1:0.0: USB hub found [ 1428.788719][ T3059] hub 4-1:0.0: 9 ports detected [ 1428.796911][ T3059] hub 4-1:0.0: insufficient power available to use all downstream ports [ 1428.815557][ T30] audit: type=1326 audit(1754122606.845:4197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26935 comm="syz.2.23826" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 1428.837774][ C0] vkms_vblank_simulate: vblank timer overrun [ 1428.853610][ T30] audit: type=1326 audit(1754122606.845:4198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26935 comm="syz.2.23826" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 1428.884211][ T30] audit: type=1326 audit(1754122606.845:4199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26935 comm="syz.2.23826" exe="/root/syz-executor" sig=0 arch=40000003 syscall=219 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 1428.913736][ T30] audit: type=1326 audit(1754122606.875:4200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26935 comm="syz.2.23826" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 1428.941791][ T30] audit: type=1326 audit(1754122606.875:4201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26935 comm="syz.2.23826" exe="/root/syz-executor" sig=0 arch=40000003 syscall=374 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 1428.965933][ T30] audit: type=1326 audit(1754122606.875:4202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26935 comm="syz.2.23826" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 1429.210515][ T3059] usb 4-1: USB disconnect, device number 112 [ 1429.442631][T26964] netlink: 'syz.1.23836': attribute type 31 has an invalid length. [ 1429.612434][T26978] netlink: 8 bytes leftover after parsing attributes in process `syz.4.23840'. [ 1429.622147][T26978] netlink: 4 bytes leftover after parsing attributes in process `syz.4.23840'. [ 1429.633094][T26978] netlink: 'syz.4.23840': attribute type 6 has an invalid length. [ 1429.707385][T26980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.23841'. [ 1429.770424][T22773] usb 3-1: new full-speed USB device number 84 using dummy_hcd [ 1429.952772][T22773] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1429.981529][T22773] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1430.001312][T22773] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1430.016103][T22773] usb 3-1: Product: syz [ 1430.040382][T22773] usb 3-1: Manufacturer: syz [ 1430.045202][T22773] usb 3-1: SerialNumber: syz [ 1430.069052][T22773] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1430.122604][ T30] audit: type=1326 audit(1754122608.155:4203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27000 comm="syz.3.23850" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 1430.193495][ T30] audit: type=1326 audit(1754122608.155:4204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27000 comm="syz.3.23850" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 1430.227632][ T30] audit: type=1326 audit(1754122608.175:4205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27000 comm="syz.3.23850" exe="/root/syz-executor" sig=0 arch=40000003 syscall=314 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 1430.266051][ T30] audit: type=1326 audit(1754122608.175:4206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27000 comm="syz.3.23850" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 1430.712461][T22773] usb 3-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 1430.768905][T22773] usb 3-1: USB disconnect, device number 84 [ 1431.197820][T27064] netlink: 20 bytes leftover after parsing attributes in process `syz.1.23872'. [ 1431.662162][T27089] netlink: 8 bytes leftover after parsing attributes in process `syz.4.23886'. [ 1432.271631][ T44] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1432.293986][T22773] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1432.430680][ T44] usb 5-1: Using ep0 maxpacket: 16 [ 1432.445757][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1432.460220][T22773] usb 4-1: Using ep0 maxpacket: 32 [ 1432.478044][T22773] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1432.498295][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1432.508248][T22773] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1432.522483][T22773] usb 4-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 1432.535236][ T44] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1432.554633][T22773] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1432.562797][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1432.572351][ T44] usb 5-1: config 0 descriptor?? [ 1432.596866][T22773] usb 4-1: config 0 descriptor?? [ 1433.048250][T22773] hid-retrode 0003:0403:97C1.003E: hidraw0: USB HID v0.02 Device [HID 0403:97c1] on usb-dummy_hcd.3-1/input0 [ 1433.240597][ T44] usb 5-1: string descriptor 0 read error: -71 [ 1433.256032][T22773] usb 4-1: USB disconnect, device number 113 [ 1433.296909][T27169] fido_id[27169]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1433.300794][ T44] usb 5-1: Max retries (5) exceeded reading string descriptor 200 [ 1433.326287][ T44] letsketch 0003:6161:4D15.003F: probe with driver letsketch failed with error -32 [ 1433.356577][ T44] usb 5-1: USB disconnect, device number 105 [ 1433.823334][ T6232] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1434.031011][ T6232] usb 3-1: Using ep0 maxpacket: 32 [ 1434.058613][ T6232] usb 3-1: config 0 has an invalid interface number: 247 but max is 0 [ 1434.071093][ T6232] usb 3-1: config 0 has no interface number 0 [ 1434.087647][ T6232] usb 3-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 1434.107523][ T6232] usb 3-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 1434.116353][ T6232] usb 3-1: Product: syz [ 1434.126279][ T6232] usb 3-1: Manufacturer: syz [ 1434.136108][ T6232] usb 3-1: config 0 descriptor?? [ 1434.170590][ T6211] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1434.280567][ T3059] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1434.333377][ T6211] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 1434.342663][ T6211] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1434.352028][ T6211] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1434.363447][ T6211] usb 2-1: config 220 has no interface number 2 [ 1434.369895][ T6211] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1434.383588][ T6211] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1434.390965][ T6211] usb 2-1: config 220 interface 76 has no altsetting 0 [ 1434.398047][ T6211] usb 2-1: config 220 interface 1 has no altsetting 0 [ 1434.408869][ T6211] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1434.418173][ T6211] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1434.438088][ T6211] usb 2-1: Product: syz [ 1434.447982][ T6211] usb 2-1: Manufacturer: syz [ 1434.453297][ T6211] usb 2-1: SerialNumber: syz [ 1434.458687][ T3059] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 1434.468907][ T3059] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1434.479961][ T3059] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1434.493592][ T3059] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1434.506743][ T3059] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1434.528754][ T3059] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1434.551035][ T3059] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1434.559089][ T3059] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1434.570544][ T3059] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1434.595446][ T3059] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1434.604788][ T3059] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1434.620461][ T3059] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1434.641093][ T3059] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1434.661318][ T3059] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1434.670433][ T3059] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1434.681691][ T3059] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1434.701441][ T3059] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1434.710732][ T3059] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1434.727842][ T6211] usb 2-1: selecting invalid altsetting 0 [ 1434.740971][ T6211] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 1434.747383][ T6211] usb 2-1: No valid video chain found. [ 1434.753128][ T3059] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1434.777013][ T3059] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1434.787704][ T3059] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1434.789465][ T6211] usb 2-1: selecting invalid altsetting 0 [ 1434.815214][ T3059] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1434.823241][ T6211] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 1434.833078][ T3059] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1434.850727][ T6211] usb 2-1: USB disconnect, device number 97 [ 1434.862844][ T3059] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1434.890835][ T3059] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1434.904044][ T3059] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1434.914401][ T3059] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1434.931317][ T3059] usb 5-1: Product: syz [ 1434.935598][ T3059] usb 5-1: Manufacturer: syz [ 1434.940249][ T3059] usb 5-1: SerialNumber: syz [ 1434.972416][ T3059] usb 5-1: config 0 descriptor?? [ 1435.000545][ T3059] yurex 5-1:0.0: USB YUREX device now attached to Yurex #1 [ 1435.449935][ T6232] usb 5-1: USB disconnect, device number 106 [ 1435.457192][T22773] usb 3-1: USB disconnect, device number 85 [ 1435.486647][ T6232] yurex 5-1:0.0: USB YUREX #1 now disconnected [ 1435.721671][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1435.721695][ T30] audit: type=1326 audit(1754122613.745:4208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27304 comm="syz.1.23946" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 1435.755526][ T30] audit: type=1326 audit(1754122613.745:4209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27304 comm="syz.1.23946" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 1435.804557][ T30] audit: type=1326 audit(1754122613.745:4210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27304 comm="syz.1.23946" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 1435.826625][T27309] netlink: 4 bytes leftover after parsing attributes in process `syz.3.23948'. [ 1435.845966][T27309] netlink: 104 bytes leftover after parsing attributes in process `syz.3.23948'. [ 1435.859429][ T30] audit: type=1326 audit(1754122613.745:4211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27304 comm="syz.1.23946" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 1435.863377][T27309] netlink: 104 bytes leftover after parsing attributes in process `syz.3.23948'. [ 1435.900962][ T30] audit: type=1326 audit(1754122613.745:4212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27304 comm="syz.1.23946" exe="/root/syz-executor" sig=0 arch=40000003 syscall=237 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 1435.940549][ T30] audit: type=1326 audit(1754122613.745:4213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27304 comm="syz.1.23946" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 1435.963816][ T30] audit: type=1326 audit(1754122613.745:4214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27304 comm="syz.1.23946" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 1435.986009][ C0] vkms_vblank_simulate: vblank timer overrun [ 1437.240788][ T6211] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1437.261202][T27384] netlink: 8 bytes leftover after parsing attributes in process `syz.4.23981'. [ 1437.284453][T27384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.23981'. [ 1437.298656][T27384] netlink: 'syz.4.23981': attribute type 15 has an invalid length. [ 1437.405142][ T6211] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1437.427627][ T6211] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1437.454451][ T6211] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1437.485745][ T6211] usb 2-1: config 0 descriptor?? [ 1437.514159][T27396] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23985'. [ 1437.540827][T27396] netlink: 1 bytes leftover after parsing attributes in process `syz.2.23985'. [ 1437.676617][T27408] netlink: 'syz.2.23988': attribute type 322 has an invalid length. [ 1437.973462][ T6211] lg-g15 0003:046D:C222.0040: unbalanced delimiter at end of report description [ 1438.000209][ T6211] lg-g15 0003:046D:C222.0040: probe with driver lg-g15 failed with error -22 [ 1438.184002][ T44] usb 2-1: USB disconnect, device number 98 [ 1438.279446][T27453] netlink: 4 bytes leftover after parsing attributes in process `syz.4.24000'. [ 1438.291410][T27453] netlink: 4 bytes leftover after parsing attributes in process `syz.4.24000'. [ 1438.382741][T22773] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1438.541822][T22773] usb 4-1: Using ep0 maxpacket: 32 [ 1438.553683][T22773] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1438.568392][T22773] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1438.580994][T22773] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1438.602729][T22773] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1438.615461][T22773] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1438.641213][T22773] usb 4-1: Product: syz [ 1438.645445][T22773] usb 4-1: Manufacturer: syz [ 1438.650063][T22773] usb 4-1: SerialNumber: syz [ 1438.678787][T22773] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input218 [ 1438.720766][T23422] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1438.911727][T23422] usb 5-1: Using ep0 maxpacket: 8 [ 1438.920654][T23422] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x73, changing to 0x3 [ 1438.937173][T23422] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1438.970655][ T3059] usb 4-1: USB disconnect, device number 114 [ 1439.002267][T23422] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1439.022148][T23422] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1439.030199][T23422] usb 5-1: Product: syz [ 1439.041810][T23422] usb 5-1: Manufacturer: syz [ 1439.050698][T23422] usb 5-1: SerialNumber: syz [ 1439.064175][ T3059] appletouch 4-1:1.0: input: appletouch disconnected [ 1439.075168][T23422] usb 5-1: config 0 descriptor?? [ 1439.107452][T23422] streamzap 5-1:0.0: streamzap_probe: endpoint doesn't match input device 0203 [ 1439.355528][ T6211] usb 5-1: USB disconnect, device number 107 [ 1440.659562][T27586] netlink: 12 bytes leftover after parsing attributes in process `syz.4.24049'. [ 1440.856326][T27597] netlink: 72 bytes leftover after parsing attributes in process `syz.4.24054'. [ 1441.322576][T27627] netlink: 12 bytes leftover after parsing attributes in process `syz.4.24066'. [ 1441.323621][ T3059] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1441.484032][T27634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24068'. [ 1441.493434][T27634] netlink: 4 bytes leftover after parsing attributes in process `syz.2.24068'. [ 1441.503549][T27634] netlink: 'syz.2.24068': attribute type 11 has an invalid length. [ 1441.513170][ T3059] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1441.535818][ T3059] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1441.545997][ T3059] usb 2-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 1441.564588][ T3059] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1441.584244][ T3059] usb 2-1: config 0 descriptor?? [ 1441.662415][ T30] audit: type=1326 audit(1754122619.695:4215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27596 comm="syz.3.24053" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4539 code=0x7fc00000 [ 1441.684678][ C0] vkms_vblank_simulate: vblank timer overrun [ 1442.025895][ T3059] logitech-djreceiver 0003:046D:C534.0041: unbalanced delimiter at end of report description [ 1442.069681][ T3059] logitech-djreceiver 0003:046D:C534.0041: logi_dj_probe: parse failed [ 1442.084947][T27663] netlink: 'syz.2.24079': attribute type 2 has an invalid length. [ 1442.093777][ T3059] logitech-djreceiver 0003:046D:C534.0041: probe with driver logitech-djreceiver failed with error -22 [ 1442.258898][T23422] usb 2-1: USB disconnect, device number 99 [ 1442.978297][ T30] audit: type=1326 audit(1754122621.005:4216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27724 comm="syz.3.24101" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4539 code=0x7ff00000 [ 1443.000592][ C0] vkms_vblank_simulate: vblank timer overrun [ 1443.011433][ T44] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1443.022147][ T30] audit: type=1326 audit(1754122621.005:4217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27723 comm="syz.0.24099" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 1443.080396][ T30] audit: type=1326 audit(1754122621.005:4218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27723 comm="syz.0.24099" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 1443.104568][ T30] audit: type=1326 audit(1754122621.005:4219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27723 comm="syz.0.24099" exe="/root/syz-executor" sig=0 arch=40000003 syscall=83 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 1443.129581][ T30] audit: type=1326 audit(1754122621.005:4220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27723 comm="syz.0.24099" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 1443.176679][ T30] audit: type=1326 audit(1754122621.005:4221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27723 comm="syz.0.24099" exe="/root/syz-executor" sig=0 arch=40000003 syscall=85 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 1443.211135][ T44] usb 3-1: Using ep0 maxpacket: 8 [ 1443.220792][ T44] usb 3-1: config 2 has an invalid interface number: 31 but max is 0 [ 1443.229936][ T44] usb 3-1: config 2 has no interface number 0 [ 1443.240076][ T44] usb 3-1: config 2 interface 31 has no altsetting 0 [ 1443.255035][ T30] audit: type=1326 audit(1754122621.005:4222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27723 comm="syz.0.24099" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 1443.287894][ T30] audit: type=1326 audit(1754122621.035:4223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27724 comm="syz.3.24101" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4539 code=0x7ff00000 [ 1443.313552][ T44] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1443.330116][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1443.346109][ T44] usb 3-1: Product: syz [ 1443.353629][ T30] audit: type=1326 audit(1754122621.035:4224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27724 comm="syz.3.24101" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4539 code=0x7ff00000 [ 1443.376303][ T44] usb 3-1: Manufacturer: syz [ 1443.381908][ T44] usb 3-1: SerialNumber: syz [ 1443.382080][T27738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24105'. [ 1444.014260][ T44] ch9200 3-1:2.31: probe with driver ch9200 failed with error -22 [ 1444.042952][ T44] usb 3-1: USB disconnect, device number 86 [ 1444.080681][T22773] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1444.241115][T22773] usb 2-1: Using ep0 maxpacket: 16 [ 1444.250132][T22773] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1444.265163][T22773] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1444.282359][T22773] usb 2-1: New USB device found, idVendor=0dac, idProduct=024b, bcdDevice= 0.04 [ 1444.301576][T22773] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1444.321677][T22773] usb 2-1: config 0 descriptor?? [ 1444.740380][T22773] hid (null): invalid report_size 24312 [ 1444.748354][T22773] hid (null): report_id 1312380026 is invalid [ 1444.766970][T22773] hid (null): unknown global tag 0xe [ 1444.788149][T22773] hid_parser_main: 12 callbacks suppressed [ 1444.788170][T22773] hid-generic 0003:0DAC:024B.0042: unknown main item tag 0x6 [ 1444.815378][T22773] hid-generic 0003:0DAC:024B.0042: invalid report_size 24312 [ 1444.831369][T22773] hid-generic 0003:0DAC:024B.0042: item 0 2 1 7 parsing failed [ 1444.845771][T22773] hid-generic 0003:0DAC:024B.0042: probe with driver hid-generic failed with error -22 [ 1444.879786][T27783] No buffer was provided with the request [ 1444.997926][ T3059] usb 2-1: USB disconnect, device number 100 [ 1447.052926][T27830] netlink: 56 bytes leftover after parsing attributes in process `syz.1.24132'. [ 1447.920512][T22773] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1448.071128][T22773] usb 2-1: Using ep0 maxpacket: 32 [ 1448.082937][T22773] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1448.102938][T22773] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1448.115639][T22773] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1448.132049][T22773] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1448.173731][T22773] usb 2-1: config 0 descriptor?? [ 1448.196746][T22773] hub 2-1:0.0: USB hub found [ 1448.411742][T22773] hub 2-1:0.0: 1 port detected [ 1448.612981][T22773] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 1448.638197][T22773] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 1448.665986][T22773] usbhid 2-1:0.0: can't add hid device: -71 [ 1448.678750][T22773] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1448.722259][T22773] usb 2-1: USB disconnect, device number 101 [ 1450.294362][ T30] kauditd_printk_skb: 5144 callbacks suppressed [ 1450.294384][ T30] audit: type=1326 audit(1754122628.325:9369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27991 comm="syz.2.24194" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 1450.400692][ T30] audit: type=1326 audit(1754122628.325:9370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27991 comm="syz.2.24194" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 1450.473332][ T30] audit: type=1326 audit(1754122628.355:9371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27991 comm="syz.2.24194" exe="/root/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 1450.574068][ T30] audit: type=1326 audit(1754122628.355:9372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27991 comm="syz.2.24194" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 1450.663313][ T30] audit: type=1326 audit(1754122628.355:9373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27991 comm="syz.2.24194" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 1450.685526][ C0] vkms_vblank_simulate: vblank timer overrun [ 1450.759016][ T30] audit: type=1326 audit(1754122628.355:9374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27991 comm="syz.2.24194" exe="/root/syz-executor" sig=0 arch=40000003 syscall=235 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 1450.809865][ T30] audit: type=1326 audit(1754122628.355:9375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27991 comm="syz.2.24194" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 1450.857716][ T30] audit: type=1326 audit(1754122628.355:9376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27991 comm="syz.2.24194" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x7ffc0000 [ 1450.890475][T22773] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1451.034781][T28029] netlink: 'syz.2.24219': attribute type 2 has an invalid length. [ 1451.066598][T22773] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1451.074622][T22773] usb 2-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.00 [ 1451.105146][T22773] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1451.126474][T22773] usb 2-1: config 0 descriptor?? [ 1452.257081][T22773] usb 2-1: USB disconnect, device number 102 [ 1452.463431][ T30] audit: type=1326 audit(1754122630.495:9377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28078 comm="syz.4.24225" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f93539 code=0x0 [ 1453.518836][ T30] audit: type=1326 audit(1754122631.545:9378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28087 comm="syz.3.24228" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd4539 code=0x7ffc0000 [ 1459.222910][T28148] netlink: 36 bytes leftover after parsing attributes in process `syz.2.24248'. [ 1465.375561][T28161] netlink: 32 bytes leftover after parsing attributes in process `syz.0.24254'. [ 1468.826842][T24310] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1468.837023][T24310] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1468.845753][T24310] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1468.855126][T24310] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1468.865772][T24310] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1469.757640][T28190] chnl_net:caif_netlink_parms(): no params data found [ 1470.620810][ T15] sched: DL replenish lagged too much [ 1470.823713][ T6144] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1470.845135][ T6144] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1470.866393][ T6144] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1470.881157][ T6144] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1470.890934][ T6144] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1470.978327][T24310] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1470.991122][T24310] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1470.999233][T24310] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1471.014684][T24310] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1471.022918][T24310] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1472.960808][T24310] Bluetooth: hci6: command tx timeout [ 1473.121039][T24310] Bluetooth: hci7: command tx timeout [ 1475.041636][T24310] Bluetooth: hci6: command tx timeout [ 1475.200552][T24310] Bluetooth: hci7: command tx timeout [ 1476.942079][T24310] Bluetooth: hci5: command tx timeout [ 1477.120454][ T6144] Bluetooth: hci6: command tx timeout [ 1477.280841][ T6144] Bluetooth: hci7: command tx timeout [ 1478.961425][ T6144] Bluetooth: hci5: command tx timeout [ 1479.206952][ T6144] Bluetooth: hci6: command tx timeout [ 1479.360406][ T6144] Bluetooth: hci7: command tx timeout [ 1481.041075][ T6144] Bluetooth: hci5: command tx timeout [ 1483.126868][ T6144] Bluetooth: hci5: command tx timeout [ 1488.920744][T24310] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1488.939393][T24310] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1488.947943][T24310] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1488.956839][T24310] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1488.970753][T24310] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1491.040930][T24310] Bluetooth: hci8: command tx timeout [ 1492.948693][ T6144] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1492.959163][ T6144] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1492.982491][ T6144] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1492.991352][ T6144] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1492.999258][ T6144] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1493.126801][ T6144] Bluetooth: hci8: command tx timeout [ 1494.584582][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1494.591369][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1495.042234][ T6144] Bluetooth: hci9: command tx timeout [ 1495.200418][ T6144] Bluetooth: hci8: command tx timeout [ 1497.121017][ T6144] Bluetooth: hci9: command tx timeout [ 1497.286844][ T6144] Bluetooth: hci8: command tx timeout [ 1499.200748][ T6144] Bluetooth: hci9: command tx timeout [ 1501.280548][ T6144] Bluetooth: hci9: command tx timeout [ 1515.360591][ C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1522.561262][T24310] Bluetooth: hci2: command 0x0406 tx timeout [ 1522.941615][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1529.037666][T28417] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1529.047080][T28417] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1529.056562][T28417] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1529.065598][T28417] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1529.073636][T28417] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1531.127026][T28417] Bluetooth: hci0: command tx timeout [ 1531.283173][T28941] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1531.293803][T28941] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1531.302306][T28941] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1531.311603][T28941] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1531.321570][T28941] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1531.332275][T28417] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1531.342401][T28417] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1531.351715][T28417] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1531.379547][T28941] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1531.387918][T28941] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1533.200408][T24310] Bluetooth: hci0: command tx timeout [ 1533.440616][T28941] Bluetooth: hci1: command tx timeout [ 1533.447193][T24310] Bluetooth: hci4: command tx timeout [ 1535.288440][ T6144] Bluetooth: hci0: command tx timeout [ 1535.520766][T24310] Bluetooth: hci1: command tx timeout [ 1535.526344][ T6144] Bluetooth: hci4: command tx timeout [ 1537.361268][ T6144] Bluetooth: hci0: command tx timeout [ 1537.601062][ T6144] Bluetooth: hci4: command tx timeout [ 1537.606563][ T6144] Bluetooth: hci1: command tx timeout [ 1539.681027][T24310] Bluetooth: hci4: command tx timeout [ 1539.686535][ T6144] Bluetooth: hci1: command tx timeout [ 1549.117203][T24310] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1549.140141][T24310] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1549.149050][T24310] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1549.158354][T24310] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1549.171080][T24310] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1551.280728][T24310] Bluetooth: hci10: command tx timeout [ 1553.464344][ T6144] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1553.482658][ T6144] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1553.491539][ T6144] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1553.503666][ T6144] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1553.513662][ T6144] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1555.600432][T24310] Bluetooth: hci11: command tx timeout [ 1556.326015][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1556.341563][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1557.681426][T24310] Bluetooth: hci11: command tx timeout [ 1558.242558][T24310] Bluetooth: hci10: command tx timeout [ 1559.760657][ T6144] Bluetooth: hci11: command tx timeout [ 1560.321290][ T6144] Bluetooth: hci10: command tx timeout [ 1561.840475][ T6144] Bluetooth: hci11: command tx timeout [ 1562.402163][ T6144] Bluetooth: hci10: command tx timeout [ 1564.298387][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 1588.963239][T24310] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1588.974134][T24310] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1588.997538][T24310] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1589.012427][T24310] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1589.021836][T24310] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1591.128508][ T6144] Bluetooth: hci12: command tx timeout [ 1591.359686][T24310] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1591.383256][T24310] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1591.392982][T24310] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1591.401395][T24310] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1591.416507][T24310] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1592.131319][ T6144] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1592.141728][ T6144] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1592.150057][ T6144] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1592.158319][ T6144] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1592.172866][T28417] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1594.247978][T28435] Bluetooth: hci7: command 0x0406 tx timeout [ 1594.254427][T28530] Bluetooth: hci6: command 0x0406 tx timeout [ 1597.817661][T28435] Bluetooth: hci13: command tx timeout [ 1597.829918][T28530] Bluetooth: hci12: command tx timeout [ 1599.841139][T28531] Bluetooth: hci12: command tx timeout [ 1599.921038][T28531] Bluetooth: hci13: command tx timeout [ 1601.920424][T28531] Bluetooth: hci12: command tx timeout [ 1602.000681][T28531] Bluetooth: hci13: command tx timeout [ 1604.081007][T28531] Bluetooth: hci13: command tx timeout [ 1610.288575][T24310] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1610.299017][T24310] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1610.308331][T24310] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1610.317765][T24310] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1610.338425][T24310] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1614.288851][T28549] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1614.310433][T28549] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1614.327718][T28549] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1614.337297][T28549] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1614.346597][T28549] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1614.723238][T28549] Bluetooth: hci8: command 0x0406 tx timeout [ 1619.844315][T28555] Bluetooth: hci9: command 0x0406 tx timeout [ 1621.829063][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1621.840499][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1649.326237][T28530] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 1649.344013][T28530] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 1649.353104][T28530] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 1649.361934][T28530] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 1649.369888][T28530] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 1651.580110][T28569] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 1651.592892][T28569] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 1651.602104][T28569] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 1651.612325][T28569] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 1651.620188][T28569] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 1652.107345][T28561] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 1652.122426][T28561] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 1652.132666][T28561] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 1652.143058][T28561] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 1652.154358][T28561] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 1657.286283][T28580] Bluetooth: hci0: command 0x0406 tx timeout [ 1657.294258][T28580] Bluetooth: hci1: command 0x0406 tx timeout [ 1657.300890][T28580] Bluetooth: hci4: command 0x0406 tx timeout [ 1669.120625][T28581] Bluetooth: hci3: command tx timeout [ 1670.617818][T28417] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1670.631432][T28417] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1670.639849][T28417] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1670.653198][T28417] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1670.661644][T28417] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1671.200834][T28417] Bluetooth: hci3: command tx timeout [ 1673.281166][T28417] Bluetooth: hci3: command tx timeout [ 1674.660125][T28601] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 1674.673521][T28601] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 1674.683022][T28601] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 1674.692247][T28601] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 1674.700103][T28601] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 1675.360827][T28601] Bluetooth: hci3: command tx timeout [ 1676.161627][T28601] Bluetooth: hci11: command 0x0406 tx timeout [ 1681.043371][T28605] Bluetooth: hci10: command 0x0406 tx timeout [ 1681.121082][ T31] INFO: task kworker/1:6:6232 blocked for more than 152 seconds. [ 1681.128867][ T31] Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 [ 1681.145011][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1681.156860][ T31] task:kworker/1:6 state:D stack:20648 pid:6232 tgid:6232 ppid:2 task_flags:0x4208160 flags:0x00004000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1681.180863][ T31] Workqueue: events_power_efficient reg_check_chans_work [ 1681.202584][ T31] Call Trace: [ 1681.205922][ T31] [ 1681.208884][ T31] __schedule+0x1798/0x4cc0 [ 1681.237018][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1681.256165][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1681.270836][ T31] ? __pfx___schedule+0x10/0x10 [ 1681.275786][ T31] ? schedule+0x91/0x360 [ 1681.310103][ T31] schedule+0x165/0x360 [ 1681.390956][ T31] schedule_preempt_disabled+0x13/0x30 [ 1681.396504][ T31] __mutex_lock+0x7e6/0x1360 [ 1681.454330][ T31] ? __mutex_lock+0x5b6/0x1360 [ 1681.459212][ T31] ? reg_check_chans_work+0x95/0xf30 [ 1681.476802][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1681.485491][ T31] ? do_raw_spin_lock+0x121/0x290 [ 1681.495155][ T31] ? look_up_lock_class+0x74/0x170 [ 1681.504049][ T31] reg_check_chans_work+0x95/0xf30 [ 1681.509213][ T31] ? __lock_acquire+0xab9/0xd20 [ 1681.520832][ T31] ? __pfx_reg_check_chans_work+0x10/0x10 [ 1681.526611][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1681.540951][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1681.546229][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1681.558787][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1681.565937][ T31] process_scheduled_works+0xade/0x17b0 [ 1681.578861][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1681.585999][ T31] worker_thread+0x8a0/0xda0 [ 1681.598310][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1681.605495][ T31] ? __kthread_parkme+0x7b/0x200 [ 1681.617119][ T31] kthread+0x711/0x8a0 [ 1681.625077][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1681.636671][ T31] ? __pfx_kthread+0x10/0x10 [ 1681.641980][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1681.647223][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1681.660047][ T31] ? __pfx_kthread+0x10/0x10 [ 1681.665468][ T31] ret_from_fork+0x3f9/0x770 [ 1681.676911][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1681.683427][ T31] ? __switch_to_asm+0x39/0x70 [ 1681.688849][ T31] ? __switch_to_asm+0x33/0x70 [ 1681.700756][ T31] ? __pfx_kthread+0x10/0x10 [ 1681.705425][ T31] ret_from_fork_asm+0x1a/0x30 [ 1681.717166][ T31] [ 1681.720827][ T31] INFO: task kworker/u8:7:22521 blocked for more than 152 seconds. [ 1681.728845][ T31] Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 [ 1681.746718][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1681.756955][ T31] task:kworker/u8:7 state:D stack:19560 pid:22521 tgid:22521 ppid:2 task_flags:0x4208160 flags:0x00004000 [ 1681.870252][ T31] Workqueue: events_unbound linkwatch_event [ 1681.876239][ T31] Call Trace: [ 1681.879541][ T31] [ 1681.890006][ T31] __schedule+0x1798/0x4cc0 [ 1681.895341][ T31] ? __lock_acquire+0xab9/0xd20 [ 1681.907982][ T31] ? __lock_acquire+0xab9/0xd20 [ 1681.914243][ T31] ? __pfx___schedule+0x10/0x10 [ 1681.919337][ T31] ? schedule+0x91/0x360 [ 1681.930950][ T31] schedule+0x165/0x360 [ 1681.935178][ T31] schedule_preempt_disabled+0x13/0x30 [ 1681.941691][ T31] __mutex_lock+0x7e6/0x1360 [ 1681.946317][ T31] ? look_up_lock_class+0x74/0x170 [ 1681.958363][ T31] ? __mutex_lock+0x5b6/0x1360 [ 1681.963630][ T31] ? linkwatch_event+0xe/0x60 [ 1681.968404][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1681.984496][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1681.989769][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1681.998920][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1682.012569][ T31] linkwatch_event+0xe/0x60 [ 1682.017219][ T31] process_scheduled_works+0xade/0x17b0 [ 1682.027231][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1682.037055][ T31] worker_thread+0x8a0/0xda0 [ 1682.046035][ T31] kthread+0x711/0x8a0 [ 1682.053132][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1682.058283][ T31] ? __pfx_kthread+0x10/0x10 [ 1682.068106][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1682.076332][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1682.090139][ T31] ? __pfx_kthread+0x10/0x10 [ 1682.099098][ T31] ret_from_fork+0x3f9/0x770 [ 1682.108646][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1682.116547][ T31] ? __switch_to_asm+0x39/0x70 [ 1682.126648][ T31] ? __switch_to_asm+0x33/0x70 [ 1682.134405][ T31] ? __pfx_kthread+0x10/0x10 [ 1682.139061][ T31] ret_from_fork_asm+0x1a/0x30 [ 1682.148272][ T31] [ 1682.155032][ T31] [ 1682.155032][ T31] Showing all locks held in the system: [ 1682.167279][ T31] 1 lock held by khungtaskd/31: [ 1682.175255][ T31] #0: ffffffff8e139e60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1682.190152][ T31] 3 locks held by kworker/1:1/44: [ 1682.200485][ T31] #0: ffff88801a482148 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1682.220826][ T31] #1: ffffc90000b47bc0 ((work_completion)(&(&net->ipv4.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1682.242679][ T31] #2: ffffffff8f5327c8 (rtnl_mutex){+.+.}-{4:4}, at: check_lifetime+0x451/0x970 [ 1682.257724][ T31] 3 locks held by kworker/u8:4/59: [ 1682.264888][ T31] #0: ffff88802f7cd148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1682.284370][ T31] #1: ffffc9000210fbc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1682.309655][ T31] #2: ffffffff8f5327c8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 1682.329632][ T31] 2 locks held by getty/5623: [ 1682.335624][ T31] #0: ffff88814c8760a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1682.352249][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1682.367651][ T31] 5 locks held by kworker/u9:5/6144: [ 1682.375957][ T31] #0: ffff88802848c148 ((wq_completion)hci7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1682.391170][ T31] #1: ffffc9000b047bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1682.425584][ T31] #2: ffff88802b44cdc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 1682.448486][ T31] #3: ffff88802b44c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 1682.459631][ T31] #4: ffffffff8e13f8f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 1682.477428][ T31] 8 locks held by kworker/0:5/6211: [ 1682.489164][ T31] 3 locks held by kworker/1:6/6232: [ 1682.500233][ T31] #0: ffff88801a482148 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1682.523630][ T31] #1: ffffc9000b557bc0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1682.542769][ T31] #2: ffffffff8f5327c8 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x95/0xf30 [ 1682.557951][ T31] 3 locks held by kworker/u8:7/22521: [ 1682.565743][ T31] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1682.585255][ T31] #1: ffffc9000b0a7bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1682.597882][ T31] #2: ffffffff8f5327c8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1682.615079][ T31] 6 locks held by kworker/u9:0/28941: [ 1682.621661][ T31] #0: ffff888060ee8948 ((wq_completion)hci6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1682.643288][ T31] #1: ffffc9000be97bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1682.660093][ T31] #2: ffff888061bc8dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 1682.677789][ T31] #3: ffff888061bc80b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 1682.695540][ T31] #4: ffffffff8f697308 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 1682.707335][ T31] #5: ffff888027f95b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 1682.721616][ T31] 4 locks held by kworker/u9:1/24310: [ 1682.727030][ T31] #0: ffff8880325c5948 ((wq_completion)hci14#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1682.747313][ T31] #1: ffffc9000c11fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1682.767300][ T31] #2: ffff8880626b80b8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 1682.778208][ T31] #3: ffffffff8f697308 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 1682.796856][ T31] 1 lock held by syz.1.24226/28083: [ 1682.802686][ T31] #0: ffffffff8f5327c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1682.819396][ T31] 1 lock held by syz.3.24234/28103: [ 1682.825445][ T31] #0: ffffffff8f5327c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1682.841143][ T31] 1 lock held by syz.4.24235/28105: [ 1682.846484][ T31] #0: ffffffff8f5327c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1682.865501][ T31] 2 locks held by syz.0.24264/28182: [ 1682.872446][ T31] #0: ffffffff8f5327c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1682.887642][ T31] #1: ffffffff8dfd2f50 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x8de/0x1ff0 [ 1682.906462][ T31] 3 locks held by syz-executor/28190: [ 1682.912965][ T31] #0: ffff88807a1e8dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 1682.930957][ T31] #1: ffff88807a1e80b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 1682.947615][ T31] #2: ffffffff8f697308 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 1682.958296][ T31] 2 locks held by syz-executor/28315: [ 1682.974936][ T31] #0: ffffffff8f525950 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 1682.987858][ T31] #1: ffffffff8f5327c8 (rtnl_mutex){+.+.}-{4:4}, at: wg_netns_pre_exit+0x1c/0x1d0 [ 1683.001171][ T31] 2 locks held by syz-executor/28321: [ 1683.006589][ T31] #0: ffffffff8f525950 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 1683.023793][ T31] #1: ffffffff8f5327c8 (rtnl_mutex){+.+.}-{4:4}, at: wg_netns_pre_exit+0x1c/0x1d0 [ 1683.037959][ T31] 2 locks held by syz-executor/28385: [ 1683.047295][ T31] #0: ffffffff8f525950 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 1683.064502][ T31] #1: ffffffff8f5327c8 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2ab/0x800 [ 1683.079552][ T31] 2 locks held by syz-executor/28394: [ 1683.089925][ T31] #0: ffffffff8f525950 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 1683.106676][ T31] #1: ffffffff8f5327c8 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2ab/0x800 [ 1683.116905][ T31] 5 locks held by kworker/u9:2/28417: [ 1683.129866][ T31] #0: ffff88805906f148 ((wq_completion)hci11){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1683.148573][ T31] #1: ffffc9000ce4fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1683.168674][ T31] #2: ffff888023af0dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 1683.179277][ T31] #3: ffff888023af00b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 1683.199241][ T31] #4: ffffffff8f697308 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 1683.210136][ T31] 2 locks held by syz-executor/28425: [ 1683.222362][ T31] #0: ffffffff8f525950 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 1683.238072][ T31] #1: ffffffff8f5327c8 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 1683.250020][ T31] 5 locks held by kworker/u9:3/28435: [ 1683.263396][ T31] #0: ffff888062d75148 ((wq_completion)hci8){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1683.278619][ T31] #1: ffffc9000417fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1683.298930][ T31] #2: ffff888030c98dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 1683.318781][ T31] #3: ffff888030c980b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 1683.336760][ T31] #4: ffffffff8f697308 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 1683.346994][ T31] 2 locks held by syz-executor/28442: [ 1683.359962][ T31] #0: ffffffff8f525950 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 1683.382038][ T31] #1: ffffffff8f5327c8 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 1683.398511][ T31] 2 locks held by syz-executor/28443: [ 1683.405287][ T31] #0: ffffffff8f525950 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 1683.425519][ T31] #1: ffffffff8f5327c8 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 1683.447440][ T31] 2 locks held by syz-executor/28459: [ 1683.457208][ T31] #0: ffffffff8f525950 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 1683.471448][ T31] #1: ffffffff8f5327c8 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 1683.488701][ T31] 2 locks held by syz-executor/28468: [ 1683.495078][ T31] #0: ffffffff8f525950 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 1683.512042][ T31] #1: ffffffff8f5327c8 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 1683.539520][ T31] 2 locks held by syz-executor/28514: [ 1683.546316][ T31] #0: ffffffff8f525950 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 1683.561440][ T31] #1: ffffffff8f5327c8 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 1683.578451][ T31] 2 locks held by syz-executor/28522: [ 1683.584326][ T31] #0: ffffffff8f525950 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 1683.601244][ T31] #1: ffffffff8f5327c8 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 1683.617799][ T31] 2 locks held by syz-executor/28529: [ 1683.624381][ T31] #0: ffffffff8f525950 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 1683.642721][ T31] #1: ffffffff8f5327c8 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 1683.659809][ T31] 4 locks held by kworker/u9:4/28530: [ 1683.665823][ T31] #0: ffff88807bea6148 ((wq_completion)hci17#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1683.681430][ T31] #1: ffffc9000aeefbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1683.699691][ T31] #2: ffff8880299f80b8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 1683.717774][ T31] #3: ffffffff8f697308 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 1683.728968][ T31] 4 locks held by kworker/u9:6/28531: [ 1683.742231][ T31] #0: ffff8880447b4948 ((wq_completion)hci15#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1683.762156][ T31] #1: ffffc90004697bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1683.780074][ T31] #2: ffff8880334980b8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 1683.796990][ T31] #3: ffffffff8f697308 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 1683.808788][ T31] 2 locks held by syz-executor/28545: [ 1683.821617][ T31] #0: ffffffff8f525950 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 1683.838466][ T31] #1: ffffffff8f5327c8 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 1683.857068][ T31] 5 locks held by kworker/u9:7/28549: [ 1683.866299][ T31] #0: ffff8880787af948 ((wq_completion)hci9){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1683.884113][ T31] #1: ffffc9000add7bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1683.904433][ T31] #2: ffff8880622ccdc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 1683.916469][ T31] #3: ffff8880622cc0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 1683.935846][ T31] #4: ffffffff8f697308 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 1683.948084][ T31] 2 locks held by syz-executor/28553: [ 1683.959318][ T31] #0: ffffffff8f525950 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 1683.979134][ T31] #1: ffffffff8f5327c8 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 1683.997291][ T31] 4 locks held by kworker/u9:8/28555: [ 1684.003846][ T31] #0: ffff88802735e148 ((wq_completion)hci16#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1684.022548][ T31] #1: ffffc9000b017bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1684.039065][ T31] #2: ffff88806d2740b8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 1684.057717][ T31] #3: ffffffff8f697308 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 1684.068595][ T31] 4 locks held by kworker/u9:9/28561: [ 1684.084764][ T31] #0: ffff888061fb4148 ((wq_completion)hci18#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1684.100648][ T31] #1: ffffc9000af77bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1684.119507][ T31] #2: ffff888030c9c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 1684.129933][ T31] #3: ffffffff8f697308 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 1684.148444][ T31] 2 locks held by syz-executor/28563: [ 1684.154255][ T31] #0: ffffffff8f525950 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 1684.171472][ T31] #1: ffffffff8f5327c8 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 1684.188438][ T31] 5 locks held by kworker/u9:10/28569: [ 1684.197398][ T31] #0: ffff8880325c2148 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1684.216006][ T31] #1: ffffc9000ae57bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1684.229094][ T31] #2: ffff888076bfcdc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 1684.247571][ T31] #3: ffff888076bfc0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 1684.257633][ T31] #4: ffffffff8f697308 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 1684.275197][ T31] 2 locks held by syz-executor/28571: [ 1684.282518][ T31] #0: ffffffff8f525950 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 1684.298551][ T31] #1: ffffffff8f5327c8 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 1684.318797][ T31] 5 locks held by kworker/u9:11/28574: [ 1684.339640][ T31] #0: ffff88806d04e148 ((wq_completion)hci1#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1684.358182][ T31] #1: ffffc9000ae87bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1684.378758][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1684.385172][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1684.405011][ T31] #2: ffff888054b2cdc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 1684.424364][ T31] #3: ffff888054b2c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 1684.440780][ T31] #4: ffffffff8f697308 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 1684.458007][ T31] 2 locks held by syz-executor/28577: [ 1684.464488][ T31] #0: ffffffff8f525950 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 1684.481185][ T31] #1: ffffffff8f5327c8 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 1684.502332][ T31] 5 locks held by kworker/u9:12/28578: [ 1684.507836][ T31] #0: ffff88802dafe148 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1684.527200][ T31] #1: ffffc9000ae47bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1684.549074][ T31] #2: ffff888054b30dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 1684.572526][ T31] #3: ffff888054b300b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 1684.587185][ T31] #4: ffffffff8f697308 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 1684.599668][ T31] 4 locks held by kworker/u9:13/28579: [ 1684.609627][ T31] #0: ffff888022ada948 ((wq_completion)hci19#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1684.628129][ T31] #1: ffffc9000af1fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1684.647319][ T31] #2: ffff88804325c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 1684.669105][ T31] #3: ffffffff8f697308 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 1684.679987][ T31] 4 locks held by kworker/u9:15/28581: [ 1684.693452][ T31] #0: ffff88803820c148 ((wq_completion)hci2#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1684.708380][ T31] #1: ffffc9000ad87bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1684.728464][ T31] #2: ffff888031d480b8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 1684.738960][ T31] #3: ffffffff8f697308 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 1684.757256][ T31] 2 locks held by dhcpcd/28588: [ 1684.764837][ T31] #0: ffff88803eeb3208 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 1684.784360][ T31] #1: ffffffff8e13f8f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 1684.798133][ T31] 2 locks held by syz-executor/28596: [ 1684.807962][ T31] #0: ffffffff8f525950 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 1684.825039][ T31] #1: ffffffff8f5327c8 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 1684.836947][ T31] 5 locks held by kworker/u9:16/28601: [ 1684.849223][ T31] #0: ffff88803b5f3948 ((wq_completion)hci10){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1684.867569][ T31] #1: ffffc9000adb7bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1684.891255][ T31] #2: ffff888067454dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 1684.907266][ T31] #3: ffff8880674540b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 1684.918835][ T31] #4: ffffffff8f697308 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 1684.935687][ T31] 2 locks held by syz-executor/28604: [ 1684.942421][ T31] #0: ffffffff8f525950 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 1684.958651][ T31] #1: ffffffff8f5327c8 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 1684.978849][ T31] [ 1684.981754][ T31] ============================================= [ 1684.981754][ T31] [ 1685.001454][ T31] NMI backtrace for cpu 1 [ 1685.001479][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(full) [ 1685.001518][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1685.001532][ T31] Call Trace: [ 1685.001541][ T31] [ 1685.001551][ T31] dump_stack_lvl+0x189/0x250 [ 1685.001585][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1685.001612][ T31] ? __pfx__printk+0x10/0x10 [ 1685.001656][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1685.001692][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1685.001725][ T31] ? __pfx__printk+0x10/0x10 [ 1685.001766][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1685.001804][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1685.001837][ T31] watchdog+0xf93/0xfe0 [ 1685.001874][ T31] ? watchdog+0x1de/0xfe0 [ 1685.001910][ T31] kthread+0x711/0x8a0 [ 1685.001941][ T31] ? __pfx_watchdog+0x10/0x10 [ 1685.001970][ T31] ? __pfx_kthread+0x10/0x10 [ 1685.001998][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1685.002031][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1685.002050][ T31] ? __pfx_kthread+0x10/0x10 [ 1685.002078][ T31] ret_from_fork+0x3f9/0x770 [ 1685.002103][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1685.002132][ T31] ? __switch_to_asm+0x39/0x70 [ 1685.002160][ T31] ? __switch_to_asm+0x33/0x70 [ 1685.002187][ T31] ? __pfx_kthread+0x10/0x10 [ 1685.002215][ T31] ret_from_fork_asm+0x1a/0x30 [ 1685.002261][ T31] [ 1685.002270][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1685.154804][ C0] NMI backtrace for cpu 0 [ 1685.154823][ C0] CPU: 0 UID: 0 PID: 6211 Comm: kworker/0:5 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(full) [ 1685.154855][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1685.154874][ C0] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 1685.154899][ C0] RIP: 0010:validate_chain+0x3b/0x2140 [ 1685.154920][ C0] Code: 49 89 cf 65 48 8b 05 c4 c0 01 11 48 89 84 24 d8 00 00 00 8b 46 20 89 c1 81 e1 00 80 04 00 81 f9 00 00 04 00 0f 85 61 02 00 00 <41> 89 d4 49 89 f6 25 ff 1f 00 00 48 0f a3 05 32 84 09 12 48 89 3c [ 1685.154937][ C0] RSP: 0018:ffffc900000063f8 EFLAGS: 00000046 [ 1685.154951][ C0] RAX: 00000000000c258f RBX: 0000000000000008 RCX: 0000000000040000 [ 1685.154963][ C0] RDX: 0000000000000000 RSI: ffff888078b3e630 RDI: ffff888078b3da00 [ 1685.154977][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff85503364 [ 1685.154988][ C0] R10: dffffc0000000000 R11: fffffbfff1f46487 R12: 0000000061dc36ea [ 1685.155008][ C0] R13: ffff888078b3e4f0 R14: ffff888078b3e630 R15: be7e7a6777f0341a [ 1685.155023][ C0] FS: 0000000000000000(0000) GS:ffff888125c2a000(0000) knlGS:0000000000000000 [ 1685.155037][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1685.155050][ C0] CR2: 00000000f5146b6a CR3: 000000000df36000 CR4: 00000000003526f0 [ 1685.155066][ C0] Call Trace: [ 1685.155075][ C0] [ 1685.155089][ C0] ? chacha_block_generic+0x53/0xc80 [ 1685.155120][ C0] __lock_acquire+0xab9/0xd20 [ 1685.155149][ C0] ? get_random_u16+0x154/0x940 [ 1685.155170][ C0] lock_acquire+0x120/0x360 [ 1685.155195][ C0] ? get_random_u16+0x154/0x940 [ 1685.155222][ C0] ? get_random_u16+0x154/0x940 [ 1685.155245][ C0] get_random_u16+0x16c/0x940 [ 1685.155267][ C0] ? get_random_u16+0x154/0x940 [ 1685.155291][ C0] ? get_random_u16+0x154/0x940 [ 1685.155314][ C0] ? __pfx_get_random_u16+0x10/0x10 [ 1685.155336][ C0] ? __irq_exit_rcu+0xd8/0x1f0 [ 1685.155353][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1685.155372][ C0] ? irqentry_exit+0x74/0x90 [ 1685.155398][ C0] cake_get_flow_quantum+0x18e/0x290 [ 1685.155422][ C0] cake_dequeue+0x29de/0x4ab0 [ 1685.155445][ C0] ? __lock_acquire+0xab9/0xd20 [ 1685.155488][ C0] ? __pfx_cake_dequeue+0x10/0x10 [ 1685.155508][ C0] ? __lock_acquire+0xab9/0xd20 [ 1685.155536][ C0] __qdisc_run+0x23c/0x15f0 [ 1685.155572][ C0] __dev_queue_xmit+0x1056/0x3b50 [ 1685.155602][ C0] ? __dev_queue_xmit+0x27b/0x3b50 [ 1685.155629][ C0] ? synproxy_pernet+0x23/0x240 [ 1685.155648][ C0] ? synproxy_pernet+0x23/0x240 [ 1685.155670][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1685.155693][ C0] ? ipv6_synproxy_hook+0x297/0xda0 [ 1685.155718][ C0] ? nf_confirm+0x968/0xd90 [ 1685.155739][ C0] ? __lock_acquire+0xab9/0xd20 [ 1685.155768][ C0] ? synproxy_send_tcp_ipv6+0x4c1/0x680 [ 1685.155790][ C0] ? synproxy_send_tcp_ipv6+0x4c1/0x680 [ 1685.155814][ C0] ? ip6_finish_output2+0xf99/0x16a0 [ 1685.155846][ C0] ip6_finish_output2+0x11bc/0x16a0 [ 1685.155876][ C0] ? ip6_finish_output2+0x701/0x16a0 [ 1685.155906][ C0] ? __pfx_ip6_finish_output2+0x10/0x10 [ 1685.155934][ C0] ? ip6_mtu+0x7d/0x3f0 [ 1685.155960][ C0] ? ip6_finish_output+0x2ef/0x4e0 [ 1685.155986][ C0] synproxy_send_tcp_ipv6+0x4c1/0x680 [ 1685.156017][ C0] ? __pfx_synproxy_send_tcp_ipv6+0x10/0x10 [ 1685.156044][ C0] ? __build_skb_around+0x257/0x3e0 [ 1685.156066][ C0] ? synproxy_send_client_synack_ipv6+0x34f/0xca0 [ 1685.156087][ C0] ? skb_put+0x11b/0x210 [ 1685.156107][ C0] synproxy_send_client_synack_ipv6+0x80e/0xca0 [ 1685.156136][ C0] ? __pfx_synproxy_send_client_synack_ipv6+0x10/0x10 [ 1685.156158][ C0] ? nft_osf_init+0x94/0x240 [ 1685.156180][ C0] ? synproxy_pernet+0x45/0x270 [ 1685.156206][ C0] nft_synproxy_eval_v6+0x36e/0x560 [ 1685.156234][ C0] ? __pfx_nft_synproxy_eval_v6+0x10/0x10 [ 1685.156259][ C0] ? nf_ip_checksum+0x13c/0x510 [ 1685.156285][ C0] nft_synproxy_do_eval+0x3d7/0x570 [ 1685.156312][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1685.156343][ C0] nft_do_chain+0x40c/0x1920 [ 1685.156374][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 1685.156395][ C0] ? ipv6_find_hdr+0xc78/0x1050 [ 1685.156415][ C0] ? stack_depot_save_flags+0x40/0x900 [ 1685.156450][ C0] ? ip6_mc_input+0x8f4/0xaf0 [ 1685.156466][ C0] ? NF_HOOK+0x30c/0x3a0 [ 1685.156481][ C0] ? __netif_receive_skb+0xd3/0x380 [ 1685.156508][ C0] ? process_backlog+0x60e/0x14f0 [ 1685.156526][ C0] ? handle_softirqs+0x286/0x870 [ 1685.156542][ C0] ? do_softirq+0xec/0x180 [ 1685.156557][ C0] ? __local_bh_enable_ip+0x17d/0x1c0 [ 1685.156573][ C0] ? wg_packet_tx_worker+0x70b/0x7c0 [ 1685.156591][ C0] ? worker_thread+0x8a0/0xda0 [ 1685.156607][ C0] ? kthread+0x711/0x8a0 [ 1685.156627][ C0] ? ret_from_fork+0x3f9/0x770 [ 1685.156644][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 1685.156670][ C0] nft_do_chain_inet+0x25d/0x340 [ 1685.156694][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1685.156717][ C0] ? __lock_acquire+0xab9/0xd20 [ 1685.156745][ C0] ? NF_HOOK+0x9a/0x3a0 [ 1685.156763][ C0] ? NF_HOOK+0x9a/0x3a0 [ 1685.156779][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1685.156803][ C0] nf_hook_slow+0xc2/0x220 [ 1685.156824][ C0] NF_HOOK+0x206/0x3a0 [ 1685.156841][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 1685.156858][ C0] ? NF_HOOK+0x9a/0x3a0 [ 1685.156873][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1685.156890][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 1685.156913][ C0] ip6_input+0x16a/0x270 [ 1685.156929][ C0] ? ip6_input+0x23/0x270 [ 1685.156946][ C0] NF_HOOK+0x30c/0x3a0 [ 1685.156961][ C0] ? skb_orphan+0xaf/0xd0 [ 1685.156978][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1685.156999][ C0] ? NF_HOOK+0x9a/0x3a0 [ 1685.157015][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1685.157031][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1685.157052][ C0] __netif_receive_skb+0xd3/0x380 [ 1685.157082][ C0] ? process_backlog+0x2d5/0x14f0 [ 1685.157100][ C0] process_backlog+0x60e/0x14f0 [ 1685.157126][ C0] ? __pfx_process_backlog+0x10/0x10 [ 1685.157145][ C0] ? xdp_do_check_flushed+0x21b/0x240 [ 1685.157167][ C0] __napi_poll+0xc7/0x360 [ 1685.157193][ C0] ? net_rx_action+0x46d/0xe30 [ 1685.157212][ C0] net_rx_action+0x707/0xe30 [ 1685.157239][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1685.157273][ C0] handle_softirqs+0x286/0x870 [ 1685.157291][ C0] ? do_softirq+0xec/0x180 [ 1685.157310][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1685.157329][ C0] ? wg_packet_tx_worker+0x24a/0x7c0 [ 1685.157348][ C0] do_softirq+0xec/0x180 [ 1685.157364][ C0] [ 1685.157371][ C0] [ 1685.157378][ C0] ? __pfx_do_softirq+0x10/0x10 [ 1685.157395][ C0] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 1685.157416][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1685.157434][ C0] ? lockdep_softirqs_on+0x13b/0x1c0 [ 1685.157460][ C0] __local_bh_enable_ip+0x17d/0x1c0 [ 1685.157477][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1685.157496][ C0] ? wg_packet_tx_worker+0x24a/0x7c0 [ 1685.157516][ C0] ? wg_packet_tx_worker+0x24a/0x7c0 [ 1685.157534][ C0] wg_packet_tx_worker+0x70b/0x7c0 [ 1685.157553][ C0] ? wg_packet_tx_worker+0x24a/0x7c0 [ 1685.157573][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 1685.157602][ C0] process_scheduled_works+0xade/0x17b0 [ 1685.157644][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1685.157681][ C0] worker_thread+0x8a0/0xda0 [ 1685.157710][ C0] kthread+0x711/0x8a0 [ 1685.157732][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1685.157750][ C0] ? __pfx_kthread+0x10/0x10 [ 1685.157772][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1685.157798][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1685.157814][ C0] ? __pfx_kthread+0x10/0x10 [ 1685.157836][ C0] ret_from_fork+0x3f9/0x770 [ 1685.157854][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1685.157875][ C0] ? __switch_to_asm+0x39/0x70 [ 1685.157898][ C0] ? __switch_to_asm+0x33/0x70 [ 1685.157921][ C0] ? __pfx_kthread+0x10/0x10 [ 1685.157942][ C0] ret_from_fork_asm+0x1a/0x30 [ 1685.157973][ C0] [ 1685.927039][ C0] vkms_vblank_simulate: vblank timer overrun [ 1685.977218][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1685.984131][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(full) [ 1685.995782][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1686.005863][ T31] Call Trace: [ 1686.009162][ T31] [ 1686.012113][ T31] dump_stack_lvl+0x99/0x250 [ 1686.016732][ T31] ? __asan_memcpy+0x40/0x70 [ 1686.021349][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1686.026745][ T31] ? __pfx__printk+0x10/0x10 [ 1686.031377][ T31] vpanic+0x27a/0x730 [ 1686.035385][ T31] ? __pfx_vpanic+0x10/0x10 [ 1686.039909][ T31] ? preempt_schedule+0xae/0xc0 [ 1686.044972][ T31] ? preempt_schedule_common+0x83/0xd0 [ 1686.050484][ T31] panic+0xb9/0xc0 [ 1686.054235][ T31] ? __pfx_panic+0x10/0x10 [ 1686.058686][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1686.064103][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1686.070382][ T31] watchdog+0xfd2/0xfe0 [ 1686.074585][ T31] ? watchdog+0x1de/0xfe0 [ 1686.078949][ T31] kthread+0x711/0x8a0 [ 1686.083052][ T31] ? __pfx_watchdog+0x10/0x10 [ 1686.087758][ T31] ? __pfx_kthread+0x10/0x10 [ 1686.092374][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1686.097600][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1686.102812][ T31] ? __pfx_kthread+0x10/0x10 [ 1686.107430][ T31] ret_from_fork+0x3f9/0x770 [ 1686.112043][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1686.117180][ T31] ? __switch_to_asm+0x39/0x70 [ 1686.121970][ T31] ? __switch_to_asm+0x33/0x70 [ 1686.126773][ T31] ? __pfx_kthread+0x10/0x10 [ 1686.131385][ T31] ret_from_fork_asm+0x1a/0x30 [ 1686.136193][ T31] [ 1686.139541][ T31] Kernel Offset: disabled [ 1686.143873][ T31] Rebooting in 86400 seconds..