last executing test programs: 5m48.773799437s ago: executing program 1 (id=2849): fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat(r0, &(0x7f00000000c0)='.\x00', 0x515401, 0x408) 5m48.566380561s ago: executing program 1 (id=2853): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x44, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x4}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) 5m48.320195475s ago: executing program 1 (id=2858): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x388, 0x41d9fda7) 5m48.027368294s ago: executing program 1 (id=2865): unshare(0x22020600) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) 5m47.759277707s ago: executing program 1 (id=2870): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x20080, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r0, &(0x7f0000000100)) 5m47.679101528s ago: executing program 1 (id=2872): r0 = memfd_create(&(0x7f0000000e80)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xb1p\xce\xb3\x00\x1dz\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xb8\t\xd6\xd5>N&\x00\x00\x00\x00\x00\x00\x00\a\xf5\xe4\x9b5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1b\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\\\xb0:\xaf\xc5~\xbcJ e\r\x00\x00\x00\x002\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ4\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x852P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1exQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd9#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1.E\b1\xcb\xa2\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\v\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xfb\xf0\x81\xd6&\xc0N&\x00\x00\x00\x00\x00\x00\x00\a\xf5\xe4\x9b5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1b\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\\\xb0:\xaf\xc5~\xbcJ e\r\x00\x00\x00\x002\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ4\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x852P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1exQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd9#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1.E\b1\xcb\xa2\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\v\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xfb\xf0\x81\xd6&\xc00x0) io_submit(r1, 0x1, &(0x7f0000000000)=[&(0x7f0000004280)={0x0, 0x0, 0x20, 0x0, 0x1fff, r0, 0x0, 0x0, 0x6}]) 1m34.309906978s ago: executing program 3 (id=6895): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}]}], {0x52}}, 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) 1m33.271374265s ago: executing program 3 (id=6909): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000280)={0x13c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x110, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x108, 0x3, 0x0, 0x1, [{0x104, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xff, 0x2, '\x00)67\x1c\xaaM\xa0\xde\x00\xdf\x96_\xd9\x7f\x9d\xc27\x7f\xfb\x06\x00\x00\x00\x00\x01\x00\x00\x00&\xb5\x852\x1f\xeb\xe5WqR\xe1\x9b\xd6\x00\xb7\xbf\xe4\x81Q\xc8\xe8\x8c\xb7\x05gw\xf6/\xe0U\xce\xa4\xb6\b\x91\x96\x92\x81&\x13p\xbd\xd1y\xcf\xe6\x91[\xd9\xf5G\x19`\b\xc6\x91\xd1L\xb7/+\x97\x18\xeb\xa7?\x15\x83X\xfee\' P\x17\xb9V0\x00x\x7f\xd6\xe2f\x17\x97\xe0\xd5fM5a$I\x91\xaa\xf0zf\xec\x18\xbe-\x8c\xfb0\x00\x9b\x03\xa8\x85\x03\x9b\xde\x904\xbd:\xfdK\x84\xdalr\'\x83\x03R:\xa1_9\xf8\x1e@m\xc1 *\x1e-\xeew)X\xb9\x9a`$\xaa\xa42\x95\x15e\xfd\x93\xa7~\xf9\xaa\xa6\xc1\x11\x03F\xdf\xcfm\xdd\xdd\xce\x99&7\x9d!\x1f\xe2\xa7y\xc9\xb8\xceQ\xe9G\x9e__A\xe0|\xe1\xb3a5\x93\x06%\x1f\xb0\xd8\xc1\xf6\xdf\x91\xb4\xdf\xc5\xb2\xa5M\n\x06n\xb1\xca\x16\x8f\x1b\xad'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x13c}}, 0x4040004) 1m33.023159549s ago: executing program 3 (id=6912): open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@metacopy_on}, {@nfs_export_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 1m32.842658957s ago: executing program 34 (id=6709): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) 1m32.605488972s ago: executing program 3 (id=6916): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 1m22.97572259s ago: executing program 35 (id=6846): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="840000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00300000000000005400128009000100766c616e000000004400028006000100000000000600050081000000280003803900010006000000090000000c00010000040000000000008dff010040000000060000000600050088a8000008000a00", @ANYRES32, @ANYBLOB="080005"], 0x84}, 0x1, 0xba01}, 0x0) 1m17.483261066s ago: executing program 36 (id=6916): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 34.034417847s ago: executing program 7 (id=6913): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 33.295009854s ago: executing program 7 (id=7268): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x5, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_test', 0x8a881, 0xbb) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x3, 0xc, "faf98317e5a1149989fc67be43ea6acc96e3a2503dc31c97214d58128bbad0099cebdc25f5ab60c9e69098c8b534464c516bdd8a0f350000000000000300", "32d8cc26f7061a74df2cfc06489f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}}) 32.733189779s ago: executing program 7 (id=7272): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001540)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc45, 0x760b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe0, 0x2, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x18, &(0x7f0000000100)={0x40, 0xe, 0x5, {0x5, 0x31, '\x00\t\x00'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 32.517976189s ago: executing program 6 (id=7275): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000300)=[{0x6, 0x0, 0xb, 0x7fff0000}]}) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r0, 0x107, 0xb, &(0x7f0000000100)=""/41, &(0x7f0000000180)=0x29) 31.649769773s ago: executing program 6 (id=7280): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mbind(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3, &(0x7f0000000180)=0x9, 0x9, 0x1) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) 30.75383388s ago: executing program 6 (id=7286): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) 30.222886594s ago: executing program 6 (id=7290): openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) epoll_create(0x8) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f071, 0x19}) 29.991456562s ago: executing program 6 (id=7292): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc531, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022120000007709"], 0x0}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000000)={@fallback, 0x20, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 29.397486222s ago: executing program 7 (id=7297): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) 29.270555711s ago: executing program 9 (id=7068): r0 = landlock_create_ruleset(&(0x7f0000000380)={0x8400, 0x2, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 29.225543184s ago: executing program 8 (id=7006): pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x7, 0x0) 28.965764324s ago: executing program 8 (id=7299): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) syz_open_dev$tty1(0xc, 0x4, 0x3) 28.952632214s ago: executing program 9 (id=7300): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x50) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r0, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) 28.157678918s ago: executing program 9 (id=7302): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8558}}, 0x0, 0x0, 0x6, 0x0, "39bcf5aba7f959ddcdc8da1b2b41a983ef92a3a5d4ef67a6e5aaa42e5f36f75694a26955afb25c6451572175a16395b9de4ea9879d10962a16a1b56803e7ebf5564c5054c4a398fd30f351751fa9f118"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e20, 0x6fe, @ipv4={'\x00', '\xff\xff', @loopback}, 0x10000}}, 0x0, 0x0, 0x3a, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c) 28.129861761s ago: executing program 8 (id=7304): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x422) syz_usb_disconnect(r0) close(0x4) 28.101337136s ago: executing program 7 (id=7305): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r1 = syz_io_uring_setup(0xa27, &(0x7f0000000040)={0x0, 0xe7a0, 0x13080, 0x2, 0x389}, &(0x7f00000000c0), &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 28.029778272s ago: executing program 6 (id=7306): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000080)={0x1, 0x0, [{0x80000008, 0x8a1, 0x1, 0x4, 0x9}]}) 27.832370395s ago: executing program 7 (id=7308): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0xc0010003, 0x0, 0x5}]}) 27.785860174s ago: executing program 9 (id=7309): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000049"]) 26.274355071s ago: executing program 8 (id=7319): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000100)=[@sndinfo={0x20, 0x84, 0x2, {0x4, 0x41}}], 0x20, 0x40018}, 0x94) 25.870057254s ago: executing program 8 (id=7322): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x503, 0x0, 0xfffffbfc, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 12.964892384s ago: executing program 37 (id=7306): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000080)={0x1, 0x0, [{0x80000008, 0x8a1, 0x1, 0x4, 0x9}]}) 12.728159112s ago: executing program 38 (id=7308): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0xc0010003, 0x0, 0x5}]}) 12.535476487s ago: executing program 39 (id=7309): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000049"]) 10.543651253s ago: executing program 40 (id=7322): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x503, 0x0, 0xfffffbfc, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 282.693181ms ago: executing program 0 (id=7607): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) setns(r1, 0x20000000) 269.011483ms ago: executing program 0 (id=7608): unshare(0x8000000) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) semget$private(0x0, 0x4000, 0x555) semtimedop(0x0, &(0x7f0000000440)=[{0x4, 0x9}, {0x3, 0x6, 0x1000}], 0x1f4, 0x0) 194.425697ms ago: executing program 0 (id=7609): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='rtc_irq_set_freq\x00', r0}, 0x18) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x80000000000725) 82.173667ms ago: executing program 0 (id=7610): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@default_permissions}]}) 81.982389ms ago: executing program 0 (id=7611): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000000000f08c"]) 0s ago: executing program 0 (id=7612): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @loopback}, 0x10) syz_emit_ethernet(0x32, &(0x7f00000001c0)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback, @empty=0xe0000001}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x0, 0x3d}}}}}}}, 0x0) kernel console output (not intermixed with test programs): 8] asus 0003:048D:CE50.0043: item fetching failed at offset 3/5 [ 426.617468][ T1228] asus 0003:048D:CE50.0043: Asus hid parse failed: -22 [ 426.617581][ T1228] asus 0003:048D:CE50.0043: probe with driver asus failed with error -22 [ 426.799303][ T44] usb 4-1: USB disconnect, device number 40 [ 426.987717][T16164] netlink: 'syz.4.4610': attribute type 27 has an invalid length. [ 426.987740][T16164] netlink: 'syz.4.4610': attribute type 4 has an invalid length. [ 426.987756][T16164] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4610'. [ 427.226281][T16165] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4611'. [ 427.226307][T16165] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4611'. [ 427.757421][T16191] netlink: 25 bytes leftover after parsing attributes in process `syz.4.4623'. [ 428.112378][T16205] delete_channel: no stack [ 428.529647][T16222] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4638'. [ 428.597984][ T5812] Bluetooth: hci3: link tx timeout [ 428.598508][ T5812] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 428.901122][T16239] hugetlbfs: Bad value ':' for mount option 'size' [ 428.901122][T16239] [ 429.801988][T16273] Bluetooth: MGMT ver 1.23 [ 430.269328][T16290] macvtap1: entered promiscuous mode [ 430.629871][ T5812] Bluetooth: hci3: command 0x0405 tx timeout [ 431.280400][ C0] vkms_vblank_simulate: vblank timer overrun [ 431.377523][ C0] vkms_vblank_simulate: vblank timer overrun [ 431.395515][ T5812] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 431.413455][ T5812] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 431.415197][ T5812] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 431.416422][ T5812] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 431.417310][ T5812] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 432.612047][ C0] vkms_vblank_simulate: vblank timer overrun [ 432.714283][ T3521] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.144688][ C0] vkms_vblank_simulate: vblank timer overrun [ 433.229822][ T3521] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.593732][ T5814] Bluetooth: hci2: command tx timeout [ 433.691590][ T3521] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.279922][ T3521] bond0: (slave netdevsim0): Releasing backup interface [ 434.365079][ T3521] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.649243][ T31] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 434.815839][ T31] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 434.815868][ T31] usb 6-1: config 0 has no interface number 0 [ 434.815919][ T31] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 434.815943][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.881147][ T31] usb 6-1: config 0 descriptor?? [ 434.895077][ T31] usb 6-1: selecting invalid altsetting 1 [ 434.895260][ T31] dvb_ttusb_budget: ttusb_init_controller: error [ 434.895275][ T31] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 435.040689][T16321] chnl_net:caif_netlink_parms(): no params data found [ 435.071590][T16471] netlink: 'syz.4.4756': attribute type 2 has an invalid length. [ 435.126549][ T31] DVB: Unable to find symbol cx22700_attach() [ 435.284453][ T31] DVB: Unable to find symbol tda10046_attach() [ 435.284466][ T31] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 435.288717][ T31] usb 6-1: USB disconnect, device number 13 [ 435.591698][ T3521] bridge_slave_1: left allmulticast mode [ 435.591727][ T3521] bridge_slave_1: left promiscuous mode [ 435.591995][ T3521] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.669657][ T5814] Bluetooth: hci2: command tx timeout [ 435.771217][ T3521] bridge_slave_0: left allmulticast mode [ 435.771246][ T3521] bridge_slave_0: left promiscuous mode [ 435.771500][ T3521] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.866379][T16503] xt_socket: unknown flags 0x50 [ 435.926867][ T3521] tipc: Resetting bearer [ 436.857772][ T3521] tipc: Disabling bearer [ 437.087176][T16557] tracefs: Bad value for 'uid' [ 437.087194][T16557] tracefs: Bad value for 'uid' [ 437.348555][T16567] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4802'. [ 437.749335][ T5814] Bluetooth: hci2: command tx timeout [ 438.040623][ T3521] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 438.119919][ T3521] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 438.167979][ T3521] bond0 (unregistering): Released all slaves [ 438.561385][ T3521] tipc: Left network mode [ 438.564851][T16321] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.565982][T16321] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.566226][T16321] bridge_slave_0: entered allmulticast mode [ 438.579422][T16321] bridge_slave_0: entered promiscuous mode [ 438.617568][T16321] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.617927][T16321] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.618155][T16321] bridge_slave_1: entered allmulticast mode [ 438.642790][T16321] bridge_slave_1: entered promiscuous mode [ 438.994138][ T3521] IPVS: stopping backup sync thread 11034 ... [ 439.530653][ T1230] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 439.700204][ T1230] usb 6-1: Using ep0 maxpacket: 8 [ 439.702532][ T1230] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.702567][ T1230] usb 6-1: config 0 interface 0 has no altsetting 0 [ 439.702603][ T1230] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0a1f, bcdDevice= 0.00 [ 439.702628][ T1230] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.726711][ T1230] usb 6-1: config 0 descriptor?? [ 439.768540][T16321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.813204][T16321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.829639][ T5814] Bluetooth: hci2: command tx timeout [ 440.157211][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.265256][ T1230] hid-corsair-void 0003:1B1C:0A1F.0044: hidraw0: USB HID v0.00 Device [HID 1b1c:0a1f] on usb-dummy_hcd.5-1/input0 [ 440.370043][ T992] usb 6-1: USB disconnect, device number 14 [ 440.433467][T16688] fido_id[16688]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 440.489253][ T31] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 440.651714][ T31] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 440.651747][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.657173][ T31] usb 5-1: config 0 descriptor?? [ 440.686357][ T31] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 440.934303][T16321] team0: Port device team_slave_0 added [ 441.069977][ T31] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 441.070025][ T31] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 441.234566][ T3521] hsr_slave_0: left promiscuous mode [ 441.304580][ T3521] hsr_slave_1: left promiscuous mode [ 441.306039][ T3521] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 441.306066][ T3521] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 441.310038][ T1230] usb 5-1: USB disconnect, device number 42 [ 441.371900][ T3521] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 441.371928][ T3521] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 441.567902][ T3521] veth1_macvtap: left promiscuous mode [ 441.568007][ T3521] veth0_macvtap: left promiscuous mode [ 441.568292][ T3521] veth1_vlan: left promiscuous mode [ 441.568374][ T3521] veth0_vlan: left promiscuous mode [ 441.921782][T16747] netlink: 'syz.3.4883': attribute type 11 has an invalid length. [ 441.921806][T16747] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4883'. [ 444.695621][ T3521] team0 (unregistering): Port device team_slave_1 removed [ 444.991134][ T3521] team0 (unregistering): Port device team_slave_0 removed [ 447.981396][T16321] team0: Port device team_slave_1 added [ 448.297411][T16321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.297429][T16321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.297456][T16321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.305498][T16321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.305516][T16321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.305541][T16321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.739239][T16321] hsr_slave_0: entered promiscuous mode [ 448.740755][T16321] hsr_slave_1: entered promiscuous mode [ 448.741761][T16321] debugfs: 'hsr0' already exists in 'hsr' [ 448.741784][T16321] Cannot create hsr debugfs directory [ 449.240494][ T1230] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 449.260872][T17054] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 449.399233][ T1230] usb 6-1: Using ep0 maxpacket: 32 [ 449.401553][ T1230] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 449.401579][ T1230] usb 6-1: config 0 has no interface number 0 [ 449.418453][ T1230] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 449.418482][ T1230] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.418502][ T1230] usb 6-1: Product: syz [ 449.418517][ T1230] usb 6-1: Manufacturer: syz [ 449.418531][ T1230] usb 6-1: SerialNumber: syz [ 449.424000][ T1230] usb 6-1: config 0 descriptor?? [ 449.437938][ T1230] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 449.777475][ T1230] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 449.825272][ T1230] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 449.920344][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 450.141810][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 450.145871][ T31] usb 6-1: USB disconnect, device number 15 [ 450.237576][ T31] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 450.270257][ T31] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 450.292623][ T31] quatech2 6-1:0.51: device disconnected [ 450.610648][ T1230] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 450.675226][T17097] vivid-003: ================= START STATUS ================= [ 450.675317][T17097] vivid-003: Radio HW Seek Mode: Bounded [ 450.675350][T17097] vivid-003: Radio Programmable HW Seek: false [ 450.675370][T17097] vivid-003: RDS Rx I/O Mode: Block I/O [ 450.675410][T17097] vivid-003: Generate RBDS Instead of RDS: false [ 450.675431][T17097] vivid-003: RDS Reception: true [ 450.675449][T17097] vivid-003: RDS Program Type: 0 inactive [ 450.675498][T17097] vivid-003: RDS PS Name: inactive [ 450.675522][T17097] vivid-003: RDS Radio Text: inactive [ 450.675545][T17097] vivid-003: RDS Traffic Announcement: false inactive [ 450.675568][T17097] vivid-003: RDS Traffic Program: false inactive [ 450.675590][T17097] vivid-003: RDS Music: false inactive [ 450.675634][T17097] vivid-003: ================== END STATUS ================== [ 450.807061][ T1230] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 450.807092][ T1230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.807113][ T1230] usb 4-1: Product: syz [ 450.807127][ T1230] usb 4-1: Manufacturer: syz [ 450.807142][ T1230] usb 4-1: SerialNumber: syz [ 450.851791][ T1230] usb 4-1: config 0 descriptor?? [ 450.891561][ T1230] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 450.903876][ T1230] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 450.914281][ T1230] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 450.914444][ T1230] usb 4-1: media controller created [ 450.976162][ T3537] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.977375][ T3537] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.977412][ T3537] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.977450][ T3537] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 451.036968][ T1230] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 451.128977][T16321] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 451.341008][T16321] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 451.404660][ T1230] DVB: Unable to find symbol mt352_attach() [ 451.510688][T16321] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 451.594216][ T1230] DVB: Unable to find symbol nxt6000_attach() [ 451.594232][ T1230] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 451.621796][ T1230] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input34 [ 451.624132][T16321] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 451.633055][ T1230] dvb-usb: schedule remote query interval to 1000 msecs. [ 451.633078][ T1230] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 451.633095][ T1230] dvb-usb: bulk message failed: -22 (7/0) [ 451.633112][ T1230] dvb-usb: bulk message failed: -22 (7/0) [ 451.649238][ T5893] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 451.655407][ T1230] usb 4-1: USB disconnect, device number 41 [ 451.802089][ T3521] IPVS: stop unused estimator thread 0... [ 451.826304][ T5893] usb 6-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 451.826335][ T5893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.826356][ T5893] usb 6-1: Product: syz [ 451.826383][ T5893] usb 6-1: Manufacturer: syz [ 451.826398][ T5893] usb 6-1: SerialNumber: syz [ 451.870830][ T5893] usb 6-1: config 0 descriptor?? [ 451.963923][ T5893] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 452.189786][ T1230] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 452.300577][ T5894] usb 6-1: USB disconnect, device number 16 [ 452.323397][T16321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 452.447364][T16321] 8021q: adding VLAN 0 to HW filter on device team0 [ 452.481388][ T1015] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.481514][ T1015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 452.507567][ T1314] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.507706][ T1314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 453.495832][T16321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 453.663595][T17195] sp0: Synchronizing with TNC [ 453.769550][T17202] netlink: 'syz.3.5078': attribute type 1 has an invalid length. [ 453.769591][T17202] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 453.900134][T17192] [U] [ 454.116581][T17216] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 454.393023][T17226] fuse: Invalid rootmode [ 454.860339][T16321] veth0_vlan: entered promiscuous mode [ 454.895160][T16321] veth1_vlan: entered promiscuous mode [ 455.058252][T16321] veth0_macvtap: entered promiscuous mode [ 455.080553][T16321] veth1_macvtap: entered promiscuous mode [ 455.150358][T16321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 455.183519][T16321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 455.218520][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.230280][ T1284] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.230328][ T1284] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.230362][ T1284] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.809816][ T3521] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.809837][ T3521] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.033564][ T1015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.033586][ T1015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.339232][ T5921] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 456.424730][T17303] program syz.4.5118 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 456.500395][ T5921] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 456.500434][ T5921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.500457][ T5921] usb 6-1: Product: syz [ 456.500472][ T5921] usb 6-1: Manufacturer: syz [ 456.500487][ T5921] usb 6-1: SerialNumber: syz [ 456.512068][ T5921] usb 6-1: config 0 descriptor?? [ 456.811482][ T5894] usb 6-1: USB disconnect, device number 17 [ 457.182738][T17334] fuse: Bad value for 'group_id' [ 457.182759][T17334] fuse: Bad value for 'group_id' [ 457.313377][ T37] audit: type=1326 audit(1762348937.613:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17335 comm="syz.6.5134" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f37033cf6c9 code=0x0 [ 457.976770][T17370] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5150'. [ 458.039228][ T5893] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 458.139216][ T1228] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 458.182458][ T5921] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 458.189268][ T5893] usb 5-1: Using ep0 maxpacket: 16 [ 458.191600][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.191636][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 458.191673][ T5893] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 458.191696][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.205384][ T5893] usb 5-1: config 0 descriptor?? [ 458.289258][ T1228] usb 6-1: Using ep0 maxpacket: 16 [ 458.292296][ T1228] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 458.292353][ T1228] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 458.292435][ T1228] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 458.292455][ T1228] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 458.292479][ T1228] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 458.294208][ T1228] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 458.294233][ T1228] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 458.294307][ T1228] usb 6-1: Manufacturer: syz [ 458.318108][ T1228] usb 6-1: config 0 descriptor?? [ 458.339294][ T5921] usb 7-1: Using ep0 maxpacket: 16 [ 458.354797][ T5921] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.354883][ T5921] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 458.354906][ T5921] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 458.354948][ T5921] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 458.354971][ T5921] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.425899][ T5921] usb 7-1: config 0 descriptor?? [ 458.629958][ T1228] rc_core: IR keymap rc-hauppauge not found [ 458.629979][ T1228] Registered IR keymap rc-empty [ 458.631104][ T1228] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 458.650458][ T1228] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 458.737795][ T1228] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 458.758707][ T5893] hid-picolcd 0003:04D8:F002.0045: unknown main item tag 0x0 [ 458.758953][ T5893] hid-picolcd 0003:04D8:F002.0045: unknown main item tag 0x0 [ 458.758983][ T5893] hid-picolcd 0003:04D8:F002.0045: unknown main item tag 0x0 [ 458.759010][ T5893] hid-picolcd 0003:04D8:F002.0045: unknown main item tag 0x0 [ 458.759037][ T5893] hid-picolcd 0003:04D8:F002.0045: unknown main item tag 0x0 [ 458.759791][ T5893] hid-picolcd 0003:04D8:F002.0045: unknown main item tag 0x0 [ 458.759821][ T5893] hid-picolcd 0003:04D8:F002.0045: unknown main item tag 0x0 [ 458.759848][ T5893] hid-picolcd 0003:04D8:F002.0045: unknown main item tag 0x0 [ 458.760328][ T5893] hid-picolcd 0003:04D8:F002.0045: unknown main item tag 0x0 [ 458.760805][ T5893] hid-picolcd 0003:04D8:F002.0045: unknown main item tag 0x0 [ 458.829946][ T5893] hid-picolcd 0003:04D8:F002.0045: No report with id 0xf3 found [ 458.829976][ T5893] hid-picolcd 0003:04D8:F002.0045: No report with id 0xf4 found [ 458.852247][ T1228] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input35 [ 458.879366][ T1228] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 458.903012][ T1228] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 458.934083][ T1228] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 458.949576][ T1228] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 458.967892][ T5921] microsoft 0003:045E:07DA.0046: unbalanced delimiter at end of report description [ 458.970458][ T1228] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 458.994133][ T5921] microsoft 0003:045E:07DA.0046: parse failed [ 458.994307][ T5921] microsoft 0003:045E:07DA.0046: probe with driver microsoft failed with error -22 [ 458.994462][ T1228] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 459.010174][ T1228] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 459.027995][ T5893] usb 5-1: USB disconnect, device number 43 [ 459.031542][ T1228] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 459.050397][ T1228] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 459.069777][ T1228] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 459.085674][ T5921] usb 7-1: USB disconnect, device number 2 [ 459.239553][ T1228] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 459.239578][ T1228] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 459.299908][ T1228] usb 6-1: USB disconnect, device number 18 [ 459.659191][ T5894] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 459.828507][ T5894] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 459.828536][ T5894] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 459.828554][ T5894] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 459.828574][ T5894] usb 4-1: config 220 has no interface number 2 [ 459.828757][ T5894] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 459.828786][ T5894] usb 4-1: config 220 interface 0 has no altsetting 0 [ 459.828806][ T5894] usb 4-1: config 220 interface 76 has no altsetting 0 [ 459.828825][ T5894] usb 4-1: config 220 interface 1 has no altsetting 0 [ 459.899706][ T5894] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 459.899737][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.899758][ T5894] usb 4-1: Product: syz [ 459.899772][ T5894] usb 4-1: Manufacturer: syz [ 459.899786][ T5894] usb 4-1: SerialNumber: syz [ 460.181058][T17441] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5182'. [ 460.215291][ T5894] uvcvideo 4-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 460.215364][ T5894] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 460.215451][ T5894] uvcvideo 4-1:220.0: No valid video chain found. [ 460.215514][ T5894] usb 4-1: selecting invalid altsetting 0 [ 460.241451][ C1] vkms_vblank_simulate: vblank timer overrun [ 460.319236][ T5894] usb 4-1: selecting invalid altsetting 0 [ 460.319272][ T5894] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 460.329032][ T5894] usb 4-1: USB disconnect, device number 42 [ 460.568410][T17439] bond1 (unregistering): Released all slaves [ 460.669547][ T31] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 460.821565][ T31] usb 6-1: Using ep0 maxpacket: 16 [ 460.824042][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 460.824077][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 460.824117][ T31] usb 6-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 460.824142][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.849757][ T31] usb 6-1: config 0 descriptor?? [ 460.887953][ C1] vkms_vblank_simulate: vblank timer overrun [ 461.349740][ T31] input: HID 0458:5012 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5012.0047/input/input36 [ 461.366830][ T31] input: HID 0458:5012 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5012.0047/input/input37 [ 461.536365][ T31] kye 0003:0458:5012.0047: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5012] on usb-dummy_hcd.5-1/input0 [ 461.574719][ T31] usb 6-1: USB disconnect, device number 19 [ 461.742862][ T5894] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 461.899220][ T5894] usb 5-1: Using ep0 maxpacket: 8 [ 461.919472][T17485] fido_id[17485]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 461.923795][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.923833][ T5894] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 461.923878][ T5894] usb 5-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 461.923901][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.973655][ T5894] usb 5-1: config 0 descriptor?? [ 462.460043][ T5894] hid-rmi 0003:06CB:81A7.0048: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.4-1/input0 [ 462.689926][ T9] usb 5-1: USB disconnect, device number 44 [ 462.720854][T17509] fido_id[17509]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 462.740089][ T31] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 462.909282][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 462.915354][ T31] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 462.915387][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.922049][ T31] usb 4-1: config 0 descriptor?? [ 462.964067][ T31] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 463.274039][T17531] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5222'. [ 463.562384][ T31] gspca_vc032x: reg_w err -71 [ 463.562414][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 463.562425][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 463.562435][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 463.562444][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 463.562452][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 463.562461][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 463.562470][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 463.562479][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 463.562488][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 463.562496][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 463.562504][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 463.562512][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 463.562520][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 463.562528][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 463.562537][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 463.562545][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 463.562554][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 463.562563][ T31] gspca_vc032x: I2c Bus Busy Wait 00 [ 463.562575][ T31] gspca_vc032x: Unknown sensor... [ 463.562660][ T31] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 463.609480][ T5894] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 463.693818][ T31] usb 4-1: USB disconnect, device number 43 [ 463.789967][ T5894] usb 5-1: Using ep0 maxpacket: 32 [ 463.805852][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.805900][ T5894] usb 5-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 463.805923][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.853445][ T5894] usb 5-1: config 0 descriptor?? [ 464.311640][ T5894] elo 0003:04E7:0009.0049: hidraw0: USB HID v0.00 Device [HID 04e7:0009] on usb-dummy_hcd.4-1/input0 [ 464.515693][ T1228] usb 5-1: USB disconnect, device number 45 [ 466.179387][T17647] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5275'. [ 469.307936][T17783] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 469.307936][T17783] program syz.5.5329 not setting count and/or reply_len properly [ 470.509259][ T44] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 470.569270][ T37] audit: type=1326 audit(1762348950.863:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17841 comm="syz.3.5350" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6e297af6c9 code=0x0 [ 470.681824][ T44] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 470.681852][ T44] usb 5-1: config 0 has no interface number 0 [ 470.684903][ T44] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 470.684932][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.684953][ T44] usb 5-1: Product: syz [ 470.684968][ T44] usb 5-1: Manufacturer: syz [ 470.684982][ T44] usb 5-1: SerialNumber: syz [ 470.738213][ T44] usb 5-1: config 0 descriptor?? [ 470.957913][ T44] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 470.970750][ T44] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 470.971166][ T44] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 470.971217][ T44] usb 5-1: media controller created [ 471.024541][ T44] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 471.163355][ T44] usb 5-1: DVB: registering adapter 2 frontend 0 (E3C EC100 DVB-T)... [ 471.164589][ T44] dvbdev: dvb_create_media_entity: media entity 'E3C EC100 DVB-T' registered. [ 471.238297][T17859] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5356'. [ 471.438947][ T44] DVB: Unable to find symbol mxl5005s_attach() [ 471.579590][ T44] usb 5-1: USB disconnect, device number 46 [ 471.802472][ T44] IPVS: starting estimator thread 0... [ 471.889261][T17882] IPVS: using max 9 ests per chain, 21600 per kthread [ 471.936049][T17884] tipc: Enabling of bearer rejected, already enabled [ 473.034845][T17941] netlink: 104 bytes leftover after parsing attributes in process `syz.6.5390'. [ 474.428089][ T37] audit: type=1326 audit(1762348954.713:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18005 comm="syz.5.5422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cb3edf6c9 code=0x7ffc0000 [ 474.428140][ T37] audit: type=1326 audit(1762348954.723:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18005 comm="syz.5.5422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cb3edf6c9 code=0x7ffc0000 [ 474.482189][ T37] audit: type=1326 audit(1762348954.783:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18005 comm="syz.5.5422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f7cb3edf6c9 code=0x7ffc0000 [ 474.482241][ T37] audit: type=1326 audit(1762348954.783:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18005 comm="syz.5.5422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cb3edf6c9 code=0x7ffc0000 [ 474.482280][ T37] audit: type=1326 audit(1762348954.783:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18005 comm="syz.5.5422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cb3edf6c9 code=0x7ffc0000 [ 474.555924][ T37] audit: type=1326 audit(1762348954.783:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18005 comm="syz.5.5422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f7cb3edf6c9 code=0x7ffc0000 [ 474.555977][ T37] audit: type=1326 audit(1762348954.853:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18005 comm="syz.5.5422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cb3edf6c9 code=0x7ffc0000 [ 474.556020][ T37] audit: type=1326 audit(1762348954.853:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18005 comm="syz.5.5422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cb3edf6c9 code=0x7ffc0000 [ 474.641915][T18012] sctp: [Deprecated]: syz.3.5423 (pid 18012) Use of int in maxseg socket option. [ 474.641915][T18012] Use struct sctp_assoc_value instead [ 475.194184][T18038] binder: 18037:18038 ioctl 4018620d 0 returned -22 [ 475.195668][T18038] binder: 18037:18038 ioctl c0306201 200000000500 returned -11 [ 475.377927][T18043] bond1 (unregistering): Released all slaves [ 475.638447][T18058] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5447'. [ 476.005966][T18072] syz_tun: refused to change device tx_queue_len [ 476.005990][T18072] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 476.018980][T18076] devpts: Bad value for 'max' [ 476.075413][ T5894] kernel write not supported for file /input/event2 (pid: 5894 comm: kworker/1:5) [ 476.567531][T18104] tmpfs: Cannot change global quota limit on remount [ 479.007376][T18200] vlan0: entered promiscuous mode [ 479.063962][T18200] team0: Port device vlan0 added [ 480.199782][T18257] netlink: 'syz.5.5543': attribute type 18 has an invalid length. [ 480.299256][ T44] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 480.449388][ T44] usb 7-1: Using ep0 maxpacket: 32 [ 480.451731][ T44] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 480.451778][ T44] usb 7-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 480.451802][ T44] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.508102][ T44] usb 7-1: config 0 descriptor?? [ 480.943087][ T44] stadia 0003:18D1:9400.004A: item fetching failed at offset 0/4 [ 480.943720][ T44] stadia 0003:18D1:9400.004A: parse failed [ 480.943792][ T44] stadia 0003:18D1:9400.004A: probe with driver stadia failed with error -22 [ 481.174471][ T31] usb 7-1: USB disconnect, device number 3 [ 481.830322][T18323] ieee802154 phy0 wpan0: encryption failed: -22 [ 482.289505][ T44] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 482.304685][ T5893] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 482.454611][ T44] usb 5-1: Using ep0 maxpacket: 32 [ 482.456903][ T44] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 482.456937][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 482.456965][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 482.457019][ T44] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 482.457044][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.459283][ T5893] usb 6-1: Using ep0 maxpacket: 16 [ 482.461594][ T5893] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.461624][ T5893] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.461661][ T5893] usb 6-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 482.461684][ T5893] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.565476][ T5893] usb 6-1: config 0 descriptor?? [ 482.567996][ T44] usb 5-1: config 0 descriptor?? [ 482.579828][T18330] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 482.583112][ T44] hub 5-1:0.0: USB hub found [ 482.839175][ T44] hub 5-1:0.0: 2 ports detected [ 483.052039][ T44] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 483.052068][ T44] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 483.086780][ T44] usbhid 5-1:0.0: can't add hid device: -71 [ 483.086901][ T44] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 483.117931][ T5893] ntrig 0003:1B96:0008.004B: hidraw0: USB HID v0.00 Device [HID 1b96:0008] on usb-dummy_hcd.5-1/input0 [ 483.160648][ T44] usb 5-1: USB disconnect, device number 47 [ 483.281003][ T5893] usb 6-1: USB disconnect, device number 20 [ 483.416159][T18374] fido_id[18374]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 483.710317][T18389] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5610'. [ 483.710342][T18389] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5610'. [ 483.710369][T18389] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5610'. [ 484.008683][T18403] smc: net device bond0 applied user defined pnetid S [ 484.532433][T18423] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5627'. [ 485.009598][ T44] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 485.159469][ T44] usb 4-1: Using ep0 maxpacket: 32 [ 485.161794][ T44] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 485.166654][ T44] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 485.166683][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.166703][ T44] usb 4-1: Product: syz [ 485.166717][ T44] usb 4-1: Manufacturer: syz [ 485.166732][ T44] usb 4-1: SerialNumber: syz [ 485.232254][ T44] usb 4-1: config 0 descriptor?? [ 485.236383][ T44] usb 4-1: bad CDC descriptors [ 485.260747][ T44] usb 4-1: unsupported MDLM descriptors [ 485.456061][T18468] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5651'. [ 485.533533][ T5893] usb 4-1: USB disconnect, device number 44 [ 485.932980][T18486] CIFS: Unable to determine destination address [ 486.644035][T18511] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5671'. [ 486.644058][T18511] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5671'. [ 487.104316][ T5814] Bluetooth: hci3: unexpected event for opcode 0x0c05 [ 487.139915][T18529] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5679'. [ 487.139943][T18529] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5679'. [ 487.709274][T18560] netlink: 658 bytes leftover after parsing attributes in process `syz.4.5695'. [ 488.328230][T18591] netlink: 'syz.4.5711': attribute type 4 has an invalid length. [ 488.525238][T18592] bond2 (unregistering): Released all slaves [ 489.345292][T18635] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 489.659277][ T44] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 489.809267][ T44] usb 6-1: Using ep0 maxpacket: 8 [ 489.814674][ T44] usb 6-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 489.814706][ T44] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.814727][ T44] usb 6-1: Product: syz [ 489.814742][ T44] usb 6-1: Manufacturer: syz [ 489.814757][ T44] usb 6-1: SerialNumber: syz [ 489.824651][ T44] usb 6-1: config 0 descriptor?? [ 489.837893][ T44] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 489.837948][ T44] dvb-usb: bulk message failed: -22 (2/0) [ 489.857712][ T44] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 489.859940][ T44] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 489.859996][ T44] usb 6-1: media controller created [ 489.918978][ T44] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 489.929637][ T31] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 490.051656][ T5894] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 490.062041][ T44] cxusb: set interface failed [ 490.062060][ T44] dvb-usb: bulk message failed: -22 (1/0) [ 490.090202][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 490.100373][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 490.100407][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 490.100445][ T31] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 490.100467][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.118945][ T31] usb 4-1: config 0 descriptor?? [ 490.155554][ T44] DVB: Unable to find symbol mt352_attach() [ 490.155570][ T44] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 490.216267][ T5894] usb 5-1: Using ep0 maxpacket: 8 [ 490.220041][ T5894] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 490.224758][ T5894] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 490.224784][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.224854][ T5894] usb 5-1: Product: syz [ 490.224869][ T5894] usb 5-1: Manufacturer: syz [ 490.224883][ T5894] usb 5-1: SerialNumber: syz [ 490.250294][ T44] rc_core: IR keymap rc-dvico-portable not found [ 490.250372][ T44] Registered IR keymap rc-empty [ 490.257599][ T5894] usb 5-1: config 0 descriptor?? [ 490.272886][ T44] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 490.293417][ T5894] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 490.293464][ T5894] usb 5-1: setting power ON [ 490.293477][ T5894] dvb-usb: bulk message failed: -22 (2/0) [ 490.301561][ T44] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input38 [ 490.344009][ T44] dvb-usb: schedule remote query interval to 100 msecs. [ 490.344031][ T44] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 490.348817][ T5894] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 490.353121][ T5894] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 490.353709][ T5894] usb 5-1: media controller created [ 490.373651][ T44] usb 6-1: USB disconnect, device number 21 [ 490.464956][ T5894] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 490.593738][ T31] kone 0003:1E7D:2CED.004C: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.3-1/input0 [ 490.608440][ T5894] usb 5-1: selecting invalid altsetting 6 [ 490.608463][ T5894] usb 5-1: digital interface selection failed (-22) [ 490.608550][ T5894] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 490.615611][ T5894] usb 5-1: setting power OFF [ 490.617829][ T5894] dvb-usb: bulk message failed: -22 (2/0) [ 490.617853][ T5894] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 490.617865][ T5894] (NULL device *): no alternate interface [ 490.727454][ T44] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 490.738934][ T31] kone 0003:1E7D:2CED.004C: couldn't init struct kone_device [ 490.738992][ T31] kone 0003:1E7D:2CED.004C: couldn't install mouse [ 490.762751][ T31] kone 0003:1E7D:2CED.004C: probe with driver kone failed with error -5 [ 490.825745][ T31] usb 4-1: USB disconnect, device number 45 [ 490.988604][T18682] fido_id[18682]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 490.998584][ T5894] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 491.077067][ T5894] usb 5-1: USB disconnect, device number 48 [ 491.869323][ T9] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 492.019173][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 492.039295][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 492.039326][ T9] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 492.039346][ T9] usb 5-1: Product: syz [ 492.039361][ T9] usb 5-1: Manufacturer: syz [ 492.039376][ T9] usb 5-1: SerialNumber: syz [ 492.085939][ T9] usb 5-1: config 0 descriptor?? [ 492.100645][ T9] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 492.717279][ T9] gspca_zc3xx: reg_w_i err -71 [ 492.717384][ T9] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 492.764536][ T9] usb 5-1: USB disconnect, device number 49 [ 493.016495][T18772] __nla_validate_parse: 1 callbacks suppressed [ 493.016514][T18772] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5792'. [ 493.249240][ T5894] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 493.411805][ T5894] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 493.411841][ T5894] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 493.411881][ T5894] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 493.411906][ T5894] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.417588][ T5894] usb 7-1: config 0 descriptor?? [ 493.853954][ T5894] hid_parser_main: 1 callbacks suppressed [ 493.853979][ T5894] konepure 0003:1E7D:2DBE.004D: unknown main item tag 0x0 [ 493.854012][ T5894] konepure 0003:1E7D:2DBE.004D: unknown main item tag 0x0 [ 493.854046][ T5894] konepure 0003:1E7D:2DBE.004D: unknown main item tag 0x0 [ 493.854074][ T5894] konepure 0003:1E7D:2DBE.004D: unknown main item tag 0x0 [ 493.854101][ T5894] konepure 0003:1E7D:2DBE.004D: unknown main item tag 0x0 [ 493.854128][ T5894] konepure 0003:1E7D:2DBE.004D: unknown main item tag 0x0 [ 493.854156][ T5894] konepure 0003:1E7D:2DBE.004D: unknown main item tag 0x0 [ 493.870179][ T5894] konepure 0003:1E7D:2DBE.004D: hidraw0: USB HID v0.00 Device [HID 1e7d:2dbe] on usb-dummy_hcd.6-1/input0 [ 493.919835][ T31] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 494.048031][ T1228] usb 7-1: USB disconnect, device number 4 [ 494.071558][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 494.071585][ T31] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 494.077728][ T31] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 494.077759][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.077779][ T31] usb 4-1: Product: syz [ 494.077793][ T31] usb 4-1: Manufacturer: syz [ 494.077807][ T31] usb 4-1: SerialNumber: syz [ 494.199201][ T5893] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 494.354369][ T5893] usb 6-1: config 252 has an invalid interface number: 251 but max is 0 [ 494.354398][ T5893] usb 6-1: config 252 has no interface number 0 [ 494.354447][ T5893] usb 6-1: New USB device found, idVendor=0c45, idProduct=6280, bcdDevice=d5.fc [ 494.354471][ T5893] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.414273][ T5893] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6280 [ 494.530544][ T31] usb 4-1: cannot find UAC_HEADER [ 494.614714][ T31] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 494.733008][T17120] udevd[17120]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 494.744476][ T31] usb 4-1: USB disconnect, device number 46 [ 494.840142][ T5893] gspca_sn9c20x: Write register 1001 failed -71 [ 494.840177][ T5893] gspca_sn9c20x: Device initialization failed [ 494.840271][ T5893] gspca_sn9c20x 6-1:252.251: probe with driver gspca_sn9c20x failed with error -71 [ 494.872415][ T5893] usb 6-1: USB disconnect, device number 22 [ 495.075934][T18844] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5829'. [ 495.199543][T18849] sctp: [Deprecated]: syz.6.5831 (pid 18849) Use of struct sctp_assoc_value in delayed_ack socket option. [ 495.199543][T18849] Use struct sctp_sack_info instead [ 495.469283][ T5893] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 495.559375][ T1228] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 495.619235][ T5893] usb 5-1: Using ep0 maxpacket: 32 [ 495.621578][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.623098][ T5893] usb 5-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.00 [ 495.623226][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=0 [ 495.623248][ T5893] usb 5-1: Product: syz [ 495.673274][ T5893] usb 5-1: config 0 descriptor?? [ 495.729212][ T1228] usb 7-1: Using ep0 maxpacket: 32 [ 495.736394][ T1228] usb 7-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 495.736479][ T1228] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.768538][ T1228] usb 7-1: config 0 descriptor?? [ 495.804833][ T1228] gspca_main: sq930x-2.14.0 probing 041e:403c [ 496.291785][ T5894] usb 5-1: USB disconnect, device number 50 [ 496.459179][ T1228] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 496.459289][ T1228] sq930x 7-1:0.0: probe with driver sq930x failed with error -71 [ 496.462585][ T1228] usb 7-1: USB disconnect, device number 5 [ 497.007573][ C0] vkms_vblank_simulate: vblank timer overrun [ 497.189219][ T1228] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 497.339227][ T1228] usb 6-1: Using ep0 maxpacket: 32 [ 497.341676][ T1228] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 497.341701][ T1228] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 497.344846][ T1228] usb 6-1: New USB device found, idVendor=0c72, idProduct=0011, bcdDevice=3a.c0 [ 497.344875][ T1228] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.344895][ T1228] usb 6-1: Product: syz [ 497.344909][ T1228] usb 6-1: Manufacturer: syz [ 497.344923][ T1228] usb 6-1: SerialNumber: syz [ 497.422552][ T1228] usb 6-1: config 0 descriptor?? [ 497.550550][T18936] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5872'. [ 497.639491][T18911] netlink: 'syz.5.5862': attribute type 1 has an invalid length. [ 497.639516][T18911] netlink: 228 bytes leftover after parsing attributes in process `syz.5.5862'. [ 497.643107][ T1228] usb 6-1: USB disconnect, device number 23 [ 497.771457][T18946] program syz.6.5880 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 497.804979][T18948] ieee802154 phy0 wpan0: encryption failed: -22 [ 497.951678][ T31] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 498.129749][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 498.132724][ T31] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 498.132756][ T31] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 498.135071][ T31] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 498.135100][ T31] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 498.135122][ T31] usb 4-1: Product: syz [ 498.135137][ T31] usb 4-1: Manufacturer: syz [ 498.157253][ T31] hub 4-1:4.0: USB hub found [ 498.228471][T18964] syz.4.5887 (18964) used greatest stack depth: 16496 bytes left [ 498.379892][ T31] hub 4-1:4.0: 7 ports detected [ 498.389403][ T31] hub 4-1:4.0: insufficient power available to use all downstream ports [ 498.581297][ T31] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 498.581324][ T31] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 498.673934][ T31] usb 4-1: USB disconnect, device number 47 [ 498.684774][T18981] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5896'. [ 498.684933][T18981] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5896'. [ 499.019305][ T1228] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 499.169187][ T1228] usb 7-1: Using ep0 maxpacket: 8 [ 499.186093][ T1228] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 499.186124][ T1228] usb 7-1: New USB device strings: Mfr=32, Product=2, SerialNumber=3 [ 499.186148][ T1228] usb 7-1: Product: syz [ 499.186163][ T1228] usb 7-1: Manufacturer: syz [ 499.186177][ T1228] usb 7-1: SerialNumber: syz [ 499.237443][ T1228] usb 7-1: config 0 descriptor?? [ 499.264373][T19007] comedi comedi3: 8255: I/O port conflict (0x40404f26,4) [ 499.264433][T19007] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 499.279235][ T5893] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 499.401595][T19016] delete_channel: no stack [ 499.444049][ T5893] usb 6-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 499.444466][ T5893] usb 6-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 499.444498][ T5893] usb 6-1: config 0 interface 0 has no altsetting 0 [ 499.444555][ T5893] usb 6-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 499.444829][ T5893] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.470403][ T5893] usb 6-1: config 0 descriptor?? [ 499.473152][ T1228] usb 7-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 499.582541][T19019] tipc: Enabling of bearer rejected, failed to enable media [ 499.884772][ T1228] usb write operation failed. (-71) [ 499.904165][ T5893] hid (null): unknown global tag 0xe [ 499.932769][ T1228] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 499.933491][ T1228] dvbdev: DVB: registering new adapter (Terratec H7) [ 499.933545][ T1228] usb 7-1: media controller created [ 499.940942][ T5893] hid-led 0003:0FC5:B080.004F: unknown global tag 0xe [ 499.940967][ T5893] hid-led 0003:0FC5:B080.004F: item 0 0 1 14 parsing failed [ 499.941838][ T5893] hid-led 0003:0FC5:B080.004F: probe with driver hid-led failed with error -22 [ 499.947237][ T1228] usb read operation failed. (-71) [ 499.954651][ T1228] usb write operation failed. (-71) [ 499.968677][ T1228] dvb_usb_az6007 7-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 499.997522][ T1228] usb 7-1: USB disconnect, device number 6 [ 500.122601][ T31] usb 6-1: USB disconnect, device number 24 [ 500.645688][T19062] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5937'. [ 501.159679][T19092] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 501.464375][T19101] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 501.597525][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.699321][ T5893] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 501.852173][ T5893] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 501.852319][ T5893] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 501.853844][ T5893] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 501.853872][ T5893] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 501.853893][ T5893] usb 7-1: Manufacturer: syz [ 501.889382][ T31] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 501.923946][ T5893] usb 7-1: config 0 descriptor?? [ 502.049366][ T31] usb 6-1: Using ep0 maxpacket: 16 [ 502.051834][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 502.051867][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 502.051891][ T31] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 502.051934][ T31] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 502.051958][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.057581][ T31] usb 6-1: config 0 descriptor?? [ 502.358606][T19133] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5968'. [ 502.522941][ T31] microsoft 0003:045E:07DA.0051: unknown main item tag 0x3 [ 502.522980][ T31] microsoft 0003:045E:07DA.0051: unbalanced collection at end of report description [ 502.523799][ T31] microsoft 0003:045E:07DA.0051: parse failed [ 502.523907][ T31] microsoft 0003:045E:07DA.0051: probe with driver microsoft failed with error -22 [ 502.562085][ T5893] uclogic 0003:256C:006D.0050: failed retrieving Huion firmware version: -71 [ 502.562146][ T5893] uclogic 0003:256C:006D.0050: failed probing parameters: -71 [ 502.562254][ T5893] uclogic 0003:256C:006D.0050: probe with driver uclogic failed with error -71 [ 502.567057][ T5893] usb 7-1: USB disconnect, device number 7 [ 502.714479][ T1228] usb 6-1: USB disconnect, device number 25 [ 503.461864][T19146] bond1 (unregistering): Released all slaves [ 503.834118][T19162] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5982'. [ 504.236621][T19180] netlink: 124 bytes leftover after parsing attributes in process `syz.5.5990'. [ 505.249313][ T5893] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 505.401642][ T5893] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 505.401676][ T5893] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 505.401717][ T5893] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 505.401740][ T5893] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.463151][ T5893] usb 7-1: config 0 descriptor?? [ 505.490663][T19236] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6017'. [ 505.900046][ T5893] keytouch 0003:0926:3333.0052: fixing up Keytouch IEC report descriptor [ 505.923519][ T5893] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.0052/input/input39 [ 505.990072][ T992] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 506.090520][ T9] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 506.139276][ T992] usb 5-1: Using ep0 maxpacket: 32 [ 506.141666][ T992] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 506.141699][ T992] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 506.141741][ T992] usb 5-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 506.141766][ T992] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.150712][ T992] usb 5-1: config 0 descriptor?? [ 506.255671][ T5893] keytouch 0003:0926:3333.0052: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 506.283228][ T5893] usb 7-1: USB disconnect, device number 8 [ 506.302566][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 506.305166][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 506.333509][ T9] usb 4-1: config 4 interface 0 has no altsetting 0 [ 506.355878][ T9] usb 4-1: string descriptor 0 read error: -22 [ 506.356045][ T9] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 506.356070][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.403497][ T9] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 506.438508][ T9] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 506.449903][ T9] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 506.449960][ T9] usb 4-1: media controller created [ 506.495976][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 506.641419][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 506.647391][ T992] hid-retrode 0003:0403:97C1.0053: item fetching failed at offset 0/2 [ 506.665200][ T992] hid-retrode 0003:0403:97C1.0053: probe with driver hid-retrode failed with error -22 [ 506.775307][ T9] usb 4-1: USB disconnect, device number 48 [ 506.814119][T19266] fido_id[19266]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 506.837584][ T992] usb 5-1: USB disconnect, device number 51 [ 507.022454][T19276] pim6reg: entered allmulticast mode [ 507.048502][T19276] pim6reg: left allmulticast mode [ 507.123969][ C1] vkms_vblank_simulate: vblank timer overrun [ 508.237239][T19338] [U] 8 [ 508.678405][T19360] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 508.935432][T19377] netlink: 128 bytes leftover after parsing attributes in process `syz.5.6085'. [ 509.569832][ T5893] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 509.634136][ T5921] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 509.678976][T19414] netlink: 'syz.3.6105': attribute type 1 has an invalid length. [ 509.725837][ T5893] usb 7-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 509.725869][ T5893] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.725889][ T5893] usb 7-1: Product: syz [ 509.725904][ T5893] usb 7-1: Manufacturer: syz [ 509.725919][ T5893] usb 7-1: SerialNumber: syz [ 509.752861][ T5893] usb 7-1: config 0 descriptor?? [ 509.782101][ T5921] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 509.782128][ T5921] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 509.784840][ T5893] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 509.788697][ T5921] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 509.788727][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 509.788743][ T5921] usb 5-1: SerialNumber: syz [ 509.823379][ T5893] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 509.827362][ T5893] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 509.827420][ T5893] usb 7-1: media controller created [ 510.033053][ T5893] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 510.044970][ T5921] usb 5-1: 0:2 : does not exist [ 510.160784][ T5921] usb 5-1: USB disconnect, device number 52 [ 510.222026][T19432] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6112'. [ 510.263384][T17120] udevd[17120]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 510.305491][ T5893] DVB: Unable to find symbol mt352_attach() [ 510.414599][ T5893] DVB: Unable to find symbol nxt6000_attach() [ 510.414610][ T5893] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 510.430402][ T5893] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input40 [ 510.436903][ T5893] dvb-usb: schedule remote query interval to 1000 msecs. [ 510.436925][ T5893] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 510.436942][ T5893] dvb-usb: bulk message failed: -22 (7/0) [ 510.436959][ T5893] dvb-usb: bulk message failed: -22 (7/0) [ 510.464041][ T5893] usb 7-1: USB disconnect, device number 9 [ 510.707178][ T5893] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 511.269516][ T5814] Bluetooth: hci2: command tx timeout [ 511.289227][ T5921] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 511.440452][ T5921] usb 7-1: Using ep0 maxpacket: 8 [ 511.445146][ T5921] usb 7-1: unable to get BOS descriptor or descriptor too short [ 511.446501][ T5921] usb 7-1: config 4 has an invalid interface number: 147 but max is 0 [ 511.446529][ T5921] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 511.446549][ T5921] usb 7-1: config 4 has no interface number 0 [ 511.454385][ T5921] usb 7-1: string descriptor 0 read error: -22 [ 511.454563][ T5921] usb 7-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 511.454589][ T5921] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.539604][ T5921] uvcvideo 7-1:4.147: Found multiple Units with ID 6 [ 511.539694][ T5921] uvcvideo 7-1:4.147: Found UVC 0.02 device (04f2:b746) [ 511.539846][ T5921] uvcvideo 7-1:4.147: No valid video chain found. [ 511.649255][T19494] ucma_write: process 1001 (syz.5.6141) changed security contexts after opening file descriptor, this is not allowed. [ 511.740067][ T5921] usb 7-1: USB disconnect, device number 10 [ 512.399524][ T31] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 512.562211][ T31] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 512.562247][ T31] usb 5-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 512.562275][ T31] usb 5-1: config 0 interface 0 has no altsetting 0 [ 512.562309][ T31] usb 5-1: New USB device found, idVendor=8380, idProduct=1850, bcdDevice= 0.00 [ 512.562332][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.571413][ T31] usb 5-1: config 0 descriptor?? [ 512.601330][T19539] CUSE: unknown device info "" [ 512.601400][T19539] CUSE: unknown device info "" [ 512.601410][T19539] CUSE: unknown device info "" [ 512.601419][T19539] CUSE: unknown device info "" [ 512.601428][T19539] CUSE: unknown device info "" [ 512.601436][T19539] CUSE: unknown device info "" [ 512.601444][T19539] CUSE: unknown device info "" [ 512.601453][T19539] CUSE: unknown device info "" [ 512.601460][T19539] CUSE: unknown device info "#" [ 512.601470][T19539] CUSE: unknown device info "" [ 512.601478][T19539] CUSE: unknown device info "" [ 512.601486][T19539] CUSE: unknown device info "" [ 512.601495][T19539] CUSE: DEVNAME unspecified [ 512.641525][T19540] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 512.641525][T19540] The task syz.5.6162 (19540) triggered the difference, watch for misbehavior. [ 512.832625][T19546] netlink: 'syz.3.6166': attribute type 1 has an invalid length. [ 513.014174][ T31] betop 0003:8380:1850.0054: item fetching failed at offset 0/2 [ 513.014958][ T31] betop 0003:8380:1850.0054: parse failed [ 513.015029][ T31] betop 0003:8380:1850.0054: probe with driver betop failed with error -22 [ 513.249807][ T9] usb 5-1: USB disconnect, device number 53 [ 513.358118][ T37] audit: type=1326 audit(1762348993.653:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19567 comm="syz.6.6177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37033cf6c9 code=0x7ffc0000 [ 513.361460][ T37] audit: type=1326 audit(1762348993.653:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19567 comm="syz.6.6177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37033cf6c9 code=0x7ffc0000 [ 513.408388][ T37] audit: type=1326 audit(1762348993.703:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19567 comm="syz.6.6177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f37033cf6c9 code=0x7ffc0000 [ 513.420760][ T37] audit: type=1326 audit(1762348993.703:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19567 comm="syz.6.6177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37033cf6c9 code=0x7ffc0000 [ 513.420813][ T37] audit: type=1326 audit(1762348993.723:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19567 comm="syz.6.6177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7f37033cf6c9 code=0x7ffc0000 [ 513.420853][ T37] audit: type=1326 audit(1762348993.723:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19567 comm="syz.6.6177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37033cf6c9 code=0x7ffc0000 [ 514.359174][ T9] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 514.509657][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 514.515005][ T9] usb 7-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 514.515036][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.515056][ T9] usb 7-1: Product: syz [ 514.515071][ T9] usb 7-1: Manufacturer: syz [ 514.515086][ T9] usb 7-1: SerialNumber: syz [ 514.572127][ T9] usb 7-1: config 0 descriptor?? [ 514.600267][ T9] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 514.600323][ T9] pctv452e: pctv452e_power_ctrl: 1 [ 514.600323][ T9] [ 514.600373][ T9] usb 7-1: selecting invalid altsetting 3 [ 514.600389][ T9] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 514.600389][ T9] [ 514.600406][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 514.653584][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 514.657327][ T9] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 514.657388][ T9] usb 7-1: media controller created [ 514.658202][ T9] dvb-usb: bulk message failed: -22 (8/0) [ 514.658221][ T9] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 514.658352][ T9] dvb-usb: MAC address reading failed. [ 514.752390][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 514.881053][ T9] DVB: Unable to find symbol stb0899_attach() [ 514.881068][ T9] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 514.979186][ T9] rc_core: IR keymap rc-tt-1500 not found [ 514.979206][ T9] Registered IR keymap rc-empty [ 514.981066][ T9] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0 [ 514.984314][ T9] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0/input41 [ 515.039702][ T9] dvb-usb: schedule remote query interval to 100 msecs. [ 515.039733][ T9] pctv452e: pctv452e_power_ctrl: 0 [ 515.039733][ T9] [ 515.039744][ T9] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 515.050622][ T9] usb 7-1: USB disconnect, device number 11 [ 515.221849][ T9] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 515.379230][ T31] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 515.518535][T19671] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6225'. [ 515.529283][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 515.531780][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 515.531810][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 515.531848][ T31] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 515.531870][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.542141][ T31] usb 5-1: config 0 descriptor?? [ 515.550505][T19673] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 515.989204][ T9] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 515.990619][ T31] logitech 0003:046D:C29C.0055: unbalanced delimiter at end of report description [ 515.991459][ T31] logitech 0003:046D:C29C.0055: parse failed [ 515.991565][ T31] logitech 0003:046D:C29C.0055: probe with driver logitech failed with error -22 [ 516.165448][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 516.165477][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 516.197875][ T9] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 516.197906][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.197927][ T9] usb 6-1: Product: syz [ 516.197941][ T9] usb 6-1: Manufacturer: syz [ 516.197956][ T9] usb 6-1: SerialNumber: syz [ 516.224418][ T31] usb 5-1: USB disconnect, device number 54 [ 516.597968][T19707] bond2 (unregistering): Released all slaves [ 516.706693][ T9] usb 6-1: cannot find UAC_HEADER [ 516.858575][T19722] netlink: 56 bytes leftover after parsing attributes in process `syz.6.6251'. [ 516.858724][T19722] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6251'. [ 516.893309][ T9] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 516.929627][ T9] usb 6-1: USB disconnect, device number 26 [ 516.998176][T17120] udevd[17120]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 517.236066][T19740] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6260'. [ 518.049297][T19786] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6284'. [ 518.189210][ T9] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 518.358427][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 518.360035][ T9] usb 6-1: config 3 has an invalid interface number: 86 but max is 0 [ 518.360060][ T9] usb 6-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 518.360079][ T9] usb 6-1: config 3 has no interface number 0 [ 518.360126][ T9] usb 6-1: config 3 interface 86 altsetting 11 endpoint 0xC has invalid wMaxPacketSize 0 [ 518.360149][ T9] usb 6-1: config 3 interface 86 has no altsetting 0 [ 518.389962][ T9] usb 6-1: New USB device found, idVendor=e4b7, idProduct=cda2, bcdDevice=2e.58 [ 518.389992][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.390013][ T9] usb 6-1: Product: syz [ 518.390026][ T9] usb 6-1: Manufacturer: syz [ 518.390040][ T9] usb 6-1: SerialNumber: syz [ 518.668436][ T37] audit: type=1326 audit(1762348998.963:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19811 comm="syz.3.6295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e297af6c9 code=0x7ffc0000 [ 518.668497][ T37] audit: type=1326 audit(1762348998.963:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19811 comm="syz.3.6295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e297af6c9 code=0x7ffc0000 [ 518.676514][ T9] usb 6-1: bad CDC descriptors [ 518.706047][ T9] usb 6-1: USB disconnect, device number 27 [ 518.726440][ T37] audit: type=1326 audit(1762348999.023:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19811 comm="syz.3.6295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f6e297af6c9 code=0x7ffc0000 [ 518.726904][ T37] audit: type=1326 audit(1762348999.023:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19811 comm="syz.3.6295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e297af6c9 code=0x7ffc0000 [ 518.727624][ T37] audit: type=1326 audit(1762348999.023:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19811 comm="syz.3.6295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e297af6c9 code=0x7ffc0000 [ 518.727918][ T37] audit: type=1326 audit(1762348999.023:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19811 comm="syz.3.6295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f6e297af6c9 code=0x7ffc0000 [ 518.728393][ T37] audit: type=1326 audit(1762348999.023:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19811 comm="syz.3.6295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e297af6c9 code=0x7ffc0000 [ 518.729274][ T37] audit: type=1326 audit(1762348999.023:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19811 comm="syz.3.6295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e297af6c9 code=0x7ffc0000 [ 518.908395][T19818] ieee802154 phy0 wpan0: encryption failed: -22 [ 519.250182][T19833] netlink: 'syz.6.6305': attribute type 11 has an invalid length. [ 519.250205][T19833] netlink: 199820 bytes leftover after parsing attributes in process `syz.6.6305'. [ 519.329264][ T31] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 519.485872][ T31] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 519.485904][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.534506][ T31] usb 4-1: config 0 descriptor?? [ 519.549359][ T31] cp210x 4-1:0.0: cp210x converter detected [ 520.148748][ T31] cp210x 4-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 520.148778][ T31] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 520.183397][ T31] usb 4-1: cp210x converter now attached to ttyUSB0 [ 520.199714][ T31] usb 4-1: USB disconnect, device number 49 [ 520.222273][ T31] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 520.223111][ T31] cp210x 4-1:0.0: device disconnected [ 520.594410][ T37] audit: type=1326 audit(1762349000.893:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19890 comm="syz.6.6334" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f37033cf6c9 code=0x0 [ 520.999427][ T31] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 521.151819][ T31] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 521.151848][ T31] usb 6-1: config 0 has no interface number 0 [ 521.151895][ T31] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 521.155389][ T31] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 521.155420][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.155440][ T31] usb 6-1: Product: syz [ 521.155454][ T31] usb 6-1: Manufacturer: syz [ 521.155468][ T31] usb 6-1: SerialNumber: syz [ 521.222542][ T31] usb 6-1: config 0 descriptor?? [ 521.275640][ T31] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 521.547551][ T9] usb 6-1: USB disconnect, device number 28 [ 521.573356][ T9] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 521.658509][T19944] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 522.288019][T19977] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6375'. [ 522.288042][T19977] tc_dump_action: action bad kind [ 522.579611][ T9] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 522.731791][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 522.731841][ T9] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 522.731864][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.736654][ T9] usb 4-1: config 0 descriptor?? [ 523.183557][T20019] can0: slcan on ttynull. [ 523.190116][ T9] kovaplus 0003:1E7D:2D50.0056: item fetching failed at offset 0/3 [ 523.190887][ T9] kovaplus 0003:1E7D:2D50.0056: parse failed [ 523.190956][ T9] kovaplus 0003:1E7D:2D50.0056: probe with driver kovaplus failed with error -22 [ 523.317693][T20016] can0 (unregistered): slcan off ttynull. [ 523.377005][ T992] usb 4-1: USB disconnect, device number 50 [ 523.592305][T20043] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6405'. [ 524.139565][T20067] UHID_CREATE from different security context by process 2642 (syz.3.6419), this is not allowed. [ 524.240059][T20073] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6421'. [ 524.872853][T20108] netlink: 'syz.3.6439': attribute type 3 has an invalid length. [ 526.095626][T20176] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 1, id = 0 [ 526.154972][T20179] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6474'. [ 526.155379][T20179] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6474'. [ 526.349241][ T992] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 526.495564][T20197] ieee802154 phy0 wpan0: encryption failed: -22 [ 526.508440][ T992] usb 7-1: Using ep0 maxpacket: 32 [ 526.518818][ T992] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 526.518877][ T992] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 526.518903][ T992] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 526.518925][ T992] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 526.518950][ T992] usb 7-1: config 0 interface 0 has no altsetting 0 [ 526.518991][ T992] usb 7-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 526.519010][ T992] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.597037][ T992] usb 7-1: config 0 descriptor?? [ 526.985192][T20218] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6493'. [ 527.042401][ T992] hid-thrustmaster 0003:044F:B65D.0057: unknown main item tag 0x0 [ 527.042442][ T992] hid-thrustmaster 0003:044F:B65D.0057: unknown main item tag 0x0 [ 527.042471][ T992] hid-thrustmaster 0003:044F:B65D.0057: unknown main item tag 0x0 [ 527.042498][ T992] hid-thrustmaster 0003:044F:B65D.0057: unknown main item tag 0x0 [ 527.042524][ T992] hid-thrustmaster 0003:044F:B65D.0057: unknown main item tag 0x0 [ 527.098031][ T992] hid-thrustmaster 0003:044F:B65D.0057: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.6-1/input0 [ 527.098356][ T992] hid-thrustmaster 0003:044F:B65D.0057: Wrong number of endpoints? [ 527.270855][ C1] hid-thrustmaster 0003:044F:B65D.0057: URB to get model id failed with error -71 [ 527.275124][ T5921] usb 7-1: USB disconnect, device number 12 [ 527.342637][T20224] fido_id[20224]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 527.529275][ T9] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 527.669417][ T992] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 527.689245][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 527.692505][ T9] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 527.692553][ T9] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 527.692582][ T9] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 527.692595][ T9] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 527.692610][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 527.697092][ T9] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 527.697115][ T9] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 527.697126][ T9] usb 5-1: Product: syz [ 527.697134][ T9] usb 5-1: Manufacturer: syz [ 527.697142][ T9] usb 5-1: SerialNumber: syz [ 527.714967][ T9] usb 5-1: config 0 descriptor?? [ 527.759409][ T9] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 527.802346][ T9] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 527.840797][ T992] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 527.840847][ T992] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 527.840869][ T992] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.850241][ T992] usb 4-1: config 0 descriptor?? [ 528.017733][ T5921] usb 5-1: USB disconnect, device number 55 [ 528.041238][ T5921] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 528.304290][ T992] logitech-djreceiver 0003:046D:C71F.0058: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.3-1/input0 [ 528.453885][T20272] netlink: 332 bytes leftover after parsing attributes in process `syz.5.6518'. [ 528.453951][T20272] netlink: 'syz.5.6518': attribute type 9 has an invalid length. [ 528.453969][T20272] netlink: 108 bytes leftover after parsing attributes in process `syz.5.6518'. [ 528.453984][T20272] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6518'. [ 528.511734][ T5921] usb 4-1: USB disconnect, device number 51 [ 529.011291][T20296] xt_l2tp: missing protocol rule (udp|l2tpip) [ 529.579787][T20324] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 529.624369][T20332] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6547'. [ 529.642557][T20328] xt_socket: unknown flags 0xd0 [ 529.769299][T20337] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6551'. [ 530.747613][ T37] audit: type=1326 audit(1762349011.043:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20393 comm="syz.3.6578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e297af6c9 code=0x7ffc0000 [ 530.748381][ T37] audit: type=1326 audit(1762349011.043:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20393 comm="syz.3.6578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e297af6c9 code=0x7ffc0000 [ 530.757035][ T37] audit: type=1326 audit(1762349011.053:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20393 comm="syz.3.6578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f6e297af6c9 code=0x7ffc0000 [ 530.759041][ T37] audit: type=1326 audit(1762349011.053:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20393 comm="syz.3.6578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e297af6c9 code=0x7ffc0000 [ 530.761715][ T37] audit: type=1326 audit(1762349011.063:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20393 comm="syz.3.6578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e297af6c9 code=0x7ffc0000 [ 530.762008][ T37] audit: type=1326 audit(1762349011.063:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20393 comm="syz.3.6578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7f6e297af6c9 code=0x7ffc0000 [ 530.762388][ T37] audit: type=1326 audit(1762349011.063:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20393 comm="syz.3.6578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e297af6c9 code=0x7ffc0000 [ 530.763510][ T37] audit: type=1326 audit(1762349011.063:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20393 comm="syz.3.6578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e297af6c9 code=0x7ffc0000 [ 531.243882][ C0] vkms_vblank_simulate: vblank timer overrun [ 532.600677][T20478] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 532.889938][T20498] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6625'. [ 533.305433][T20517] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 533.759208][ T5894] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 533.835998][T20549] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6650'. [ 533.914834][ T5894] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 533.914864][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.914885][ T5894] usb 5-1: Product: syz [ 533.914899][ T5894] usb 5-1: Manufacturer: syz [ 533.914914][ T5894] usb 5-1: SerialNumber: syz [ 533.990875][ T5894] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 534.025085][ T992] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 535.419167][ T992] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 535.419355][ T992] ath9k_htc: Failed to initialize the device [ 535.448178][ T5894] usb 5-1: USB disconnect, device number 56 [ 535.472930][ T5894] usb 5-1: ath9k_htc: USB layer deinitialized [ 535.504310][ C1] dummy_hcd dummy_hcd.4: timer fired with no URBs pending? [ 536.140223][ T992] kernel write not supported for file /sequencer (pid: 992 comm: kworker/1:2) [ 537.009380][ T5894] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 537.219248][ T5894] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 537.219321][ T5894] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 537.223554][ T5894] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 537.223586][ T5894] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 537.223606][ T5894] usb 6-1: Manufacturer: syz [ 537.288752][ T5894] usb 6-1: config 0 descriptor?? [ 537.507549][ T5894] rc_core: IR keymap rc-hauppauge not found [ 537.507573][ T5894] Registered IR keymap rc-empty [ 537.521703][ T5894] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 537.559797][ T5894] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input43 [ 537.605707][ T5894] usb 6-1: USB disconnect, device number 29 [ 547.103889][T20928] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6835'. [ 547.103923][T20928] block nbd1: Unsupported socket: should be TCP or UNIX. [ 547.990858][T20948] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6846'. [ 548.957202][ T37] audit: type=1326 audit(1762349029.233:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20962 comm="syz.6.6853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37033cf6c9 code=0x7ffc0000 [ 548.957253][ T37] audit: type=1326 audit(1762349029.253:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20962 comm="syz.6.6853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f37033cf6c9 code=0x7ffc0000 [ 548.957294][ T37] audit: type=1326 audit(1762349029.253:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20962 comm="syz.6.6853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37033cf6c9 code=0x7ffc0000 [ 548.957333][ T37] audit: type=1326 audit(1762349029.253:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20962 comm="syz.6.6853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37033cf6c9 code=0x7ffc0000 [ 548.957374][ T37] audit: type=1326 audit(1762349029.253:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20962 comm="syz.6.6853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7f37033cf6c9 code=0x7ffc0000 [ 548.957415][ T37] audit: type=1326 audit(1762349029.253:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20962 comm="syz.6.6853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37033cf6c9 code=0x7ffc0000 [ 548.957457][ T37] audit: type=1326 audit(1762349029.253:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20962 comm="syz.6.6853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37033cf6c9 code=0x7ffc0000 [ 549.660064][T20980] ptrace attach of "./syz-executor exec"[5813] was attempted by ""[20980] [ 549.744972][ T31] Process accounting resumed [ 549.778292][T20984] Process accounting resumed [ 549.824643][T20986] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 549.824666][T20986] ALSA: mixer_oss: invalid index 1374389 [ 551.759640][T21047] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6895'. [ 553.113536][T21082] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 553.614556][T21089] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 553.615342][T21089] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 554.870608][T21076] Bluetooth: hci3: command 0x0405 tx timeout [ 554.996278][ T5812] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 555.029619][ T5812] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 555.031604][ T5812] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 555.038499][ T5812] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 555.074233][ T5812] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 556.340847][T21138] netlink: 80 bytes leftover after parsing attributes in process `syz.6.6938'. [ 556.340866][T21138] netlink: 64 bytes leftover after parsing attributes in process `syz.6.6938'. [ 557.272116][ T5812] Bluetooth: hci5: command tx timeout [ 557.536792][T21112] chnl_net:caif_netlink_parms(): no params data found [ 559.349302][ T5814] Bluetooth: hci5: command tx timeout [ 560.259471][ T992] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 560.304772][T21112] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.307642][T21112] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.307905][T21112] bridge_slave_0: entered allmulticast mode [ 560.343406][T21112] bridge_slave_0: entered promiscuous mode [ 560.347789][T21112] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.347916][T21112] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.348161][T21112] bridge_slave_1: entered allmulticast mode [ 560.396129][T21112] bridge_slave_1: entered promiscuous mode [ 560.451667][ T992] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 560.451717][ T992] usb 7-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 560.451741][ T992] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.498792][ T992] usb 7-1: config 0 descriptor?? [ 560.961098][ T992] chicony 0003:04F2:1236.0059: hidraw0: USB HID v0.00 Device [HID 04f2:1236] on usb-dummy_hcd.6-1/input0 [ 561.154519][ T5894] usb 7-1: USB disconnect, device number 13 [ 561.430022][ T5814] Bluetooth: hci5: command tx timeout [ 561.658368][ C1] vkms_vblank_simulate: vblank timer overrun [ 563.041838][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.509340][ T5814] Bluetooth: hci5: command tx timeout [ 563.980944][ T5812] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 564.015707][ T5812] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 564.018879][ T5812] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 564.042221][ T5812] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 564.043086][ T5812] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 565.595137][T21112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 565.635356][T21112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 566.150393][ T5812] Bluetooth: hci1: command tx timeout [ 567.651446][T21112] team0: Port device team_slave_0 added [ 567.664315][T21112] team0: Port device team_slave_1 added [ 568.229758][ T5812] Bluetooth: hci1: command tx timeout [ 569.603985][ T5814] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 569.699808][ T5814] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 569.702772][ T5814] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 569.703991][ T5814] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 569.704776][ T5814] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 570.126578][T21112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 570.126596][T21112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 570.126622][T21112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 570.202405][T21112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 570.202422][T21112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 570.202446][T21112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 570.311437][ T5812] Bluetooth: hci1: command tx timeout [ 571.749278][ T5812] Bluetooth: hci6: command tx timeout [ 572.389494][ T5812] Bluetooth: hci1: command tx timeout [ 573.179998][T21112] hsr_slave_0: entered promiscuous mode [ 573.181641][T21112] hsr_slave_1: entered promiscuous mode [ 573.182825][T21112] debugfs: 'hsr0' already exists in 'hsr' [ 573.185643][T21112] Cannot create hsr debugfs directory [ 573.829393][ T5812] Bluetooth: hci6: command tx timeout [ 575.909455][ T5812] Bluetooth: hci6: command tx timeout [ 577.989435][ T5812] Bluetooth: hci6: command tx timeout [ 578.090029][T21294] chnl_net:caif_netlink_parms(): no params data found [ 579.493067][T21421] chnl_net:caif_netlink_parms(): no params data found [ 582.636404][T21692] macsec1: entered promiscuous mode [ 582.636439][T21692] macsec1: entered allmulticast mode [ 582.989909][ T31] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 583.139609][ T31] usb 7-1: Using ep0 maxpacket: 32 [ 583.142132][ T31] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 583.142158][ T31] usb 7-1: config 0 has no interface number 0 [ 583.145395][ T31] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 583.145424][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.145445][ T31] usb 7-1: Product: syz [ 583.145459][ T31] usb 7-1: Manufacturer: syz [ 583.145474][ T31] usb 7-1: SerialNumber: syz [ 583.240905][ T31] usb 7-1: config 0 descriptor?? [ 583.261357][ T31] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 583.261385][ T31] usb 7-1: selecting invalid altsetting 1 [ 583.261402][ T31] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 583.302457][ T31] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 583.303059][ T31] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 583.303118][ T31] usb 7-1: media controller created [ 583.358609][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 583.458827][ T31] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 583.458885][ T31] zl10353_read_register: readreg error (reg=127, ret==-71) [ 583.474616][ T31] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 583.598436][ T31] usb 7-1: USB disconnect, device number 14 [ 584.206564][ T37] audit: type=1326 audit(1762349064.493:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21763 comm="syz.6.7235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37033cf6c9 code=0x7ffc0000 [ 584.206623][ T37] audit: type=1326 audit(1762349064.503:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21763 comm="syz.6.7235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37033cf6c9 code=0x7ffc0000 [ 584.208492][ T37] audit: type=1326 audit(1762349064.503:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21763 comm="syz.6.7235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f37033cf6c9 code=0x7ffc0000 [ 584.208542][ T37] audit: type=1326 audit(1762349064.503:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21763 comm="syz.6.7235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37033cf6c9 code=0x7ffc0000 [ 584.211698][ T37] audit: type=1326 audit(1762349064.503:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21763 comm="syz.6.7235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f37033cf6c9 code=0x7ffc0000 [ 584.211748][ T37] audit: type=1326 audit(1762349064.503:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21763 comm="syz.6.7235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37033cf6c9 code=0x7ffc0000 [ 585.084231][T21789] loop5: detected capacity change from 0 to 7 [ 585.201311][T21748] Dev loop5: unable to read RDB block 7 [ 585.201365][T21748] loop5: unable to read partition table [ 585.205444][T21748] loop5: partition table beyond EOD, truncated [ 585.342588][T21789] Dev loop5: unable to read RDB block 7 [ 585.342637][T21789] loop5: unable to read partition table [ 585.342877][T21789] loop5: partition table beyond EOD, truncated [ 585.342914][T21789] loop_reread_partitions: partition scan of loop5 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 585.626289][T21294] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.626426][T21294] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.626683][T21294] bridge_slave_0: entered allmulticast mode [ 585.669740][T21294] bridge_slave_0: entered promiscuous mode [ 585.695101][T21294] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.695336][T21294] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.695591][T21294] bridge_slave_1: entered allmulticast mode [ 585.722756][T21294] bridge_slave_1: entered promiscuous mode [ 585.742782][T21112] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 586.752175][T21112] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 587.375449][T21112] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 587.857426][T21294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 587.858817][T21112] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 587.911920][T21421] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.912057][T21421] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.912277][T21421] bridge_slave_0: entered allmulticast mode [ 587.915103][T21421] bridge_slave_0: entered promiscuous mode [ 587.961413][T21294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 587.964335][T21421] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.964554][T21421] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.964799][T21421] bridge_slave_1: entered allmulticast mode [ 587.967658][T21421] bridge_slave_1: entered promiscuous mode [ 590.207256][T21294] team0: Port device team_slave_0 added [ 590.236571][T21421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 590.256045][T21294] team0: Port device team_slave_1 added [ 590.268641][T21421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 593.857145][T21294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 593.857163][T21294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 593.857190][T21294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 596.472210][T21421] team0: Port device team_slave_0 added [ 596.488763][T21294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 596.488780][T21294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 596.488806][T21294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 596.562044][T21421] team0: Port device team_slave_1 added [ 598.587016][T21421] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 598.587034][T21421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 598.587062][T21421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 598.641434][T21421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 598.641450][T21421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 598.641475][T21421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 598.700975][T21294] hsr_slave_0: entered promiscuous mode [ 598.702341][T21294] hsr_slave_1: entered promiscuous mode [ 598.703282][T21294] debugfs: 'hsr0' already exists in 'hsr' [ 598.703303][T21294] Cannot create hsr debugfs directory [ 600.131403][T21421] hsr_slave_0: entered promiscuous mode [ 600.132928][T21421] hsr_slave_1: entered promiscuous mode [ 600.133995][T21421] debugfs: 'hsr0' already exists in 'hsr' [ 600.134019][T21421] Cannot create hsr debugfs directory [ 604.147629][T21112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 604.273849][T21112] 8021q: adding VLAN 0 to HW filter on device team0 [ 604.311688][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.311838][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 604.389342][T21294] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 604.785686][ T1284] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.785844][ T1284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 604.807241][T21294] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 605.349531][T21294] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 605.531334][T21294] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 605.868953][T21421] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 606.017662][T21421] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 606.204446][T21421] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 606.331776][T21421] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 606.924252][T21294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 607.048296][T21294] 8021q: adding VLAN 0 to HW filter on device team0 [ 607.106534][ T3512] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.118397][ T3512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 607.238284][ T1284] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.238574][ T1284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 607.287152][T21421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 607.395186][T21421] 8021q: adding VLAN 0 to HW filter on device team0 [ 607.416783][T21112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 607.463814][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.477569][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 607.651385][ T1015] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.651535][ T1015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 608.786250][T21112] veth0_vlan: entered promiscuous mode [ 608.841836][T21112] veth1_vlan: entered promiscuous mode [ 608.987469][T21294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 609.183981][T21421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 609.207483][T21112] veth0_macvtap: entered promiscuous mode [ 609.238219][T21112] veth1_macvtap: entered promiscuous mode [ 609.307677][T21112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 609.336039][T21112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 609.372648][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.372923][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.372962][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.372998][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.042488][ T1284] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 611.042508][ T1284] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 611.169421][T21421] veth0_vlan: entered promiscuous mode [ 611.173947][T21294] veth0_vlan: entered promiscuous mode [ 611.216110][ T3557] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 611.216130][ T3557] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 611.264938][T21421] veth1_vlan: entered promiscuous mode [ 611.267965][T21294] veth1_vlan: entered promiscuous mode [ 611.446571][T21294] veth0_macvtap: entered promiscuous mode [ 611.476766][T21421] veth0_macvtap: entered promiscuous mode [ 611.486740][T21294] veth1_macvtap: entered promiscuous mode [ 611.516797][T21421] veth1_macvtap: entered promiscuous mode [ 611.576572][T21294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 611.607223][T21294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 611.623333][T21421] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 611.663377][T21421] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 611.663736][ T3557] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.667122][ T3557] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.668951][ T3557] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.712742][ T3557] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.755575][ T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.792149][ T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.920833][ T1284] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.926688][ T1284] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.820179][T21898] loop5: detected capacity change from 0 to 7 [ 612.948048][T21898] Dev loop5: unable to read RDB block 7 [ 612.948094][T21898] loop5: unable to read partition table [ 612.948333][T21898] loop5: partition table beyond EOD, truncated [ 612.948365][T21898] loop_reread_partitions: partition scan of loop5 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 613.473720][ T3537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 613.473741][ T3537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 613.791662][ T3521] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 613.791685][ T3521] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 613.971381][T21895] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 613.971401][T21895] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 614.161660][ T3512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 614.161681][ T3512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 616.359234][ T992] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 616.609180][ T992] usb 7-1: Using ep0 maxpacket: 16 [ 616.611685][ T992] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 616.611736][ T992] usb 7-1: New USB device found, idVendor=046d, idProduct=c531, bcdDevice= 0.00 [ 616.611760][ T992] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.661452][ T992] usb 7-1: config 0 descriptor?? [ 617.319179][ T992] usb 7-1: USB disconnect, device number 15 [ 618.278292][ T5894] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 618.443499][ T5894] usb 9-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 618.443530][ T5894] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.443606][ T5894] usb 9-1: Product: syz [ 618.443621][ T5894] usb 9-1: Manufacturer: syz [ 618.443637][ T5894] usb 9-1: SerialNumber: syz [ 618.530843][ T5894] usb 9-1: config 0 descriptor?? [ 618.846483][ T5894] usb 9-1: USB disconnect, device number 2 [ 619.026387][T21888] udevd[21888]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 624.476773][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 635.063384][ T5814] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 635.087446][ T5814] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 635.102247][ T5814] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 635.103669][ T5814] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 635.104479][ T5814] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 635.530908][ T5814] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 635.551814][ T5814] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 635.578775][ T5814] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 635.590408][ T5814] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 635.594176][ T5814] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 636.041106][ T5812] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 636.081945][ T5812] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 636.101909][ T5812] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 636.120687][ T5812] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 636.121517][ T5812] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 637.189423][ T5812] Bluetooth: hci3: command tx timeout [ 637.255661][ T5814] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 637.280970][ T5814] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 637.285277][ T5814] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 637.286853][ T5814] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 637.316103][ T5814] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 637.749273][ T5814] Bluetooth: hci4: command tx timeout [ 638.175436][T22383] chnl_net:caif_netlink_parms(): no params data found [ 638.318855][ T5814] Bluetooth: hci7: command tx timeout [ 638.735945][T22392] chnl_net:caif_netlink_parms(): no params data found [ 639.269729][ T5814] Bluetooth: hci3: command tx timeout [ 639.352426][ T5814] Bluetooth: hci8: command tx timeout [ 639.832964][ T5814] Bluetooth: hci4: command tx timeout [ 640.399224][ T5814] Bluetooth: hci7: command tx timeout [ 641.349335][ T5814] Bluetooth: hci3: command tx timeout [ 641.430680][ T5814] Bluetooth: hci8: command tx timeout [ 641.909492][ T5814] Bluetooth: hci4: command tx timeout [ 642.469263][ T5814] Bluetooth: hci7: command tx timeout [ 643.429456][ T5814] Bluetooth: hci3: command tx timeout [ 643.496731][T22383] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.496962][T22383] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.497208][T22383] bridge_slave_0: entered allmulticast mode [ 643.509342][ T5814] Bluetooth: hci8: command tx timeout [ 643.527198][T22383] bridge_slave_0: entered promiscuous mode [ 643.638588][T22383] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.638751][T22383] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.639007][T22383] bridge_slave_1: entered allmulticast mode [ 643.733666][T22383] bridge_slave_1: entered promiscuous mode [ 643.989369][ T5814] Bluetooth: hci4: command tx timeout [ 644.549470][ T5814] Bluetooth: hci7: command tx timeout [ 645.591293][ T5814] Bluetooth: hci8: command tx timeout [ 646.972489][T22383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 646.976059][T22397] chnl_net:caif_netlink_parms(): no params data found [ 647.014093][T22392] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.014231][T22392] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.014520][T22392] bridge_slave_0: entered allmulticast mode [ 647.017820][T22392] bridge_slave_0: entered promiscuous mode [ 647.054925][T22383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 647.085574][T22392] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.085786][T22392] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.086069][T22392] bridge_slave_1: entered allmulticast mode [ 647.088973][T22392] bridge_slave_1: entered promiscuous mode [ 649.917894][ T3537] tipc: Resetting bearer [ 652.159192][ T5814] Bluetooth: hci2: command 0x0406 tx timeout [ 652.455753][T22383] team0: Port device team_slave_0 added [ 652.506255][T22392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 652.538343][T22383] team0: Port device team_slave_1 added [ 652.613379][T22392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 656.138108][T22383] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 656.138125][T22383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 656.138151][T22383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 656.239628][T22392] team0: Port device team_slave_0 added [ 656.246591][T22383] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 656.246608][T22383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 656.246634][T22383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 656.857161][T22392] team0: Port device team_slave_1 added [ 656.902264][T22397] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.902460][T22397] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.902686][T22397] bridge_slave_0: entered allmulticast mode [ 656.905634][T22397] bridge_slave_0: entered promiscuous mode [ 656.908880][T22409] chnl_net:caif_netlink_parms(): no params data found [ 658.257574][T22397] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.257734][T22397] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.257958][T22397] bridge_slave_1: entered allmulticast mode [ 658.283202][T22397] bridge_slave_1: entered promiscuous mode [ 659.888905][T22392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 659.888922][T22392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 659.888948][T22392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 661.302635][T22392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 661.302655][T22392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 661.302682][T22392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 662.270032][T22397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 662.297215][ T1284] team0: left allmulticast mode [ 662.297238][ T1284] team_slave_0: left allmulticast mode [ 662.297257][ T1284] team_slave_1: left allmulticast mode [ 662.298242][ T1284] bridge0: port 3(team0) entered disabled state [ 662.768444][ T1284] bridge_slave_1: left allmulticast mode [ 662.768474][ T1284] bridge_slave_1: left promiscuous mode [ 662.768756][ T1284] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.375400][ T1284] bridge_slave_0: left allmulticast mode [ 663.375665][ T1284] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.749441][ T5814] Bluetooth: hci5: command 0x0406 tx timeout [ 685.946545][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 688.003866][ T5814] Bluetooth: hci1: command 0x0406 tx timeout [ 693.121454][ T5812] Bluetooth: hci6: command 0x0406 tx timeout [ 694.378780][T21076] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 694.405768][T21076] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 694.408781][T21076] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 694.428611][T21076] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 694.443554][T21076] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 694.787786][ T5812] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 694.814199][ T5812] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 694.839714][ T5812] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 694.841897][ T5812] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 694.842669][ T5812] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 695.123852][ T5812] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 695.144049][ T5812] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 695.157966][ T5812] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 695.166436][ T5812] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 695.167262][ T5812] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 696.137617][ T5812] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 696.173375][ T5812] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 696.200161][ T5812] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 696.202393][ T5812] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 696.203184][ T5812] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 696.549323][T21076] Bluetooth: hci9: command tx timeout [ 696.949521][T21076] Bluetooth: hci10: command tx timeout [ 697.269547][T21076] Bluetooth: hci11: command tx timeout [ 698.319340][T21076] Bluetooth: hci12: command tx timeout [ 698.639342][T21076] Bluetooth: hci9: command tx timeout [ 699.029389][T21076] Bluetooth: hci10: command tx timeout [ 699.359191][T21076] Bluetooth: hci11: command tx timeout [ 700.389563][T21076] Bluetooth: hci12: command tx timeout [ 700.709344][T21076] Bluetooth: hci9: command tx timeout [ 701.109370][T21076] Bluetooth: hci10: command tx timeout [ 701.430055][T21076] Bluetooth: hci11: command tx timeout [ 702.469561][T21076] Bluetooth: hci12: command tx timeout [ 702.789295][T21076] Bluetooth: hci9: command tx timeout [ 703.189334][T21076] Bluetooth: hci10: command tx timeout [ 703.509444][T21076] Bluetooth: hci11: command tx timeout [ 704.549385][T21076] Bluetooth: hci12: command tx timeout [ 747.355992][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 757.480593][ T5812] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 757.506993][ T5812] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 757.544434][ T5812] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 757.545818][ T5812] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 757.546659][ T5812] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 758.128500][T22666] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 758.151493][T22666] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 758.152959][T22666] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 758.154159][T22666] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 758.154962][T22666] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 758.226943][T22672] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 758.288617][T22672] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 758.303480][T22672] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 758.304997][T22672] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 758.306156][T22672] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 758.432012][T22672] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 758.436717][T22672] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 758.438155][T22672] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 758.467272][T22672] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 758.504941][T22672] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 759.749509][T22672] Bluetooth: hci3: command 0x0406 tx timeout [ 759.749548][T22672] Bluetooth: hci4: command 0x0406 tx timeout [ 759.749604][T22672] Bluetooth: hci2: command tx timeout [ 759.750284][T22672] Bluetooth: hci7: command 0x0406 tx timeout [ 759.750315][T22672] Bluetooth: hci8: command 0x0406 tx timeout [ 760.309632][T22667] Bluetooth: hci6: command tx timeout [ 760.469481][T22667] Bluetooth: hci5: command tx timeout [ 760.549365][T22667] Bluetooth: hci13: command tx timeout [ 761.829318][T21114] Bluetooth: hci2: command tx timeout [ 762.389430][T21114] Bluetooth: hci6: command tx timeout [ 762.549445][T21114] Bluetooth: hci5: command tx timeout [ 762.629274][T21114] Bluetooth: hci13: command tx timeout [ 763.909418][T21114] Bluetooth: hci2: command tx timeout [ 764.469652][T21114] Bluetooth: hci6: command tx timeout [ 764.629914][T21114] Bluetooth: hci5: command tx timeout [ 764.709543][T21114] Bluetooth: hci13: command tx timeout [ 765.989577][T21114] Bluetooth: hci2: command tx timeout [ 766.549428][T21114] Bluetooth: hci6: command tx timeout [ 766.712576][T21114] Bluetooth: hci5: command tx timeout [ 766.789326][T21114] Bluetooth: hci13: command tx timeout [ 808.793718][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 812.629696][ T38] INFO: task kworker/u8:0:12 blocked for more than 143 seconds. [ 812.629730][ T38] Not tainted syzkaller #0 [ 812.629741][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 812.629749][ T38] task:kworker/u8:0 state:D stack:19784 pid:12 tgid:12 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 812.629800][ T38] Workqueue: events_unbound linkwatch_event [ 812.629834][ T38] Call Trace: [ 812.629844][ T38] [ 812.629858][ T38] __schedule+0x16f3/0x4c20 [ 812.629910][ T38] ? __pfx___schedule+0x10/0x10 [ 812.629954][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 812.629982][ T38] rt_mutex_schedule+0x77/0xf0 [ 812.630003][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 812.630024][ T38] ? task_blocks_on_rt_mutex+0x78c/0x1380 [ 812.630063][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 812.630086][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 812.630108][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 812.630141][ T38] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 812.630190][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 812.630219][ T38] ? linkwatch_event+0xe/0x60 [ 812.630239][ T38] mutex_lock_nested+0x16a/0x1d0 [ 812.630259][ T38] ? linkwatch_event+0xe/0x60 [ 812.630279][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 812.630304][ T38] linkwatch_event+0xe/0x60 [ 812.630325][ T38] process_scheduled_works+0xae1/0x17b0 [ 812.630381][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 812.630423][ T38] worker_thread+0x8a0/0xda0 [ 812.630476][ T38] kthread+0x711/0x8a0 [ 812.630505][ T38] ? __pfx_worker_thread+0x10/0x10 [ 812.630528][ T38] ? __pfx_kthread+0x10/0x10 [ 812.630550][ T38] ? rt_spin_unlock+0x150/0x200 [ 812.630576][ T38] ? rt_spin_unlock+0x161/0x200 [ 812.630593][ T38] ? __pfx_kthread+0x10/0x10 [ 812.630620][ T38] ret_from_fork+0x4bc/0x870 [ 812.630646][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 812.630677][ T38] ? __switch_to_asm+0x39/0x70 [ 812.630696][ T38] ? __switch_to_asm+0x33/0x70 [ 812.630713][ T38] ? __pfx_kthread+0x10/0x10 [ 812.630739][ T38] ret_from_fork_asm+0x1a/0x30 [ 812.630779][ T38] [ 812.630913][ T38] INFO: task dhcpcd:5467 blocked for more than 143 seconds. [ 812.630927][ T38] Not tainted syzkaller #0 [ 812.630937][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 812.630946][ T38] task:dhcpcd state:D stack:21256 pid:5467 tgid:5467 ppid:5466 task_flags:0x400140 flags:0x00080001 [ 812.630994][ T38] Call Trace: [ 812.631000][ T38] [ 812.631012][ T38] __schedule+0x16f3/0x4c20 [ 812.631052][ T38] ? get_page_from_freelist+0x28d9/0x2960 [ 812.631089][ T38] ? __pfx___schedule+0x10/0x10 [ 812.631133][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 812.631168][ T38] rt_mutex_schedule+0x77/0xf0 [ 812.631187][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 812.631209][ T38] ? task_blocks_on_rt_mutex+0x78c/0x1380 [ 812.631249][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 812.631272][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 812.631293][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 812.631325][ T38] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 812.631357][ T38] ? __alloc_skb+0x112/0x2d0 [ 812.631382][ T38] ? rtnl_dumpit+0x92/0x200 [ 812.631397][ T38] mutex_lock_nested+0x16a/0x1d0 [ 812.631416][ T38] ? rtnl_dumpit+0x92/0x200 [ 812.631434][ T38] ? __pfx_rtnl_dump_ifinfo+0x10/0x10 [ 812.631454][ T38] rtnl_dumpit+0x92/0x200 [ 812.631477][ T38] netlink_dump+0x6e4/0xe90 [ 812.631512][ T38] ? __pfx_netlink_dump+0x10/0x10 [ 812.631548][ T38] ? netlink_recvmsg+0x5b2/0xa30 [ 812.631569][ T38] ? netlink_recvmsg+0x5b2/0xa30 [ 812.631596][ T38] netlink_recvmsg+0x676/0xa30 [ 812.631627][ T38] ? __pfx_netlink_recvmsg+0x10/0x10 [ 812.631652][ T38] ? rt_mutex_slowunlock+0x493/0x8a0 [ 812.631671][ T38] ? reacquire_held_locks+0x127/0x1d0 [ 812.631701][ T38] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 812.631725][ T38] ? security_socket_recvmsg+0x7e/0x2e0 [ 812.631751][ T38] ? __pfx_netlink_recvmsg+0x10/0x10 [ 812.631772][ T38] sock_recvmsg+0x22c/0x270 [ 812.631804][ T38] ____sys_recvmsg+0x1ce/0x470 [ 812.631837][ T38] ? __pfx_____sys_recvmsg+0x10/0x10 [ 812.631878][ T38] ? import_iovec+0x74/0xa0 [ 812.631903][ T38] ___sys_recvmsg+0x1b5/0x510 [ 812.631931][ T38] ? __pfx____sys_recvmsg+0x10/0x10 [ 812.631962][ T38] ? handle_mm_fault+0x30eb/0x3400 [ 812.632008][ T38] ? __pfx_handle_mm_fault+0x10/0x10 [ 812.632041][ T38] __x64_sys_recvmsg+0x19e/0x260 [ 812.632067][ T38] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 812.632102][ T38] ? do_user_addr_fault+0xc85/0x1380 [ 812.632130][ T38] ? do_syscall_64+0xbe/0xfa0 [ 812.632164][ T38] do_syscall_64+0xfa/0xfa0 [ 812.632187][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 812.632210][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.632229][ T38] ? clear_bhb_loop+0x60/0xb0 [ 812.632253][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.632272][ T38] RIP: 0033:0x7f90bb0ca407 [ 812.632299][ T38] RSP: 002b:00007ffe0a2a8180 EFLAGS: 00000202 ORIG_RAX: 000000000000002f [ 812.632318][ T38] RAX: ffffffffffffffda RBX: 00007f90bb040740 RCX: 00007f90bb0ca407 [ 812.632333][ T38] RDX: 0000000000000000 RSI: 00007ffe0a2a8210 RDI: 0000000000000024 [ 812.632346][ T38] RBP: 00007ffe0a2a81f4 R08: 0000000000000000 R09: 0000000000000000 [ 812.632359][ T38] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001f40 [ 812.632371][ T38] R13: 00007ffe0a2a8200 R14: 00007ffe0a2a82f0 R15: 0000000000000000 [ 812.632406][ T38] [ 812.632457][ T38] INFO: task kworker/1:3:18673 blocked for more than 143 seconds. [ 812.632471][ T38] Not tainted syzkaller #0 [ 812.632481][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 812.632490][ T38] task:kworker/1:3 state:D stack:20328 pid:18673 tgid:18673 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 812.632540][ T38] Workqueue: events switchdev_deferred_process_work [ 812.632567][ T38] Call Trace: [ 812.632573][ T38] [ 812.632585][ T38] __schedule+0x16f3/0x4c20 [ 812.632637][ T38] ? __pfx___schedule+0x10/0x10 [ 812.632680][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 812.632708][ T38] rt_mutex_schedule+0x77/0xf0 [ 812.632727][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 812.632748][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 812.632789][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 812.632811][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 812.632833][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 812.632866][ T38] ? switchdev_deferred_process_work+0xe/0x20 [ 812.632898][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 812.632926][ T38] ? switchdev_deferred_process_work+0xe/0x20 [ 812.632945][ T38] mutex_lock_nested+0x16a/0x1d0 [ 812.632961][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 812.632981][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 812.633007][ T38] switchdev_deferred_process_work+0xe/0x20 [ 812.633034][ T38] process_scheduled_works+0xae1/0x17b0 [ 812.633090][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 812.633133][ T38] worker_thread+0x8a0/0xda0 [ 812.633166][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 812.633201][ T38] ? __kthread_parkme+0x7b/0x200 [ 812.633236][ T38] kthread+0x711/0x8a0 [ 812.633265][ T38] ? __pfx_worker_thread+0x10/0x10 [ 812.633287][ T38] ? __pfx_kthread+0x10/0x10 [ 812.633310][ T38] ? rt_spin_unlock+0x150/0x200 [ 812.633336][ T38] ? rt_spin_unlock+0x161/0x200 [ 812.633354][ T38] ? __pfx_kthread+0x10/0x10 [ 812.633380][ T38] ret_from_fork+0x4bc/0x870 [ 812.633405][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 812.633436][ T38] ? __switch_to_asm+0x39/0x70 [ 812.633455][ T38] ? __switch_to_asm+0x33/0x70 [ 812.633472][ T38] ? __pfx_kthread+0x10/0x10 [ 812.633499][ T38] ret_from_fork_asm+0x1a/0x30 [ 812.633538][ T38] [ 812.633565][ T38] INFO: task kworker/u8:1:21895 blocked for more than 143 seconds. [ 812.633578][ T38] Not tainted syzkaller #0 [ 812.633588][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 812.633597][ T38] task:kworker/u8:1 state:D stack:22312 pid:21895 tgid:21895 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 812.633648][ T38] Workqueue: ipv6_addrconf addrconf_dad_work [ 812.633674][ T38] Call Trace: [ 812.633681][ T38] [ 812.633693][ T38] __schedule+0x16f3/0x4c20 [ 812.633732][ T38] ? rcu_is_watching+0x15/0xb0 [ 812.633761][ T38] ? __pfx___schedule+0x10/0x10 [ 812.633804][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 812.633831][ T38] rt_mutex_schedule+0x77/0xf0 [ 812.633850][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 812.633871][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 812.633909][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 812.633933][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 812.633954][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 812.633973][ T38] ? __lock_acquire+0xab9/0xd20 [ 812.634009][ T38] ? addrconf_dad_work+0x119/0x15a0 [ 812.634037][ T38] ? __lock_acquire+0xab9/0xd20 [ 812.634071][ T38] ? addrconf_dad_work+0x119/0x15a0 [ 812.634095][ T38] mutex_lock_nested+0x16a/0x1d0 [ 812.634121][ T38] addrconf_dad_work+0x119/0x15a0 [ 812.634157][ T38] ? __lock_acquire+0xab9/0xd20 [ 812.634189][ T38] ? __pfx_addrconf_dad_work+0x10/0x10 [ 812.634217][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 812.634246][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 812.634269][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 812.634291][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 812.634316][ T38] process_scheduled_works+0xae1/0x17b0 [ 812.634372][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 812.634415][ T38] worker_thread+0x8a0/0xda0 [ 812.634441][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 812.634475][ T38] ? __kthread_parkme+0x7b/0x200 [ 812.634510][ T38] kthread+0x711/0x8a0 [ 812.634540][ T38] ? __pfx_worker_thread+0x10/0x10 [ 812.634562][ T38] ? __pfx_kthread+0x10/0x10 [ 812.634584][ T38] ? rt_spin_unlock+0x150/0x200 [ 812.634610][ T38] ? rt_spin_unlock+0x161/0x200 [ 812.634628][ T38] ? __pfx_kthread+0x10/0x10 [ 812.634655][ T38] ret_from_fork+0x4bc/0x870 [ 812.634680][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 812.634711][ T38] ? __switch_to_asm+0x39/0x70 [ 812.634730][ T38] ? __switch_to_asm+0x33/0x70 [ 812.634747][ T38] ? __pfx_kthread+0x10/0x10 [ 812.634774][ T38] ret_from_fork_asm+0x1a/0x30 [ 812.634814][ T38] [ 812.634824][ T38] INFO: task syz-executor:22383 blocked for more than 143 seconds. [ 812.634837][ T38] Not tainted syzkaller #0 [ 812.634847][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 812.634856][ T38] task:syz-executor state:D stack:18520 pid:22383 tgid:22383 ppid:1 task_flags:0x400140 flags:0x00080002 [ 812.634906][ T38] Call Trace: [ 812.634912][ T38] [ 812.634924][ T38] __schedule+0x16f3/0x4c20 [ 812.634963][ T38] ? kernel_text_address+0xa5/0xe0 [ 812.634987][ T38] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 812.635015][ T38] ? __pfx___schedule+0x10/0x10 [ 812.635058][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 812.635086][ T38] rt_mutex_schedule+0x77/0xf0 [ 812.635104][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 812.635125][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 812.635171][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 812.635194][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 812.635216][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 812.635234][ T38] ? __lock_acquire+0xab9/0xd20 [ 812.635271][ T38] ? rtnl_newlink+0x8e9/0x1c80 [ 812.635291][ T38] ? safesetid_security_capable+0xa9/0x1a0 [ 812.635313][ T38] ? bpf_lsm_capable+0x9/0x20 [ 812.635333][ T38] ? security_capable+0x7e/0x2e0 [ 812.635360][ T38] ? rtnl_newlink+0x8e9/0x1c80 [ 812.635377][ T38] mutex_lock_nested+0x16a/0x1d0 [ 812.635403][ T38] rtnl_newlink+0x8e9/0x1c80 [ 812.635436][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 812.635469][ T38] ? __lock_acquire+0xab9/0xd20 [ 812.635500][ T38] ? __lock_acquire+0xab9/0xd20 [ 812.635538][ T38] ? __lock_acquire+0xab9/0xd20 [ 812.635584][ T38] ? is_bpf_text_address+0x26/0x2b0 [ 812.635617][ T38] ? is_bpf_text_address+0x292/0x2b0 [ 812.635642][ T38] ? is_bpf_text_address+0x26/0x2b0 [ 812.635678][ T38] ? __lock_acquire+0xab9/0xd20 [ 812.635730][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 812.635749][ T38] rtnetlink_rcv_msg+0x7cf/0xb70 [ 812.635767][ T38] ? __lock_acquire+0xab9/0xd20 [ 812.635793][ T38] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 812.635811][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 812.635849][ T38] netlink_rcv_skb+0x208/0x470 [ 812.635868][ T38] ? __lock_acquire+0xab9/0xd20 [ 812.635892][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 812.635912][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 812.635946][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 812.635976][ T38] netlink_unicast+0x846/0xa10 [ 812.636014][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 812.636043][ T38] ? netlink_sendmsg+0x642/0xb30 [ 812.636061][ T38] ? skb_put+0x11b/0x210 [ 812.636086][ T38] netlink_sendmsg+0x805/0xb30 [ 812.636118][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 812.636154][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 812.636179][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 812.636200][ T38] __sock_sendmsg+0x21c/0x270 [ 812.636230][ T38] __sys_sendto+0x3c7/0x520 [ 812.636254][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 812.636288][ T38] ? fput_close_sync+0x119/0x200 [ 812.636323][ T38] ? dnotify_flush+0x1e8/0x5c0 [ 812.636342][ T38] ? __pfx_fput_close_sync+0x10/0x10 [ 812.636371][ T38] __x64_sys_sendto+0xde/0x100 [ 812.636396][ T38] do_syscall_64+0xfa/0xfa0 [ 812.636418][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 812.636441][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.636460][ T38] ? clear_bhb_loop+0x60/0xb0 [ 812.636483][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.636502][ T38] RIP: 0033:0x7fe76a53155c [ 812.636518][ T38] RSP: 002b:00007fff02530c00 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 812.636538][ T38] RAX: ffffffffffffffda RBX: 00007fe76b2b4620 RCX: 00007fe76a53155c [ 812.636553][ T38] RDX: 0000000000000048 RSI: 00007fe76b2b4670 RDI: 0000000000000003 [ 812.636566][ T38] RBP: 0000000000000000 R08: 00007fff02530c54 R09: 000000000000000c [ 812.636579][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 812.636591][ T38] R13: 0000000000000000 R14: 00007fe76b2b4670 R15: 0000000000000000 [ 812.636624][ T38] [ 812.636632][ T38] INFO: task syz-executor:22392 blocked for more than 143 seconds. [ 812.636646][ T38] Not tainted syzkaller #0 [ 812.636655][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 812.636664][ T38] task:syz-executor state:D stack:21544 pid:22392 tgid:22392 ppid:1 task_flags:0x400140 flags:0x00080002 [ 812.636712][ T38] Call Trace: [ 812.636718][ T38] [ 812.636731][ T38] __schedule+0x16f3/0x4c20 [ 812.636768][ T38] ? kernel_text_address+0xa5/0xe0 [ 812.636792][ T38] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 812.636819][ T38] ? __pfx___schedule+0x10/0x10 [ 812.636862][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 812.636889][ T38] rt_mutex_schedule+0x77/0xf0 [ 812.636907][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 812.636928][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 812.636968][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 812.636990][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 812.637012][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 812.637030][ T38] ? __lock_acquire+0xab9/0xd20 [ 812.637066][ T38] ? rtnl_newlink+0x8e9/0x1c80 [ 812.637086][ T38] ? safesetid_security_capable+0xa9/0x1a0 [ 812.637107][ T38] ? bpf_lsm_capable+0x9/0x20 [ 812.637126][ T38] ? security_capable+0x7e/0x2e0 [ 812.637158][ T38] ? rtnl_newlink+0x8e9/0x1c80 [ 812.637174][ T38] mutex_lock_nested+0x16a/0x1d0 [ 812.637200][ T38] rtnl_newlink+0x8e9/0x1c80 [ 812.637229][ T38] ? unwind_next_frame+0x19ae/0x2390 [ 812.637251][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 812.637271][ T38] ? unwind_next_frame+0xa5/0x2390 [ 812.637296][ T38] ? __sys_socket+0xd7/0x1b0 [ 812.637337][ T38] ? __lock_acquire+0xab9/0xd20 [ 812.637375][ T38] ? __lock_acquire+0xab9/0xd20 [ 812.637422][ T38] ? is_bpf_text_address+0x26/0x2b0 [ 812.637453][ T38] ? is_bpf_text_address+0x292/0x2b0 [ 812.637479][ T38] ? is_bpf_text_address+0x26/0x2b0 [ 812.637514][ T38] ? __lock_acquire+0xab9/0xd20 [ 812.637566][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 812.637585][ T38] rtnetlink_rcv_msg+0x7cf/0xb70 [ 812.637603][ T38] ? __lock_acquire+0xab9/0xd20 [ 812.637628][ T38] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 812.637646][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 812.637684][ T38] netlink_rcv_skb+0x208/0x470 [ 812.637703][ T38] ? __lock_acquire+0xab9/0xd20 [ 812.637726][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 812.637747][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 812.637780][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 812.637810][ T38] netlink_unicast+0x846/0xa10 [ 812.637847][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 812.637875][ T38] ? netlink_sendmsg+0x642/0xb30 [ 812.637893][ T38] ? skb_put+0x11b/0x210 [ 812.637917][ T38] netlink_sendmsg+0x805/0xb30 [ 812.637948][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 812.637978][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 812.638003][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 812.638024][ T38] __sock_sendmsg+0x21c/0x270 [ 812.638053][ T38] __sys_sendto+0x3c7/0x520 [ 812.638077][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 812.638110][ T38] ? fput_close_sync+0x119/0x200 [ 812.638144][ T38] ? dnotify_flush+0x1e8/0x5c0 [ 812.638169][ T38] ? __pfx_fput_close_sync+0x10/0x10 [ 812.638197][ T38] __x64_sys_sendto+0xde/0x100 [ 812.638222][ T38] do_syscall_64+0xfa/0xfa0 [ 812.638245][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 812.638269][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.638287][ T38] ? clear_bhb_loop+0x60/0xb0 [ 812.638311][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.638330][ T38] RIP: 0033:0x7f2f8a6c155c [ 812.638346][ T38] RSP: 002b:00007fff3f2ad1b0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 812.638365][ T38] RAX: ffffffffffffffda RBX: 00007f2f8b444620 RCX: 00007f2f8a6c155c [ 812.638380][ T38] RDX: 0000000000000020 RSI: 00007f2f8b444670 RDI: 0000000000000003 [ 812.638393][ T38] RBP: 0000000000000000 R08: 00007fff3f2ad204 R09: 000000000000000c [ 812.638405][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 812.638418][ T38] R13: 0000000000000000 R14: 00007f2f8b444670 R15: 0000000000000000 [ 812.638452][ T38] [ 812.638460][ T38] INFO: task syz-executor:22397 blocked for more than 143 seconds. [ 812.638474][ T38] Not tainted syzkaller #0 [ 812.638483][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 812.638493][ T38] task:syz-executor state:D stack:21192 pid:22397 tgid:22397 ppid:1 task_flags:0x400140 flags:0x00080002 [ 812.638540][ T38] Call Trace: [ 812.638547][ T38] [ 812.638559][ T38] __schedule+0x16f3/0x4c20 [ 812.638596][ T38] ? kernel_text_address+0xa5/0xe0 [ 812.638621][ T38] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 812.638647][ T38] ? __pfx___schedule+0x10/0x10 [ 812.638691][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 812.638718][ T38] rt_mutex_schedule+0x77/0xf0 [ 812.638738][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 812.638758][ T38] ? task_blocks_on_rt_mutex+0x78c/0x1380 [ 812.638798][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 812.638821][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 812.638842][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 812.638874][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 812.638901][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 812.638927][ T38] ? bpf_lsm_capable+0x9/0x20 [ 812.638946][ T38] ? security_capable+0x7e/0x2e0 [ 812.638973][ T38] ? rtnl_newlink+0x8e9/0x1c80 [ 812.638989][ T38] mutex_lock_nested+0x16a/0x1d0 [ 812.639008][ T38] ? rtnl_newlink+0x8e9/0x1c80 [ 812.639031][ T38] rtnl_newlink+0x8e9/0x1c80 [ 812.969315][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 812.969359][ T38] ? __lock_acquire+0xab9/0xd20 [ 812.969392][ T38] ? __lock_acquire+0xab9/0xd20 [ 812.969428][ T38] ? __lock_acquire+0xab9/0xd20 [ 812.969473][ T38] ? is_bpf_text_address+0x26/0x2b0 [ 812.969505][ T38] ? is_bpf_text_address+0x292/0x2b0 [ 812.969530][ T38] ? is_bpf_text_address+0x26/0x2b0 [ 812.969565][ T38] ? __lock_acquire+0xab9/0xd20 [ 812.969640][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 812.969658][ T38] rtnetlink_rcv_msg+0x7cf/0xb70 [ 812.969676][ T38] ? __lock_acquire+0xab9/0xd20 [ 812.969701][ T38] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 812.969725][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 812.969773][ T38] netlink_rcv_skb+0x208/0x470 [ 812.969799][ T38] ? __lock_acquire+0xab9/0xd20 [ 812.969822][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 812.969847][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 812.969883][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 812.969912][ T38] netlink_unicast+0x846/0xa10 [ 812.969948][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 812.969977][ T38] ? netlink_sendmsg+0x642/0xb30 [ 812.969994][ T38] ? skb_put+0x11b/0x210 [ 812.970018][ T38] netlink_sendmsg+0x805/0xb30 [ 812.970048][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 812.970077][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 812.970101][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 812.970122][ T38] __sock_sendmsg+0x21c/0x270 [ 812.970157][ T38] __sys_sendto+0x3c7/0x520 [ 812.970180][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 812.970211][ T38] ? fput_close_sync+0x119/0x200 [ 812.970244][ T38] ? dnotify_flush+0x1e8/0x5c0 [ 812.970264][ T38] ? __pfx_fput_close_sync+0x10/0x10 [ 812.970291][ T38] __x64_sys_sendto+0xde/0x100 [ 812.970315][ T38] do_syscall_64+0xfa/0xfa0 [ 812.970338][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 812.970361][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.970381][ T38] ? clear_bhb_loop+0x60/0xb0 [ 812.970404][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.970422][ T38] RIP: 0033:0x7f77069c155c [ 812.970439][ T38] RSP: 002b:00007ffd57927280 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 812.970460][ T38] RAX: ffffffffffffffda RBX: 00007f7707744620 RCX: 00007f77069c155c [ 812.970474][ T38] RDX: 0000000000000028 RSI: 00007f7707744670 RDI: 0000000000000003 [ 812.970487][ T38] RBP: 0000000000000000 R08: 00007ffd579272d4 R09: 000000000000000c [ 812.970499][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 812.970511][ T38] R13: 0000000000000000 R14: 00007f7707744670 R15: 0000000000000000 [ 812.970543][ T38] [ 812.970557][ T38] INFO: task syz-executor:22409 blocked for more than 143 seconds. [ 812.970572][ T38] Not tainted syzkaller #0 [ 812.970581][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 812.970590][ T38] task:syz-executor state:D stack:22568 pid:22409 tgid:22409 ppid:1 task_flags:0x400140 flags:0x00080002 [ 812.970640][ T38] Call Trace: [ 812.970647][ T38] [ 812.970659][ T38] __schedule+0x16f3/0x4c20 [ 812.970702][ T38] ? kernel_text_address+0xa5/0xe0 [ 812.970726][ T38] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 812.970752][ T38] ? __pfx___schedule+0x10/0x10 [ 812.970794][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 812.970821][ T38] rt_mutex_schedule+0x77/0xf0 [ 812.970840][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 812.970860][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 812.970899][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 812.970921][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 812.970941][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 812.970959][ T38] ? __lock_acquire+0xab9/0xd20 [ 812.970994][ T38] ? rtnl_newlink+0x8e9/0x1c80 [ 812.971013][ T38] ? safesetid_security_capable+0xa9/0x1a0 [ 812.971034][ T38] ? bpf_lsm_capable+0x9/0x20 [ 812.971053][ T38] ? security_capable+0x7e/0x2e0 [ 812.971079][ T38] ? rtnl_newlink+0x8e9/0x1c80 [ 812.971095][ T38] mutex_lock_nested+0x16a/0x1d0 [ 812.971118][ T38] rtnl_newlink+0x8e9/0x1c80 [ 812.971169][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 812.971199][ T38] ? __lock_acquire+0xab9/0xd20 [ 812.971229][ T38] ? __lock_acquire+0xab9/0xd20 [ 812.971266][ T38] ? __lock_acquire+0xab9/0xd20 [ 812.971309][ T38] ? is_bpf_text_address+0x26/0x2b0 [ 812.971340][ T38] ? is_bpf_text_address+0x292/0x2b0 [ 812.971365][ T38] ? is_bpf_text_address+0x26/0x2b0 [ 812.971399][ T38] ? __lock_acquire+0xab9/0xd20 [ 812.971449][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 812.971466][ T38] rtnetlink_rcv_msg+0x7cf/0xb70 [ 812.971483][ T38] ? __lock_acquire+0xab9/0xd20 [ 812.971508][ T38] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 812.971525][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 812.971562][ T38] netlink_rcv_skb+0x208/0x470 [ 812.971579][ T38] ? __lock_acquire+0xab9/0xd20 [ 812.971602][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 812.971622][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 812.971654][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 812.971682][ T38] netlink_unicast+0x846/0xa10 [ 812.971716][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 812.971745][ T38] ? netlink_sendmsg+0x642/0xb30 [ 812.971762][ T38] ? skb_put+0x11b/0x210 [ 812.971785][ T38] netlink_sendmsg+0x805/0xb30 [ 812.971815][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 812.971843][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 812.971867][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 812.971887][ T38] __sock_sendmsg+0x21c/0x270 [ 812.971911][ T38] __sys_sendto+0x3c7/0x520 [ 812.971929][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 812.972090][ T38] ? blkcg_maybe_throttle_current+0x1a8/0xbc0 [ 812.972156][ T38] __x64_sys_sendto+0xde/0x100 [ 812.972200][ T38] do_syscall_64+0xfa/0xfa0 [ 812.972224][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 812.972248][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.972266][ T38] ? clear_bhb_loop+0x60/0xb0 [ 812.972289][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.972308][ T38] RIP: 0033:0x7f9bfbda155c [ 812.972325][ T38] RSP: 002b:00007ffc341a54b0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 812.972345][ T38] RAX: ffffffffffffffda RBX: 00007f9bfcb24620 RCX: 00007f9bfbda155c [ 812.972360][ T38] RDX: 000000000000003c RSI: 00007f9bfcb24670 RDI: 0000000000000003 [ 812.972372][ T38] RBP: 0000000000000000 R08: 00007ffc341a5504 R09: 000000000000000c [ 812.972384][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 812.972396][ T38] R13: 0000000000000000 R14: 00007f9bfcb24670 R15: 0000000000000000 [ 812.972429][ T38] [ 812.972472][ T38] [ 812.972472][ T38] Showing all locks held in the system: [ 812.972486][ T38] 3 locks held by kworker/u8:0/12: [ 812.972497][ T38] #0: ffff88813ff69938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 812.972553][ T38] #1: ffffc90000117ba0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 812.972600][ T38] #2: ffffffff8e8632b8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 812.972649][ T38] 4 locks held by pr/legacy/17: [ 812.972661][ T38] 2 locks held by rcuc/0/20: [ 812.972674][ T38] 1 lock held by khungtaskd/38: [ 812.972685][ T38] #0: ffffffff8d5aa840 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 812.972741][ T38] 3 locks held by kworker/1:2/992: [ 812.972751][ T38] #0: ffff88813ff56138 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 812.972798][ T38] #1: ffffc90004737ba0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 812.972838][ T38] #2: ffffffff8e8632b8 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0xa1/0xf40 [ 812.972890][ T38] 5 locks held by kworker/u8:7/1284: [ 812.972901][ T38] #0: ffff888019ad4938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 812.972946][ T38] #1: ffffc900050cfba0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 812.972992][ T38] #2: ffffffff8e8563a0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820 [ 812.973036][ T38] #3: ffffffff8e8632b8 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x990 [ 812.973079][ T38] #4: ffffffff8d5b01f0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 812.973124][ T38] 8 locks held by kworker/u8:9/1314: [ 812.973150][ T38] 1 lock held by klogd/5161: [ 812.973161][ T38] 2 locks held by dhcpcd/5467: [ 812.973179][ T38] #0: ffff888032500920 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: netlink_dump+0xbd/0xe90 [ 812.973225][ T38] #1: ffffffff8e8632b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200 [ 812.973268][ T38] 2 locks held by getty/5563: [ 812.973279][ T38] #0: ffff88823bf3a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 812.973326][ T38] #1: ffffc90003e7e2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1400 [ 812.973379][ T38] 5 locks held by syz-executor/5792: [ 812.973402][ T38] 3 locks held by kworker/1:3/18673: [ 812.973412][ T38] #0: ffff88813ff55138 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 812.973459][ T38] #1: ffffc9001064fba0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 812.973504][ T38] #2: ffffffff8e8632b8 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 812.973559][ T38] 3 locks held by kworker/u8:1/21895: [ 812.973570][ T38] #0: ffff88802f804938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 812.973627][ T38] #1: ffffc9000617fba0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 812.973675][ T38] #2: ffffffff8e8632b8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x119/0x15a0 [ 812.973725][ T38] 1 lock held by syz.6.7306/21977: [ 812.973736][ T38] #0: ffffffff8e8632b8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 812.973782][ T38] 1 lock held by syz.7.7308/21978: [ 812.973793][ T38] #0: ffffffff8e8632b8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 812.973838][ T38] 1 lock held by syz.9.7309/21980: [ 812.973849][ T38] #0: ffffffff8e8632b8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 812.973894][ T38] 2 locks held by syz.8.7322/22014: [ 812.973905][ T38] #0: ffffffff8ed64908 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 812.973952][ T38] #1: ffffffff8e8632b8 (rtnl_mutex){+.+.}-{4:4}, at: wg_destruct+0x25/0x2f0 [ 812.974002][ T38] 2 locks held by syz-executor/22383: [ 812.974013][ T38] #0: ffffffff8ed81e80 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 812.974060][ T38] #1: ffffffff8e8632b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 812.974100][ T38] 1 lock held by syz-executor/22392: [ 812.974111][ T38] #0: ffffffff8e8632b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 812.974152][ T38] 1 lock held by syz-executor/22397: [ 812.974167][ T38] #0: ffffffff8e8632b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 812.974210][ T38] 2 locks held by syz-executor/22409: [ 812.974220][ T38] #0: ffffffff8ed64908 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 812.974267][ T38] #1: ffffffff8e8632b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 812.974309][ T38] 1 lock held by syz-executor/22643: [ 812.974320][ T38] #0: ffffffff8e8632b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 812.974368][ T38] 1 lock held by syz-executor/22647: [ 812.974377][ T38] #0: ffffffff8e8632b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 812.974426][ T38] 1 lock held by syz-executor/22649: [ 812.974436][ T38] #0: ffffffff8e8632b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 812.974483][ T38] 1 lock held by syz-executor/22652: [ 812.974494][ T38] #0: ffffffff8e8632b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 812.974542][ T38] 1 lock held by syz-executor/22663: [ 812.974552][ T38] #0: ffffffff8e8632b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 812.974600][ T38] 1 lock held by syz-executor/22670: [ 812.974611][ T38] #0: ffffffff8e8632b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 812.974656][ T38] 1 lock held by syz-executor/22671: [ 812.974667][ T38] #0: ffffffff8e8632b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 812.974714][ T38] 1 lock held by syz-executor/22674: [ 812.974724][ T38] #0: ffffffff8e8632b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 812.974771][ T38] 3 locks held by kworker/u8:8/22678: [ 812.974783][ T38] [ 812.974788][ T38] ============================================= [ 812.974788][ T38] [ 812.974798][ T38] NMI backtrace for cpu 0 [ 812.974820][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 812.974842][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 812.974852][ T38] Call Trace: [ 812.974863][ T38] [ 812.974871][ T38] dump_stack_lvl+0x189/0x250 [ 812.974902][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 812.974927][ T38] ? __pfx__printk+0x10/0x10 [ 812.974960][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 812.974983][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 812.975005][ T38] ? __pfx__printk+0x10/0x10 [ 812.975031][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 812.975054][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 812.975076][ T38] watchdog+0xf60/0xfa0 [ 812.975106][ T38] ? watchdog+0x1e2/0xfa0 [ 812.975136][ T38] kthread+0x711/0x8a0 [ 812.975169][ T38] ? __pfx_watchdog+0x10/0x10 [ 812.975192][ T38] ? __pfx_kthread+0x10/0x10 [ 812.975214][ T38] ? rt_spin_unlock+0x150/0x200 [ 812.975238][ T38] ? rt_spin_unlock+0x161/0x200 [ 812.975255][ T38] ? __pfx_kthread+0x10/0x10 [ 812.975280][ T38] ret_from_fork+0x4bc/0x870 [ 812.975305][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 812.975332][ T38] ? __switch_to_asm+0x39/0x70 [ 812.975349][ T38] ? __switch_to_asm+0x33/0x70 [ 812.975366][ T38] ? __pfx_kthread+0x10/0x10 [ 812.975392][ T38] ret_from_fork_asm+0x1a/0x30 [ 812.975428][ T38] [ 812.975435][ T38] Sending NMI from CPU 0 to CPUs 1: [ 812.975466][ C1] NMI backtrace for cpu 1 [ 812.975479][ C1] CPU: 1 UID: 0 PID: 17 Comm: pr/legacy Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 812.975498][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 812.975508][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 812.975530][ C1] Code: e8 be 03 ba fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 4f bb 1b fd 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 ca 62 bf 05 cc 44 89 f9 80 e1 07 [ 812.975544][ C1] RSP: 0018:ffffc90000167870 EFLAGS: 00000202 [ 812.975558][ C1] RAX: 1ffffffff31d1d00 RBX: 00000000000003fd RCX: 0000000000000000 [ 812.975570][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000 [ 812.975579][ C1] RBP: ffffffff98e8f0f0 R08: 0000000000000000 R09: 0000000000000000 [ 812.975589][ C1] R10: dffffc0000000000 R11: ffffffff8504bc10 R12: dffffc0000000000 [ 812.975601][ C1] R13: 0000000000000000 R14: ffffffff98e8ee60 R15: 0000000000000000 [ 812.975612][ C1] FS: 0000000000000000(0000) GS:ffff888126ef9000(0000) knlGS:0000000000000000 [ 812.975626][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 812.975637][ C1] CR2: 00007fe709e96949 CR3: 000000000d3a6000 CR4: 00000000003526f0 [ 812.975651][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 812.975661][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 812.975671][ C1] Call Trace: [ 812.975678][ C1] [ 812.975686][ C1] wait_for_lsr+0x1aa/0x2f0 [ 812.975705][ C1] serial8250_console_write+0x11bd/0x1b40 [ 812.975733][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 812.975753][ C1] ? console_flush_all+0x13a/0xb40 [ 812.975773][ C1] ? console_flush_all+0x476/0xb40 [ 812.975792][ C1] console_flush_all+0x666/0xb40 [ 812.975810][ C1] ? console_flush_all+0x13a/0xb40 [ 812.975830][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 812.975855][ C1] __console_flush_and_unlock+0x9b/0x160 [ 812.975872][ C1] ? legacy_kthread_func+0x136/0x1a0 [ 812.975891][ C1] ? __pfx___console_flush_and_unlock+0x10/0x10 [ 812.975908][ C1] ? schedule+0x91/0x360 [ 812.975936][ C1] legacy_kthread_func+0x13b/0x1a0 [ 812.975954][ C1] ? __pfx_legacy_kthread_func+0x10/0x10 [ 812.975973][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 812.975992][ C1] ? __kthread_parkme+0x7b/0x200 [ 812.976011][ C1] ? __kthread_parkme+0x1a1/0x200 [ 812.976033][ C1] kthread+0x711/0x8a0 [ 812.976055][ C1] ? __pfx_legacy_kthread_func+0x10/0x10 [ 812.976073][ C1] ? __pfx_kthread+0x10/0x10 [ 812.976092][ C1] ? rt_spin_unlock+0x150/0x200 [ 812.976110][ C1] ? rt_spin_unlock+0x161/0x200 [ 812.976125][ C1] ? __pfx_kthread+0x10/0x10 [ 812.976145][ C1] ret_from_fork+0x4bc/0x870 [ 812.976163][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 812.976185][ C1] ? __switch_to_asm+0x39/0x70 [ 812.976200][ C1] ? __switch_to_asm+0x33/0x70 [ 812.976215][ C1] ? __pfx_kthread+0x10/0x10 [ 812.976235][ C1] ret_from_fork_asm+0x1a/0x30 [ 812.976260][ C1] [ 821.109374][T21114] Bluetooth: hci10: command 0x0406 tx timeout [ 821.201787][T21114] Bluetooth: hci11: command 0x0406 tx timeout [ 821.201829][T21114] Bluetooth: hci9: command 0x0406 tx timeout [ 821.201853][T21114] Bluetooth: hci12: command 0x0406 tx timeout