last executing test programs: 2m32.89440942s ago: executing program 3 (id=340): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg(r0, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="9c371d3d5b8182cecad4ec942915a3f68cbc1bee6ac5a1b966fdc0aac7bccfc8b318463403552664e7a60593c4acfd9d5b2e240bc5d8e119fdbfdeb2375b25332b4db5295da7aa69cf155e5518fd48442de8818b3a060ddfc701e284029639fcec88b7f26e98256d7abe412fb47e1f23b4366a323ef84c08f276808f5df7231e4f5dd7c7e17216de8f20cb8441c9e43caddf31ebc74548986c2910ee192494aaa56d6f5236f911a7bc3227f43a377ac981e3a13c6a7a5945f48e7db78b", 0xbd}], 0x1}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/189, 0xbd}, {0x0}], 0x2}}], 0x1, 0x0, 0x0) 2m32.838637002s ago: executing program 3 (id=341): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=@framed={{}, [@printk={@lx, {0x3, 0x3, 0x3, 0xa, 0x0}}, @printk={@s}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = socket(0x10, 0x803, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000400)=r1, 0x4) sendmsg$nl_generic(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}, 0x1c}}, 0x0) 2m32.774026121s ago: executing program 3 (id=342): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/32, 0x20}, 0x3}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 2m32.597150556s ago: executing program 4 (id=343): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8) sendto$inet(r1, 0x0, 0x0, 0x20024094, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) 2m32.543857402s ago: executing program 3 (id=344): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee38", 0x14}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000001880)=[{&(0x7f00000000c0)=""/77, 0x4d}, {&(0x7f0000000280)=""/19, 0x13}], 0x2}, 0x0) 2m32.419368259s ago: executing program 4 (id=345): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) personality(0x5000007) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ppoll(0x0, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f0000000180), 0x8) 2m32.355987667s ago: executing program 3 (id=346): ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r0, 0x0) sendmmsg(r0, &(0x7f0000004d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 2m32.175644993s ago: executing program 4 (id=348): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r2, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0, 0x1}) 2m32.165121709s ago: executing program 3 (id=349): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7105090302030109bd06cf2c0406fb0e0191"], 0x12) 2m31.779301787s ago: executing program 4 (id=353): r0 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x18) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/17, 0x11}, 0x7ff}], 0x1, 0x2, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000500)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x17, 0x20, 0x3, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x2, 0x0, 0x0, @void}}}}}}}, 0x0) 2m31.614787049s ago: executing program 4 (id=355): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 2m31.455103397s ago: executing program 4 (id=357): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 2m17.027386565s ago: executing program 32 (id=349): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7105090302030109bd06cf2c0406fb0e0191"], 0x12) 2m15.966804032s ago: executing program 33 (id=357): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 1m57.906052688s ago: executing program 0 (id=656): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1m57.839772065s ago: executing program 0 (id=657): socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='team_slave_1\x00', 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 1m57.794501865s ago: executing program 0 (id=658): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x2, {0x0, 0xf0, 0x3}}, 0x18) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000040)={0x1d, r3, 0x2, {0x2, 0xff, 0x2}, 0xfe}, 0x18) 1m57.749967013s ago: executing program 0 (id=659): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x2, 0x30bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {0x0, 0x6}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x54a102b7}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 1m56.876979967s ago: executing program 0 (id=665): r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d240f0100000000000000000006241a0000000c241b4800050000050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f00000000c0)={0x40, 0x16, 0xe, "d30abd294510e49f95f1ccc4f8db"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 1m54.469266863s ago: executing program 0 (id=684): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x402, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x20000000009) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x7) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) 1m39.390766701s ago: executing program 34 (id=684): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x402, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x20000000009) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x7) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) 2.106502746s ago: executing program 1 (id=1667): chdir(&(0x7f00000000c0)='./file0\x00') openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0203"], 0x10}}, 0x0) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x9, 0x0, &(0x7f0000000040), 0x0, 0x0}}) 2.009891842s ago: executing program 1 (id=1668): pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xd0, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000008e25900ee8d386dd601646b085a2009a2f00ff020000000000000000000000000001fc010000000000000000000000000000000000000000000005020000000000000420880b00460000670c12d787bc48454ad5ab0dbcd795bf5fb1f628b389490832"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a01020000000000000000020000000900010073797a3000000000aa000300"], 0x1e4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0) 1.109598557s ago: executing program 1 (id=1675): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)={0x20, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x59}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x4000014) recvmsg(r1, &(0x7f000000b680)={0x0, 0xfffffe58, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb7b}], 0x2}, 0x0) 997.604957ms ago: executing program 2 (id=1677): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) shutdown(r0, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000001a40)={0xff, @private=0xa010101, 0x4e23, 0x2, 'sh\x00', 0x18, 0x80006, 0x71}, 0x2c) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 827.176136ms ago: executing program 2 (id=1678): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r0 = gettid() rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x90000000, 0x0}, 0x0, 0x8, &(0x7f0000000200)) tkill(r0, 0x16) 644.164673ms ago: executing program 2 (id=1679): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000040)=0xcc4f, 0x4) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x397, @empty}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 553.75178ms ago: executing program 2 (id=1680): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x1, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000180)='user\x00', &(0x7f00000002c0)='\x00\x00E\x01\x00\x00\f\x01\x00\x00\x00\x00\x00\xc1~\x99l\xb7\xd6\xfc\xebw1hn\x1a\xc5\xef\xec,\xa1\xa0\x12\x1c\x7fn\a\\\xec\xd8\x94oh\x1d\xec\xf5jb\xe5\xb2\xa2e\xfd\x9c\xc4\xd22\x9c\xe97#(/\xb1\xe6\x03\xe1\xaa\x96\x92\x8b4}\xc1L\x1b\x9b\xe6n\x97\xc7\x06\xb2Y\xadQ\xa4c\x1b&\x0e?\xc0\x90\xaf\xb29\xf6>\xe1\xe8}D\f\xc1u\xab]$\x1b\x1bt\xda\x9eA\xd3\x1b\x12A\x82\xd5\xa8@\x1eIw\xb2y2F\xe8\xc7\x03e&\x98\"9\t\xe0\x81Pj\xee&\xae{P\xe8\xceL\xe1\xd1V\xc7\xeaF\xd54\x80\xb6%\xaf\xbbK\x85\x95\xf2\x1bG\xf1\xdaq:\xae\xe22\\~j~\xfe\x83\xbb>\xb0\x9b.\xa4\x95\x0eY\xb8j\xe1M\xf5\xa5\x87`\x04\xab\xf1\xc7[\xda{\r\x95\xa4\xea^\xfc\xa7\x8b\x85\xd1ld\xacK\x8aqd\x1d\xaa\x99\xeb\t|@\xd5p\x1d>+\x0e\xec\xe2\xcd\xdc\x8f\x01\xf7\xabH=z\xa5x\x1b\x9f\x95\xd1\x88k\x85L#\x99^p\x18\x98\xec6\xf69y\x052', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='user\x00', &(0x7f00000000c0)='ocfs2\x00', 0x0) 494.640563ms ago: executing program 2 (id=1681): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) 427.904009ms ago: executing program 2 (id=1682): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x56c}) readv(r0, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/188, 0xbc}], 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/201, 0x20}], 0x6) mremap(&(0x7f0000638000/0x1000)=nil, 0x6aa000, 0x2000, 0x3, &(0x7f00005c0000/0x2000)=nil) 216.48941ms ago: executing program 1 (id=1683): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = dup3(r0, r1, 0x0) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000080)={0x0, 0x0, 0x6}) 146.660744ms ago: executing program 1 (id=1684): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000440)={&(0x7f0000800000/0x800000)=nil, &(0x7f000051f000/0x4000)=nil, 0x800000, 0x1, 0xfe}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) syz_io_uring_setup(0x2c0e, &(0x7f0000000400)={0x0, 0x6, 0xc002, 0x1000}, 0x0, 0x0) 0s ago: executing program 1 (id=1685): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000280)={0x0, @pix_mp={0x6, 0x93cf, 0x32315559, 0x4, 0x8, [{0x6, 0x1}, {0x9, 0x5}, {0x8, 0x3}, {0x4, 0x9}, {0x2, 0xb68a}, {0x7fff, 0x7ff}, {0x3, 0x2}, {0x50ad0a9a}], 0x9, 0xff, 0x2, 0x2, 0x3}}) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x15, r2}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.35' (ED25519) to the list of known hosts. [ 82.268181][ T5813] cgroup: Unknown subsys name 'net' [ 82.428059][ T5813] cgroup: Unknown subsys name 'cpuset' [ 82.437495][ T5813] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.122211][ T5813] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.819495][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.833594][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.844334][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.852631][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.860254][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.868689][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.876882][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.885930][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.895016][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.903697][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.918439][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.965716][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.965718][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.966611][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.973882][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.991599][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.003268][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.012402][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.013312][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.019838][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.028427][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.034871][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.044081][ T5829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.049760][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.120518][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.912288][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 88.017257][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 88.086291][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 88.158783][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 88.207791][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 88.297477][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.306771][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.314943][ T5823] bridge_slave_0: entered allmulticast mode [ 88.323529][ T5823] bridge_slave_0: entered promiscuous mode [ 88.346164][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.353481][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.361011][ T5824] bridge_slave_0: entered allmulticast mode [ 88.368263][ T5824] bridge_slave_0: entered promiscuous mode [ 88.392827][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.400115][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.407655][ T5823] bridge_slave_1: entered allmulticast mode [ 88.415128][ T5823] bridge_slave_1: entered promiscuous mode [ 88.427698][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.435544][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.443100][ T5824] bridge_slave_1: entered allmulticast mode [ 88.450308][ T5824] bridge_slave_1: entered promiscuous mode [ 88.577202][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.584784][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.592215][ T5830] bridge_slave_0: entered allmulticast mode [ 88.599416][ T5830] bridge_slave_0: entered promiscuous mode [ 88.632118][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.659433][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.669270][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.676778][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.684477][ T5830] bridge_slave_1: entered allmulticast mode [ 88.692539][ T5830] bridge_slave_1: entered promiscuous mode [ 88.713003][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.720269][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.728092][ T5826] bridge_slave_0: entered allmulticast mode [ 88.736533][ T5826] bridge_slave_0: entered promiscuous mode [ 88.746395][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.772196][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.812292][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.819623][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.827432][ T5826] bridge_slave_1: entered allmulticast mode [ 88.835059][ T5826] bridge_slave_1: entered promiscuous mode [ 88.865673][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.873097][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.880342][ T5831] bridge_slave_0: entered allmulticast mode [ 88.887825][ T5831] bridge_slave_0: entered promiscuous mode [ 88.913637][ T5824] team0: Port device team_slave_0 added [ 88.959239][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.968268][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.975571][ T5831] bridge_slave_1: entered allmulticast mode [ 88.984911][ T5831] bridge_slave_1: entered promiscuous mode [ 88.994462][ T5824] team0: Port device team_slave_1 added [ 89.020507][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.030349][ T5145] Bluetooth: hci0: command tx timeout [ 89.040122][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.053285][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.065632][ T5823] team0: Port device team_slave_0 added [ 89.101367][ T5145] Bluetooth: hci4: command tx timeout [ 89.101501][ T5832] Bluetooth: hci3: command tx timeout [ 89.122435][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.133601][ T5823] team0: Port device team_slave_1 added [ 89.156279][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.171207][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.181097][ T5832] Bluetooth: hci2: command tx timeout [ 89.195364][ T5832] Bluetooth: hci1: command tx timeout [ 89.259057][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.266543][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.293317][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.340102][ T5830] team0: Port device team_slave_0 added [ 89.351313][ T5830] team0: Port device team_slave_1 added [ 89.360470][ T5826] team0: Port device team_slave_0 added [ 89.370826][ T5826] team0: Port device team_slave_1 added [ 89.377729][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.385158][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.411284][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.424707][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.431802][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.458149][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.470266][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.477407][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.503811][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.518068][ T5831] team0: Port device team_slave_0 added [ 89.527910][ T5831] team0: Port device team_slave_1 added [ 89.618587][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.625674][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.652436][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.665701][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.672851][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.699863][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.712929][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.719918][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.746582][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.775317][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.782701][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.808955][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.822445][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.830257][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.856935][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.905247][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.912464][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.938916][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.985714][ T5824] hsr_slave_0: entered promiscuous mode [ 89.992148][ T5824] hsr_slave_1: entered promiscuous mode [ 90.035619][ T5823] hsr_slave_0: entered promiscuous mode [ 90.042036][ T5823] hsr_slave_1: entered promiscuous mode [ 90.048135][ T5823] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.056476][ T5823] Cannot create hsr debugfs directory [ 90.107123][ T5826] hsr_slave_0: entered promiscuous mode [ 90.114097][ T5826] hsr_slave_1: entered promiscuous mode [ 90.120403][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.128209][ T5826] Cannot create hsr debugfs directory [ 90.186484][ T5830] hsr_slave_0: entered promiscuous mode [ 90.194724][ T5830] hsr_slave_1: entered promiscuous mode [ 90.201140][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.208710][ T5830] Cannot create hsr debugfs directory [ 90.299006][ T5831] hsr_slave_0: entered promiscuous mode [ 90.306168][ T5831] hsr_slave_1: entered promiscuous mode [ 90.313168][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.321073][ T5831] Cannot create hsr debugfs directory [ 90.923616][ T5824] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.947699][ T5824] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.966669][ T5824] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.978482][ T5824] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.056689][ T5826] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.070292][ T5826] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.082619][ T5826] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.098465][ T5826] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.107269][ T5832] Bluetooth: hci0: command tx timeout [ 91.180788][ T5832] Bluetooth: hci3: command tx timeout [ 91.180888][ T5145] Bluetooth: hci4: command tx timeout [ 91.223786][ T5830] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.248291][ T5830] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.259244][ T5830] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.266873][ T5145] Bluetooth: hci1: command tx timeout [ 91.267003][ T5832] Bluetooth: hci2: command tx timeout [ 91.304259][ T5830] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.417987][ T5823] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.428879][ T5823] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.469942][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.477951][ T5823] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.493705][ T5823] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.547195][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.618029][ T5831] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.636044][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.653351][ T5831] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.664623][ T5831] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.677743][ T5831] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.700235][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.713083][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.720378][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.753521][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.760827][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.770319][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.777636][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.827874][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.835385][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.882638][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.046388][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.064971][ T1220] cfg80211: failed to load regulatory.db [ 92.101635][ T752] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.108850][ T752] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.150193][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.162381][ T752] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.169612][ T752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.239849][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.308257][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.315904][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.399989][ T752] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.407309][ T752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.458043][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.554841][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.574281][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.630502][ T752] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.637788][ T752] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.663064][ T752] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.670278][ T752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.838244][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.144561][ T5824] veth0_vlan: entered promiscuous mode [ 93.176143][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.184237][ T5832] Bluetooth: hci0: command tx timeout [ 93.249065][ T5824] veth1_vlan: entered promiscuous mode [ 93.261838][ T5832] Bluetooth: hci4: command tx timeout [ 93.261993][ T5145] Bluetooth: hci3: command tx timeout [ 93.347541][ T5145] Bluetooth: hci1: command tx timeout [ 93.350818][ T5832] Bluetooth: hci2: command tx timeout [ 93.484930][ T5830] veth0_vlan: entered promiscuous mode [ 93.499748][ T5824] veth0_macvtap: entered promiscuous mode [ 93.532076][ T5824] veth1_macvtap: entered promiscuous mode [ 93.566087][ T5830] veth1_vlan: entered promiscuous mode [ 93.606813][ T5826] veth0_vlan: entered promiscuous mode [ 93.620284][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.640239][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.653827][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.665528][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.683327][ T5826] veth1_vlan: entered promiscuous mode [ 93.706010][ T5824] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.715927][ T5824] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.725796][ T5824] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.736168][ T5824] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.812754][ T5830] veth0_macvtap: entered promiscuous mode [ 93.826100][ T5830] veth1_macvtap: entered promiscuous mode [ 93.933749][ T5826] veth0_macvtap: entered promiscuous mode [ 93.955962][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.976231][ T5826] veth1_macvtap: entered promiscuous mode [ 93.995457][ T5831] veth0_vlan: entered promiscuous mode [ 94.019286][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.043055][ T5830] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.050915][ T3504] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.055846][ T5830] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.060714][ T3504] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.070020][ T5830] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.090257][ T5830] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.131434][ T5823] veth0_vlan: entered promiscuous mode [ 94.160449][ T5831] veth1_vlan: entered promiscuous mode [ 94.187109][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.218868][ T5823] veth1_vlan: entered promiscuous mode [ 94.235183][ T3504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.236537][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.254768][ T3504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.317454][ T5826] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.331927][ T5826] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.341269][ T5826] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.350182][ T5826] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.407076][ T752] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.429704][ T752] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.437507][ T5831] veth0_macvtap: entered promiscuous mode [ 94.442690][ T5831] veth1_macvtap: entered promiscuous mode [ 94.453047][ T5824] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.580068][ T1343] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.597671][ T5823] veth0_macvtap: entered promiscuous mode [ 94.598194][ T1343] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.611865][ T5823] veth1_macvtap: entered promiscuous mode [ 94.645388][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.683039][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.717134][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.762455][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.805768][ T5823] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.828140][ T5823] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.837834][ T5823] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.846665][ T5823] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.899072][ T5831] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.914207][ T5831] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.947630][ T5831] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.961105][ T5831] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.092760][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.135392][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.183322][ T43] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 95.262001][ T5832] Bluetooth: hci0: command tx timeout [ 95.293869][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.325577][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.340988][ T5832] Bluetooth: hci4: command tx timeout [ 95.342681][ T5145] Bluetooth: hci3: command tx timeout [ 95.357672][ T3504] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.370711][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 95.391646][ T3504] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.407858][ T43] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 95.421679][ T5145] Bluetooth: hci1: command tx timeout [ 95.423069][ T5832] Bluetooth: hci2: command tx timeout [ 95.433179][ T43] usb 1-1: config 1 has no interface number 0 [ 95.447369][ T5960] Illegal XDP return value 4100712304 on prog (id 2) dev syz_tun, expect packet loss! [ 95.459340][ T43] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 95.486201][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.495292][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.510055][ T43] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 95.539198][ T43] usb 1-1: config 1 interface 105 has no altsetting 0 [ 95.562351][ T43] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 95.589096][ T3504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.597476][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.617779][ T3504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.629588][ T43] usb 1-1: Product: syz [ 95.634675][ T43] usb 1-1: Manufacturer: syz [ 95.639418][ T43] usb 1-1: SerialNumber: syz [ 95.654340][ T5953] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 95.679225][ T5953] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 95.806394][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.835994][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.156094][ T5953] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 96.191810][ T5953] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 96.571720][ T5981] netlink: 'syz.4.12': attribute type 1 has an invalid length. [ 97.062457][ T43] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 97.124555][ T43] aqc111 1-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 20:fc:94:45:3a:41 [ 97.209769][ T43] usb 1-1: USB disconnect, device number 2 [ 97.239319][ T43] aqc111 1-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 97.332581][ T5911] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 97.412613][ T43] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 97.437860][ T43] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 97.491188][ T43] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 97.543218][ T5911] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 97.580962][ T5911] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 97.590179][ T5911] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 97.630987][ T5911] usb 4-1: config 220 has no interface number 2 [ 97.654594][ T5911] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 97.730892][ T5911] usb 4-1: config 220 interface 0 has no altsetting 0 [ 97.737854][ T5911] usb 4-1: config 220 interface 76 has no altsetting 0 [ 97.790740][ T5911] usb 4-1: config 220 interface 1 has no altsetting 0 [ 97.835799][ T5911] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 97.857578][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.874337][ T5911] usb 4-1: Product: syz [ 97.878839][ T5911] usb 4-1: Manufacturer: syz [ 97.883809][ T5911] usb 4-1: SerialNumber: syz [ 98.192138][ T5911] uvcvideo 4-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 98.217262][ T5911] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 98.227842][ T5911] usb 4-1: No valid video chain found. [ 98.238905][ T5911] usb 4-1: selecting invalid altsetting 0 [ 98.263314][ T5911] usb 4-1: selecting invalid altsetting 0 [ 98.281510][ T5911] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 98.334498][ T5911] usb 4-1: USB disconnect, device number 2 [ 98.770833][ T1220] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 98.960758][ T1220] usb 2-1: Using ep0 maxpacket: 32 [ 98.971091][ T1220] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 98.994547][ T1220] usb 2-1: config 0 has no interface number 0 [ 99.027887][ T1220] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 99.074824][ T1220] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 99.095182][ T6032] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 99.123920][ T1220] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.141004][ T1220] usb 2-1: Product: syz [ 99.150545][ T1220] usb 2-1: Manufacturer: syz [ 99.159437][ T1220] usb 2-1: SerialNumber: syz [ 99.169723][ T1220] usb 2-1: config 0 descriptor?? [ 99.175181][ T1212] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 99.219660][ T1220] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 99.242225][ T1220] em28xx 2-1:0.132: Video interface 132 found: [ 99.344412][ T1212] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.360794][ T1212] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 99.390263][ T1212] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 99.429617][ T1212] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.447997][ T1212] usb 1-1: config 0 descriptor?? [ 99.471958][ T1212] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 99.486476][ T1212] dvb-usb: bulk message failed: -22 (3/0) [ 99.534353][ T1212] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 99.563570][ T1212] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 99.601005][ T1212] usb 1-1: media controller created [ 99.622627][ T1212] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 99.633492][ T1220] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 99.681942][ T1212] dvb-usb: bulk message failed: -22 (6/0) [ 99.687983][ T1212] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 99.743935][ T1212] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 99.826817][ T1212] dvb-usb: schedule remote query interval to 150 msecs. [ 99.850692][ T1212] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 99.860359][ T6021] dvb-usb: bulk message failed: -22 (4/0) [ 99.870473][ T1220] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 99.930679][ T1220] em28xx 2-1:0.132: board has no eeprom [ 100.011995][ T1212] dvb-usb: bulk message failed: -22 (1/0) [ 100.019260][ T1212] dvb-usb: error while querying for an remote control event. [ 100.030671][ T1220] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 100.048789][ T1220] em28xx 2-1:0.132: analog set to bulk mode. [ 100.071284][ T1212] em28xx 2-1:0.132: Registering V4L2 extension [ 100.124221][ T1220] usb 2-1: USB disconnect, device number 2 [ 100.134069][ T1220] em28xx 2-1:0.132: Disconnecting em28xx [ 100.221443][ T5911] dvb-usb: bulk message failed: -22 (1/0) [ 100.227440][ T5911] dvb-usb: error while querying for an remote control event. [ 100.439139][ T5911] dvb-usb: bulk message failed: -22 (1/0) [ 100.450787][ T5911] dvb-usb: error while querying for an remote control event. [ 100.544759][ T1212] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 100.566292][ T5904] usb 1-1: USB disconnect, device number 3 [ 100.591302][ T1212] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 100.622925][ T1212] em28xx 2-1:0.132: No AC97 audio processor [ 100.683544][ T1212] usb 2-1: Decoder not found [ 100.688321][ T1212] em28xx 2-1:0.132: failed to create media graph [ 100.740835][ T1212] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 100.743024][ T5904] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 100.773195][ T1212] em28xx 2-1:0.132: Remote control support is not available for this card. [ 100.814101][ T1220] em28xx 2-1:0.132: Closing input extension [ 100.936167][ T1220] em28xx 2-1:0.132: Freeing device [ 101.139018][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 101.150854][ T30] audit: type=1326 audit(1750225827.533:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6066 comm="syz.1.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59b678e929 code=0x7ffc0000 [ 101.236128][ T30] audit: type=1326 audit(1750225827.533:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6066 comm="syz.1.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f59b672ab19 code=0x7ffc0000 [ 101.250304][ T6075] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 101.342529][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 101.400754][ T30] audit: type=1326 audit(1750225827.533:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6066 comm="syz.1.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f59b672ab19 code=0x7ffc0000 [ 101.501408][ T30] audit: type=1326 audit(1750225827.543:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6066 comm="syz.1.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f59b672ab19 code=0x7ffc0000 [ 101.652923][ T30] audit: type=1326 audit(1750225827.563:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6066 comm="syz.1.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f59b672ab19 code=0x7ffc0000 [ 101.800701][ T30] audit: type=1326 audit(1750225827.563:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6066 comm="syz.1.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f59b672ab19 code=0x7ffc0000 [ 101.867205][ T30] audit: type=1326 audit(1750225827.563:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6066 comm="syz.1.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f59b672ab19 code=0x7ffc0000 [ 101.996629][ T30] audit: type=1326 audit(1750225827.563:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6066 comm="syz.1.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f59b672ab19 code=0x7ffc0000 [ 102.054892][ T30] audit: type=1326 audit(1750225827.563:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6066 comm="syz.1.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f59b672ab19 code=0x7ffc0000 [ 102.077695][ T6087] syz.3.56 uses obsolete (PF_INET,SOCK_PACKET) [ 102.088783][ T30] audit: type=1326 audit(1750225827.563:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6066 comm="syz.1.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f59b672ab19 code=0x7ffc0000 [ 102.571285][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 102.628087][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 103.190868][ T5884] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 103.363061][ T5884] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 103.400531][ T5884] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 103.427720][ T5884] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 103.448873][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.465123][ T6101] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 103.489576][ T5884] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 103.844658][ T5884] usb 2-1: USB disconnect, device number 3 [ 104.683504][ T6134] Bluetooth: MGMT ver 1.23 [ 104.855803][ T6138] GUP no longer grows the stack in syz.4.79 (6138): 200000004000-200000008000 (200000002000) [ 104.892919][ T6138] CPU: 0 UID: 0 PID: 6138 Comm: syz.4.79 Not tainted 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 PREEMPT(full) [ 104.892951][ T6138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 104.892963][ T6138] Call Trace: [ 104.892972][ T6138] [ 104.892981][ T6138] dump_stack_lvl+0x189/0x250 [ 104.893021][ T6138] ? __pfx_dump_stack_lvl+0x10/0x10 [ 104.893052][ T6138] ? __pfx__printk+0x10/0x10 [ 104.893070][ T6138] ? find_vma+0xe7/0x160 [ 104.893111][ T6138] __get_user_pages+0x2a60/0x30b0 [ 104.893175][ T6138] ? __pfx___get_user_pages+0x10/0x10 [ 104.893208][ T6138] get_user_pages_remote+0x2f9/0xaa0 [ 104.893231][ T6138] ? __pfx_mtree_load+0x10/0x10 [ 104.893269][ T6138] ? __pfx_get_user_pages_remote+0x10/0x10 [ 104.893304][ T6138] __access_remote_vm+0x215/0x5f0 [ 104.893340][ T6138] ? __pfx___access_remote_vm+0x10/0x10 [ 104.893367][ T6138] ? alloc_pages_noprof+0xbe/0x190 [ 104.893399][ T6138] proc_pid_cmdline_read+0x440/0x840 [ 104.893425][ T6138] ? __asan_memset+0x22/0x50 [ 104.893454][ T6138] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 104.893484][ T6138] ? rw_verify_area+0x258/0x650 [ 104.893512][ T6138] vfs_readv+0x5aa/0x850 [ 104.893542][ T6138] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 104.893572][ T6138] ? __pfx_vfs_readv+0x10/0x10 [ 104.893631][ T6138] ? __fget_files+0x2a/0x420 [ 104.893663][ T6138] ? __fget_files+0x3a0/0x420 [ 104.893689][ T6138] ? __fget_files+0x2a/0x420 [ 104.893727][ T6138] __x64_sys_preadv+0x197/0x2a0 [ 104.893756][ T6138] ? __pfx___x64_sys_preadv+0x10/0x10 [ 104.893778][ T6138] ? rcu_is_watching+0x15/0xb0 [ 104.893815][ T6138] ? do_syscall_64+0xbe/0x3b0 [ 104.893852][ T6138] do_syscall_64+0xfa/0x3b0 [ 104.893880][ T6138] ? lockdep_hardirqs_on+0x9c/0x150 [ 104.893909][ T6138] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.893929][ T6138] ? clear_bhb_loop+0x60/0xb0 [ 104.893955][ T6138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.893976][ T6138] RIP: 0033:0x7f461c98e929 [ 104.893995][ T6138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.894012][ T6138] RSP: 002b:00007f461d86e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 104.894035][ T6138] RAX: ffffffffffffffda RBX: 00007f461cbb5fa0 RCX: 00007f461c98e929 [ 104.894050][ T6138] RDX: 0000000000000001 RSI: 0000200000000d00 RDI: 0000000000000003 [ 104.894061][ T6138] RBP: 00007f461ca10b39 R08: 0000000000000200 R09: 0000000000000000 [ 104.894073][ T6138] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 104.894085][ T6138] R13: 0000000000000000 R14: 00007f461cbb5fa0 R15: 00007fff09919aa8 [ 104.894119][ T6138] [ 105.296894][ T6144] vlan2: entered promiscuous mode [ 105.303342][ T6144] bond0: entered promiscuous mode [ 105.308521][ T6144] bond_slave_0: entered promiscuous mode [ 105.315089][ T6144] bond_slave_1: entered promiscuous mode [ 107.430797][ T1212] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 107.615040][ T1212] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 107.647597][ T1212] usb 5-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 107.677206][ T1212] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.708064][ T1212] usb 5-1: config 0 descriptor?? [ 108.221759][ T1212] logitech 0003:046D:CA03.0001: hidraw0: USB HID v0.00 Device [HID 046d:ca03] on usb-dummy_hcd.4-1/input0 [ 108.254020][ T1212] logitech 0003:046D:CA03.0001: no inputs found [ 108.416015][ T5904] usb 5-1: USB disconnect, device number 2 [ 108.491925][ T6231] fido_id[6231]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 108.597768][ T6234] input: syz0 as /devices/virtual/input/input6 [ 108.926262][ T6239] Bluetooth: hci0: invalid length 0, exp 2 for type 3 [ 110.242424][ T6279] unknown channel width for channel at 909000KHz? [ 110.249626][ T6279] unknown channel width for channel at 909000KHz? [ 110.290818][ T6279] unknown channel width for channel at 909000KHz? [ 110.520770][ T5903] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 110.683024][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.701015][ T5903] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 110.717560][ T5903] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 110.727375][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.752787][ T5903] usb 5-1: config 0 descriptor?? [ 110.920123][ T30] kauditd_printk_skb: 620 callbacks suppressed [ 110.940814][ T30] audit: type=1800 audit(1750225837.303:632): pid=6296 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.142" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 110.962269][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 110.983422][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.193647][ T5903] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 111.251227][ T5903] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 111.269627][ T5903] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 111.340674][ T5903] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 111.362237][ T5903] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 111.396517][ T5903] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 111.498378][ T5903] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 111.598515][ T5903] usb 5-1: USB disconnect, device number 3 [ 111.710063][ T6306] fido_id[6306]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 112.813739][ T6333] netlink: 17 bytes leftover after parsing attributes in process `syz.3.158'. [ 112.861433][ T6333] netlink: zone id is out of range [ 112.866653][ T6333] netlink: zone id is out of range [ 112.901251][ T6333] netlink: zone id is out of range [ 112.908953][ T6333] netlink: zone id is out of range [ 112.925450][ T6333] netlink: zone id is out of range [ 112.954863][ T6333] netlink: zone id is out of range [ 112.973182][ T6333] netlink: zone id is out of range [ 112.994934][ T6333] netlink: zone id is out of range [ 113.010903][ T6333] netlink: zone id is out of range [ 113.025921][ T6333] netlink: zone id is out of range [ 113.122198][ T6344] netlink: 4 bytes leftover after parsing attributes in process `syz.4.162'. [ 114.883625][ T6377] mmap: syz.4.175 (6377) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 115.131880][ T6381] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 115.673590][ T978] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 115.738421][ T978] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 117.300872][ T5904] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 117.490978][ T5904] usb 1-1: Using ep0 maxpacket: 32 [ 117.516567][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.544415][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.583610][ T5904] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 117.656105][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.752479][ T5904] usb 1-1: config 0 descriptor?? [ 117.783034][ T5904] hub 1-1:0.0: USB hub found [ 117.983201][ T5904] hub 1-1:0.0: 1 port detected [ 118.610309][ T978] hub 1-1:0.0: activate --> -90 [ 118.819709][ T5904] usb 1-1: USB disconnect, device number 4 [ 119.510751][ T1220] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 119.690865][ T1220] usb 3-1: Using ep0 maxpacket: 8 [ 119.715885][ T1220] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 119.739022][ T1220] usb 3-1: config 179 has no interface number 0 [ 119.781762][ T1220] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 119.810202][ T1220] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 119.853269][ T1220] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 119.904230][ T1220] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 119.953671][ T1220] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 120.001077][ T1220] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 120.010370][ T1220] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.084281][ T6465] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 120.232758][ T6494] loop2: detected capacity change from 0 to 7 [ 120.251570][ T6044] Dev loop2: unable to read RDB block 7 [ 120.259150][ T6044] loop2: AHDI p1 p2 p3 [ 120.270147][ T6044] loop2: partition table partially beyond EOD, truncated [ 120.312406][ T6044] loop2: p3 start 335544320 is beyond EOD, truncated [ 120.328082][ T6494] Dev loop2: unable to read RDB block 7 [ 120.340883][ T6494] loop2: AHDI p1 p2 p3 [ 120.345535][ T6494] loop2: partition table partially beyond EOD, truncated [ 120.357339][ T6494] loop2: p3 start 335544320 is beyond EOD, truncated [ 120.509152][ T1220] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input8 [ 120.654754][ T5904] usb 3-1: USB disconnect, device number 2 [ 120.655219][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 120.669631][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 120.756926][ T5904] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 120.838943][ T5903] libceph: connect (1)[c::]:6789 error -101 [ 120.860411][ T5903] libceph: mon0 (1)[c::]:6789 connect error [ 120.903083][ T5903] libceph: connect (1)[c::]:6789 error -101 [ 120.930240][ T5903] libceph: mon0 (1)[c::]:6789 connect error [ 121.067799][ T6513] warning: `syz.3.227' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 121.149603][ T6516] Bluetooth: hci0: unsupported parameter 2327 [ 121.156136][ T6516] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 121.212526][ T5904] libceph: connect (1)[c::]:6789 error -101 [ 121.240817][ T5904] libceph: mon0 (1)[c::]:6789 connect error [ 121.469515][ T6526] netlink: 'syz.3.233': attribute type 39 has an invalid length. [ 121.499913][ T6501] ceph: No mds server is up or the cluster is laggy [ 121.670761][ T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 121.826618][ T6535] netlink: 12 bytes leftover after parsing attributes in process `syz.1.235'. [ 121.846242][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 121.861142][ T6535] netlink: 'syz.1.235': attribute type 18 has an invalid length. [ 121.885595][ T24] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 121.900208][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.940192][ T24] pvrusb2: Hardware description: Terratec Grabster AV400 [ 121.954340][ T24] pvrusb2: ********** [ 121.964366][ T24] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 121.995801][ T6535] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.004861][ T6535] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.013821][ T6535] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.022861][ T6535] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.040439][ T24] pvrusb2: Important functionality might not be entirely working. [ 122.054105][ T24] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 122.069981][ T24] pvrusb2: ********** [ 122.079172][ T6535] vxlan0: entered promiscuous mode [ 122.148719][ T2347] pvrusb2: Invalid write control endpoint [ 122.272535][ T1220] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 122.284316][ T2347] pvrusb2: Invalid write control endpoint [ 122.296488][ T2347] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 122.325793][ T2347] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 122.350249][ T2347] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 122.376638][ T2347] pvrusb2: Device being rendered inoperable [ 122.394886][ T6522] pvrusb2: Attempted to execute control transfer when device not ok [ 122.418941][ T2347] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 122.427193][ T2347] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 122.433465][ T5911] usb 3-1: USB disconnect, device number 3 [ 122.439650][ T2347] pvrusb2: Attached sub-driver cx25840 [ 122.441798][ T1220] usb 4-1: Using ep0 maxpacket: 8 [ 122.446223][ T2347] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 122.446238][ T2347] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 122.513413][ T1220] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.532828][ T1220] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 122.557293][ T1220] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 122.573115][ T1220] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 122.583102][ T1220] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 122.599758][ T1220] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 122.610039][ T1220] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 122.618312][ T1220] usb 4-1: Product: syz [ 122.630219][ T1220] usb 4-1: Manufacturer: syz [ 122.638366][ T1220] usb 4-1: SerialNumber: syz [ 122.660822][ T1220] usb 4-1: config 0 descriptor?? [ 122.710827][ T5904] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 122.877487][ T1220] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 122.907374][ T5904] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 122.940170][ T5904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.969819][ T5904] usb 5-1: config 0 descriptor?? [ 123.002702][ T5904] cp210x 5-1:0.0: cp210x converter detected [ 123.467344][ T1220] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 123.470251][ T6551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.500244][ T1220] radio-si470x 4-1:0.0: software version 0, hardware version 0 [ 123.511755][ T6551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.550695][ T1220] radio-si470x 4-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 123.588966][ T5904] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 123.607784][ T1220] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 123.648442][ T1220] radio-si470x 4-1:0.0: submitting int urb failed (-90) [ 123.683478][ T5904] usb 5-1: cp210x converter now attached to ttyUSB0 [ 123.838268][ T5911] usb 5-1: USB disconnect, device number 4 [ 123.882076][ T5911] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 123.927566][ T5911] cp210x 5-1:0.0: device disconnected [ 124.253980][ T1220] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 124.283340][ T1220] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 124.340340][ T1220] usb 4-1: USB disconnect, device number 3 [ 124.777198][ T6579] netlink: 120 bytes leftover after parsing attributes in process `syz.4.255'. [ 125.351003][ T6594] netlink: 20 bytes leftover after parsing attributes in process `syz.3.262'. [ 125.394881][ T6594] Zero length message leads to an empty skb [ 126.659055][ T6625] input: syz0 as /devices/virtual/input/input9 [ 127.406680][ T6652] netlink: 4 bytes leftover after parsing attributes in process `syz.1.280'. [ 128.613224][ T6689] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 128.632239][ T6684] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 128.967067][ T6701] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 129.088435][ T6704] input: syz1 as /devices/virtual/input/input11 [ 129.347196][ T6715] loop9: detected capacity change from 0 to 7 [ 129.359797][ T6068] Buffer I/O error on dev loop9, logical block 0, async page read [ 129.432873][ T6068] Buffer I/O error on dev loop9, logical block 0, async page read [ 129.479786][ T6068] Buffer I/O error on dev loop9, logical block 0, async page read [ 129.518435][ T6068] Buffer I/O error on dev loop9, logical block 0, async page read [ 129.542945][ T6068] Buffer I/O error on dev loop9, logical block 0, async page read [ 129.574365][ T6068] Buffer I/O error on dev loop9, logical block 0, async page read [ 129.615792][ T6068] Buffer I/O error on dev loop9, logical block 0, async page read [ 129.640812][ T6068] ldm_validate_partition_table(): Disk read failed. [ 129.647812][ T6068] Buffer I/O error on dev loop9, logical block 0, async page read [ 129.676279][ T6068] Buffer I/O error on dev loop9, logical block 0, async page read [ 129.723587][ T6068] Buffer I/O error on dev loop9, logical block 0, async page read [ 129.748295][ T6068] Dev loop9: unable to read RDB block 0 [ 129.775663][ T6068] loop9: unable to read partition table [ 129.816174][ T6068] loop9: partition table beyond EOD, truncated [ 129.850184][ T6715] ldm_validate_partition_table(): Disk read failed. [ 129.857903][ T6715] Dev loop9: unable to read RDB block 0 [ 129.897996][ T6715] loop9: unable to read partition table [ 129.927380][ T6715] loop9: partition table beyond EOD, truncated [ 129.950321][ T6715] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 129.950321][ T6715] ) failed (rc=-5) [ 130.450725][ T5904] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 130.622827][ T5904] usb 3-1: Using ep0 maxpacket: 16 [ 130.648153][ T5904] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 130.660669][ T5904] usb 3-1: config 0 has no interface number 0 [ 130.688878][ T5904] usb 3-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 130.719876][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.745587][ T5904] usb 3-1: Product: syz [ 130.749980][ T5904] usb 3-1: Manufacturer: syz [ 130.763400][ T5904] usb 3-1: SerialNumber: syz [ 130.806576][ T5904] usb 3-1: config 0 descriptor?? [ 130.830500][ T5904] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 131.001937][ T5904] snd-usb-audio 3-1:0.1: probe with driver snd-usb-audio failed with error -2 [ 131.140905][ T1220] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 131.264683][ T6044] udevd[6044]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 131.275938][ T5911] usb 3-1: USB disconnect, device number 4 [ 131.336439][ T1220] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.368977][ T1220] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.406973][ T1220] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 131.421027][ T5904] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 131.439690][ T1220] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 131.455410][ T1220] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.474933][ T1220] usb 4-1: config 0 descriptor?? [ 131.591488][ T5904] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 131.610872][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.644384][ T5904] usb 2-1: config 0 descriptor?? [ 131.663927][ T5904] cp210x 2-1:0.0: cp210x converter detected [ 131.900478][ T1220] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 131.930055][ T1220] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 132.080320][ T5904] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 132.107888][ T1220] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 132.147733][ T5904] usb 2-1: cp210x converter now attached to ttyUSB0 [ 132.269882][ C0] plantronics 0003:047F:FFFF.0004: hid_field_extract() called with n (132) > 32! (udevd) [ 132.314637][ T1220] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.326257][ T1220] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.358861][ T1220] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 132.378960][ T5911] usb 2-1: USB disconnect, device number 4 [ 132.406704][ T5911] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 132.429901][ T1220] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 132.459850][ T1220] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.487632][ T5911] cp210x 2-1:0.0: device disconnected [ 132.497251][ T1220] usb 5-1: Product: syz [ 132.507738][ T5904] usb 4-1: USB disconnect, device number 4 [ 132.509230][ T1220] usb 5-1: Manufacturer: syz [ 132.541400][ T1220] usb 5-1: SerialNumber: syz [ 132.794883][ T6767] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 133.031956][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.038638][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.429691][ T1220] cdc_ncm 5-1:1.0: SET_CRC_MODE failed [ 133.464785][ T1220] cdc_ncm 5-1:1.0: bind() failure [ 133.506335][ T1220] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 133.521429][ T1220] cdc_ncm 5-1:1.1: bind() failure [ 133.538663][ T1220] usb 5-1: USB disconnect, device number 5 [ 133.751108][ T5904] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 133.932944][ T5904] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 133.949662][ T5904] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 133.962595][ T5904] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 133.973678][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.987984][ T6805] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 134.001858][ T5904] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 134.210538][ T1212] usb 3-1: USB disconnect, device number 5 [ 134.619298][ T6834] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 134.706843][ T6834] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 134.728670][ T6842] capability: warning: `syz.0.350' uses 32-bit capabilities (legacy support in use) [ 134.758506][ T6844] netlink: 4 bytes leftover after parsing attributes in process `syz.1.351'. [ 135.276696][ T6863] input: syz0 as /devices/virtual/input/input12 [ 135.867260][ T6883] capability: warning: `syz.1.362' uses deprecated v2 capabilities in a way that may be insecure [ 136.393963][ T5911] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 136.598511][ T5911] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 136.633002][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.661445][ T5911] usb 1-1: Product: syz [ 136.671376][ T5911] usb 1-1: Manufacturer: syz [ 136.685164][ T5911] usb 1-1: SerialNumber: syz [ 136.726175][ T5911] usb 1-1: config 0 descriptor?? [ 137.500772][ T5832] Bluetooth: hci1: command 0x0c1a tx timeout [ 137.500943][ T5904] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 137.579780][ T5904] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 137.976109][ T5911] usb 1-1: f81604_read: reg: 100e failed: -EPROTO [ 138.010792][ T5911] usb 1-1: f81604_read: reg: 200f failed: -EPROTO [ 138.036428][ T5911] usb 1-1: USB disconnect, device number 5 [ 138.083022][ T5911] usb 1-1: f81604_read: reg: 100f failed: -ENODEV [ 138.215176][ T5911] usb 1-1: f81604_read: reg: 200f failed: -ENODEV [ 139.325523][ T6980] process 'syz.2.388' launched './file0' with NULL argv: empty string added [ 139.745772][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout [ 139.760210][ T5904] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 139.775496][ T5904] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 140.197367][ T7010] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 141.050699][ T1212] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 141.223472][ T1212] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 141.239545][ T1212] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 141.255450][ T1212] usb 1-1: config 220 has an invalid descriptor of length 9, skipping remainder of the config [ 141.273156][ T1212] usb 1-1: config 220 has no interface number 2 [ 141.283809][ T1212] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 141.302671][ T1212] usb 1-1: config 220 interface 0 has no altsetting 0 [ 141.309944][ T1212] usb 1-1: config 220 interface 76 has no altsetting 0 [ 141.317405][ T1212] usb 1-1: config 220 interface 1 has no altsetting 0 [ 141.329078][ T1212] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 141.338601][ T1212] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.353819][ T1212] usb 1-1: Product: syz [ 141.358503][ T1212] usb 1-1: Manufacturer: syz [ 141.363925][ T1212] usb 1-1: SerialNumber: syz [ 141.601351][ T1212] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 141.620701][ T1212] usb 1-1: No valid video chain found. [ 141.626628][ T1212] usb 1-1: selecting invalid altsetting 0 [ 141.661724][ T1212] usb 1-1: selecting invalid altsetting 0 [ 141.667834][ T1212] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 141.712800][ T1212] usb 1-1: USB disconnect, device number 6 [ 141.980760][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout [ 141.981161][ T5904] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 142.015561][ T5904] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 142.311390][ T1212] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 142.472813][ T1212] usb 3-1: Using ep0 maxpacket: 32 [ 142.497171][ T1212] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.526924][ T1212] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.538888][ T1212] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 142.548204][ T1212] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.562062][ T1212] usb 3-1: config 0 descriptor?? [ 142.646127][ T7073] netlink: 'syz.0.414': attribute type 1 has an invalid length. [ 142.659317][ T7073] netlink: 68 bytes leftover after parsing attributes in process `syz.0.414'. [ 142.869616][ T7082] vivid-000: disconnect [ 142.878585][ T7081] vivid-000: reconnect [ 142.998876][ T1212] savu 0003:1E7D:2D5A.0005: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 143.259661][ T1212] usb 3-1: USB disconnect, device number 6 [ 144.141002][ T5832] Bluetooth: hci4: command 0x0c1a tx timeout [ 144.141332][ T5904] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 144.165344][ T5904] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 144.421121][ T5911] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 144.570767][ T5911] usb 3-1: Using ep0 maxpacket: 32 [ 144.586740][ T5911] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 144.595732][ T5911] usb 3-1: config 0 has no interface number 0 [ 144.602689][ T5911] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.614035][ T5911] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.624365][ T5911] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 144.633963][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.651468][ T5911] usb 3-1: config 0 descriptor?? [ 145.051054][ T5884] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 145.211179][ T5884] usb 1-1: Using ep0 maxpacket: 16 [ 145.232673][ T5884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.262829][ T5884] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 145.268459][ T7134] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 145.281069][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.299673][ T5911] input: HID 28bd:0094 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0094.0006/input/input13 [ 145.301559][ T5884] usb 1-1: config 0 descriptor?? [ 145.429679][ T5911] uclogic 0003:28BD:0094.0006: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.2-1/input1 [ 145.496012][ T5911] usb 3-1: USB disconnect, device number 7 [ 145.598913][ T7137] fido_id[7137]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 145.769067][ T5884] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 145.776388][ T5884] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 145.784124][ T5884] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 145.791598][ T5884] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 145.798709][ T5884] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 145.807494][ T5884] mcp2221 0003:04D8:00DD.0007: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 146.259105][ T30] audit: type=1326 audit(1750225872.643:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7145 comm="syz.2.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe47118e929 code=0x7ffc0000 [ 146.263399][ T5884] usb 1-1: USB disconnect, device number 7 [ 146.309400][ T30] audit: type=1326 audit(1750225872.673:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7145 comm="syz.2.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe47118d290 code=0x7ffc0000 [ 146.345699][ T30] audit: type=1326 audit(1750225872.673:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7145 comm="syz.2.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe47118d290 code=0x7ffc0000 [ 146.373855][ T30] audit: type=1326 audit(1750225872.673:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7145 comm="syz.2.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe47118e929 code=0x7ffc0000 [ 146.402690][ T30] audit: type=1326 audit(1750225872.673:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7145 comm="syz.2.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe47118e929 code=0x7ffc0000 [ 146.429089][ T30] audit: type=1326 audit(1750225872.673:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7145 comm="syz.2.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe47118e929 code=0x7ffc0000 [ 146.457493][ T30] audit: type=1326 audit(1750225872.673:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7145 comm="syz.2.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe47118e929 code=0x7ffc0000 [ 146.480258][ T30] audit: type=1326 audit(1750225872.673:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7145 comm="syz.2.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe47118e929 code=0x7ffc0000 [ 146.504760][ T30] audit: type=1326 audit(1750225872.673:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7145 comm="syz.2.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe47118e929 code=0x7ffc0000 [ 146.538626][ T30] audit: type=1326 audit(1750225872.673:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7145 comm="syz.2.444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe47118e929 code=0x7ffc0000 [ 146.820725][ T10] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 146.973080][ T10] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 146.990640][ T10] usb 3-1: config 0 has no interface number 0 [ 146.996873][ T10] usb 3-1: config 0 interface 41 has no altsetting 0 [ 147.023367][ T10] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 147.037730][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.058863][ T10] usb 3-1: Product: syz [ 147.070673][ T10] usb 3-1: Manufacturer: syz [ 147.075345][ T10] usb 3-1: SerialNumber: syz [ 147.091859][ T10] usb 3-1: config 0 descriptor?? [ 147.539144][ T7167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.452'. [ 147.549514][ T7167] netlink: 'syz.1.452': attribute type 15 has an invalid length. [ 147.562202][ T7167] netlink: 'syz.1.452': attribute type 18 has an invalid length. [ 147.925727][ T10] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 148.145639][ T10] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 148.157337][ T10] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 148.179610][ T10] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 148.203100][ T10] usb 3-1: USB disconnect, device number 8 [ 150.510077][ T10] kernel read not supported for file /dsp (pid: 10 comm: kworker/0:1) [ 150.938789][ T7224] syzkaller1: entered promiscuous mode [ 150.953550][ T7224] syzkaller1: entered allmulticast mode [ 150.963766][ T7226] net_ratelimit: 75 callbacks suppressed [ 150.963786][ T7226] Dead loop on virtual device ip6_vti0, fix it urgently! [ 151.004300][ T7226] Dead loop on virtual device ip6_vti0, fix it urgently! [ 151.018824][ T7226] Dead loop on virtual device ip6_vti0, fix it urgently! [ 151.032256][ T7226] Dead loop on virtual device ip6_vti0, fix it urgently! [ 151.040164][ T7226] Dead loop on virtual device ip6_vti0, fix it urgently! [ 151.055858][ T7226] Dead loop on virtual device ip6_vti0, fix it urgently! [ 151.290673][ T5911] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 151.469108][ T5911] usb 1-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 151.479474][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.492879][ T5911] usb 1-1: Product: syz [ 151.497187][ T5911] usb 1-1: Manufacturer: syz [ 151.505204][ T5911] usb 1-1: SerialNumber: syz [ 151.513926][ T5911] usb 1-1: config 0 descriptor?? [ 151.936953][ T5911] mos7840 1-1:0.0: required endpoints missing [ 151.949944][ T5911] usb 1-1: USB disconnect, device number 8 [ 152.807331][ T7270] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 154.228998][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 154.229051][ T30] audit: type=1400 audit(1750225880.613:647): lsm=SMACK fn=smack_task_kill action=denied subject="w" object="_" requested=w pid=7305 comm="syz.1.510" opid=7305 ocomm="syz.1.510" [ 154.860793][ T5832] Bluetooth: hci0: command tx timeout [ 154.990954][ T5911] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 155.150680][ T5911] usb 2-1: Using ep0 maxpacket: 16 [ 155.159820][ T5911] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 155.173607][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.190032][ T5911] usb 2-1: config 0 descriptor?? [ 155.203582][ T5911] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 155.806859][ T30] audit: type=1326 audit(1750225882.193:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7353 comm="syz.0.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1de38e929 code=0x7fc00000 [ 156.438730][ T5911] gspca_sonixj: reg_w1 err -71 [ 156.522474][ T5911] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 156.531021][ T30] audit: type=1326 audit(1750225882.833:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7353 comm="syz.0.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa1de32ab19 code=0x7fc00000 [ 156.556236][ T5911] usb 2-1: USB disconnect, device number 5 [ 156.578550][ T30] audit: type=1326 audit(1750225882.833:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7353 comm="syz.0.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fa1de32abdf code=0x7fc00000 [ 156.605166][ T30] audit: type=1326 audit(1750225882.833:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7353 comm="syz.0.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa1de38e929 code=0x7fc00000 [ 156.810022][ T7375] netlink: 'syz.2.542': attribute type 1 has an invalid length. [ 156.820399][ T7375] netlink: 32 bytes leftover after parsing attributes in process `syz.2.542'. [ 156.840218][ T7375] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.850159][ T7375] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.857709][ T7375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.412041][ T7398] overlayfs: failed to clone upperpath [ 157.421358][ T7400] netlink: 'syz.1.553': attribute type 2 has an invalid length. [ 157.435198][ T7400] netlink: 16 bytes leftover after parsing attributes in process `syz.1.553'. [ 157.455413][ T7398] overlayfs: failed to clone lowerpath [ 159.001381][ T7443] overlayfs: failed to clone upperpath [ 159.724718][ T7467] netlink: 'syz.0.583': attribute type 3 has an invalid length. [ 159.780891][ T5883] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 159.940699][ T5883] usb 2-1: Using ep0 maxpacket: 16 [ 159.948996][ T5883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.961138][ T5883] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 159.974812][ T5883] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 159.985249][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.996884][ T5883] usb 2-1: config 0 descriptor?? [ 160.040885][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 160.204789][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 160.215578][ T10] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 160.227536][ T10] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 160.246929][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 160.257203][ T10] usb 1-1: config 1 has no interface number 0 [ 160.263982][ T10] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 160.279117][ T10] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 160.298973][ T10] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 160.320905][ T10] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 160.334851][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.355341][ T10] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 160.439161][ T5883] HID 045e:07da: Invalid code 65791 type 1 [ 160.459204][ T5883] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0008/input/input14 [ 160.488398][ T5883] microsoft 0003:045E:07DA.0008: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 160.556423][ T10] snd_usb_pod 1-1:1.1: cannot start listening: -90 [ 160.564281][ T10] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 160.574019][ T10] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -90 [ 160.762938][ T5911] usb 1-1: USB disconnect, device number 9 [ 161.268601][ T5883] usb 2-1: USB disconnect, device number 6 [ 162.062676][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 162.150912][ T5883] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 162.374142][ T5883] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 162.391674][ T5883] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 162.420663][ T5883] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 162.435980][ T5883] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 162.457559][ T5883] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 162.485248][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.498239][ T5883] usb 2-1: Product: syz [ 162.503843][ T5883] usb 2-1: Manufacturer: syz [ 162.509232][ T5883] usb 2-1: SerialNumber: syz [ 162.518455][ T7507] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 162.768236][ T7507] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 162.793981][ T7507] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 163.423466][ T7507] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 163.441041][ T7507] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 163.660887][ T5883] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 163.672222][ T5883] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 163.716292][ T5883] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 163.864299][ T5883] cdc_ncm 2-1:1.0: setting tx_max = 88 [ 163.907481][ T5883] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 163.939237][ T5883] usb 2-1: USB disconnect, device number 7 [ 163.952656][ T5883] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 165.443484][ T1212] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 165.615791][ T1212] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 165.625484][ T1212] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.650668][ T1212] usb 2-1: Product: syz [ 165.655146][ T1212] usb 2-1: Manufacturer: syz [ 165.659791][ T1212] usb 2-1: SerialNumber: syz [ 165.672368][ T1212] usb 2-1: config 0 descriptor?? [ 166.091278][ T1212] airspy 2-1:0.0: Board ID: 00 [ 166.096319][ T1212] airspy 2-1:0.0: Firmware version: [ 166.500892][ T5883] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 166.663002][ T5883] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 166.672375][ T5883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.683967][ T5883] usb 1-1: config 0 descriptor?? [ 166.919978][ T1212] airspy 2-1:0.0: usb_control_msg() failed -71 request 0f [ 166.931668][ T1212] airspy 2-1:0.0: Registered as swradio24 [ 166.937477][ T1212] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 166.950118][ T1212] usb 2-1: USB disconnect, device number 8 [ 167.921362][ T5883] usb 1-1: Cannot set autoneg [ 167.926731][ T5883] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 167.960282][ T5883] usb 1-1: USB disconnect, device number 10 [ 168.490700][ T978] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 168.660695][ T978] usb 2-1: Using ep0 maxpacket: 16 [ 168.684488][ T978] usb 2-1: unable to get BOS descriptor or descriptor too short [ 168.708473][ T978] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 168.720737][ T978] usb 2-1: can't read configurations, error -71 [ 168.999792][ T7635] netlink: 12 bytes leftover after parsing attributes in process `syz.0.659'. [ 169.780788][ T978] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 169.883318][ T7650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.666'. [ 169.934482][ T7652] netlink: 9 bytes leftover after parsing attributes in process `syz.2.667'. [ 169.944576][ T978] usb 2-1: Using ep0 maxpacket: 16 [ 169.951911][ T7652] gretap0: entered promiscuous mode [ 169.958879][ T978] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.969170][ T7652] netlink: 5 bytes leftover after parsing attributes in process `syz.2.667'. [ 169.970096][ T978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 169.992414][ T7652] 0ªî{X¹¦: renamed from gretap0 [ 170.000452][ T7652] 0ªî{X¹¦: left promiscuous mode [ 170.005778][ T978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 170.006256][ T7652] 0ªî{X¹¦: entered allmulticast mode [ 170.015562][ T978] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 170.015595][ T978] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 170.017872][ T978] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 170.027160][ T7652] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 170.032151][ T978] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 170.050747][ T1212] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 170.075646][ T978] usb 2-1: Manufacturer: syz [ 170.094206][ T978] usb 2-1: config 0 descriptor?? [ 170.232809][ T1212] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.244820][ T1212] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 170.265332][ T1212] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 170.275893][ T1212] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.288058][ T1212] usb 1-1: Product: syz [ 170.294735][ T1212] usb 1-1: Manufacturer: syz [ 170.299664][ T1212] usb 1-1: SerialNumber: syz [ 170.318666][ T7641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.335497][ T7641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.440725][ T978] rc_core: IR keymap rc-hauppauge not found [ 170.457670][ T978] Registered IR keymap rc-empty [ 170.465909][ T978] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 170.490995][ T978] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 170.515074][ T978] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 170.544361][ T978] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input15 [ 170.558481][ T7648] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 170.571348][ T978] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 170.591224][ T978] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 170.610891][ T978] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 170.638934][ T978] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 170.675493][ T978] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 170.720161][ T978] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 170.751048][ T978] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 170.781944][ T978] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 170.810953][ T978] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 170.840870][ T978] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 170.864433][ T978] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 170.873914][ T978] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 170.895738][ T978] usb 2-1: USB disconnect, device number 10 [ 171.185271][ T7648] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 171.399038][ T1212] cdc_mbim 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 171.406060][ T1212] cdc_mbim 1-1:1.0: setting rx_max = 16384 [ 171.602066][ T1212] cdc_mbim 1-1:1.0: setting tx_max = 184 [ 171.624909][ T1212] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 171.645129][ T1212] wwan wwan0: port wwan0mbim0 attached [ 171.654296][ T7683] macsec1: entered allmulticast mode [ 171.672671][ T1212] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, 42:42:42:42:42:42 [ 171.689556][ T1212] usb 1-1: USB disconnect, device number 11 [ 171.698394][ T1212] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 171.845291][ T1212] wwan wwan0: port wwan0mbim0 disconnected [ 172.277170][ T7695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.682'. [ 172.838044][ T7722] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.695'. [ 173.725019][ T1220] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 173.888577][ T1220] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.905387][ T1220] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 173.924023][ T1220] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.933516][ T1220] usb 2-1: Product: syz [ 173.937950][ T1220] usb 2-1: Manufacturer: syz [ 173.945467][ T1220] usb 2-1: SerialNumber: syz [ 174.981443][ T1220] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 174.988185][ T1220] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 174.996130][ T1220] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 175.197933][ T1220] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 175.217161][ T1220] usb 2-1: USB disconnect, device number 11 [ 175.225568][ T1220] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 176.094180][ T7778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.720'. [ 177.774965][ T7816] loop2: detected capacity change from 0 to 7 [ 177.788008][ T7816] Dev loop2: unable to read RDB block 7 [ 177.800798][ T7816] loop2: unable to read partition table [ 177.811517][ T7816] loop2: partition table beyond EOD, truncated [ 177.817828][ T7816] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 178.460766][ T1212] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 178.640862][ T1212] usb 2-1: Using ep0 maxpacket: 8 [ 178.654176][ T1212] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 178.663595][ T1212] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.671736][ T1212] usb 2-1: Product: syz [ 178.675967][ T1212] usb 2-1: Manufacturer: syz [ 178.680867][ T1212] usb 2-1: SerialNumber: syz [ 178.692058][ T1212] usb 2-1: config 0 descriptor?? [ 178.703862][ T7820] syz.2.737 (7820) used greatest stack depth: 20152 bytes left [ 178.705725][ T1212] gspca_main: se401-2.14.0 probing 047d:5003 [ 179.122175][ T1212] gspca_se401: Bayer format not supported! [ 179.350281][ T978] usb 2-1: USB disconnect, device number 12 [ 179.787257][ T7869] 9pnet_fd: Insufficient options for proto=fd [ 180.017095][ T7877] kvm: user requested TSC rate below hardware speed [ 180.450835][ T24] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 180.614312][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 180.626192][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 180.638212][ T24] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 180.647698][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.661633][ T24] usb 2-1: config 0 descriptor?? [ 180.883859][ T24] ath6kl: Failed to submit usb control message: -71 [ 180.891809][ T24] ath6kl: unable to send the bmi data to the device: -71 [ 180.898942][ T24] ath6kl: Unable to send get target info: -71 [ 180.910707][ T24] ath6kl: Failed to init ath6kl core: -71 [ 180.919616][ T24] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 180.938221][ T24] usb 2-1: USB disconnect, device number 13 [ 181.866066][ T7913] loop8: detected capacity change from 0 to 7 [ 181.881804][ T7913] Dev loop8: unable to read RDB block 7 [ 181.887479][ T7913] loop8: unable to read partition table [ 181.899092][ T7913] loop8: partition table beyond EOD, truncated [ 181.914178][ T7913] loop_reread_partitions: partition scan of loop8 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¬âÐû [ 181.914178][ T7913] ) failed (rc=-5) [ 182.976293][ T7944] loop4: detected capacity change from 0 to 7 [ 182.993622][ T7944] Dev loop4: unable to read RDB block 7 [ 182.999280][ T7944] loop4: unable to read partition table [ 183.009548][ T7944] loop4: partition table beyond EOD, truncated [ 183.017575][ T7944] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 183.869009][ T7968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.802'. [ 183.878129][ T7968] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 184.270784][ T1220] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 184.420821][ T1220] usb 2-1: Using ep0 maxpacket: 16 [ 184.427701][ T1220] usb 2-1: config index 0 descriptor too short (expected 17170, got 18) [ 184.436276][ T1220] usb 2-1: config 0 has too many interfaces: 63, using maximum allowed: 32 [ 184.444973][ T1220] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 63 [ 184.456217][ T1220] usb 2-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=8d.90 [ 184.465583][ T1220] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.474045][ T1220] usb 2-1: Product: syz [ 184.478229][ T1220] usb 2-1: Manufacturer: syz [ 184.484385][ T1220] usb 2-1: SerialNumber: syz [ 184.491387][ T1220] usb 2-1: config 0 descriptor?? [ 184.499791][ T1220] ums-freecom 2-1:0.0: USB Mass Storage device detected [ 184.661812][ T7985] netlink: 'syz.2.809': attribute type 39 has an invalid length. [ 184.714711][ T7977] xt_hashlimit: size too large, truncated to 1048576 [ 184.982082][ T1220] usb 2-1: USB disconnect, device number 14 [ 185.546764][ T1220] Process accounting resumed [ 185.698772][ T8007] netlink: 1 bytes leftover after parsing attributes in process `syz.1.819'. [ 185.807916][ T8009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.820'. [ 185.856119][ T8009] hsr_slave_1 (unregistering): left promiscuous mode [ 186.787844][ T8030] netlink: 'syz.1.830': attribute type 12 has an invalid length. [ 186.798898][ T8030] netlink: 'syz.1.830': attribute type 29 has an invalid length. [ 186.807681][ T8030] netlink: 'syz.1.830': attribute type 2 has an invalid length. [ 186.820111][ T8030] netlink: 'syz.1.830': attribute type 2 has an invalid length. [ 186.828125][ T8030] netlink: 'syz.1.830': attribute type 1 has an invalid length. [ 186.836293][ T8030] netlink: 'syz.1.830': attribute type 37 has an invalid length. [ 186.845220][ T8030] netlink: 'syz.1.830': attribute type 2 has an invalid length. [ 186.855933][ T8030] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.123105][ T8067] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.136582][ T8067] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.146306][ T8067] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.156358][ T8067] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.580940][ T8075] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 188.589598][ T8075] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 190.561247][ T8110] netlink: 'syz.2.863': attribute type 1 has an invalid length. [ 190.600371][ T8110] 8021q: adding VLAN 0 to HW filter on device bond1 [ 190.637694][ T8113] netlink: 'syz.1.864': attribute type 1 has an invalid length. [ 190.647643][ T8110] 8021q: adding VLAN 0 to HW filter on device bond1 [ 190.654923][ T8110] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 190.666489][ T8110] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 190.706247][ T8113] 8021q: adding VLAN 0 to HW filter on device bond1 [ 190.719218][ T8115] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 191.275960][ T8141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.875'. [ 191.725332][ T30] audit: type=1326 audit(1750225918.113:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8120 comm="syz.2.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe47118e929 code=0x7fc00000 [ 193.430996][ T1220] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 193.584557][ T1220] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 193.596622][ T1220] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 193.608723][ T1220] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 193.618541][ T1220] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 193.631772][ T1220] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 193.640917][ T1220] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.651010][ T1220] usb 2-1: config 0 descriptor?? [ 194.067856][ T1220] plantronics 0003:047F:FFFF.0009: ignoring exceeding usage max [ 194.077667][ T1220] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 194.088717][ T1220] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 194.467147][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.474001][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.473301][ T8239] Invalid ELF header magic: != ELF [ 196.421316][ T978] usb 2-1: reset high-speed USB device number 15 using dummy_hcd [ 196.585860][ T978] usb 2-1: device firmware changed [ 196.597327][ T10] usb 2-1: USB disconnect, device number 15 [ 196.750847][ T10] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 196.905144][ T10] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 196.914474][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.922714][ T10] usb 2-1: Product: syz [ 196.926978][ T10] usb 2-1: Manufacturer: syz [ 196.931657][ T10] usb 2-1: SerialNumber: syz [ 196.938081][ T10] usb 2-1: config 0 descriptor?? [ 197.164213][ T24] usb 2-1: USB disconnect, device number 16 [ 197.948261][ T8266] netlink: 'syz.1.931': attribute type 39 has an invalid length. [ 199.280805][ T8311] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 199.408471][ T8315] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 200.452999][ T8327] Bluetooth: hci0: invalid length 0, exp 2 for type 16 [ 201.330755][ T24] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 201.482724][ T24] usb 2-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 201.496258][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 201.504292][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 201.513936][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.525022][ T24] usb 2-1: config 0 descriptor?? [ 201.940633][ T24] logitech 0003:046D:C294.000A: unknown main item tag 0x0 [ 201.947854][ T24] logitech 0003:046D:C294.000A: unknown main item tag 0x0 [ 201.955452][ T24] logitech 0003:046D:C294.000A: item fetching failed at offset 2/3 [ 201.965351][ T24] logitech 0003:046D:C294.000A: parse failed [ 201.971823][ T24] logitech 0003:046D:C294.000A: probe with driver logitech failed with error -22 [ 202.151467][ T24] usb 2-1: USB disconnect, device number 17 [ 202.944546][ T8358] kvm: Disabled LAPIC found during irq injection [ 204.060300][ T8377] netlink: 566 bytes leftover after parsing attributes in process `syz.1.983'. [ 204.531645][ T8393] syzkaller1: entered promiscuous mode [ 204.537217][ T8393] syzkaller1: entered allmulticast mode [ 204.546617][ T8393] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 204.727250][ T30] audit: type=1326 audit(1750225931.113:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8401 comm="syz.1.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59b678e929 code=0x7ffc0000 [ 204.769678][ T30] audit: type=1326 audit(1750225931.113:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8401 comm="syz.1.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59b678e929 code=0x7ffc0000 [ 204.801908][ T30] audit: type=1326 audit(1750225931.143:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8401 comm="syz.1.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f59b678e929 code=0x7ffc0000 [ 204.824390][ T30] audit: type=1326 audit(1750225931.143:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8401 comm="syz.1.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59b678e929 code=0x7ffc0000 [ 204.853604][ T30] audit: type=1326 audit(1750225931.143:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8401 comm="syz.1.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f59b678e929 code=0x7ffc0000 [ 204.879316][ T30] audit: type=1326 audit(1750225931.143:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8401 comm="syz.1.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59b678e929 code=0x7ffc0000 [ 204.903023][ T30] audit: type=1326 audit(1750225931.143:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8401 comm="syz.1.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f59b678e929 code=0x7ffc0000 [ 204.925743][ T30] audit: type=1326 audit(1750225931.143:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8401 comm="syz.1.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59b678e929 code=0x7ffc0000 [ 204.948555][ T30] audit: type=1326 audit(1750225931.143:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8401 comm="syz.1.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f59b678e929 code=0x7ffc0000 [ 204.970729][ T30] audit: type=1326 audit(1750225931.143:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8401 comm="syz.1.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59b678e929 code=0x7ffc0000 [ 205.447714][ T8423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1005'. [ 206.502900][ T8437] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1012'. [ 207.540099][ T8442] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1014'. [ 207.675949][ T8446] cgroup: Unknown subsys name 'cpuset' [ 207.744232][ T8448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1017'. [ 209.001536][ T8488] IPv6: Can't replace route, no match found [ 209.922678][ T8520] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1050'. [ 212.851179][ T978] IPVS: starting estimator thread 0... [ 212.857250][ T8612] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 212.951147][ T8616] IPVS: using max 25 ests per chain, 60000 per kthread [ 214.023268][ T8646] batadv_slave_1: entered promiscuous mode [ 214.156115][ T8643] batadv_slave_1: left promiscuous mode [ 214.602515][ T8657] netlink: 'syz.1.1109': attribute type 3 has an invalid length. [ 214.611495][ T8657] netlink: 'syz.1.1109': attribute type 1 has an invalid length. [ 214.619472][ T8657] netlink: 191152 bytes leftover after parsing attributes in process `syz.1.1109'. [ 217.700832][ T5911] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 217.795098][ T8752] vcan0: tx drop: invalid da for name 0x00000000000000f5 [ 217.874966][ T5911] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 217.886652][ T5911] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 217.897753][ T5911] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 217.907690][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.922216][ T8741] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 217.935383][ T5911] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 218.044742][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058f3d000: rx timeout, send abort [ 218.136819][ T5911] usb 2-1: USB disconnect, device number 18 [ 218.544889][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058f3cc00: rx timeout, send abort [ 218.554156][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058f3d000: abort rx timeout. Force session deactivation [ 218.712818][ T8759] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 218.733165][ T8759] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 219.053470][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058f3cc00: abort rx timeout. Force session deactivation [ 219.700687][ T978] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 219.875737][ T978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 219.888190][ T978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.899399][ T978] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 219.909430][ T978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.921474][ T978] usb 2-1: config 0 descriptor?? [ 220.342844][ T978] savu 0003:1E7D:2D5A.000B: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 220.593855][ T5911] usb 2-1: USB disconnect, device number 19 [ 220.838413][ T8809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1176'. [ 221.189419][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 221.189441][ T30] audit: type=1326 audit(1750225947.573:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8825 comm="syz.2.1185" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe47118e929 code=0x0 [ 224.127697][ T8905] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1222'. [ 225.473219][ T5883] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 225.632535][ T5883] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 225.643670][ T5883] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 225.654175][ T5883] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 225.663556][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.676014][ T8932] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 225.685897][ T5883] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 225.902098][ T5911] usb 2-1: USB disconnect, device number 20 [ 226.656649][ T8943] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1238'. [ 226.684578][ T8943] 8021q: adding VLAN 0 to HW filter on device bond2 [ 226.715491][ T8943] 8021q: adding VLAN 0 to HW filter on device bond2 [ 226.724984][ T8943] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 226.736594][ T8943] bond2: (slave vcan1): Error -95 calling set_mac_address [ 227.796195][ T8952] netlink: 'syz.2.1242': attribute type 6 has an invalid length. [ 229.510179][ T8974] Invalid ELF header magic: != ELF [ 230.028577][ T8987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1254'. [ 230.038020][ T8987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1254'. [ 230.142762][ T8989] syz_tun: entered promiscuous mode [ 230.148278][ T8989] syz_tun: entered allmulticast mode [ 231.404170][ T978] libceph: connect (1)[c::]:6789 error -101 [ 231.410350][ T978] libceph: mon0 (1)[c::]:6789 connect error [ 231.453681][ T24] libceph: connect (1)[b::]:6789 error -101 [ 231.460035][ T24] libceph: mon0 (1)[b::]:6789 connect error [ 231.673619][ T978] libceph: connect (1)[c::]:6789 error -101 [ 231.680196][ T978] libceph: mon0 (1)[c::]:6789 connect error [ 231.721594][ T24] libceph: connect (1)[b::]:6789 error -101 [ 231.732499][ T24] libceph: mon0 (1)[b::]:6789 connect error [ 232.207491][ T978] libceph: connect (1)[c::]:6789 error -101 [ 232.216116][ T978] libceph: mon0 (1)[c::]:6789 connect error [ 232.221744][ T9012] ceph: No mds server is up or the cluster is laggy [ 232.229416][ T9017] ceph: No mds server is up or the cluster is laggy [ 232.255237][ T24] libceph: connect (1)[b::]:6789 error -101 [ 232.274647][ T24] libceph: mon0 (1)[b::]:6789 connect error [ 233.391428][ T9056] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1283'. [ 235.944077][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 236.045619][ T9103] pim6reg: entered allmulticast mode [ 236.057081][ T9103] pim6reg: left allmulticast mode [ 236.780882][ T5884] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 236.941087][ T5884] usb 2-1: Using ep0 maxpacket: 16 [ 238.553823][ T5884] usb 2-1: unable to get BOS descriptor or descriptor too short [ 238.565451][ T5884] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 238.575092][ T5884] usb 2-1: can't read configurations, error -71 [ 242.529319][ T9213] tipc: Started in network mode [ 242.548936][ T9213] tipc: Node identity 4, cluster identity 4711 [ 242.562350][ T9213] tipc: Node number set to 4 [ 245.956002][ T9253] mkiss: ax0: crc mode is auto. [ 246.024483][ T9253] Falling back ldisc for ttyS3. [ 246.379061][ T9267] loop6: detected capacity change from 0 to 524287999 [ 246.788613][ T9273] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 248.421136][ T978] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 248.586708][ T978] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 248.597667][ T978] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 248.616768][ T978] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 248.626385][ T978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.635130][ T978] usb 2-1: Product: syz [ 248.639336][ T978] usb 2-1: Manufacturer: syz [ 248.644800][ T978] usb 2-1: SerialNumber: syz [ 248.862962][ T978] usb 2-1: 0:2 : does not exist [ 248.886113][ T978] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 248.925077][ T978] usb 2-1: USB disconnect, device number 23 [ 248.951961][ T9328] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1398'. [ 251.212305][ T9388] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 251.515058][ T9402] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1431'. [ 255.904085][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.910695][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.531679][ T9534] netlink: 372 bytes leftover after parsing attributes in process `syz.2.1489'. [ 257.623442][ T9564] Invalid ELF header len 4 [ 258.121999][ T9576] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1508'. [ 258.422849][ C0] hrtimer: interrupt took 1173086 ns [ 262.505509][ T9637] veth0: entered promiscuous mode [ 262.531444][ T9636] veth0: left promiscuous mode [ 267.517598][ T9724] overlayfs: failed to clone upperpath [ 272.033611][ T9775] netlink: 'syz.2.1594': attribute type 11 has an invalid length. [ 272.504090][ T9789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1599'. [ 272.978247][ T30] audit: type=1800 audit(1750225999.363:667): pid=9795 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.1602" name="nullb0" dev="tmpfs" ino=3816 res=0 errno=0 [ 273.138830][ T30] audit: type=1326 audit(1750225999.523:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9796 comm="syz.2.1603" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe47118e929 code=0x0 [ 274.236617][ T9806] overlayfs: failed to clone upperpath [ 276.369812][ T9814] netlink: 'syz.1.1609': attribute type 4 has an invalid length. [ 276.416171][ T9814] netlink: 'syz.1.1609': attribute type 4 has an invalid length. [ 280.308103][ T9873] netlink: 'syz.1.1632': attribute type 6 has an invalid length. [ 283.732587][ T9948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1662'. [ 283.751155][ T9948] vxlan1: entered promiscuous mode [ 286.631666][ T31] INFO: task syz-executor:5826 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 286.676171][ T31] Not tainted 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 [ 286.720687][ T31] Blocked by coredump. [ 286.725914][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.739911][ T31] task:syz-executor state:D stack:21576 pid:5826 tgid:5826 ppid:1 task_flags:0x40014c flags:0x00004002 [ 286.755870][ T31] Call Trace: [ 286.759279][ T31] [ 286.762814][ T31] __schedule+0x16a2/0x4cb0 [ 286.767467][ T31] ? __lock_acquire+0xab9/0xd20 [ 286.778434][ T31] ? schedule+0x165/0x360 [ 286.784987][ T31] ? __pfx___schedule+0x10/0x10 [ 286.789974][ T31] ? schedule+0x91/0x360 [ 286.798733][ T31] schedule+0x165/0x360 [ 286.803302][ T31] schedule_preempt_disabled+0x13/0x30 [ 286.809033][ T31] __mutex_lock+0x724/0xe80 [ 286.817462][ T31] ? kobject_put+0x43f/0x480 [ 286.822425][ T31] ? __mutex_lock+0x51b/0xe80 [ 286.827403][ T31] ? rfkill_unregister+0xc8/0x220 [ 286.836856][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 286.844421][ T31] ? __pfx_device_del+0x10/0x10 [ 286.849478][ T31] ? hci_sock_dev_event+0x42d/0x600 [ 286.858709][ T31] rfkill_unregister+0xc8/0x220 [ 286.864608][ T31] hci_unregister_dev+0x360/0x500 [ 286.869865][ T31] vhci_release+0x80/0xd0 [ 286.878139][ T31] ? __pfx_vhci_release+0x10/0x10 [ 286.886464][ T31] __fput+0x449/0xa70 [ 286.895450][ T31] task_work_run+0x1d1/0x260 [ 286.900503][ T31] ? __pfx_task_work_run+0x10/0x10 [ 286.907193][ T31] ? kmem_cache_free+0x18f/0x400 [ 286.915826][ T31] do_exit+0x6ad/0x22e0 [ 286.920253][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 286.926218][ T31] ? __pfx_do_exit+0x10/0x10 [ 286.934893][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 286.940227][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 286.957283][ T31] do_group_exit+0x21c/0x2d0 [ 286.984447][ T31] __x64_sys_exit_group+0x3f/0x40 [ 287.008221][ T31] x64_sys_call+0x21ba/0x21c0 [ 287.040135][ T31] do_syscall_64+0xfa/0x3b0 [ 287.060271][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 287.086922][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.105151][ T31] ? clear_bhb_loop+0x60/0xb0 [ 287.110202][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.140760][ T31] RIP: 0033:0x7f461c98e929 [ 287.160725][ T31] RSP: 002b:00007fff09916a48 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 287.169748][ T31] RAX: ffffffffffffffda RBX: 00007f461ca10997 RCX: 00007f461c98e929 [ 287.209861][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 287.246069][ T31] RBP: 0000000000000016 R08: 00007fff099147e6 R09: 00007fff09917d00 [ 287.258784][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff09917d00 [ 287.280586][ T31] R13: 00007f461ca10925 R14: 000055556ee1e4a8 R15: 00007fff09919ec0 [ 287.288666][ T31] [ 287.308870][ T31] INFO: task kworker/0:5:5903 blocked for more than 144 seconds. [ 287.319411][ T31] Not tainted 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 [ 287.329960][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 287.340275][ T31] task:kworker/0:5 state:D stack:20968 pid:5903 tgid:5903 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 287.359248][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 287.393982][ T31] Call Trace: [ 287.397425][ T31] [ 287.400418][ T31] __schedule+0x16a2/0x4cb0 [ 287.405056][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 287.410407][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 287.420247][ T31] ? schedule+0x165/0x360 [ 287.426070][ T31] ? __pfx___schedule+0x10/0x10 [ 287.434401][ T31] ? schedule+0x91/0x360 [ 287.438706][ T31] schedule+0x165/0x360 [ 287.443535][ T31] schedule_preempt_disabled+0x13/0x30 [ 287.449046][ T31] __mutex_lock+0x724/0xe80 [ 287.457117][ T31] ? look_up_lock_class+0x74/0x170 [ 287.465055][ T31] ? __mutex_lock+0x51b/0xe80 [ 287.469982][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 287.476580][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 287.490636][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 287.496465][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 287.520758][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 287.528436][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 287.548842][ T31] process_scheduled_works+0xade/0x17b0 [ 287.559135][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 287.575782][ T31] worker_thread+0x8a0/0xda0 [ 287.600610][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 287.607369][ T31] ? __kthread_parkme+0x7b/0x200 [ 287.612624][ T31] kthread+0x70e/0x8a0 [ 287.616751][ T31] ? __pfx_worker_thread+0x10/0x10 [ 287.622201][ T31] ? __pfx_kthread+0x10/0x10 [ 287.627294][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 287.632916][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 287.638453][ T31] ? __pfx_kthread+0x10/0x10 [ 287.643437][ T31] ret_from_fork+0x3f9/0x770 [ 287.648785][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 287.654317][ T31] ? __switch_to_asm+0x39/0x70 [ 287.659186][ T31] ? __switch_to_asm+0x33/0x70 [ 287.664328][ T31] ? __pfx_kthread+0x10/0x10 [ 287.668985][ T31] ret_from_fork_asm+0x1a/0x30 [ 287.674072][ T31] [ 287.696007][ T31] INFO: task syz.3.349:6836 blocked for more than 144 seconds. [ 287.710719][ T31] Not tainted 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 [ 287.719225][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 287.750906][ T31] task:syz.3.349 state:D stack:25128 pid:6836 tgid:6836 ppid:5831 task_flags:0x400040 flags:0x00004004 [ 287.782198][ T31] Call Trace: [ 287.785573][ T31] [ 287.788640][ T31] __schedule+0x16a2/0x4cb0 [ 287.810672][ T31] ? __lock_acquire+0xab9/0xd20 [ 287.815798][ T31] ? schedule+0x165/0x360 [ 287.820207][ T31] ? __pfx___schedule+0x10/0x10 [ 287.842979][ T31] ? schedule+0x91/0x360 [ 287.847334][ T31] schedule+0x165/0x360 [ 287.864747][ T31] schedule_preempt_disabled+0x13/0x30 [ 287.870310][ T31] __mutex_lock+0x724/0xe80 [ 287.890635][ T31] ? kobject_put+0x43f/0x480 [ 287.895302][ T31] ? __mutex_lock+0x51b/0xe80 [ 287.900057][ T31] ? rfkill_unregister+0xc8/0x220 [ 287.926902][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 287.934423][ T31] ? __pfx_device_del+0x10/0x10 [ 287.940456][ T31] rfkill_unregister+0xc8/0x220 [ 287.957762][ T31] nfc_unregister_device+0x96/0x2a0 [ 287.964451][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 287.971874][ T31] virtual_ncidev_close+0x56/0x90 [ 287.977062][ T31] __fput+0x449/0xa70 [ 287.990599][ T31] task_work_run+0x1d1/0x260 [ 287.995477][ T31] ? __pfx_task_work_run+0x10/0x10 [ 288.003562][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 288.009104][ T31] exit_to_user_mode_loop+0xec/0x110 [ 288.014598][ T31] do_syscall_64+0x2bd/0x3b0 [ 288.019543][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 288.028012][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.036791][ T31] ? clear_bhb_loop+0x60/0xb0 [ 288.041913][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.047869][ T31] RIP: 0033:0x7f526b18e929 [ 288.052631][ T31] RSP: 002b:00007fffadf79688 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 288.061439][ T31] RAX: 0000000000000000 RBX: 00007f526b3b7ba0 RCX: 00007f526b18e929 [ 288.069566][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 288.077621][ T31] RBP: 00007f526b3b7ba0 R08: 000000000000af4c R09: 00000006adf7997f [ 288.089297][ T31] R10: 00007f526b3b7ac0 R11: 0000000000000246 R12: 00000000000210ef [ 288.097810][ T31] R13: 00007f526b3b6080 R14: ffffffffffffffff R15: 00007fffadf797a0 [ 288.106716][ T31] [ 288.111211][ T31] [ 288.111211][ T31] Showing all locks held in the system: [ 288.119063][ T31] 3 locks held by kworker/u8:0/12: [ 288.126727][ T31] 1 lock held by khungtaskd/31: [ 288.132054][ T31] #0: ffffffff8e13eda0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 288.142648][ T31] 2 locks held by getty/5587: [ 288.147363][ T31] #0: ffff888035b9a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 288.158115][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 288.183716][ T31] 1 lock held by syz-executor/5823: [ 288.188977][ T31] #0: ffffffff8f7d8e68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 288.213627][ T31] 1 lock held by syz-executor/5826: [ 288.219791][ T31] #0: ffffffff8f7d8e68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 288.250656][ T31] 4 locks held by kworker/0:4/5884: [ 288.255936][ T31] 3 locks held by kworker/0:5/5903: [ 288.271720][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 288.300585][ T31] #1: ffffc9000468fbc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 288.330757][ T31] #2: ffffffff8f7d8e68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 288.351695][ T31] 4 locks held by kworker/0:6/5904: [ 288.357065][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 288.381971][ T31] #1: ffffc9000469fbc0 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 288.403395][ T31] #2: ffffffff8f7d8e68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_epo+0x4c/0x180 [ 288.413408][ T31] #3: ffff8880635d5100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 288.423430][ T31] 2 locks held by syz.3.349/6836: [ 288.428489][ T31] #0: ffff8880635d5100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 288.443250][ T31] #1: ffffffff8f7d8e68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 288.454358][ T31] 2 locks held by syz-executor/7214: [ 288.460191][ T31] #0: ffff888058ffa918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 288.470585][ T31] #1: ffffffff8f7d8e68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 288.480814][ T31] 2 locks held by syz-executor/7230: [ 288.486152][ T31] #0: ffff88807bd30118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 288.496517][ T31] #1: ffffffff8f7d8e68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 288.506594][ T31] 2 locks held by syz.0.684/7696: [ 288.512030][ T31] #0: ffff8880273f10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 288.522585][ T31] #1: ffffffff8f7d8e68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 288.532954][ T31] 2 locks held by syz-executor/8061: [ 288.538464][ T31] #0: ffff888026ef0918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 288.548915][ T31] #1: ffffffff8f7d8e68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 288.559285][ T31] 2 locks held by syz-executor/8531: [ 288.564813][ T31] #0: ffff8880561c1118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 288.575231][ T31] #1: ffffffff8f7d8e68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 288.585440][ T31] 2 locks held by syz-executor/8554: [ 288.595026][ T31] #0: ffff888029598118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 288.605823][ T31] #1: ffffffff8f7d8e68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 288.616586][ T31] 1 lock held by syz.2.1356/9226: [ 288.622142][ T31] #0: ffffffff8f7d8e68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 288.633033][ T31] 2 locks held by syz-executor/9294: [ 288.638365][ T31] #0: ffff888024bba918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 288.648744][ T31] #1: ffffffff8f7d8e68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 288.658932][ T31] 2 locks held by syz-executor/9759: [ 288.664311][ T31] #0: ffff888058b98118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 288.674671][ T31] #1: ffffffff8f7d8e68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 288.684868][ T31] 2 locks held by syz-executor/9778: [ 288.690183][ T31] #0: ffff888058bee118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 288.700801][ T31] #1: ffffffff8f7d8e68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 288.710879][ T31] [ 288.713349][ T31] ============================================= [ 288.713349][ T31] [ 288.721880][ T31] NMI backtrace for cpu 1 [ 288.721896][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 PREEMPT(full) [ 288.721926][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 288.721938][ T31] Call Trace: [ 288.721946][ T31] [ 288.721954][ T31] dump_stack_lvl+0x189/0x250 [ 288.721986][ T31] ? __wake_up_klogd+0xd9/0x110 [ 288.722010][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 288.722036][ T31] ? __pfx__printk+0x10/0x10 [ 288.722069][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 288.722097][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 288.722117][ T31] ? _printk+0xcf/0x120 [ 288.722142][ T31] ? __pfx__printk+0x10/0x10 [ 288.722161][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 288.722187][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 288.722213][ T31] watchdog+0xfee/0x1030 [ 288.722239][ T31] ? watchdog+0x1de/0x1030 [ 288.722270][ T31] kthread+0x70e/0x8a0 [ 288.722293][ T31] ? __pfx_watchdog+0x10/0x10 [ 288.722315][ T31] ? __pfx_kthread+0x10/0x10 [ 288.722337][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 288.722361][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 288.722385][ T31] ? __pfx_kthread+0x10/0x10 [ 288.722405][ T31] ret_from_fork+0x3f9/0x770 [ 288.722433][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 288.722463][ T31] ? __switch_to_asm+0x39/0x70 [ 288.722480][ T31] ? __switch_to_asm+0x33/0x70 [ 288.722495][ T31] ? __pfx_kthread+0x10/0x10 [ 288.722515][ T31] ret_from_fork_asm+0x1a/0x30 [ 288.722549][ T31] [ 288.722557][ T31] Sending NMI from CPU 1 to CPUs 0: [ 288.883145][ C0] NMI backtrace for cpu 0 [ 288.883164][ C0] CPU: 0 UID: 0 PID: 3504 Comm: kworker/u8:7 Not tainted 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 PREEMPT(full) [ 288.883183][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 288.883193][ C0] Workqueue: bat_events batadv_nc_worker [ 288.883220][ C0] RIP: 0010:asm_sysvec_apic_timer_interrupt+0x0/0x20 [ 288.883240][ C0] Code: c6 1c 5f 0a e9 61 06 00 00 90 f3 0f 1e fa 0f 01 ca fc 6a ff e8 11 05 00 00 48 89 c4 48 89 e7 e8 d6 1b 5f 0a e9 41 06 00 00 90 0f 1e fa 0f 01 ca fc 6a ff e8 f1 04 00 00 48 89 c4 48 89 e7 e8 [ 288.883253][ C0] RSP: 0018:ffffc9000c017958 EFLAGS: 00000006 [ 288.883266][ C0] RAX: d6dfffc7009c9c00 RBX: 0000000000000000 RCX: d6dfffc7009c9c00 [ 288.883277][ C0] RDX: 0000000000000000 RSI: ffffffff8db5a486 RDI: ffffffff8be1b800 [ 288.883288][ C0] RBP: ffffffff8b2d0342 R08: 0000000000000000 R09: ffffffff8b2d0342 [ 288.883298][ C0] R10: dffffc0000000000 R11: ffffffff8b2d0270 R12: 0000000000000002 [ 288.883309][ C0] R13: ffffffff8e13eda0 R14: 0000000000000000 R15: 0000000000000246 [ 288.883320][ C0] FS: 0000000000000000(0000) GS:ffff888125c85000(0000) knlGS:0000000000000000 [ 288.883333][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 288.883345][ C0] CR2: 000055e5d3b52fb0 CR3: 0000000034824000 CR4: 00000000003526f0 [ 288.883362][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 288.883372][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 288.883382][ C0] Call Trace: [ 288.883390][ C0] [ 288.883395][ C0] RIP: 0010:lock_acquire+0x175/0x360 [ 288.883415][ C0] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 2b 7e fb 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 288.883428][ C0] RSP: 0018:ffffc9000c017980 EFLAGS: 00000206 [ 288.883445][ C0] ? batadv_nc_worker+0xd2/0x610 [ 288.883466][ C0] ? batadv_nc_worker+0xd2/0x610 [ 288.883485][ C0] batadv_nc_worker+0xef/0x610 [ 288.883504][ C0] ? batadv_nc_worker+0xd2/0x610 [ 288.883523][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 288.883560][ C0] process_scheduled_works+0xade/0x17b0 [ 288.883594][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 288.883623][ C0] worker_thread+0x8a0/0xda0 [ 288.883646][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 288.883671][ C0] ? __kthread_parkme+0x7b/0x200 [ 288.883698][ C0] kthread+0x70e/0x8a0 [ 288.883715][ C0] ? __pfx_worker_thread+0x10/0x10 [ 288.883735][ C0] ? __pfx_kthread+0x10/0x10 [ 288.883752][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 288.883770][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 288.883790][ C0] ? __pfx_kthread+0x10/0x10 [ 288.883805][ C0] ret_from_fork+0x3f9/0x770 [ 288.883826][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 288.883849][ C0] ? __switch_to_asm+0x39/0x70 [ 288.883863][ C0] ? __switch_to_asm+0x33/0x70 [ 288.883876][ C0] ? __pfx_kthread+0x10/0x10 [ 288.883892][ C0] ret_from_fork_asm+0x1a/0x30 [ 288.883915][ C0] [ 288.884355][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 289.192774][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 PREEMPT(full) [ 289.204692][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 289.215030][ T31] Call Trace: [ 289.218334][ T31] [ 289.221305][ T31] dump_stack_lvl+0x99/0x250 [ 289.226209][ T31] ? __asan_memcpy+0x40/0x70 [ 289.231091][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 289.236428][ T31] ? __pfx__printk+0x10/0x10 [ 289.241054][ T31] panic+0x2db/0x790 [ 289.244996][ T31] ? __pfx_panic+0x10/0x10 [ 289.249537][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 289.255475][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 289.261048][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 289.267413][ T31] watchdog+0x102d/0x1030 [ 289.272033][ T31] ? watchdog+0x1de/0x1030 [ 289.276489][ T31] kthread+0x70e/0x8a0 [ 289.280595][ T31] ? __pfx_watchdog+0x10/0x10 [ 289.285292][ T31] ? __pfx_kthread+0x10/0x10 [ 289.289903][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 289.295214][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 289.300433][ T31] ? __pfx_kthread+0x10/0x10 [ 289.305048][ T31] ret_from_fork+0x3f9/0x770 [ 289.309677][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 289.314990][ T31] ? __switch_to_asm+0x39/0x70 [ 289.319789][ T31] ? __switch_to_asm+0x33/0x70 [ 289.324663][ T31] ? __pfx_kthread+0x10/0x10 [ 289.329289][ T31] ret_from_fork_asm+0x1a/0x30 [ 289.334110][ T31] [ 289.337548][ T31] Kernel Offset: disabled [ 289.342839][ T31] Rebooting in 86400 seconds..