last executing test programs: 6m59.235508629s ago: executing program 2 (id=487): r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) fsetxattr$security_ima(r0, &(0x7f0000000040), &(0x7f00000002c0)=@v2={0x3, 0x0, 0x11, 0x8}, 0x9, 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 6m58.877983833s ago: executing program 2 (id=492): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x5}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 6m58.5969294s ago: executing program 2 (id=496): r0 = memfd_create(&(0x7f0000001cc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0sr\x95\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\x00\x01\x00\x00\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r0, &(0x7f0000000300)={'#! ', './file0'}, 0x2) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 6m58.308132741s ago: executing program 2 (id=500): r0 = socket(0x1d, 0x2, 0x6) r1 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0x10000010}) 6m58.063200886s ago: executing program 2 (id=504): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 6m57.772617958s ago: executing program 2 (id=508): setfsgid(0xee01) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 6m42.623121446s ago: executing program 32 (id=508): setfsgid(0xee01) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 5m23.084196751s ago: executing program 1 (id=1600): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b040000000000000000020000000900010073797a30000000000900020073797a32000000003800048034000180090001007866726d00000000240002800500030000000000080001400000000008000440000000cc0800024000000002"], 0x8c}, 0x1, 0x0, 0x0, 0x41}, 0x20000010) 5m22.724493099s ago: executing program 1 (id=1606): r0 = socket$netlink(0x10, 0x3, 0x12) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x1a, 0x4) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000300)=0x1a, 0x4) 5m22.412203821s ago: executing program 1 (id=1609): mkdir(&(0x7f0000000100)='./control\x00', 0x184) open(&(0x7f00000000c0)='./control\x00', 0x573382, 0x113) rmdir(&(0x7f0000000280)='./control\x00') 5m22.259563814s ago: executing program 1 (id=1611): keyctl$clear(0x5, 0xfffffffffffffffd) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1, 0x7fff, 0x0) 5m22.238291553s ago: executing program 1 (id=1612): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 5m22.151955268s ago: executing program 1 (id=1615): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='source', &(0x7f0000000180)='4..:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f909, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) 5m6.885658854s ago: executing program 33 (id=1615): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='source', &(0x7f0000000180)='4..:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f909, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) 4m24.690918761s ago: executing program 5 (id=2174): r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x1, 0x0, &(0x7f0000000280)) 4m24.500612679s ago: executing program 5 (id=2177): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\v\x00\x00\x00\x00\x00\x00L']) 4m24.299324784s ago: executing program 5 (id=2180): r0 = socket$inet(0x2, 0x2, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 4m23.986690608s ago: executing program 5 (id=2184): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20044000}, 0x4800) 4m23.557864935s ago: executing program 5 (id=2187): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x10) mkdir(&(0x7f00000000c0)='./control\x00', 0x0) 4m23.389887196s ago: executing program 5 (id=2189): r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 4m8.290224581s ago: executing program 34 (id=2189): r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 2m14.310486801s ago: executing program 7 (id=2987): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0x9, {"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", 0x1000}}, 0x1006) 2m14.088823809s ago: executing program 7 (id=2988): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req={0x1ff, 0x4, 0x2, 0x867}, 0x10) recvmmsg$unix(r0, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1}}], 0x1, 0x0, 0x0) 2m13.888024371s ago: executing program 7 (id=2989): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, 0x0) 2m10.554357766s ago: executing program 7 (id=2997): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$nfs(&(0x7f00000001c0)='..\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x85000, 0x0) mount$nfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 2m10.094638923s ago: executing program 7 (id=2999): r0 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) ftruncate(r0, 0x7000000) preadv(r0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000001380)=""/4090, 0xffa}], 0x2, 0x5, 0x6) 2m4.78917072s ago: executing program 3 (id=3027): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000000)='f', 0x1}], 0x2, 0xa, 0x0) 2m3.589733531s ago: executing program 3 (id=3029): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) 2m3.118541378s ago: executing program 3 (id=3033): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x2400c042) 2m2.775156185s ago: executing program 3 (id=3037): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, r1}, './file0\x00'}) 2m2.660065395s ago: executing program 6 (id=3038): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '6w'}]}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_TO_DATA={0x4}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 2m2.39961356s ago: executing program 3 (id=3040): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r0, 0x84, 0x1, &(0x7f00000022c0)=""/4111, &(0x7f00000000c0)=0x100f) 2m2.044976524s ago: executing program 3 (id=3042): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x30, r1, 0x1, 0x70bd27, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_RULES={0x14, 0x22, 0x0, 0x1, [{0x4}, {0x4}, {0x4}, {0x4}]}]}, 0x30}}, 0x0) 2m2.030240407s ago: executing program 4 (id=3044): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000180)=ANY=[@ANYBLOB=' '], 0x0) 2m1.93606892s ago: executing program 6 (id=3045): socket$inet6_sctp(0xa, 0x801, 0x84) syz_emit_ethernet(0x3e, &(0x7f00000006c0)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "121008", 0x8, 0x3a, 0x0, @remote, @local, {[], @echo_request}}}}}, 0x0) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) 2m1.739435659s ago: executing program 7 (id=3046): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x20000000001) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x0) 2m1.606918299s ago: executing program 4 (id=3048): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000540)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r0, &(0x7f0000002580)=ANY=[@ANYBLOB="10000000feffffff23c3b79083231301"], 0x10) 2m0.777833883s ago: executing program 35 (id=3046): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x20000000001) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x0) 2m0.746761082s ago: executing program 6 (id=3051): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x7ff, 0x2, 0x4}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0585609, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}) 2m0.699715051s ago: executing program 4 (id=3052): r0 = socket$inet6(0x10, 0x3, 0x0) unshare(0x600) quotactl_fd$Q_SYNC(r0, 0xffffffff80000101, 0x0, 0x0) 2m0.472236001s ago: executing program 4 (id=3053): unshare(0x22020600) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x7, &(0x7f0000000080), 0x4) 2m0.421254178s ago: executing program 6 (id=3054): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1c4f, 0x59, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x2, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x410, 0x7f}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000040)={0x40, 0x21, 0x4, {0x4, 0x1, "5cc0"}}, 0x0, 0x0, 0x0}, 0x0) 2m0.176880708s ago: executing program 0 (id=3055): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a8447608000000000000000050000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x7b}], 0x1) 1m59.913106478s ago: executing program 0 (id=3056): unshare(0x8000400) r0 = epoll_create(0x40) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)) 1m59.09277568s ago: executing program 0 (id=3057): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xc, {"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", 0x3b3cc1e9e7df1ab7}}, 0x9b) 1m58.914527603s ago: executing program 4 (id=3058): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) 1m58.786978262s ago: executing program 0 (id=3059): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000000)=0x80000000, 0x4) bind$inet(r0, &(0x7f0000000580)={0x2, 0x3b, @remote}, 0x10) 1m58.49423653s ago: executing program 4 (id=3060): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f00000006c0)="0300f198aaae5a98ca00008586dd", 0x5ea, 0x20044080, &(0x7f0000000200)={0x11, 0x2, r1, 0x1, 0xfe, 0x6, @random="7483ccb17b06"}, 0x14) 1m58.41542548s ago: executing program 6 (id=3061): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x1c, r1, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) 1m58.414462573s ago: executing program 0 (id=3062): unshare(0x2040400) r0 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 1m58.084256699s ago: executing program 0 (id=3063): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) 1m58.082780936s ago: executing program 6 (id=3064): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096000006e53f070c0000002a9000070100f3ff83000000008b09007a159384"], 0x0}, 0x0) 1m8.03769988s ago: executing program 36 (id=3063): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) 31.608129326s ago: executing program 37 (id=3064): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096000006e53f070c0000002a9000070100f3ff83000000008b09007a159384"], 0x0}, 0x0) 29.454810939s ago: executing program 38 (id=3042): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x30, r1, 0x1, 0x70bd27, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_RULES={0x14, 0x22, 0x0, 0x1, [{0x4}, {0x4}, {0x4}, {0x4}]}]}, 0x30}}, 0x0) 0s ago: executing program 39 (id=3060): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f00000006c0)="0300f198aaae5a98ca00008586dd", 0x5ea, 0x20044080, &(0x7f0000000200)={0x11, 0x2, r1, 0x1, 0xfe, 0x6, @random="7483ccb17b06"}, 0x14) kernel console output (not intermixed with test programs): = 1.08 [ 204.097381][ T6001] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.097398][ T6001] usb 6-1: Product: syz [ 204.097411][ T6001] usb 6-1: Manufacturer: syz [ 204.097424][ T6001] usb 6-1: SerialNumber: syz [ 204.147668][ T6001] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 204.295557][ T5891] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 204.795118][ T10] usb 6-1: USB disconnect, device number 3 [ 205.045554][ T5206] udevd[5206]: worker [5896] terminated by signal 33 (Unknown signal 33) [ 205.045602][ T5206] udevd[5206]: worker [5896] failed while handling '/devices/platform/dummy_udc.5/udc/dummy_udc.5' [ 205.534546][ T5891] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 205.534890][ T5891] ath9k_htc: Failed to initialize the device [ 205.539593][ T10] usb 6-1: ath9k_htc: USB layer deinitialized [ 206.496075][ T5851] Bluetooth: hci1: command 0x0406 tx timeout [ 206.496177][ T5851] Bluetooth: hci3: command 0x0406 tx timeout [ 206.496201][ T5851] Bluetooth: hci0: command 0x0406 tx timeout [ 207.294795][ T8855] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1263'. [ 209.732823][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 209.892789][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 209.895292][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 209.898289][ T10] usb 6-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 209.898314][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.898333][ T10] usb 6-1: Product: syz [ 209.898347][ T10] usb 6-1: Manufacturer: syz [ 209.898359][ T10] usb 6-1: SerialNumber: syz [ 209.957278][ T10] usb 6-1: config 0 descriptor?? [ 209.958137][ T8934] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 210.003089][ T10] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input11 [ 210.307773][ T49] usb 6-1: USB disconnect, device number 4 [ 210.307910][ C0] usbtouchscreen 6-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 210.663885][ T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 210.818540][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.818583][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.818619][ T10] usb 2-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00 [ 210.818640][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.854471][ T10] usb 2-1: config 0 descriptor?? [ 211.243834][ T49] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 211.294222][ T10] aquacomputer_d5next 0003:0C70:F014.001C: hidraw0: USB HID v0.00 Device [HID 0c70:f014] on usb-dummy_hcd.1-1/input0 [ 211.392453][ T49] usb 5-1: Using ep0 maxpacket: 16 [ 211.395246][ T49] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.395281][ T49] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.395302][ T49] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 211.395342][ T49] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 211.395363][ T49] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.479301][ T8989] openvswitch: netlink: Duplicate or invalid key (type 0). [ 211.479332][ T8989] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 211.523272][ T5891] usb 2-1: USB disconnect, device number 11 [ 211.540537][ T49] usb 5-1: config 0 descriptor?? [ 211.628393][ T8991] fido_id[8991]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 211.979120][ T49] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0 [ 211.979153][ T49] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0 [ 211.979178][ T49] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0 [ 211.979209][ T49] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0 [ 211.979234][ T49] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0 [ 211.979258][ T49] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0 [ 211.979282][ T49] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0 [ 211.979307][ T49] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0 [ 211.979332][ T49] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0 [ 211.979362][ T49] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0 [ 211.997989][ T49] microsoft 0003:045E:07DA.001D: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 211.998023][ T49] microsoft 0003:045E:07DA.001D: no inputs found [ 211.998038][ T49] microsoft 0003:045E:07DA.001D: could not initialize ff, continuing anyway [ 212.044699][ T9001] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1319'. [ 212.177956][ T9] usb 5-1: USB disconnect, device number 11 [ 212.411225][ T9004] fido_id[9004]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 212.553421][ T9014] tipc: Enabling not permitted [ 212.553457][ T9014] tipc: Enabling of bearer rejected, failed to enable media [ 212.672544][ T49] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 212.802474][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 212.824456][ T49] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 212.824479][ T49] usb 1-1: config 0 has no interface number 0 [ 212.824526][ T49] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 212.824547][ T49] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.836642][ T49] usb 1-1: config 0 descriptor?? [ 212.855974][ T49] usb 1-1: selecting invalid altsetting 1 [ 212.856140][ T49] dvb_ttusb_budget: ttusb_init_controller: error [ 212.856158][ T49] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 212.904297][ T5843] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 212.935111][ T9026] netlink: 'syz.4.1331': attribute type 1 has an invalid length. [ 212.935128][ T9026] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1331'. [ 212.979574][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.979618][ T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 212.979638][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.017239][ T9] usb 2-1: config 0 descriptor?? [ 213.064928][ T5843] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 213.064954][ T5843] usb 4-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 213.065025][ T5843] usb 4-1: Product: syz [ 213.065038][ T5843] usb 4-1: Manufacturer: syz [ 213.065052][ T5843] usb 4-1: SerialNumber: syz [ 213.112520][ T5843] usb 4-1: config 0 descriptor?? [ 213.132993][ T5843] ch341 4-1:0.0: ch341-uart converter detected [ 213.160962][ T49] DVB: Unable to find symbol cx22700_attach() [ 213.347409][ T9031] IPVS: Scheduler module ip_vs_sip not found [ 213.375834][ T49] DVB: Unable to find symbol tda10046_attach() [ 213.375847][ T49] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 213.384809][ T49] usb 1-1: USB disconnect, device number 14 [ 213.546308][ T9] pyra 0003:1E7D:2CF6.001E: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 213.724334][ T49] usb 2-1: USB disconnect, device number 12 [ 213.755442][ T5843] usb 4-1: failed to send control message: -71 [ 213.755495][ T5843] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 213.817394][ T9040] fido_id[9040]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 213.825602][ T5843] usb 4-1: USB disconnect, device number 16 [ 213.828638][ T5843] ch341 4-1:0.0: device disconnected [ 214.762498][ T5929] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 214.912459][ T5929] usb 4-1: Using ep0 maxpacket: 32 [ 214.916396][ T5929] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 214.916418][ T5929] usb 4-1: config 0 has no interface number 0 [ 214.925501][ T5929] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 214.925526][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.925544][ T5929] usb 4-1: Product: syz [ 214.925557][ T5929] usb 4-1: Manufacturer: syz [ 214.925570][ T5929] usb 4-1: SerialNumber: syz [ 214.977304][ T5929] usb 4-1: config 0 descriptor?? [ 214.994966][ T5929] smsc95xx v2.0.0 [ 215.600089][ T5929] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 215.600116][ T5929] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 215.600697][ T5929] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 215.601794][ T5929] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 215.653932][ T5929] usb 4-1: USB disconnect, device number 17 [ 215.846199][ T9097] can0: slcan on ptm0. [ 216.041133][ T9096] can0 (unregistered): slcan off ptm0. [ 216.597729][ T5891] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 216.748546][ T5891] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 216.748572][ T5891] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 216.748590][ T5891] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 216.748639][ T5891] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 216.748662][ T5891] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 216.751807][ T5891] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 216.751849][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 216.751893][ T5891] usb 1-1: Product: syz [ 216.751909][ T5891] usb 1-1: Manufacturer: syz [ 216.848682][ T5891] cdc_wdm 1-1:1.0: skipping garbage [ 216.848701][ T5891] cdc_wdm 1-1:1.0: skipping garbage [ 216.866387][ T5891] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 216.866417][ T5891] cdc_wdm 1-1:1.0: Unknown control protocol [ 217.258778][ T9146] overlayfs: failed to resolve './file1': -2 [ 217.268108][ T9] usb 1-1: USB disconnect, device number 15 [ 217.979624][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 218.127082][ T9] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.127122][ T9] usb 6-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 218.127148][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 218.127182][ T9] usb 6-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00 [ 218.127203][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.141377][ T9] usb 6-1: config 0 descriptor?? [ 218.617763][ T9] itetech 0003:06CB:73F6.001F: hidraw0: USB HID v0.01 Device [HID 06cb:73f6] on usb-dummy_hcd.5-1/input0 [ 218.692503][ T5929] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 218.843669][ T5929] usb 1-1: Using ep0 maxpacket: 32 [ 218.847731][ T5929] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 218.848646][ T5843] usb 6-1: USB disconnect, device number 5 [ 218.850621][ T5929] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 218.850645][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.850663][ T5929] usb 1-1: Product: syz [ 218.850675][ T5929] usb 1-1: Manufacturer: syz [ 218.850688][ T5929] usb 1-1: SerialNumber: syz [ 219.020322][ T5929] usb 1-1: config 0 descriptor?? [ 219.021357][ T9189] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 219.073720][ T5929] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 219.086664][ T9204] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1416'. [ 219.144134][ T9201] fido_id[9201]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 219.259294][ T10] usb 1-1: USB disconnect, device number 16 [ 219.394438][ T7934] udevd[7934]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 219.597907][ T9213] can0: slcan on ptm0. [ 219.897615][ T9212] can0 (unregistered): slcan off ptm0. [ 220.144378][ T9229] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 220.262502][ T9] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 220.434371][ T9] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 220.434401][ T9] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.434421][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 220.434450][ T9] usb 1-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 220.434470][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.452037][ T9] usb 1-1: config 0 descriptor?? [ 220.838857][ T9250] binder: Bad value for 'stats' [ 220.901598][ T9] lenovo 0003:17EF:60EE.0020: hidraw0: USB HID v0.01 Device [HID 17ef:60ee] on usb-dummy_hcd.0-1/input0 [ 221.067528][ T9] lenovo 0003:17EF:60EE.0020: Failed to switch middle button: -71 [ 221.068187][ T9] lenovo 0003:17EF:60EE.0020: Fn-lock setting failed: -71 [ 221.068861][ T9] lenovo 0003:17EF:60EE.0020: Sensitivity setting failed: -71 [ 221.082439][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 221.105440][ T9] usb 1-1: USB disconnect, device number 17 [ 221.247093][ T9252] fido_id[9252]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 221.266200][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 221.274100][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.279311][ T10] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 221.279339][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.279360][ T10] usb 2-1: Product: syz [ 221.279373][ T10] usb 2-1: Manufacturer: syz [ 221.279389][ T10] usb 2-1: SerialNumber: syz [ 221.298675][ T10] usb 2-1: config 0 descriptor?? [ 221.338906][ T10] cdc_ether 2-1:0.0: skipping garbage [ 221.338927][ T10] usb 2-1: bad CDC descriptors [ 221.341749][ T10] usb 2-1: unsupported MDLM descriptors [ 221.514361][ T10] usb 2-1: USB disconnect, device number 13 [ 222.361181][ T9290] erspan0: entered promiscuous mode [ 222.361307][ T9290] macsec1: entered promiscuous mode [ 222.456270][ T9290] erspan0: left promiscuous mode [ 223.022588][ T49] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 223.174667][ T49] usb 4-1: config 0 has an invalid interface number: 30 but max is 0 [ 223.174692][ T49] usb 4-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 223.174710][ T49] usb 4-1: config 0 has no interface number 0 [ 223.174752][ T49] usb 4-1: config 0 interface 30 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 223.174777][ T49] usb 4-1: config 0 interface 30 has no altsetting 0 [ 223.174807][ T49] usb 4-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice=74.47 [ 223.174828][ T49] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.252125][ T49] usb 4-1: config 0 descriptor?? [ 223.262596][ T10] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 223.271776][ T49] usb 4-1: unknown interface protocol 0x41, assuming v1 [ 223.271795][ T49] usb 4-1: 30:2 : does not exist [ 223.425043][ T10] usb 1-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 223.425071][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.441059][ T10] usb 1-1: config 0 descriptor?? [ 223.481311][ T5929] usb 4-1: USB disconnect, device number 18 [ 223.886426][ T10] hid_parser_main: 6 callbacks suppressed [ 223.886447][ T10] elecom 0003:056E:00E6.0021: unknown main item tag 0x0 [ 223.886475][ T10] elecom 0003:056E:00E6.0021: unknown main item tag 0x0 [ 223.886501][ T10] elecom 0003:056E:00E6.0021: unknown main item tag 0x0 [ 223.886527][ T10] elecom 0003:056E:00E6.0021: unknown main item tag 0x0 [ 223.886553][ T10] elecom 0003:056E:00E6.0021: unknown main item tag 0x0 [ 223.894354][ T10] elecom 0003:056E:00E6.0021: hidraw0: USB HID v1.01 Device [HID 056e:00e6] on usb-dummy_hcd.0-1/input0 [ 224.092098][ T9338] syz.5.1480 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 224.109200][ T5843] usb 1-1: USB disconnect, device number 18 [ 224.612965][ T9353] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 224.809745][ T9359] tipc: Started in network mode [ 224.809772][ T9359] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 224.810664][ T9359] tipc: Enabled bearer , priority 10 [ 225.472457][ T6001] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 225.630582][ T6001] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 225.630608][ T6001] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.630626][ T6001] usb 2-1: config 0 has no interface number 0 [ 225.630670][ T6001] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 225.630691][ T6001] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 225.695133][ T6001] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 225.695160][ T6001] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.695178][ T6001] usb 2-1: Product: syz [ 225.695192][ T6001] usb 2-1: Manufacturer: syz [ 225.695204][ T6001] usb 2-1: SerialNumber: syz [ 225.724987][ T9384] netlink: 'syz.3.1502': attribute type 30 has an invalid length. [ 225.744795][ T6001] usb 2-1: config 0 descriptor?? [ 225.925020][ T49] tipc: Node number set to 8432298 [ 225.979491][ T6001] usbtouchscreen 2-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 226.030648][ T6001] usb 2-1: USB disconnect, device number 14 [ 227.190777][ T9425] macsec1: entered promiscuous mode [ 227.190801][ T9425] macsec1: entered allmulticast mode [ 229.322471][ T37] audit: type=1326 audit(1757719737.473:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9501 comm="syz.0.1558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94bdc5eba9 code=0x7ffc0000 [ 229.322529][ T37] audit: type=1326 audit(1757719737.473:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9501 comm="syz.0.1558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94bdc5eba9 code=0x7ffc0000 [ 229.361964][ T37] audit: type=1326 audit(1757719737.523:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9501 comm="syz.0.1558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f94bdc5eba9 code=0x7ffc0000 [ 229.362026][ T37] audit: type=1326 audit(1757719737.523:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9501 comm="syz.0.1558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94bdc5eba9 code=0x7ffc0000 [ 229.374863][ T37] audit: type=1326 audit(1757719737.543:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9501 comm="syz.0.1558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f94bdc5eba9 code=0x7ffc0000 [ 229.374902][ T37] audit: type=1326 audit(1757719737.543:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9501 comm="syz.0.1558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94bdc5eba9 code=0x7ffc0000 [ 229.607109][ T9510] ieee802154 phy0 wpan0: encryption failed: -126 [ 229.625842][ T9512] can0: slcan on ptm0. [ 229.783911][ T9511] can0 (unregistered): slcan off ptm0. [ 230.651425][ T9542] pim6reg: entered allmulticast mode [ 232.022479][ T5930] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 232.182985][ T5930] usb 4-1: Using ep0 maxpacket: 8 [ 232.185244][ T5930] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 232.185267][ T5930] usb 4-1: config 0 has no interface number 0 [ 232.185330][ T5930] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 232.185352][ T5930] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 232.185375][ T5930] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 232.185405][ T5930] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 232.185475][ T5930] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 232.185496][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.201203][ T5930] usb 4-1: config 0 descriptor?? [ 232.238891][ T5930] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 232.518606][ T5930] usb 4-1: USB disconnect, device number 19 [ 232.527247][ T5930] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 235.146011][ T9682] program syz.4.1642 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 235.179657][ T5930] kernel write not supported for file /input/mouse0 (pid: 5930 comm: kworker/0:4) [ 235.302805][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 235.399625][ T9687] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1646'. [ 235.462454][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 235.464908][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.464936][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.464972][ T9] usb 6-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 235.464993][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.505999][ T9] usb 6-1: config 0 descriptor?? [ 235.663352][ T9691] netlink: 'syz.0.1648': attribute type 29 has an invalid length. [ 235.671443][ T9691] netlink: 'syz.0.1648': attribute type 29 has an invalid length. [ 236.013131][ T9] hid-multitouch 0003:1FD2:6007.0022: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.5-1/input0 [ 236.192522][ T5843] usb 6-1: USB disconnect, device number 6 [ 236.363378][ T9699] fido_id[9699]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 236.492528][ T6001] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 236.646362][ T6001] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.646392][ T6001] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 236.646436][ T6001] usb 4-1: New USB device found, idVendor=056a, idProduct=0336, bcdDevice= 0.00 [ 236.646460][ T6001] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.712631][ T6001] usb 4-1: config 0 descriptor?? [ 237.193367][ T6001] wacom 0003:056A:0336.0023: hidraw0: USB HID v0.00 Device [HID 056a:0336] on usb-dummy_hcd.3-1/input0 [ 237.312540][ T49] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 237.357389][ T5891] usb 4-1: USB disconnect, device number 20 [ 237.472479][ T49] usb 6-1: Using ep0 maxpacket: 32 [ 237.475961][ T9717] genirq: Flags mismatch irq 4. 00202000 (pcl812) vs. 00202080 (ttyS0) [ 237.476377][ T49] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.476405][ T49] usb 6-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 237.476429][ T49] usb 6-1: config 0 interface 0 has no altsetting 0 [ 237.476461][ T49] usb 6-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 237.476483][ T49] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.495366][ T9713] fido_id[9713]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 237.517656][ T49] usb 6-1: config 0 descriptor?? [ 237.991235][ T49] wacom 0003:056A:0094.0024: Using device in hidraw-only mode [ 238.043110][ T49] wacom 0003:056A:0094.0024: hidraw0: USB HID v0.05 Device [HID 056a:0094] on usb-dummy_hcd.5-1/input0 [ 238.194238][ T49] usb 6-1: USB disconnect, device number 7 [ 238.456800][ T9732] fido_id[9732]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 239.229296][ T9755] loop6: detected capacity change from 0 to 7 [ 239.272839][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 239.272953][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 239.281705][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 239.281738][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 239.313324][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 239.313354][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 239.320080][ T9759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1673'. [ 239.350366][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 239.350395][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 239.351383][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 239.351411][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 239.351650][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 239.351676][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 239.351924][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 239.351952][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 239.352048][ T9755] ldm_validate_partition_table(): Disk read failed. [ 239.352222][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 239.352252][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 239.353893][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 239.353924][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 239.354240][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 239.354267][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 239.357551][ T9755] Dev loop6: unable to read RDB block 0 [ 239.358406][ T9755] loop6: unable to read partition table [ 239.360504][ T9755] loop6: partition table beyond EOD, truncated [ 239.360538][ T9755] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà–() failed (rc=-5) [ 240.722491][ T6001] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 240.873757][ T6001] usb 1-1: Using ep0 maxpacket: 8 [ 240.876116][ T6001] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 240.879088][ T6001] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 240.879114][ T6001] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.879133][ T6001] usb 1-1: Product: syz [ 240.879147][ T6001] usb 1-1: Manufacturer: syz [ 240.879160][ T6001] usb 1-1: SerialNumber: syz [ 240.900230][ T6001] usb 1-1: config 0 descriptor?? [ 240.945132][ T6001] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 240.945181][ T6001] usb 1-1: setting power ON [ 240.945198][ T6001] dvb-usb: bulk message failed: -22 (2/0) [ 240.972996][ T6001] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 240.991935][ T6001] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 240.991992][ T6001] usb 1-1: media controller created [ 241.125121][ T6001] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 241.126149][ T9781] dvb-usb: bulk message failed: -22 (3/0) [ 241.126167][ T9781] cxusb: i2c rd: len=194 is too big! [ 241.126167][ T9781] [ 241.298361][ T6001] usb 1-1: selecting invalid altsetting 6 [ 241.298383][ T6001] usb 1-1: digital interface selection failed (-22) [ 241.298397][ T6001] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 241.302662][ T6001] usb 1-1: setting power OFF [ 241.302683][ T6001] dvb-usb: bulk message failed: -22 (2/0) [ 241.302702][ T6001] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 241.302715][ T6001] (NULL device *): no alternate interface [ 241.484192][ T9808] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 241.484250][ T9808] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 241.484342][ T9808] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 241.484476][ T9808] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 241.543345][ T6001] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 241.583002][ T6001] usb 1-1: USB disconnect, device number 19 [ 242.457430][ T9829] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1698'. [ 242.457456][ T9829] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1698'. [ 242.457471][ T9829] tipc: Started in network mode [ 242.457485][ T9829] tipc: Node identity fffffe01, cluster identity 64 [ 242.457496][ T9829] tipc: Node number set to 4294966785 [ 242.458563][ T9829] tipc: Cannot configure node identity twice [ 242.947474][ T9845] sock: sock_timestamping_bind_phc: sock not bind to device [ 243.109364][ T9848] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1708'. [ 243.852661][ T5891] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 244.003862][ T5891] usb 1-1: Using ep0 maxpacket: 32 [ 244.006572][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.006602][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.006641][ T5891] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 244.006664][ T5891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.064685][ T5891] usb 1-1: config 0 descriptor?? [ 244.087787][ T5891] hub 1-1:0.0: USB hub found [ 244.294595][ T5891] hub 1-1:0.0: 29 ports detected [ 244.295544][ T5891] hub 1-1:0.0: insufficient power available to use all downstream ports [ 244.717574][ T9881] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.795962][ T5891] usb 1-1: USB disconnect, device number 20 [ 245.243981][ T5929] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 245.292590][ T9849] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 245.402461][ T5929] usb 4-1: Using ep0 maxpacket: 32 [ 245.406747][ T5929] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 245.406771][ T5929] usb 4-1: config 0 has no interface number 0 [ 245.411957][ T5929] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 245.411986][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.412008][ T5929] usb 4-1: Product: syz [ 245.412024][ T5929] usb 4-1: Manufacturer: syz [ 245.412040][ T5929] usb 4-1: SerialNumber: syz [ 245.424746][ T5929] usb 4-1: config 0 descriptor?? [ 245.877566][ T5929] radio-si470x 4-1:0.35: DeviceID=0x9242 ChipID=0x0000 [ 245.877590][ T5929] radio-si470x 4-1:0.35: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 246.079692][ T5929] radio-si470x 4-1:0.35: si470x_get_report: usb_control_msg returned -71 [ 246.079715][ T5929] radio-si470x 4-1:0.35: si470x_get_scratch: si470x_get_report returned -71 [ 246.082821][ T5929] radio-si470x 4-1:0.35: probe with driver radio-si470x failed with error -5 [ 246.115100][ T5929] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 246.157302][ T5929] usb 4-1: USB disconnect, device number 21 [ 247.252476][ T5929] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 247.322773][ T9933] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1747'. [ 247.390905][ T9935] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1748'. [ 247.416216][ T5929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.416247][ T5929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.416269][ T5929] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 247.416309][ T5929] usb 4-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 247.416331][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.445316][ T5929] usb 4-1: config 0 descriptor?? [ 247.883960][ T5929] elecom 0003:056E:011C.0025: unknown main item tag 0x0 [ 247.883995][ T5929] elecom 0003:056E:011C.0025: unknown main item tag 0x0 [ 247.884021][ T5929] elecom 0003:056E:011C.0025: unknown main item tag 0x0 [ 247.884045][ T5929] elecom 0003:056E:011C.0025: unknown main item tag 0x0 [ 247.884071][ T5929] elecom 0003:056E:011C.0025: unknown main item tag 0x0 [ 247.884095][ T5929] elecom 0003:056E:011C.0025: unknown main item tag 0x0 [ 247.884120][ T5929] elecom 0003:056E:011C.0025: unknown main item tag 0x0 [ 247.884145][ T5929] elecom 0003:056E:011C.0025: unknown main item tag 0x0 [ 247.884170][ T5929] elecom 0003:056E:011C.0025: unknown main item tag 0x0 [ 247.884195][ T5929] elecom 0003:056E:011C.0025: unknown main item tag 0x0 [ 247.908084][ T5929] elecom 0003:056E:011C.0025: hidraw0: USB HID v0.00 Device [HID 056e:011c] on usb-dummy_hcd.3-1/input0 [ 248.068660][ T5843] usb 4-1: USB disconnect, device number 22 [ 248.242274][ T9946] fido_id[9946]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 248.512507][ T5929] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 248.676234][ T5929] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 248.676261][ T5929] usb 6-1: config 0 has no interface number 0 [ 248.676307][ T5929] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 248.676329][ T5929] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.684057][ T5929] usb 6-1: config 0 descriptor?? [ 248.715250][ T5929] usb 6-1: selecting invalid altsetting 1 [ 248.716077][ T5929] dvb_ttusb_budget: ttusb_init_controller: error [ 248.716094][ T5929] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 248.850976][ T5929] DVB: Unable to find symbol cx22700_attach() [ 248.970661][ T5929] DVB: Unable to find symbol tda10046_attach() [ 248.970674][ T5929] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 248.993244][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 249.011312][ T5929] usb 6-1: USB disconnect, device number 8 [ 249.040893][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 249.050981][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 249.052743][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 249.056556][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 249.216335][ T9967] netlink: 'syz.4.1760': attribute type 32 has an invalid length. [ 249.216356][ T9967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1760'. [ 249.230187][ T9967] (unnamed net_device) (uninitialized): option coupled_control: invalid value (98) [ 251.118539][T10011] max out of range [ 251.132594][ T5848] Bluetooth: hci2: command tx timeout [ 251.197181][T10013] random: crng reseeded on system resumption [ 251.242945][ T3740] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.348150][ T9961] chnl_net:caif_netlink_parms(): no params data found [ 251.461336][T10019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1784'. [ 251.776617][ T3740] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.061782][T10039] vlan3: entered promiscuous mode [ 252.061801][T10039] macvtap0: entered promiscuous mode [ 252.451378][ T3740] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.652730][ T49] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 252.688007][T10055] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 252.802411][ T49] usb 6-1: Using ep0 maxpacket: 32 [ 252.804830][ T49] usb 6-1: config 0 interface 0 altsetting 17 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.804855][ T49] usb 6-1: config 0 interface 0 altsetting 17 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 252.804879][ T49] usb 6-1: config 0 interface 0 has no altsetting 0 [ 252.804910][ T49] usb 6-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 252.804931][ T49] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.811655][ T49] usb 6-1: config 0 descriptor?? [ 252.879025][T10060] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1802'. [ 253.002498][ T5891] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 253.147700][ T3740] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.170629][ T5891] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.170651][ T5891] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 253.170696][ T5891] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 253.170771][ T5891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.212468][ T5848] Bluetooth: hci2: command tx timeout [ 253.236398][ T9961] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.236528][ T9961] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.236742][ T9961] bridge_slave_0: entered allmulticast mode [ 253.279250][ T9961] bridge_slave_0: entered promiscuous mode [ 253.300141][T10067] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 253.303313][ T5891] usb 1-1: config 0 descriptor?? [ 253.309133][ T5891] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 253.309188][ T5891] dvb-usb: bulk message failed: -22 (3/0) [ 253.310112][ T9961] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.310254][ T9961] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.310454][ T9961] bridge_slave_1: entered allmulticast mode [ 253.398697][ T49] asus 0003:048D:CE50.0026: item fetching failed at offset 2/5 [ 253.399415][ T49] asus 0003:048D:CE50.0026: Asus hid parse failed: -22 [ 253.399510][ T49] asus 0003:048D:CE50.0026: probe with driver asus failed with error -22 [ 253.426773][ T9961] bridge_slave_1: entered promiscuous mode [ 253.435304][ T5891] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 253.453117][ T5891] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 253.453173][ T5891] usb 1-1: media controller created [ 253.455978][ T5891] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 253.516276][T10058] dvb-usb: bulk message failed: -22 (2/0) [ 253.572051][ T5891] dvb-usb: bulk message failed: -22 (6/0) [ 253.572141][ T5891] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 253.587831][ T49] usb 6-1: USB disconnect, device number 9 [ 253.637258][ T5891] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input18 [ 253.639537][ T5891] dvb-usb: schedule remote query interval to 150 msecs. [ 253.639554][ T5891] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 253.670579][ T5891] usb 1-1: USB disconnect, device number 21 [ 253.853870][ T5891] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 254.146735][ T9961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.150349][ T9961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.735360][ T9961] team0: Port device team_slave_0 added [ 254.814697][ T9961] team0: Port device team_slave_1 added [ 254.815484][T10101] netlink: 'syz.3.1821': attribute type 1 has an invalid length. [ 254.815502][T10101] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1821'. [ 254.815529][T10101] netlink: 'syz.3.1821': attribute type 1 has an invalid length. [ 255.293101][ T5848] Bluetooth: hci2: command tx timeout [ 255.449128][ T9961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.449145][ T9961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.449170][ T9961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.503347][ T9961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.503364][ T9961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.503394][ T9961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.560753][ T3740] bridge_slave_1: left allmulticast mode [ 255.560782][ T3740] bridge_slave_1: left promiscuous mode [ 255.561036][ T3740] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.617839][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.617932][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.665381][ T3740] bridge_slave_0: left allmulticast mode [ 255.665409][ T3740] bridge_slave_0: left promiscuous mode [ 255.665633][ T3740] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.785560][T10124] futex_wake_op: syz.0.1832 tries to shift op by -1; fix this program [ 255.940894][T10130] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1835'. [ 256.212577][ T5930] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 256.370787][ T5930] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 256.370815][ T5930] usb 4-1: config 0 has no interface number 0 [ 256.370851][ T5930] usb 4-1: too many endpoints for config 0 interface 2 altsetting 0: 129, using maximum allowed: 30 [ 256.370894][ T5930] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.370920][ T5930] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.370942][ T5930] usb 4-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 256.370986][ T5930] usb 4-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 256.371010][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.388739][ T5930] usb 4-1: config 0 descriptor?? [ 256.861468][ T5930] hid_parser_main: 28 callbacks suppressed [ 256.861490][ T5930] wacom 0003:056A:0084.0027: unknown main item tag 0x0 [ 256.861517][ T5930] wacom 0003:056A:0084.0027: unknown main item tag 0x0 [ 256.895554][ T5930] wacom 0003:056A:0084.0027: hidraw0: USB HID vff.ea Device [HID 056a:0084] on usb-dummy_hcd.3-1/input2 [ 257.053615][ T5930] usb 4-1: USB disconnect, device number 23 [ 257.372589][ T5848] Bluetooth: hci2: command tx timeout [ 257.884104][ T3740] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.951351][ T3740] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.987666][ T3740] bond0 (unregistering): Released all slaves [ 258.052124][T10128] netlink: 'syz.0.1834': attribute type 5 has an invalid length. [ 258.602486][ T5843] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 258.754967][ T5843] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.754996][ T5843] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 258.755036][ T5843] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 258.755058][ T5843] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.760147][ T5843] usb 4-1: config 0 descriptor?? [ 259.244677][ T9961] hsr_slave_0: entered promiscuous mode [ 259.245720][ T9961] hsr_slave_1: entered promiscuous mode [ 259.246414][ T9961] debugfs: 'hsr0' already exists in 'hsr' [ 259.246432][ T9961] Cannot create hsr debugfs directory [ 259.254092][ T5843] koneplus 0003:1E7D:2D51.0028: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.3-1/input0 [ 259.381627][ T5891] usb 4-1: USB disconnect, device number 24 [ 259.587230][T10179] fido_id[10179]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 259.843142][ T5891] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 259.994898][ T5891] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.994940][ T5891] usb 6-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 259.994977][ T5891] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.000921][ T5891] usb 6-1: config 0 descriptor?? [ 260.506992][ T5891] nintendo 0003:057E:200E.0029: unbalanced delimiter at end of report description [ 260.507712][ T5891] nintendo 0003:057E:200E.0029: HID parse failed [ 260.530437][ T5891] nintendo 0003:057E:200E.0029: probe - fail = -22 [ 260.530538][ T5891] nintendo 0003:057E:200E.0029: probe with driver nintendo failed with error -22 [ 260.592935][ T3740] hsr_slave_0: left promiscuous mode [ 260.638909][ T3740] hsr_slave_1: left promiscuous mode [ 260.639692][ T3740] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.639718][ T3740] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.674634][ T5891] usb 6-1: USB disconnect, device number 10 [ 260.712933][ T3740] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.712978][ T3740] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.876029][ T3740] veth1_macvtap: left promiscuous mode [ 260.876140][ T3740] veth0_macvtap: left promiscuous mode [ 260.876396][ T3740] veth1_vlan: left promiscuous mode [ 260.876568][ T3740] veth0_vlan: left promiscuous mode [ 261.557880][T10237] program syz.4.1879 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 262.608352][T10260] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1890'. [ 262.812543][ T5844] Bluetooth: hci4: command 0x0406 tx timeout [ 262.852576][ T37] audit: type=1326 audit(1757719771.026:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10263 comm="syz.5.1892" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3ba102eba9 code=0x0 [ 263.643004][ T3740] team0 (unregistering): Port device team_slave_1 removed [ 263.885185][ T3740] team0 (unregistering): Port device team_slave_0 removed [ 267.282082][ T9961] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 267.356836][ T9961] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 267.489652][T10314] IPVS: stopping backup sync thread 8328 ... [ 267.491861][ T9961] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 267.614179][ T9961] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 268.342630][ T9961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.459816][ T9961] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.489022][ T3740] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.489397][ T3740] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.594082][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.594225][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.137899][T10372] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1932'. [ 269.137926][T10372] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1932'. [ 269.137939][T10372] tipc: MTU too low for tipc bearer [ 269.252573][T10377] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1933'. [ 270.001620][ T9961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.389225][T10363] syz.3.1929 (10363): drop_caches: 2 [ 270.682728][T10416] ALSA: mixer_oss: invalid OSS volume '' [ 270.923504][T10412] "syz.5.1942" (10412) uses obsolete ecb(arc4) skcipher [ 271.390138][ T9961] veth0_vlan: entered promiscuous mode [ 271.436721][ T9961] veth1_vlan: entered promiscuous mode [ 271.579363][ T9961] veth0_macvtap: entered promiscuous mode [ 271.622982][ T9961] veth1_macvtap: entered promiscuous mode [ 271.674520][ T37] audit: type=1400 audit(1757719779.816:48): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=10440 comm="syz.4.1953" src=1 dest=20000 netif=wpan0 [ 271.675628][ T9961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.726449][ T9961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.771421][ T43] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.771641][ T43] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.771676][ T43] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.771711][ T43] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.932807][ T10] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 272.088426][ T10] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 272.088454][ T10] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 272.088472][ T10] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 272.088490][ T10] usb 6-1: config 220 has no interface number 2 [ 272.088570][ T10] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 272.088595][ T10] usb 6-1: config 220 interface 0 has no altsetting 0 [ 272.088612][ T10] usb 6-1: config 220 interface 76 has no altsetting 0 [ 272.088629][ T10] usb 6-1: config 220 interface 1 has no altsetting 0 [ 272.091200][ T10] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 272.091226][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.091244][ T10] usb 6-1: Product: syz [ 272.091258][ T10] usb 6-1: Manufacturer: syz [ 272.091271][ T10] usb 6-1: SerialNumber: syz [ 272.537202][ T10] usb 6-1: selecting invalid altsetting 0 [ 272.550735][ T10] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 272.550771][ T10] usb 6-1: No valid video chain found. [ 272.593094][ T10] usb 6-1: selecting invalid altsetting 0 [ 272.593127][ T10] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 272.618318][ T10] usb 6-1: USB disconnect, device number 11 [ 272.668260][T10466] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1958'. [ 272.702875][T10466] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1958'. [ 272.702898][T10466] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1958'. [ 272.707601][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.707615][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.896133][ T160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.896151][ T160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.674944][T10491] ptrace attach of "./syz-executor exec"[7430] was attempted by "\x09   Àÿ Àÿ Ðÿ 0 ðÿ °ÿ Àÿ ÿÿÿÿ"[10491] [ 273.905958][T10496] vlan3: entered allmulticast mode [ 273.905978][T10496] bond0: entered allmulticast mode [ 273.905990][T10496] bond_slave_0: entered allmulticast mode [ 273.906010][T10496] bond_slave_1: entered allmulticast mode [ 273.954249][T10501] tipc: Enabling of bearer rejected, failed to enable media [ 274.216362][T10514] sd 0:0:1:0: device reset [ 275.133052][ T5843] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 275.286233][ T5843] usb 4-1: Using ep0 maxpacket: 16 [ 275.299944][ T5843] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 275.299971][ T5843] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 275.299990][ T5843] usb 4-1: Product: syz [ 275.300004][ T5843] usb 4-1: Manufacturer: syz [ 275.300017][ T5843] usb 4-1: SerialNumber: syz [ 275.351604][ T5843] usb 4-1: config 0 descriptor?? [ 275.625229][ T5843] usb 4-1: USB disconnect, device number 25 [ 275.781246][T10563] netlink: 'syz.6.1992': attribute type 1 has an invalid length. [ 277.247790][T10614] IPVS: Error connecting to the multicast addr [ 278.200143][ T37] audit: type=1326 audit(1757719786.366:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10645 comm="syz.0.2018" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f94bdc5eba9 code=0x0 [ 278.457927][T10656] ieee802154 phy0 wpan0: encryption failed: -126 [ 278.458189][T10656] ieee802154 phy0 wpan0: encryption failed: -126 [ 278.891123][T10666] dvmrp0: entered allmulticast mode [ 278.910291][T10665] dvmrp0: left allmulticast mode [ 279.400332][T10678] pim6reg: entered allmulticast mode [ 281.786894][ T5848] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 281.787002][ T5848] Bluetooth: hci2: Injecting HCI hardware error event [ 281.789116][ T5844] Bluetooth: hci2: hardware error 0x00 [ 282.568616][T10778] binder: 10775:10778 ioctl 541b 0 returned -22 [ 282.752830][T10784] netlink: 64691 bytes leftover after parsing attributes in process `syz.5.2064'. [ 282.995925][ T37] audit: type=1326 audit(1757719791.166:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10790 comm="syz.5.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba102eba9 code=0x7ffc0000 [ 282.995998][ T37] audit: type=1326 audit(1757719791.166:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10790 comm="syz.5.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba102eba9 code=0x7ffc0000 [ 282.998182][ T37] audit: type=1326 audit(1757719791.166:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10790 comm="syz.5.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7f3ba102eba9 code=0x7ffc0000 [ 282.998232][ T37] audit: type=1326 audit(1757719791.166:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10790 comm="syz.5.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba102eba9 code=0x7ffc0000 [ 282.998279][ T37] audit: type=1326 audit(1757719791.166:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10790 comm="syz.5.2068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ba102eba9 code=0x7ffc0000 [ 283.209156][T10795] netlink: 'syz.3.2069': attribute type 29 has an invalid length. [ 283.264093][T10798] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2070'. [ 284.252428][ T5844] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 284.288897][ T37] audit: type=1326 audit(1757719792.456:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10832 comm="syz.3.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93dad2eba9 code=0x7ffc0000 [ 284.290704][ T37] audit: type=1326 audit(1757719792.456:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10832 comm="syz.3.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93dad2eba9 code=0x7ffc0000 [ 284.304805][ T37] audit: type=1326 audit(1757719792.476:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10832 comm="syz.3.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f93dad2eba9 code=0x7ffc0000 [ 284.306517][ T37] audit: type=1326 audit(1757719792.476:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10832 comm="syz.3.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93dad2eba9 code=0x7ffc0000 [ 284.306697][ T37] audit: type=1326 audit(1757719792.476:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10832 comm="syz.3.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93dad2eba9 code=0x7ffc0000 [ 284.309302][ T37] audit: type=1326 audit(1757719792.476:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10832 comm="syz.3.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f93dad2eba9 code=0x7ffc0000 [ 284.310613][ T37] audit: type=1326 audit(1757719792.476:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10832 comm="syz.3.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93dad2eba9 code=0x7ffc0000 [ 284.314053][ T37] audit: type=1326 audit(1757719792.476:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10832 comm="syz.3.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93dad2eba9 code=0x7ffc0000 [ 284.605725][T10839] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2088'. [ 285.815414][T10877] xt_socket: unknown flags 0xd0 [ 286.425273][T10900] netlink: 'syz.0.2116': attribute type 29 has an invalid length. [ 286.432177][T10900] netlink: 'syz.0.2116': attribute type 29 has an invalid length. [ 286.672411][ T5891] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 286.825600][ T5891] usb 6-1: config 162 has an invalid interface number: 79 but max is 1 [ 286.825629][ T5891] usb 6-1: config 162 has an invalid interface number: 183 but max is 1 [ 286.825650][ T5891] usb 6-1: config 162 has no interface number 0 [ 286.825665][ T5891] usb 6-1: config 162 has no interface number 1 [ 286.825740][ T5891] usb 6-1: config 162 interface 79 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 286.825786][ T5891] usb 6-1: config 162 interface 183 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 286.825810][ T5891] usb 6-1: config 162 interface 183 altsetting 1 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 286.825837][ T5891] usb 6-1: config 162 interface 183 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 286.825863][ T5891] usb 6-1: config 162 interface 183 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 286.825888][ T5891] usb 6-1: config 162 interface 183 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 64 [ 286.825914][ T5891] usb 6-1: config 162 interface 183 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 286.825940][ T5891] usb 6-1: config 162 interface 79 has no altsetting 0 [ 286.825958][ T5891] usb 6-1: config 162 interface 183 has no altsetting 0 [ 286.942489][ T5891] usb 6-1: New USB device found, idVendor=056e, idProduct=5004, bcdDevice=db.d1 [ 286.942522][ T5891] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.942544][ T5891] usb 6-1: Product: syz [ 286.942560][ T5891] usb 6-1: Manufacturer: syz [ 286.942576][ T5891] usb 6-1: SerialNumber: syz [ 287.169852][T10925] netlink: 'syz.3.2129': attribute type 12 has an invalid length. [ 287.169874][T10925] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.2129'. [ 287.262695][ T5891] pl2303 6-1:162.79: required endpoints missing [ 287.285384][ T5891] pl2303 6-1:162.183: pl2303 converter detected [ 287.289679][ T5891] pl2303 6-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 287.290191][ T5891] pl2303 6-1:162.183: pl2303_vendor_write - failed to write [0404]: -71 [ 287.290603][ T5891] pl2303 6-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 287.290952][ T5891] pl2303 6-1:162.183: pl2303_vendor_read - failed to read [8383]: -71 [ 287.291290][ T5891] pl2303 6-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 287.291676][ T5891] pl2303 6-1:162.183: pl2303_vendor_write - failed to write [0404]: -71 [ 287.292152][ T5891] pl2303 6-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 287.357662][ T5891] pl2303 6-1:162.183: pl2303_vendor_read - failed to read [8383]: -71 [ 287.360699][ T5891] pl2303 6-1:162.183: pl2303_vendor_write - failed to write [0000]: -71 [ 287.361213][ T5891] pl2303 6-1:162.183: pl2303_vendor_write - failed to write [0001]: -71 [ 287.388402][ T5891] pl2303 6-1:162.183: pl2303_vendor_write - failed to write [0002]: -71 [ 287.403334][ T5891] usb 6-1: pl2303 converter now attached to ttyUSB0 [ 287.430097][ T5891] usb 6-1: USB disconnect, device number 12 [ 287.458989][ T5891] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 287.481061][ T5891] pl2303 6-1:162.183: device disconnected [ 287.517703][ T5973] udevd[5973]: setting mode of /dev/bus/usb/006/012 to 020664 failed: No such file or directory [ 287.518031][ T5973] udevd[5973]: setting owner of /dev/bus/usb/006/012 to uid=0, gid=0 failed: No such file or directory [ 288.127497][ T37] audit: type=1326 audit(1757719796.296:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10949 comm="syz.3.2141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93dad2eba9 code=0x7ffc0000 [ 288.127547][ T37] audit: type=1326 audit(1757719796.296:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10949 comm="syz.3.2141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93dad2eba9 code=0x7ffc0000 [ 289.381429][T10991] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 289.572495][ T5843] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 289.689100][T11001] sg_write: data in/out 209152/4 bytes for SCSI command 0x89-- guessing data in; [ 289.689100][T11001] program syz.5.2166 not setting count and/or reply_len properly [ 289.761513][ T5843] usb 7-1: unable to get BOS descriptor or descriptor too short [ 289.766088][ T5843] usb 7-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 289.787840][ T5843] usb 7-1: string descriptor 0 read error: -22 [ 289.787973][ T5843] usb 7-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 289.787995][ T5843] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.983365][ T5843] usb 7-1: reset high-speed USB device number 2 using dummy_hcd [ 290.164329][T11015] program syz.5.2172 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 290.538132][T11030] program syz.5.2177 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 290.743101][ T5843] usb 7-1: device descriptor read/64, error -71 [ 290.982481][ T5843] usb 7-1: reset high-speed USB device number 2 using dummy_hcd [ 291.043589][T11042] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2184'. [ 291.071320][T11044] netlink: 'syz.3.2185': attribute type 10 has an invalid length. [ 291.132570][ T5844] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 291.134645][T11045] netlink: 'syz.3.2185': attribute type 10 has an invalid length. [ 291.153105][ T5843] usb 7-1: unable to get BOS descriptor or descriptor too short [ 291.165357][ T5843] usb 7-1: device firmware changed [ 291.195999][ T5843] usb 7-1: USB disconnect, device number 2 [ 291.300332][T11044] team0: Port device netdevsim0 added [ 291.431739][T11045] team0: Port device netdevsim0 removed [ 291.445395][T11045] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 291.450302][T11045] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 292.062479][ T5843] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 292.223425][ T5843] usb 7-1: Using ep0 maxpacket: 8 [ 292.229421][ T5843] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.229472][ T5843] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 292.229495][ T5843] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.262484][ T6038] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 292.292254][ T5843] usb 7-1: config 0 descriptor?? [ 292.329304][ T5843] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 292.435324][ T6038] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.435434][ T6038] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 292.435459][ T6038] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.487087][ T6038] usb 4-1: config 0 descriptor?? [ 292.951085][ T5843] gspca_vc032x: reg_r err -71 [ 292.951179][ T5843] vc032x 7-1:0.0: probe with driver vc032x failed with error -71 [ 292.986684][ T5843] usb 7-1: USB disconnect, device number 3 [ 292.991326][ T6038] lua 0003:1E7D:2C2E.002A: hidraw0: USB HID v0.00 Device [HID 1e7d:2c2e] on usb-dummy_hcd.3-1/input0 [ 293.149670][ T6038] usb 4-1: USB disconnect, device number 26 [ 293.339704][T11082] fido_id[11082]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 295.488281][T11151] dvmrp1: entered allmulticast mode [ 295.502103][T11151] dvmrp1: left allmulticast mode [ 295.642434][ T5891] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 295.795012][ T5891] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 295.795063][ T5891] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.795088][ T5891] usb 7-1: config 0 interface 0 has no altsetting 0 [ 295.795221][ T5891] usb 7-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 295.795245][ T5891] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.862532][ T5891] usb 7-1: config 0 descriptor?? [ 296.307371][ T5891] hid-alps 0003:044E:120B.002B: bogus close delimiter [ 296.307392][ T5891] hid-alps 0003:044E:120B.002B: item 0 0 2 10 parsing failed [ 296.308294][ T5891] hid-alps 0003:044E:120B.002B: parse failed [ 296.308388][ T5891] hid-alps 0003:044E:120B.002B: probe with driver hid-alps failed with error -22 [ 296.506984][ T10] usb 7-1: USB disconnect, device number 4 [ 296.742901][ T6038] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 296.895297][ T6038] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 296.895324][ T6038] usb 4-1: config 0 has no interface number 0 [ 296.899564][ T6038] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 296.899590][ T6038] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.899610][ T6038] usb 4-1: Product: syz [ 296.899623][ T6038] usb 4-1: Manufacturer: syz [ 296.899637][ T6038] usb 4-1: SerialNumber: syz [ 296.941895][ T6038] usb 4-1: config 0 descriptor?? [ 297.196089][ T6038] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 297.245556][ T6038] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 297.246697][ T6038] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 297.247498][ T6038] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 297.295080][T11190] netlink: 504 bytes leftover after parsing attributes in process `syz.0.2246'. [ 297.327887][ T6038] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 297.611467][ T6038] usb 4-1: USB disconnect, device number 27 [ 297.677152][ T6038] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 297.677981][ T6038] keyspan 4-1:0.133: device disconnected [ 297.802447][T11203] (unnamed net_device) (uninitialized): (slave gre0): Device is not bonding slave [ 297.802473][T11203] (unnamed net_device) (uninitialized): option active_slave: invalid value (gre0) [ 298.561997][T11228] random: crng reseeded on system resumption [ 298.650979][T11228] Restarting kernel threads ... [ 298.691771][T11228] Done restarting kernel threads. [ 299.034673][T11240] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2263'. [ 299.226164][T11248] netlink: 'syz.0.2266': attribute type 2 has an invalid length. [ 299.227399][T11248] netlink: 'syz.0.2266': attribute type 2 has an invalid length. [ 301.722451][ T49] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 301.882509][ T49] usb 4-1: Using ep0 maxpacket: 32 [ 301.884856][ T49] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.884900][ T49] usb 4-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 301.884925][ T49] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.898248][ T49] usb 4-1: config 0 descriptor?? [ 302.116727][ T10] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 302.272426][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 302.274702][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.274730][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.274765][ T10] usb 7-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 302.274787][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.331245][ T10] usb 7-1: config 0 descriptor?? [ 302.385285][ T49] magicmouse 0003:05AC:0265.002C: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.3-1/input0 [ 302.446933][T11332] sp0: Synchronizing with TNC [ 302.451249][T11331] [U] è [ 302.538358][ T5843] usb 4-1: USB disconnect, device number 28 [ 302.566684][ T10] usbhid 7-1:0.0: can't add hid device: -71 [ 302.566795][ T10] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 302.603271][ T10] usb 7-1: USB disconnect, device number 5 [ 302.660243][T11334] fido_id[11334]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 303.104483][ T10] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 303.253864][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 303.256055][ T10] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEF, changing to 0x8F [ 303.256084][ T10] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 256 [ 303.256108][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.256131][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.257960][ T10] usb 7-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 303.257985][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 303.258003][ T10] usb 7-1: SerialNumber: syz [ 303.267577][ T10] usb 7-1: config 0 descriptor?? [ 303.278921][ T10] hso 7-1:0.0: Can't find BULK OUT endpoint [ 303.329523][T11346] netlink: 19 bytes leftover after parsing attributes in process `syz.0.2301'. [ 303.483734][ T10] usb 7-1: USB disconnect, device number 6 [ 304.224542][T11367] netlink: 92 bytes leftover after parsing attributes in process `syz.6.2312'. [ 304.224612][T11367] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2312'. [ 304.616437][T11378] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2316'. [ 304.616530][T11378] tipc: Enabling of bearer rejected, failed to enable media [ 306.142736][T11415] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2334'. [ 306.443669][ T5844] Bluetooth: hci5: link tx timeout [ 306.444164][ T5844] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 306.448843][ T5844] Bluetooth: hci5: link tx timeout [ 306.448858][ T5844] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 306.449053][ T5844] Bluetooth: hci5: link tx timeout [ 306.449065][ T5844] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 306.449079][ T5844] Bluetooth: hci5: link tx timeout [ 306.449089][ T5844] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 306.894407][T11439] overlayfs: missing 'workdir' [ 307.482998][T11457] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2356'. [ 307.710881][T11464] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2358'. [ 307.839431][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 307.850562][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 307.851816][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 307.855565][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 307.871792][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 308.480840][T11465] chnl_net:caif_netlink_parms(): no params data found [ 308.498577][ T5844] Bluetooth: hci5: command 0x0406 tx timeout [ 308.652525][ T5843] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 308.802501][ T5843] usb 4-1: Using ep0 maxpacket: 16 [ 308.805006][ T5843] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.805035][ T5843] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.805073][ T5843] usb 4-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 308.805097][ T5843] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.865467][ T5843] usb 4-1: config 0 descriptor?? [ 309.289758][T11465] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.289980][T11465] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.290187][T11465] bridge_slave_0: entered allmulticast mode [ 309.303138][T11465] bridge_slave_0: entered promiscuous mode [ 309.320842][T11465] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.320936][T11465] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.321106][T11465] bridge_slave_1: entered allmulticast mode [ 309.328590][T11465] bridge_slave_1: entered promiscuous mode [ 309.360489][ T5843] bigben 0003:146B:0902.002D: unexpected rdesc, please submit for review [ 309.399769][ T5843] bigben 0003:146B:0902.002D: hidraw0: USB HID v0.00 Device [HID 146b:0902] on usb-dummy_hcd.3-1/input0 [ 309.399801][ T5843] bigben 0003:146B:0902.002D: missing HID_OUTPUT_REPORT 0 [ 309.399818][ T5843] bigben 0003:146B:0902.002D: no output report found [ 309.564425][ T49] usb 4-1: USB disconnect, device number 29 [ 309.595969][T11512] fido_id[11512]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 309.661666][T11465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.690309][T11465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.879376][T11518] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2380'. [ 309.932600][ T5844] Bluetooth: hci3: command tx timeout [ 310.006719][T11465] team0: Port device team_slave_0 added [ 310.010061][T11465] team0: Port device team_slave_1 added [ 310.083095][ T49] kernel write not supported for file /sg0 (pid: 49 comm: kworker/1:1) [ 310.271117][T11531] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2386'. [ 310.461638][T11465] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.461654][T11465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.461768][T11465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.486865][T11465] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.486895][T11465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.486924][T11465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.152465][ T49] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 311.163544][T11558] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 311.322547][ T49] usb 4-1: Using ep0 maxpacket: 8 [ 311.324883][ T49] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 311.336045][ T49] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 311.336070][ T49] usb 4-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 311.336088][ T49] usb 4-1: Product: syz [ 311.336101][ T49] usb 4-1: Manufacturer: syz [ 311.336113][ T49] usb 4-1: SerialNumber: syz [ 311.399760][ T49] usb 4-1: config 0 descriptor?? [ 311.442732][ T49] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 311.818533][ T49] gspca_zc3xx: reg_w_i err -71 [ 311.823922][ T1324] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.924798][T11465] hsr_slave_0: entered promiscuous mode [ 311.935574][T11465] hsr_slave_1: entered promiscuous mode [ 311.936486][T11465] debugfs: 'hsr0' already exists in 'hsr' [ 311.936513][T11465] Cannot create hsr debugfs directory [ 312.014885][ T5848] Bluetooth: hci3: command tx timeout [ 312.402531][ T49] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 312.402636][ T49] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 312.407389][ T49] usb 4-1: USB disconnect, device number 30 [ 312.470400][ T1324] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.697718][T11585] netlink: 'syz.0.2411': attribute type 61 has an invalid length. [ 312.977403][ T1324] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.615503][ T1324] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.790723][T11633] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2433'. [ 314.092607][ T5848] Bluetooth: hci3: command tx timeout [ 314.216388][T11645] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 314.216441][T11645] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 314.216531][T11645] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 314.216658][T11645] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 314.216705][T11645] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 314.216757][T11645] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 314.216882][T11645] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 314.216927][T11645] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 314.216971][T11645] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 314.217058][T11645] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 314.217106][T11645] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 314.217153][T11645] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 314.217235][T11645] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 314.217283][T11645] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 314.217329][T11645] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 314.217372][T11645] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4) [ 314.217418][T11645] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4) [ 314.217466][T11645] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 314.217571][T11645] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 314.479378][ T37] kauditd_printk_skb: 6 callbacks suppressed [ 314.479393][ T37] audit: type=1326 audit(1757719822.633:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11651 comm="syz.4.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210359eba9 code=0x7ffc0000 [ 314.479429][ T37] audit: type=1326 audit(1757719822.633:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11651 comm="syz.4.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210359eba9 code=0x7ffc0000 [ 314.479461][ T37] audit: type=1326 audit(1757719822.643:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11651 comm="syz.4.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f210359eba9 code=0x7ffc0000 [ 314.479494][ T37] audit: type=1326 audit(1757719822.643:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11651 comm="syz.4.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210359eba9 code=0x7ffc0000 [ 314.479525][ T37] audit: type=1326 audit(1757719822.643:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11651 comm="syz.4.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210359eba9 code=0x7ffc0000 [ 314.479555][ T37] audit: type=1326 audit(1757719822.643:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11651 comm="syz.4.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f210359eba9 code=0x7ffc0000 [ 314.481196][ T37] audit: type=1326 audit(1757719822.643:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11651 comm="syz.4.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210359eba9 code=0x7ffc0000 [ 314.522581][ T6038] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 314.693219][ T6038] usb 7-1: Using ep0 maxpacket: 32 [ 314.695375][ T6038] usb 7-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 314.695405][ T6038] usb 7-1: config 0 interface 0 has no altsetting 0 [ 314.695436][ T6038] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 314.695458][ T6038] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.748281][ T6038] usb 7-1: config 0 descriptor?? [ 314.910605][ T37] audit: type=1326 audit(1757719823.073:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11661 comm="syz.0.2447" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f94bdc5eba9 code=0x0 [ 314.995614][ T1324] bridge_slave_1: left allmulticast mode [ 314.995644][ T1324] bridge_slave_1: left promiscuous mode [ 314.997251][ T1324] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.095332][ T1324] bridge_slave_0: left allmulticast mode [ 315.095380][ T1324] bridge_slave_0: left promiscuous mode [ 315.095697][ T1324] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.325755][ T6038] corsair-psu 0003:1B1C:1C09.002E: unknown main item tag 0x0 [ 315.329350][ T6038] corsair-psu 0003:1B1C:1C09.002E: unknown main item tag 0x0 [ 315.329379][ T6038] corsair-psu 0003:1B1C:1C09.002E: unknown main item tag 0x0 [ 315.329405][ T6038] corsair-psu 0003:1B1C:1C09.002E: unknown main item tag 0x0 [ 315.329430][ T6038] corsair-psu 0003:1B1C:1C09.002E: unknown main item tag 0x0 [ 315.341112][ T6038] corsair-psu 0003:1B1C:1C09.002E: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.6-1/input0 [ 315.404333][ T6038] corsair-psu 0003:1B1C:1C09.002E: unable to initialize device (-38) [ 315.435499][ T6038] corsair-psu 0003:1B1C:1C09.002E: probe with driver corsair-psu failed with error -38 [ 315.527323][ T6038] usb 7-1: USB disconnect, device number 7 [ 315.660724][T11675] fido_id[11675]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 316.172843][ T5848] Bluetooth: hci3: command tx timeout [ 317.057343][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.894588][ T1324] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 317.964278][ T1324] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.006942][ T1324] bond0 (unregistering): Released all slaves [ 318.064351][T11465] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 318.205306][T11465] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 318.292548][T11465] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 318.347739][T11465] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 318.573163][ T6038] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 318.723937][ T6038] usb 7-1: Using ep0 maxpacket: 16 [ 318.726068][ T6038] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 318.726093][ T6038] usb 7-1: config 0 has no interface number 0 [ 318.726140][ T6038] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 318.726164][ T6038] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 318.728236][ T6038] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 318.728262][ T6038] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 318.728281][ T6038] usb 7-1: Product: syz [ 318.728293][ T6038] usb 7-1: SerialNumber: syz [ 318.808810][ T6038] usb 7-1: config 0 descriptor?? [ 318.826359][ T6038] cm109 7-1:0.8: invalid payload size 0, expected 4 [ 318.842153][ T6038] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input24 [ 319.069041][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 319.070969][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 319.071207][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 319.071445][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 319.073491][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 319.073739][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 319.073981][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 319.074215][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 319.074451][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 319.075512][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 319.194712][ T6001] usb 7-1: USB disconnect, device number 8 [ 319.194832][ C0] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 319.257294][ T6001] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 319.811170][T11757] NILFS (nullb0): couldn't find nilfs on the device [ 320.000920][T11763] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2477'. [ 320.295649][ T1324] hsr_slave_0: left promiscuous mode [ 320.357649][ T1324] hsr_slave_1: left promiscuous mode [ 320.358505][ T1324] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 320.358532][ T1324] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 320.427753][ T1324] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 320.427781][ T1324] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 320.584290][ T1324] veth1_macvtap: left promiscuous mode [ 320.584399][ T1324] veth0_macvtap: left promiscuous mode [ 320.584660][ T1324] veth1_vlan: left promiscuous mode [ 320.584876][ T1324] veth0_vlan: left promiscuous mode [ 323.870589][ T1324] team0 (unregistering): Port device team_slave_1 removed [ 324.077743][ T1324] team0 (unregistering): Port device team_slave_0 removed [ 324.492800][ T5844] Bluetooth: hci3: command 0x0405 tx timeout [ 326.315028][T11844] netlink: 'syz.3.2517': attribute type 58 has an invalid length. [ 326.315049][T11844] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2517'. [ 326.459993][T11465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.514805][T11465] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.554573][ T173] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.554761][ T173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.572551][ T5843] usb 7-1: new low-speed USB device number 9 using dummy_hcd [ 326.589044][T11851] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2519'. [ 326.604656][ T3578] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.604773][ T3578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.724412][ T5843] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 326.724445][ T5843] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 326.724470][ T5843] usb 7-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 326.724494][ T5843] usb 7-1: config 0 interface 0 has no altsetting 0 [ 326.724525][ T5843] usb 7-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 326.724546][ T5843] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.811980][ T5843] usb 7-1: config 0 descriptor?? [ 326.812979][T11846] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 327.246531][ T5843] vrc2 0003:07C0:1125.002F: fixing up VRC-2 report descriptor [ 327.284661][ T5843] input: HID 07c0:1125 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:07C0:1125.002F/input/input25 [ 327.322518][ T49] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 327.381463][ T5843] vrc2 0003:07C0:1125.002F: input,hidraw0: USB HID v0.00 Joystick [HID 07c0:1125] on usb-dummy_hcd.6-1/input0 [ 327.433163][ T5929] usb 7-1: USB disconnect, device number 9 [ 327.497910][ T49] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.497941][ T49] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.497976][ T49] usb 4-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 327.497998][ T49] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.600217][ T49] usb 4-1: config 0 descriptor?? [ 328.115644][T11870] fido_id[11870]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 328.124996][ T49] razer 0003:1532:010E.0030: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.3-1/input0 [ 328.218950][T11465] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.333846][ T5929] usb 4-1: USB disconnect, device number 31 [ 328.350598][T11880] ip6erspan0: entered promiscuous mode [ 328.666210][T11885] fido_id[11885]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 329.318270][T11465] veth0_vlan: entered promiscuous mode [ 329.348223][T11465] veth1_vlan: entered promiscuous mode [ 329.432903][T11910] tipc: Enabling of bearer rejected, failed to enable media [ 329.558795][T11465] veth0_macvtap: entered promiscuous mode [ 329.571970][T11465] veth1_macvtap: entered promiscuous mode [ 329.667529][T11465] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.676372][T11912] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 329.709015][T11465] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.736232][ T173] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.737067][ T173] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.737222][ T173] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.737257][ T173] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.779093][T11912] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 330.027518][ T6038] IPVS: starting estimator thread 0... [ 330.115963][T11928] IPVS: using max 7 ests per chain, 16800 per kthread [ 330.239973][T11929] IPVS: Error connecting to the multicast addr [ 330.742159][ T3740] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.742182][ T3740] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.957372][ T3578] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.957392][ T3578] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.132470][ T5929] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 332.284065][ T5929] usb 4-1: Using ep0 maxpacket: 32 [ 332.297659][ T5929] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 332.297684][ T5929] usb 4-1: config 0 has no interface number 0 [ 332.297734][ T5929] usb 4-1: config 0 interface 184 has no altsetting 0 [ 332.301843][ T5929] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 332.301869][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.301887][ T5929] usb 4-1: Product: syz [ 332.301923][ T5929] usb 4-1: Manufacturer: syz [ 332.301939][ T5929] usb 4-1: SerialNumber: syz [ 332.315329][T12005] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 332.332768][ T5929] usb 4-1: config 0 descriptor?? [ 332.346524][ T5929] smsc75xx v1.0.0 [ 332.399208][T12005] @0Ù: renamed from bond_slave_1 (while UP) [ 332.564428][T12011] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2567'. [ 332.620475][T12012] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2568'. [ 332.620501][T12012] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2568'. [ 332.880247][T12019] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 333.016334][ T5929] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 333.016371][ T5929] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 333.016389][ T5929] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 333.016648][ T5929] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 333.059343][ T5929] usb 4-1: USB disconnect, device number 32 [ 333.163998][T12027] mkiss: ax0: crc mode is auto. [ 333.464180][T12038] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2577'. [ 333.637801][T12044] delete_channel: no stack [ 333.639172][T12043] delete_channel: no stack [ 333.688297][T12046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2581'. [ 334.056715][T12060] EXT4-fs: Conflicting test_dummy_encryption options [ 334.752737][ T6001] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 334.918095][ T6001] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 334.918122][ T6001] usb 4-1: config 1 has no interface number 0 [ 334.918163][ T6001] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 334.918202][ T6001] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 334.918226][ T6001] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.929356][ T6001] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 334.929386][ T6001] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.929407][ T6001] usb 4-1: Product: syz [ 334.929420][ T6001] usb 4-1: Manufacturer: syz [ 334.929435][ T6001] usb 4-1: SerialNumber: syz [ 334.993135][T12076] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 335.230228][T12076] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 335.327806][T12103] bridge_slave_0: invalid flags given to default FDB implementation [ 335.539014][ T6001] sierra_net 4-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.3-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 335.649163][ T6001] sierra_net 4-1:1.7 wwan0: Submit SYNC failed -71 [ 335.649190][ T6001] sierra_net 4-1:1.7 wwan0: Send SYNC failed, status -71 [ 335.650010][ T6001] sierra_net 4-1:1.7 wwan0: Submit SYNC failed -71 [ 335.650028][ T6001] sierra_net 4-1:1.7 wwan0: Send SYNC failed, status -71 [ 335.670060][ T6001] usb 4-1: USB disconnect, device number 33 [ 335.677512][ T6001] sierra_net 4-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.3-1, Sierra Wireless USB-to-WWAN Modem [ 335.996456][ T6001] sierra_net 4-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 336.670221][T12145] syz_tun: refused to change device tx_queue_len [ 336.670242][T12145] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 337.272590][ T10] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 337.422519][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 337.426259][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.426293][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.426314][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 337.426353][ T10] usb 7-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 337.426375][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.491702][ T10] usb 7-1: config 0 descriptor?? [ 338.039704][ T10] logitech 0003:046D:C293.0031: unknown main item tag 0x0 [ 338.039738][ T10] logitech 0003:046D:C293.0031: unknown main item tag 0x0 [ 338.039763][ T10] logitech 0003:046D:C293.0031: unknown main item tag 0x0 [ 338.039788][ T10] logitech 0003:046D:C293.0031: unknown main item tag 0x0 [ 338.133465][ T10] logitech 0003:046D:C293.0031: hidraw0: USB HID v0.00 Device [HID 046d:c293] on usb-dummy_hcd.6-1/input0 [ 338.133508][ T10] logitech 0003:046D:C293.0031: no inputs found [ 338.255144][ T10] usb 7-1: USB disconnect, device number 10 [ 338.589579][T12181] fido_id[12181]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 338.738714][T12185] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 339.018040][T12189] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2648'. [ 339.378664][T12198] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2652'. [ 340.938197][T12222] netlink: 256 bytes leftover after parsing attributes in process `syz.6.2662'. [ 341.812473][ T10] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 341.962535][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 341.965010][ T10] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.965039][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 341.965071][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 341.965092][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.035460][ T10] usb 4-1: config 0 descriptor?? [ 342.755058][ T10] usb 4-1: USB disconnect, device number 34 [ 348.937584][T12317] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2694'. [ 349.103201][T12321] netlink: 'syz.7.2695': attribute type 1 has an invalid length. [ 352.581908][T12384] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 353.296638][T12393] bridge_slave_0: left allmulticast mode [ 353.296666][T12393] bridge_slave_0: left promiscuous mode [ 353.296912][T12393] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.299085][T12393] bridge_slave_1: left allmulticast mode [ 357.299117][T12393] bridge_slave_1: left promiscuous mode [ 357.299356][T12393] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.416390][T12393] bond0: (slave bond_slave_0): Releasing backup interface [ 358.442942][ T5930] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 358.487896][T12421] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 358.608826][ T5930] usb 7-1: Using ep0 maxpacket: 32 [ 358.612818][ T5930] usb 7-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 358.612847][ T5930] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.666995][ T5930] usb 7-1: config 0 descriptor?? [ 358.697996][ T5930] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 359.401680][ T5930] gspca_nw80x: reg_w err -71 [ 359.401766][ T5930] nw80x 7-1:0.0: probe with driver nw80x failed with error -71 [ 359.441038][ T5930] usb 7-1: USB disconnect, device number 11 [ 364.934007][T12393] bond0: (slave bond_slave_1): Releasing backup interface [ 365.412217][T12393] team0: Port device team_slave_0 removed [ 365.719361][T12393] team0: Port device team_slave_1 removed [ 365.720329][T12393] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.720358][T12393] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 366.207587][T12393] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 366.207618][T12393] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 366.469489][T12463] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2752'. [ 367.290594][T12472] usb usb8: usbfs: process 12472 (syz.0.2756) did not claim interface 0 before use [ 367.744901][T12481] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2760'. [ 369.437856][T12511] netlink: 'syz.6.2772': attribute type 6 has an invalid length. [ 369.460080][T12511] netlink: 'syz.6.2772': attribute type 6 has an invalid length. [ 374.331156][T12567] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2794'. [ 375.113294][ T37] audit: type=1326 audit(1757719883.263:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12577 comm="syz.4.2800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210359eba9 code=0x7ffc0000 [ 375.113345][ T37] audit: type=1326 audit(1757719883.283:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12577 comm="syz.4.2800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210359eba9 code=0x7ffc0000 [ 375.113386][ T37] audit: type=1326 audit(1757719883.283:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12577 comm="syz.4.2800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210359eba9 code=0x7ffc0000 [ 375.118043][ T37] audit: type=1326 audit(1757719883.283:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12577 comm="syz.4.2800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7f210359eba9 code=0x7ffc0000 [ 375.118091][ T37] audit: type=1326 audit(1757719883.283:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12577 comm="syz.4.2800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210359eba9 code=0x7ffc0000 [ 375.118132][ T37] audit: type=1326 audit(1757719883.283:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12577 comm="syz.4.2800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210359eba9 code=0x7ffc0000 [ 375.118173][ T37] audit: type=1326 audit(1757719883.283:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12577 comm="syz.4.2800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210359eba9 code=0x7ffc0000 [ 375.118214][ T37] audit: type=1326 audit(1757719883.283:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12577 comm="syz.4.2800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f210359eba9 code=0x7ffc0000 [ 375.118264][ T37] audit: type=1326 audit(1757719883.283:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12577 comm="syz.4.2800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f210359eba9 code=0x7ffc0000 [ 375.884156][T12588] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2805'. [ 375.884186][T12588] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2805'. [ 375.884211][T12588] netlink: 'syz.7.2805': attribute type 12 has an invalid length. [ 375.884224][T12588] netlink: 'syz.7.2805': attribute type 11 has an invalid length. [ 376.749228][T12599] tipc: Started in network mode [ 376.749267][T12599] tipc: Node identity 0000000000005f000000000000000001, cluster identity 4711 [ 376.749314][T12599] tipc: Enabling of bearer rejected, failed to enable media [ 378.301221][T12624] netlink: 'syz.0.2820': attribute type 2 has an invalid length. [ 378.623361][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.558092][T12581] syz.6.2801 (12581): drop_caches: 1 [ 383.946748][T12657] netdevsim netdevsim0: Direct firmware load for . [ 383.946748][T12657] failed with error -2 [ 383.946774][T12657] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 383.946774][T12657] [ 384.073539][T12668] netlink: 256 bytes leftover after parsing attributes in process `syz.6.2840'. [ 384.139109][T12671] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2838'. [ 385.294735][ T6038] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 385.442720][ T6038] usb 4-1: Using ep0 maxpacket: 8 [ 385.473472][ T6038] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 385.473500][ T6038] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.473519][ T6038] usb 4-1: Product: syz [ 385.473531][ T6038] usb 4-1: Manufacturer: syz [ 385.473544][ T6038] usb 4-1: SerialNumber: syz [ 385.535403][ T6038] usb 4-1: config 0 descriptor?? [ 385.576089][ T6038] gspca_main: se401-2.14.0 probing 047d:5003 [ 385.970891][T12697] macsec2: entered promiscuous mode [ 386.019014][ T6038] gspca_se401: Wrong descriptor type [ 386.246554][ T6038] usb 4-1: USB disconnect, device number 35 [ 386.405312][T12702] comedi comedi3: comedi_test: 20263 microvolt, 31 microsecond waveform attached [ 387.298190][T12710] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2859'. [ 389.133392][T12710] vlan2: entered promiscuous mode [ 389.133412][T12710] bridge0: entered promiscuous mode [ 391.762389][ T6038] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 391.917625][ T6038] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.917651][ T6038] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 391.917699][ T6038] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 391.917720][ T6038] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.011885][ T6038] usb 7-1: config 0 descriptor?? [ 392.109949][ T6038] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 392.109996][ T6038] dvb-usb: bulk message failed: -22 (3/0) [ 392.186664][ T6038] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 392.201149][ T6038] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 392.201200][ T6038] usb 7-1: media controller created [ 392.234873][ T6038] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 392.283879][T12736] dvb-usb: bulk message failed: -22 (4/0) [ 392.322907][ T6038] dvb-usb: bulk message failed: -22 (6/0) [ 392.322996][ T6038] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 392.350597][ T6038] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input26 [ 392.391556][ T6038] dvb-usb: schedule remote query interval to 150 msecs. [ 392.391575][ T6038] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 392.487657][ T6038] usb 7-1: USB disconnect, device number 12 [ 392.771469][ T37] audit: type=1326 audit(1757719900.933:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12747 comm="syz.3.2878" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f93dad2eba9 code=0x0 [ 393.454090][T12758] program syz.6.2880 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 393.916598][T12761] netlink: 'syz.6.2882': attribute type 10 has an invalid length. [ 393.953591][T12763] netlink: 'syz.3.2883': attribute type 10 has an invalid length. [ 393.953611][T12763] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2883'. [ 395.023505][T12784] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2892'. [ 395.023560][T12784] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2892'. [ 396.375749][ T5930] kernel write not supported for file /vcs (pid: 5930 comm: kworker/0:4) [ 400.299302][ T6038] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 400.722460][ T6038] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 400.872340][ T6038] usb 7-1: Using ep0 maxpacket: 16 [ 400.876156][ T6038] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 400.876184][ T6038] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 400.876205][ T6038] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 400.876243][ T6038] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 400.876264][ T6038] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.002916][ T6038] usb 7-1: config 0 descriptor?? [ 401.494177][ T6038] microsoft 0003:045E:07DA.0033: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 401.494208][ T6038] microsoft 0003:045E:07DA.0033: no inputs found [ 401.494221][ T6038] microsoft 0003:045E:07DA.0033: could not initialize ff, continuing anyway [ 401.707323][ T10] usb 7-1: USB disconnect, device number 13 [ 402.081313][T12830] fido_id[12830]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 406.042269][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 406.242271][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 407.766022][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 408.951326][T12859] use of bytesused == 0 is deprecated and will be removed in the future, [ 408.951341][T12859] use the actual size instead. [ 411.945170][T12893] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2941'. [ 412.456547][T12902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2945'. [ 412.531212][T12899] syz.6.2944 (12899) used greatest stack depth: 16696 bytes left [ 412.815642][T12904] program syz.6.2946 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 413.184875][T12911] binder: 12910:12911 ioctl 4018620d 0 returned -22 [ 413.185353][T12911] binder: 12910:12911 ioctl c0306201 200000000240 returned -11 [ 413.325005][T12913] netlink: 'syz.6.2950': attribute type 1 has an invalid length. [ 413.325026][T12913] netlink: 208 bytes leftover after parsing attributes in process `syz.6.2950'. [ 413.325055][T12913] netlink: 'syz.6.2950': attribute type 1 has an invalid length. [ 413.325068][T12913] netlink: 'syz.6.2950': attribute type 2 has an invalid length. [ 413.917613][T12921] netlink: 'syz.6.2953': attribute type 5 has an invalid length. [ 415.022470][ T10] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 415.078993][T12937] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2963'. [ 415.177283][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 415.177313][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 415.177335][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 415.177375][ T10] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 415.177396][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.269704][T12941] netlink: 766 bytes leftover after parsing attributes in process `syz.3.2962'. [ 415.291981][ T10] usb 7-1: config 0 descriptor?? [ 415.901709][T12946] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2967'. [ 416.004785][ T10] plantronics 0003:047F:FFFF.0034: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 416.058593][ T10] usb 7-1: USB disconnect, device number 14 [ 416.353960][ T37] audit: type=1326 audit(1757719924.513:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12952 comm="syz.7.2969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653eefeba9 code=0x7ffc0000 [ 416.354010][ T37] audit: type=1326 audit(1757719924.513:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12952 comm="syz.7.2969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653eefeba9 code=0x7ffc0000 [ 416.435627][ T37] audit: type=1326 audit(1757719924.603:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12952 comm="syz.7.2969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f653eefeba9 code=0x7ffc0000 [ 416.435694][ T37] audit: type=1326 audit(1757719924.603:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12952 comm="syz.7.2969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653eefeba9 code=0x7ffc0000 [ 416.455679][ T37] audit: type=1326 audit(1757719924.623:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12952 comm="syz.7.2969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f653eefeba9 code=0x7ffc0000 [ 416.455728][ T37] audit: type=1326 audit(1757719924.623:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12952 comm="syz.7.2969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653eefeba9 code=0x7ffc0000 [ 416.455770][ T37] audit: type=1326 audit(1757719924.623:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12952 comm="syz.7.2969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f653eefeba9 code=0x7ffc0000 [ 416.918119][T12948] fido_id[12948]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 417.497071][T12970] openvswitch: netlink: IP tunnel TTL not specified. [ 417.659743][T12974] gretap0: entered promiscuous mode [ 417.660035][T12974] vlan3: entered promiscuous mode [ 420.217314][T12988] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2985'. [ 423.674259][T13003] devpts: Bad value for 'max' [ 423.845489][ T5844] Bluetooth: hci3: link tx timeout [ 423.846205][ T5844] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 425.949017][ T5844] Bluetooth: hci3: command 0x0405 tx timeout [ 426.140808][T13034] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3005'. [ 426.140834][T13034] block nbd0: Unsupported socket: shutdown callout must be supported. [ 427.242399][ T6038] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 427.402533][ T6038] usb 4-1: Using ep0 maxpacket: 16 [ 427.441581][ T6038] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.441612][ T6038] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 427.441633][ T6038] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 427.441678][ T6038] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 427.441700][ T6038] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.519565][ T5930] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 427.519597][ T5930] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 427.519623][ T5930] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 427.519653][ T5930] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 427.519678][ T5930] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 427.519702][ T5930] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 427.519726][ T5930] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 427.519751][ T5930] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 427.519775][ T5930] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 427.519800][ T5930] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 427.669811][ T5930] hid-generic 0000:0000:0000.0035: hidraw0: HID v0.00 Device [syz0] on syz0 [ 427.683769][ T6038] usb 4-1: config 0 descriptor?? [ 428.205700][ T6038] microsoft 0003:045E:07DA.0036: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 428.205731][ T6038] microsoft 0003:045E:07DA.0036: no inputs found [ 428.205745][ T6038] microsoft 0003:045E:07DA.0036: could not initialize ff, continuing anyway [ 428.345711][T13052] fido_id[13052]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 428.400033][ T6038] usb 4-1: USB disconnect, device number 36 [ 428.724253][T13058] fido_id[13058]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 430.245025][ T0] NOHZ tick-stop error: local softirq work is pending, handler #88!!! [ 430.392273][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 431.025372][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 431.075271][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 434.882671][ T5930] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 435.064838][ T5930] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 435.064870][ T5930] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 435.064895][ T5930] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 435.064934][ T5930] usb 7-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00 [ 435.064955][ T5930] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.141306][ T5930] usb 7-1: config 0 descriptor?? [ 435.147806][T13130] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 435.650247][ T5930] hid_parser_main: 73 callbacks suppressed [ 435.650272][ T5930] sigmamicro 0003:1C4F:0059.0037: unknown main item tag 0x0 [ 435.677661][ T5930] sigmamicro 0003:1C4F:0059.0037: hidraw0: USB HID v0.00 Device [HID 1c4f:0059] on usb-dummy_hcd.6-1/input0 [ 435.816925][ T5930] usb 7-1: USB disconnect, device number 15 [ 436.406966][T13138] fido_id[13138]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 436.982032][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 437.009821][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 437.011034][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 437.030991][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 437.031822][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 439.338672][ T5848] Bluetooth: hci3: Opcode 0x0c16 failed: -110 [ 439.881275][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 441.007901][ T10] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 442.301883][T13142] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 461.726626][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 467.632233][ C0] sched: DL replenish lagged too much [ 517.078892][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 560.685159][ T5844] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 563.546811][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 564.602690][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 565.839471][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 566.792284][T13190] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 568.729821][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 568.752326][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 571.067115][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 571.092330][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 571.102415][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 571.103616][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 573.777409][T13195] Bluetooth: hci0: Opcode 0x0c14 failed: -110 [ 580.223314][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 584.913347][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 585.545897][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 586.067178][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 589.796693][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 592.951092][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 599.067433][ T5848] Bluetooth: hci0: command tx timeout [ 602.049055][ T59] Bluetooth: hci0: command tx timeout [ 604.273854][ T59] Bluetooth: hci0: command tx timeout [ 606.344148][ T59] Bluetooth: hci0: command tx timeout [ 622.884814][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 624.892068][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 625.547981][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 625.551483][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 625.651453][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 629.618331][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 631.147356][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 632.132064][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 633.193239][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 633.193983][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 648.719583][ T5848] Bluetooth: hci3: command tx timeout [ 651.435632][ T59] Bluetooth: hci3: command tx timeout [ 653.462318][ T59] Bluetooth: hci3: command tx timeout [ 655.625346][ T59] Bluetooth: hci3: command tx timeout [ 657.487486][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 657.931875][T13219] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 657.975970][T13219] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 657.978096][T13219] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 658.369207][T13197] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 659.894433][T13219] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 659.952985][T13197] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 661.195069][T13197] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 661.195798][T13197] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 662.002893][T13220] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 662.003722][T13220] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 665.291744][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 665.349293][T13215] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 665.897985][T13220] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 666.019651][T13220] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 666.077970][T13220] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 666.163933][T13220] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 667.483386][ T59] Bluetooth: hci2: command 0x0c1a tx timeout [ 667.484731][ T59] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 668.056442][ T5844] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 668.065714][ T5844] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 668.067779][ T5844] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 668.068830][ T5844] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 668.069566][ T5844] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 668.581433][T13220] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 669.164145][T13220] Bluetooth: hci5: command tx timeout [ 669.546302][T13220] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 671.279042][T13220] Bluetooth: hci5: command tx timeout [ 672.675986][T13220] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 672.676861][T13220] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 673.615138][T13219] Bluetooth: hci5: command tx timeout [ 677.305207][T13219] Bluetooth: hci5: command tx timeout [ 680.836140][ T59] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 680.876090][ T59] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 680.876531][ T59] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 680.878077][ T59] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 680.878807][ T59] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 682.946342][ T59] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 682.954465][ T59] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 682.954850][ T59] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 682.955908][ T59] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 682.957449][ T59] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 685.558620][T13220] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 685.970978][T13220] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 686.068126][T13220] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 686.143645][T13220] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 686.615917][T13220] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 693.162551][T13221] Bluetooth: hci7: Opcode 0x0c1a failed: -110 [ 693.883199][T13229] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 712.594860][ T38] INFO: task syz-executor:5837 blocked for more than 143 seconds. [ 712.594885][ T38] Not tainted syzkaller #0 [ 712.594897][ T38] Blocked by coredump. [ 712.594903][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 712.594913][ T38] task:syz-executor state:D stack:21080 pid:5837 tgid:5837 ppid:1 task_flags:0x40054c flags:0x00004006 [ 712.594988][ T38] Call Trace: [ 712.594995][ T38] [ 712.595008][ T38] __schedule+0x16f3/0x4c20 [ 712.595052][ T38] ? __lock_acquire+0xab9/0xd20 [ 712.595090][ T38] ? __pfx___schedule+0x10/0x10 [ 712.595135][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 712.595167][ T38] rt_mutex_schedule+0x77/0xf0 [ 712.595187][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 712.595211][ T38] ? task_b[ 712.595211][ T38] ? task_blocks_on_rt_mutex+0xf04/0x1380 [ 712.595251][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 712.595277][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 712.595301][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 712.595341][ T38] ? __pfx___fsnotify_parent+0x10/0x10 [ 712.595375][ T38] ? tun_chr_close+0x41/0x1c0 [ 712.595402][ T38] mutex_lock_nested+0x16a/0x1d0 [ 712.595427][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 712.595456][ T38] tun_chr_close+0x41/0x1c0 [ 712.595486][ T38] __fput+0x458/0xa80 [ 712.595517][ T38] task_work_run+0x1d4/0x260 [ 712.595540][ T38] ? __pfx_task_work_run+0x10/0x10 [ 712.595561][ T38] ? do_exit+0x6b0/0x2300 [ 712.595578][ T38] ? kmem_cache_free+0x195/0x510 [ 712.595610][ T38] do_exit+0x6b5/0x2300 [ 712.595628][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 712.595662][ T38] ? __lock_acquire+0xab9/0xd20 [ 712.595690][ T38] ? __pfx_do_exit+0x10/0x10 [ 712.595712][ T38] ? rt_mutex_slowunlock+0x493/0x8a0 [ 712.595739][ T38] ? rt_spin_lock+0x1bb/0x2c0 [ 712.595772][ T38] do_group_exit+0x21c/0x2d0 [ 712.595796][ T38] get_signal+0x125e/0x1310 [ 712.595843][ T38] arch_do_signal_or_restart+0x9a/0x750 [ 712.595873][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 712.595905][ T38] ? fd_install+0x313/0x550 [ 712.595937][ T38] ? exit_to_user_mode_loop+0x40/0x110 [ 712.595966][ T38] exit_to_user_mode_loop+0x75/0x110 [ 712.595993][ T38] do_syscall_64+0x2bd/0x3b0 [ 712.596011][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 712.596038][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.596058][ T38] ? clear_bhb_loop+0x60/0xb0 [ 712.596082][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.596106][ T38] RIP: 0033:0x7f94bdc60ac7 [ 712.596123][ T38] RSP: 002b:00007ffd5fd2b5f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000029 [ 712.596143][ T38] RAX: 0000000000000003 RBX: 00007f94bde71300 RCX: 00007f94bdc60ac7 [ 712.596156][ T38] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 712.596167][ T38] RBP: 00007ffd5fd2bd1c R08: 0000000000000000 R09: 00007ffd5fd2ba27 [ 712.596180][ T38] R10: 0000000000000000 R11: 0000000000000206 R12: 00000000000002ab [ 712.596192][ T38] R13: 000000000000002a R14: 0000000000000000 R15: 00007ffd5fd2bd70 [ 712.596221][ T38] [ 712.596267][ T38] INFO: task kworker/u8:28:13176 blocked for more than 143 seconds. [ 712.596281][ T38] Not tainted syzkaller #0 [ 712.596290][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 712.596299][ T38] task:kworker/u8:28 state:D stack:21704 pid:13176 tgid:13176 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 712.596350][ T38] Workqueue: ipv6_addrconf addrconf_verify_work [ 712.596374][ T38] Call Trace: [ 712.596380][ T38] [ 712.596392][ T38] __schedule+0x16f3/0x4c20 [ 712.596443][ T38] ? __pfx___schedule+0x10/0x10 [ 712.596488][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 712.596519][ T38] rt_mutex_schedule+0x77/0xf0 [ 712.596538][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 712.596561][ T38] ? task_blocks_on_rt_mutex+0x78c/0x1380 [ 712.596601][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 712.596627][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 712.596652][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 712.596686][ T38] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 712.596736][ T38] ? addrconf_verify_work+0x19/0x30 [ 712.596758][ T38] mutex_lock_nested+0x16a/0x1d0 [ 712.596780][ T38] ? addrconf_verify_work+0x19/0x30 [ 712.596806][ T38] addrconf_verify_work+0x19/0x30 [ 712.596829][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 712.596851][ T38] process_scheduled_works+0xade/0x17b0 [ 712.596904][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 712.596946][ T38] worker_thread+0x8a0/0xda0 [ 712.596972][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 712.597010][ T38] ? __kthread_parkme+0x7b/0x200 [ 712.597045][ T38] kthread+0x70e/0x8a0 [ 712.597077][ T38] ? __pfx_worker_thread+0x10/0x10 [ 712.597102][ T38] ? __pfx_kthread+0x10/0x10 [ 712.597136][ T38] ? __pfx_kthread+0x10/0x10 [ 712.597166][ T38] ret_from_fork+0x439/0x7d0 [ 712.597195][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 712.597227][ T38] ? __switch_to_asm+0x39/0x70 [ 712.597245][ T38] ? __switch_to_asm+0x33/0x70 [ 712.597262][ T38] ? __pfx_kthread+0x10/0x10 [ 712.597292][ T38] ret_from_fork_asm+0x1a/0x30 [ 712.597327][ T38] [ 712.597352][ T38] [ 712.597352][ T38] Showing all locks held in the system: [ 712.597361][ T38] 4 locks held by kworker/0:1/10: [ 712.597372][ T38] #0: ffff888019899138 ((wq_completion)events_long){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 712.597423][ T38] #1: ffffc900000f7bc0 ((work_completion)(&(&ipvs->defense_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 712.597474][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 712.597522][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 712.613889][ T38] 7 locks held by kworker/u8:1/13: [ 712.613901][ T38] #0: ffff88801a6f4138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 712.613951][ T38] #1: ffffc90000127bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 712.614000][ T38] #2: ffffffff8ecc6600 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 712.614053][ T38] #3: ffff888034f3d0d8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x10a/0x3d0 [ 712.614098][ T38] #4: ffff888034f3b300 (&devlink->lock_key#8){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x11c/0x3d0 [ 712.614147][ T38] #5: ffffffff8ecd34f8 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0xe5/0x670 [ 712.614192][ T38] #6: ffff8880579f8e90 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x52f/0x1fe0 [ 712.614246][ T38] 2 locks held by rcuc/0/20: [ 712.614257][ T38] 2 locks held by rcuc/1/28: [ 712.614268][ T38] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 712.614316][ T38] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 712.614364][ T38] 7 locks held by ktimers/1/29: [ 712.614376][ T38] 1 lock held by khungtaskd/38: [ 712.614387][ T38] #0: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 712.614431][ T38] 7 locks held by kworker/u8:2/43: [ 712.614442][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 712.614491][ T38] #1: ffffc90000b47bc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 712.614542][ T38] #2: ffff888020ba4300 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 712.614600][ T38] #3: ffff88805aa09120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 712.614654][ T38] #4: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 712.614707][ T38] #5: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 712.614755][ T38] #6: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 712.614805][ T38] 4 locks held by kworker/1:1/49: [ 712.614815][ T38] #0: ffff888058154138 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 712.614869][ T38] #1: ffffc90000bb7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 712.614936][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 712.614983][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 712.615034][ T38] 4 locks held by kworker/u8:4/67: [ 712.615044][ T38] #0: ffff888035c5d938 ((wq_completion)wg-kex-wg1){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 712.615094][ T38] #1: ffffc9000152fbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 712.615144][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 712.615192][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 712.615243][ T38] 5 locks held by kworker/u8:6/173: [ 712.615254][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 712.615303][ T38] #1: ffffc90003a6fbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 712.615351][ T38] #2: ffff88805ce70898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 712.615402][ T38] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 712.615450][ T38] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 712.615505][ T38] 4 locks held by kworker/u8:7/1308: [ 712.615516][ T38] #0: ffff88803b3d7138 ((wq_completion)wg-kex-wg0){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 712.615564][ T38] #1: ffffc90005637bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 712.615614][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 712.615662][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 712.615715][ T38] 2 locks held by aoe_tx0/1321: [ 712.615725][ T38] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 712.615773][ T38] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 712.615822][ T38] 5 locks held by kworker/u8:8/1324: [ 712.615833][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 712.615882][ T38] #1: ffffc90005517bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 712.615931][ T38] #2: ffff8880373c0898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 712.615982][ T38] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 712.616030][ T38] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 712.616090][ T38] 5 locks held by kworker/u8:10/3551: [ 712.616102][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 712.616150][ T38] #1: ffffc9000dcafbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 712.616198][ T38] #2: ffff88805b300898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 712.616249][ T38] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 712.616297][ T38] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 712.616346][ T38] 3 locks held by kworker/u8:11/3578: [ 712.616358][ T38] 3 locks held by kworker/u8:12/3720: [ 712.616368][ T38] 5 locks held by kworker/u8:13/3740: [ 712.616379][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 712.616427][ T38] #1: ffffc9000e42fbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 712.616477][ T38] #2: ffff88805fda0898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 712.616527][ T38] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 712.616574][ T38] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 712.616625][ T38] 2 locks held by getty/5597: [ 712.616636][ T38] #0: ffff8880338d60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 712.616690][ T38] #1: ffffc90003e762e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 712.616746][ T38] 1 lock held by syz-executor/5837: [ 712.616756][ T38] #0: ffffffff8ecd34f8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 712.616809][ T38] 2 locks held by kworker/0:3/5843: [ 712.616821][ T38] 2 locks held by kworker/1:3/5891: [ 712.616832][ T38] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 712.616881][ T38] #1: ffffc900052b7bc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 712.616930][ T38] 4 locks held by kworker/0:4/5930: [ 712.616941][ T38] #0: ffff88805a1e3538 ((wq_completion)wg-kex-wg0#14){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 712.616995][ T38] #1: ffffc900055e7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 712.617061][ T38] #2: ffff88805726d5f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x115/0x970 [ 712.617111][ T38] #3: ffff8880236fc388 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x126/0x970 [ 712.617159][ T38] 2 locks held by kworker/0:5/5931: [ 712.617170][ T38] 4 locks held by kworker/1:6/6001: [ 712.617180][ T38] #0: ffff888058179138 ((wq_completion)wg-kex-wg2#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 712.617234][ T38] #1: ffffc90005807bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 712.617301][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 712.617348][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 712.617397][ T38] 4 locks held by kworker/0:6/6038: [ 712.617408][ T38] #0: ffff888019899938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 712.617457][ T38] #1: ffffc90005747bc0 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 712.617507][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 712.617555][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 712.617604][ T38] 4 locks held by syz.4.717/7539: [ 712.617615][ T38] #0: ffff8880570b0e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 712.617663][ T38] #1: ffff8880570b00a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 712.617723][ T38] #2: ffffffff8ee3afd8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 712.617767][ T38] #3: ffff888026dcdb58 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 712.617824][ T38] 2 locks held by dhcpcd/7996: [ 712.617835][ T38] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 712.617883][ T38] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 712.617932][ T38] 1 lock held by syz-executor/9961: [ 712.617943][ T38] #0: ffffffff8ecd34f8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 712.617996][ T38] 2 locks held by dhcpcd/10856: [ 712.618007][ T38] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 712.618054][ T38] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 712.618102][ T38] 2 locks held by dhcpcd/10863: [ 712.618112][ T38] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 712.618160][ T38] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 712.618209][ T38] 2 locks held by dhcpcd/10868: [ 712.618220][ T38] 2 locks held by dhcpcd/10873: [ 712.618230][ T38] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 712.618278][ T38] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 712.618329][ T38] 4 locks held by kworker/1:7/12264: [ 712.618340][ T38] #0: ffff88805a1e3538 ((wq_completion)wg-kex-wg0#14){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 712.618393][ T38] #1: ffffc90005547bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 712.618459][ T38] #2: ffff88805726d5f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x150/0x900 [ 712.618508][ T38] #3: ffff8880236fc388 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x4de/0x900 [ 712.618557][ T38] 3 locks held by syz.3.3042/13113: [ 712.618568][ T38] #0: ffff888032bf8e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 712.618615][ T38] #1: ffff888032bf80a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 712.618665][ T38] #2: ffffffff8ee3afd8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 712.618715][ T38] 3 locks held by kworker/u8:0/13157: [ 712.618726][ T38] 4 locks held by kworker/0:2/13158: [ 712.618736][ T38] #0: ffff888058778938 ((wq_completion)wg-kex-wg2#10){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 712.618790][ T38] #1: ffffc9000d0cfbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 712.618857][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 712.618905][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 712.618954][ T38] 5 locks held by kworker/u8:9/13160: [ 712.618965][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 712.619013][ T38] #1: ffffc9000d01fbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 712.619063][ T38] #2: ffff88805b360898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 712.619114][ T38] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 712.619162][ T38] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 712.619210][ T38] 7 locks held by kworker/u8:14/13161: [ 712.619221][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 712.619270][ T38] #1: ffffc9000cddfbc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 712.619321][ T38] #2: ffff88805a26c300 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 712.619378][ T38] #3: ffff888035f81d20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 712.619431][ T38] #4: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 712.619478][ T38] #5: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 712.619526][ T38] #6: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 712.619575][ T38] 7 locks held by kworker/u8:15/13162: [ 712.619586][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 712.619634][ T38] #1: ffffc9000cdcfbc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 712.619685][ T38] #2: ffff8880371e7300 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 712.619749][ T38] #3: ffff888059f94920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 712.619802][ T38] #4: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 712.619849][ T38] #5: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 712.619897][ T38] #6: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 712.619946][ T38] 4 locks held by kworker/u8:16/13163: [ 712.619956][ T38] #0: ffff8880312e4138 ((wq_completion)wg-kex-wg2#13){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 712.620010][ T38] #1: ffffc9000cdbfbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 712.620059][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 712.620107][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 712.620156][ T38] 4 locks held by kworker/u8:17/13164: [ 712.620167][ T38] #0: ffff8880312e3138 ((wq_completion)wg-kex-wg1#13){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 712.620220][ T38] #1: ffffc9000cdafbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 712.620269][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 712.620314][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 712.620362][ T38] 4 locks held by kworker/u8:18/13165: [ 712.620372][ T38] #0: ffff888035c5d938 ((wq_completion)wg-kex-wg1){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 712.620421][ T38] #1: ffffc9000cd9fbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 712.620470][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 712.620517][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 712.620566][ T38] 5 locks held by kworker/u8:19/13166: [ 712.620578][ T38] 3 locks held by kworker/u8:22/13169: [ 712.620589][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 712.620637][ T38] #1: ffffc9000cd47bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 712.620686][ T38] #2: ffffffff8ecd34f8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 712.620737][ T38] 4 locks held by kworker/u8:23/13170: [ 712.620748][ T38] #0: ffff8880588ca138 ((wq_completion)wg-kex-wg1#9){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 712.620800][ T38] #1: ffffc9000cd27bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 712.620850][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 712.620897][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 712.620946][ T38] 7 locks held by kworker/u8:24/13171: [ 712.620957][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 712.621006][ T38] #1: ffffc9000cd17bc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 712.621057][ T38] #2: ffff88805a42c300 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 712.621115][ T38] #3: ffff88805a38b520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 712.621168][ T38] #4: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 712.621215][ T38] #5: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 712.621263][ T38] #6: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 712.621310][ T38] 6 locks held by kworker/u8:25/13172: [ 712.621321][ T38] #0: ffff888035e99138 ((wq_completion)wg-kex-wg0#13){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 712.621374][ T38] #1: ffffc9000cd07bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 712.621424][ T38] #2: ffff88805726d5f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 712.621472][ T38] #3: ffff8880236fc388 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 712.621519][ T38] #4: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 712.621567][ T38] #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 712.621616][ T38] 7 locks held by kworker/u8:27/13174: [ 712.621627][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 712.621676][ T38] #1: ffffc9000d66fbc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 712.621732][ T38] #2: ffff888037335300 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 712.621785][ T38] #3: ffff888059d2ed20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 712.621839][ T38] #4: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 712.621886][ T38] #5: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 712.621933][ T38] #6: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 712.621983][ T38] 3 locks held by kworker/u8:28/13176: [ 712.621993][ T38] #0: ffff8880300f7938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 712.622043][ T38] #1: ffffc9000ccf7bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 713.482208][ T38] #2: ffffffff8ecd34f8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 713.482283][ T38] 7 locks held by kworker/u8:29/13177: [ 713.482297][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 713.482358][ T38] #1: ffffc900049c7bc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 713.482427][ T38] #2: ffff888036aff300 (&devlink->lock_key#7){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 713.482498][ T38] #3: ffff88805a0a8d20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 713.482562][ T38] #4: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 713.482617][ T38] #5: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 713.482675][ T38] #6: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 713.482733][ T38] 1 lock held by dhcpcd/13179: [ 713.482746][ T38] #0: ffff88803d1ed378 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 713.482809][ T38] 6 locks held by kworker/u8:31/13183: [ 713.482821][ T38] #0: ffff888035c5f138 ((wq_completion)wg-kex-wg2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 713.482880][ T38] #1: ffffc90004bf7bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 713.482939][ T38] #2: ffff8880583e15f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 713.482998][ T38] #3: ffff88805a06a3c0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 713.483053][ T38] #4: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 713.483110][ T38] #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 713.483168][ T38] 1 lock held by dhcpcd/13184: [ 713.483181][ T38] #0: ffff888057fc5a38 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 713.483252][ T38] 4 locks held by kworker/u8:32/13186: [ 713.483264][ T38] #0: ffff88814db01938 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 713.483320][ T38] #1: ffffc9000cdffbc0 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 713.483393][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 713.483461][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 713.483511][ T38] 3 locks held by kworker/0:7/13189: [ 713.483522][ T38] 3 locks held by kworker/0:8/13191: [ 713.483533][ T38] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 713.483581][ T38] #1: ffffc9000dc97bc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 713.483630][ T38] #2: ffffffff8ecd34f8 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 713.483675][ T38] 4 locks held by kworker/0:9/13192: [ 713.483686][ T38] #0: ffff8880303b9938 ((wq_completion)wg-kex-wg1#14){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 713.483739][ T38] #1: ffffc9000629fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 713.483806][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 713.483854][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 713.483905][ T38] 1 lock held by syz-executor/13201: [ 713.483915][ T38] #0: ffffffff8ecd34f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 713.483961][ T38] 1 lock held by dhcpcd/13208: [ 713.483971][ T38] #0: ffff88805b6ea438 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 713.484022][ T38] 1 lock held by syz-executor/13211: [ 713.484033][ T38] #0: ffffffff8ecd34f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 713.484078][ T38] 1 lock held by dhcpcd/13213: [ 713.484088][ T38] #0: ffff88803519a350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 713.484138][ T38] 1 lock held by syz-executor/13216: [ 713.484149][ T38] #0: ffffffff8ecd34f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 713.484194][ T38] 4 locks held by kworker/u9:4/13219: [ 713.484204][ T38] #0: ffff88802408a138 ((wq_completion)hci6#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 713.484258][ T38] #1: ffffc9000cdefbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 713.484307][ T38] #2: ffff88802b3940a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 713.484355][ T38] #3: ffffffff8ee3afd8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 713.484414][ T38] 1 lock held by dhcpcd/13222: [ 713.484424][ T38] #0: ffff8880244be350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 713.484473][ T38] 1 lock held by syz-executor/13223: [ 713.484484][ T38] #0: ffffffff8ecd34f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 713.484528][ T38] 5 locks held by syz-executor/13224: [ 713.484540][ T38] 4 locks held by kworker/u8:33/13232: [ 713.484550][ T38] #0: ffff888035e99138 ((wq_completion)wg-kex-wg0#13){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 713.484604][ T38] #1: ffffc90005a67bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 713.484654][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 713.484703][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 713.484752][ T38] 1 lock held by syz-executor/13234: [ 713.484764][ T38] 2 locks held by syz-executor/13235: [ 713.484775][ T38] #0: ffff888033cde488 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 713.484855][ T38] #1: ffff88803d0f9088 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1f8/0x3c0 [ 713.484911][ T38] 6 locks held by syz-executor/13236: [ 713.484923][ T38] 1 lock held by syz-executor/13238: [ 713.484935][ T38] [ 713.484941][ T38] ============================================= [ 713.484941][ T38] [ 713.484963][ T38] NMI backtrace for cpu 1 [ 713.484987][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 713.485027][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 713.485046][ T38] Call Trace: [ 713.485060][ T38] [ 713.485074][ T38] dump_stack_lvl+0x189/0x250 [ 713.485131][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 713.485181][ T38] ? __pfx__printk+0x10/0x10 [ 713.485243][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 713.485292][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 713.485342][ T38] ? __pfx__printk+0x10/0x10 [ 713.485391][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 713.485417][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 713.485445][ T38] watchdog+0xf93/0xfe0 [ 713.485475][ T38] ? watchdog+0x1de/0xfe0 [ 713.485504][ T38] kthread+0x70e/0x8a0 [ 713.485536][ T38] ? __pfx_watchdog+0x10/0x10 [ 713.485559][ T38] ? __pfx_kthread+0x10/0x10 [ 713.485592][ T38] ? __pfx_kthread+0x10/0x10 [ 713.485622][ T38] ret_from_fork+0x439/0x7d0 [ 713.485650][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 713.485680][ T38] ? __switch_to_asm+0x39/0x70 [ 713.485697][ T38] ? __switch_to_asm+0x33/0x70 [ 713.485714][ T38] ? __pfx_kthread+0x10/0x10 [ 713.485744][ T38] ret_from_fork_asm+0x1a/0x30 [ 713.485777][ T38] [ 713.485784][ T38] Sending NMI from CPU 1 to CPUs 0: [ 713.485812][ C0] NMI backtrace for cpu 0 [ 713.485826][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 713.485854][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 713.485868][ C0] RIP: 0010:unwind_next_frame+0x171/0x2390 [ 713.485904][ C0] Code: 03 0f b6 04 28 84 c0 0f 85 45 1b 00 00 f6 03 03 0f 85 e4 17 00 00 49 8d 5e 35 48 89 d8 48 c1 e8 03 48 89 44 24 28 0f b6 04 28 <84> c0 0f 85 3c 1b 00 00 4c 89 6c 24 50 4c 89 64 24 20 4c 89 7c 24 [ 713.485926][ C0] RSP: 0018:ffffc900001569f8 EFLAGS: 00000a07 [ 713.485947][ C0] RAX: 0000000000000000 RBX: ffffc90000156afd RCX: 28f7546c8ae05500 [ 713.485965][ C0] RDX: 0000000000000000 RSI: ffffffff8b6214e0 RDI: ffffffff8b6214a0 [ 713.485983][ C0] RBP: dffffc0000000000 R08: 0000000000000000 R09: ffffffff8172c165 [ 713.486001][ C0] R10: ffffc90000156b18 R11: ffffffff81aaf310 R12: 1ffff9200002ad59 [ 713.486020][ C0] R13: ffffc90000156b18 R14: ffffc90000156ac8 R15: ffffffff8172c165 [ 713.486040][ C0] FS: 0000000000000000(0000) GS:ffff8881268bd000(0000) knlGS:0000000000000000 [ 713.486061][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 713.486078][ C0] CR2: 00007f0a906456e8 CR3: 000000000d7a6000 CR4: 00000000003526f0 [ 713.486099][ C0] Call Trace: [ 713.486104][ C0] [ 713.486113][ C0] ? unwind_next_frame+0xa5/0x2390 [ 713.486135][ C0] ? nft_do_chain+0x409/0x1920 [ 713.486153][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 713.486172][ C0] arch_stack_walk+0x11c/0x150 [ 713.486199][ C0] ? nft_do_chain+0x409/0x1920 [ 713.486216][ C0] stack_trace_save+0x9c/0xe0 [ 713.486232][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 713.486250][ C0] ? ip6_finish_output2+0x710/0x1720 [ 713.486273][ C0] ? __lock_acquire+0xab9/0xd20 [ 713.486293][ C0] kasan_save_track+0x3e/0x80 [ 713.486310][ C0] ? kasan_save_track+0x3e/0x80 [ 713.486327][ C0] ? kasan_save_free_info+0x46/0x50 [ 713.486341][ C0] ? __kasan_slab_free+0x5b/0x80 [ 713.486358][ C0] ? kmem_cache_free+0x195/0x510 [ 713.486379][ C0] ? skb_release_data+0x62d/0x7c0 [ 713.486394][ C0] ? consume_skb+0x9e/0xf0 [ 713.486416][ C0] ? nft_synproxy_eval_v6+0x376/0x560 [ 713.486432][ C0] ? nft_synproxy_do_eval+0x3d7/0x570 [ 713.486447][ C0] ? nft_do_chain+0x409/0x1920 [ 713.486484][ C0] kasan_save_free_info+0x46/0x50 [ 713.486499][ C0] __kasan_slab_free+0x5b/0x80 [ 713.486517][ C0] ? skb_release_data+0x62d/0x7c0 [ 713.486530][ C0] kmem_cache_free+0x195/0x510 [ 713.486554][ C0] skb_release_data+0x62d/0x7c0 [ 713.486573][ C0] consume_skb+0x9e/0xf0 [ 713.486595][ C0] nft_synproxy_eval_v6+0x376/0x560 [ 713.486615][ C0] ? __pfx_nft_synproxy_eval_v6+0x10/0x10 [ 713.486641][ C0] ? nf_ip_checksum+0x13c/0x510 [ 713.486659][ C0] nft_synproxy_do_eval+0x3d7/0x570 [ 713.486678][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 713.486694][ C0] ? __local_bh_enable_ip+0x1b2/0x270 [ 713.486713][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 713.486743][ C0] nft_do_chain+0x409/0x1920 [ 713.486765][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 713.486779][ C0] ? ipv6_find_hdr+0xc78/0x1050 [ 713.486811][ C0] ? __pfx_rcu_qs+0x10/0x10 [ 713.486839][ C0] nft_do_chain_inet+0x25d/0x340 [ 713.486854][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 713.486870][ C0] ? __lock_acquire+0xab9/0xd20 [ 713.486895][ C0] ? NF_HOOK+0x9a/0x3a0 [ 713.486915][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 713.486931][ C0] nf_hook_slow+0xc2/0x220 [ 713.486956][ C0] NF_HOOK+0x206/0x3a0 [ 713.486976][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 713.486997][ C0] ? NF_HOOK+0x9a/0x3a0 [ 713.487016][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 713.487037][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 713.487063][ C0] ip6_input+0x16a/0x270 [ 713.487083][ C0] ? ip6_input+0x23/0x270 [ 713.487104][ C0] NF_HOOK+0x309/0x3a0 [ 713.487123][ C0] ? skb_orphan+0xaf/0xd0 [ 713.487143][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 713.487162][ C0] ? NF_HOOK+0x9a/0x3a0 [ 713.487181][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 713.487202][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 713.487228][ C0] __netif_receive_skb+0xd3/0x380 [ 713.487247][ C0] ? rt_spin_unlock+0x65/0x80 [ 713.487266][ C0] ? process_backlog+0x27b/0x900 [ 713.487286][ C0] process_backlog+0x31e/0x900 [ 713.487312][ C0] __napi_poll+0xb3/0x540 [ 713.487333][ C0] net_rx_action+0x707/0xe00 [ 713.487353][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 713.487384][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 713.487422][ C0] handle_softirqs+0x22f/0x710 [ 713.487446][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 713.487470][ C0] run_ktimerd+0xcf/0x190 [ 713.487491][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 713.487512][ C0] ? schedule+0x91/0x360 [ 713.487535][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 713.487555][ C0] smpboot_thread_fn+0x53f/0xa60 [ 713.487574][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 713.487597][ C0] kthread+0x70e/0x8a0 [ 713.487621][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 713.487644][ C0] ? __pfx_kthread+0x10/0x10 [ 713.487688][ C0] ? __pfx_kthread+0x10/0x10 [ 713.487713][ C0] ret_from_fork+0x439/0x7d0 [ 713.487735][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 713.487760][ C0] ? __switch_to_asm+0x39/0x70 [ 713.487775][ C0] ? __switch_to_asm+0x33/0x70 [ 713.487790][ C0] ? __pfx_kthread+0x10/0x10 [ 713.487815][ C0] ret_from_fork_asm+0x1a/0x30 [ 713.487839][ C0] [ 713.488814][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 713.488828][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 713.488849][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 713.488861][ T38] Call Trace: [ 713.488868][ T38] [ 713.488875][ T38] dump_stack_lvl+0x99/0x250 [ 713.488903][ T38] ? __asan_memcpy+0x40/0x70 [ 713.488924][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 713.488950][ T38] ? __pfx__printk+0x10/0x10 [ 713.488982][ T38] vpanic+0x281/0x750 [ 713.489014][ T38] ? __pfx_vpanic+0x10/0x10 [ 713.489039][ T38] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 713.489059][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 713.489096][ T38] panic+0xb9/0xc0 [ 713.489124][ T38] ? __pfx_panic+0x10/0x10 [ 713.489154][ T38] ? irq_work_queue+0xc3/0x140 [ 713.489182][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 713.489210][ T38] watchdog+0xfd2/0xfe0 [ 713.489253][ T38] ? watchdog+0x1de/0xfe0 [ 713.489283][ T38] kthread+0x70e/0x8a0 [ 713.489314][ T38] ? __pfx_watchdog+0x10/0x10 [ 713.489338][ T38] ? __pfx_kthread+0x10/0x10 [ 713.489371][ T38] ? __pfx_kthread+0x10/0x10 [ 713.489407][ T38] ret_from_fork+0x439/0x7d0 [ 713.489435][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 713.489465][ T38] ? __switch_to_asm+0x39/0x70 [ 713.489482][ T38] ? __switch_to_asm+0x33/0x70 [ 713.489499][ T38] ? __pfx_kthread+0x10/0x10 [ 713.489529][ T38] ret_from_fork_asm+0x1a/0x30 [ 713.489562][ T38] [ 713.489899][ T38] Kernel Offset: disabled