last executing test programs: 1m47.447806456s ago: executing program 1 (id=1503): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x6}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x7c}}, 0x40) 1m46.885125378s ago: executing program 1 (id=1506): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000001a40)=@newqdisc={0x34, 0x24, 0xd0f, 0x3, 0x3, {0x60, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_drr={0x8}, @TCA_RATE={0x6, 0x5, {0x6, 0x42}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) 1m46.516486354s ago: executing program 2 (id=1513): timer_create(0x3, 0x0, &(0x7f0000000300)) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 1m46.285243139s ago: executing program 1 (id=1514): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x400000ff, 0x2, 0x4, 0x0, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405668, &(0x7f0000000100)={0x0, 0x20, 0x2, 0x4000}) 1m45.943260484s ago: executing program 1 (id=1518): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) fallocate(r0, 0x0, 0x7, 0x3) 1m45.295190007s ago: executing program 2 (id=1522): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310300000000000000000800000008000300", @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x4804}, 0x0) 1m45.268520286s ago: executing program 4 (id=1523): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000200)={0x0, 0x7, 0x0, 0x0, 0x0, 0x1}) r0 = semget$private(0x0, 0x7, 0x0) semtimedop(r0, &(0x7f0000000300)=[{0x3, 0xfff7, 0x1000}], 0x1f4, 0x0) 1m44.851572682s ago: executing program 4 (id=1525): r0 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000300)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000003c0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, r1, 0x0, '\x00', 0x9, 0x48}) 1m44.851077269s ago: executing program 2 (id=1526): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x80000000, 0x25dfdbfb, {0xa, 0x14, 0x80, 0x0, 0x0, 0x0, 0x0, 0xa}}, 0x1c}, 0x1, 0x0, 0x0, 0x24000050}, 0x20040050) 1m44.472832252s ago: executing program 2 (id=1527): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f000052a000/0x2000)=nil) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) 1m44.472509763s ago: executing program 4 (id=1528): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x5, 0x7, 0xdddd0000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 1m44.189071906s ago: executing program 1 (id=1530): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) waitid(0x0, r0, 0x0, 0x8, 0xfffffffffffffffd) 1m43.982130629s ago: executing program 4 (id=1531): pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xa}, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x82, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 1m43.96466116s ago: executing program 2 (id=1532): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x161200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000000c0)) 1m43.570956896s ago: executing program 4 (id=1534): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xee}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d40)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="0021be"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1m43.483592166s ago: executing program 2 (id=1536): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000000)=0x1) 1m43.114647159s ago: executing program 1 (id=1538): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x3}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x24}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x7c}}, 0x40) 1m42.738011884s ago: executing program 3 (id=1541): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x40}, 0x6e) 1m42.504816802s ago: executing program 3 (id=1543): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) 1m41.511075929s ago: executing program 3 (id=1547): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x1c, &(0x7f0000000140)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x10}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1m41.387004181s ago: executing program 4 (id=1548): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000180)={0x1, 0xff}) 1m41.308055685s ago: executing program 3 (id=1549): unshare(0x28040680) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt(r0, 0x11b, 0x3547d9de, 0x0, 0x0) 1m41.144671511s ago: executing program 3 (id=1550): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)=',', 0x1) 1m40.663230165s ago: executing program 3 (id=1551): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) bind$packet(r0, &(0x7f0000000140)={0x11, 0x1, 0x0, 0x1, 0x2, 0x6, @local}, 0x14) 1m37.597217547s ago: executing program 0 (id=1557): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="110000005200010004000000000000001c"], 0x28}}, 0x0) 1m37.45766333s ago: executing program 0 (id=1558): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000de80)={0x0, 0x0, &(0x7f000000de40)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0xbe8}, 0x1, 0x0, 0x0, 0x8040}, 0x894) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r0, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) 1m37.357720429s ago: executing program 0 (id=1559): sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x2c, 0x0, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9b5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{}, {0x0, 0x100000000000000}]}, 0x68) 1m36.821098731s ago: executing program 0 (id=1560): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000000000003"]) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x0) 1m28.267034856s ago: executing program 32 (id=1536): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000000)=0x1) 1m27.698658851s ago: executing program 33 (id=1538): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x3}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x24}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x7c}}, 0x40) 1m26.28073966s ago: executing program 34 (id=1548): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000180)={0x1, 0xff}) 1m25.269987648s ago: executing program 35 (id=1551): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) bind$packet(r0, &(0x7f0000000140)={0x11, 0x1, 0x0, 0x1, 0x2, 0x6, @local}, 0x14) 1m23.677212656s ago: executing program 0 (id=1565): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000005400e5ea29bd7000ffffffff07000002", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="01030300ffffffff00000000000000000000000086"], 0x38}, 0x1, 0x0, 0x0, 0x2800}, 0x40084c0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 1m22.681493098s ago: executing program 0 (id=1566): unshare(0x40020000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/ip_tables_names\x00') pread64(r0, &(0x7f0000000000)=""/55, 0x37, 0x14) 1m7.068490725s ago: executing program 36 (id=1566): unshare(0x40020000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/ip_tables_names\x00') pread64(r0, &(0x7f0000000000)=""/55, 0x37, 0x14) 1m0.529551506s ago: executing program 6 (id=1562): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) mmap(&(0x7f00003e9000/0x3000)=nil, 0x3000, 0x100000e, 0x12, r0, 0x100000000) 1m0.120853188s ago: executing program 6 (id=1573): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xe4}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x4b}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}}, 0x0) 59.738835004s ago: executing program 6 (id=1575): setitimer(0x2, &(0x7f0000000040)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) setitimer(0x1, &(0x7f0000000000)={{}, {0x0, 0xea60}}, 0x0) unshare(0x42040200) 44.559176844s ago: executing program 37 (id=1575): setitimer(0x2, &(0x7f0000000040)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) setitimer(0x1, &(0x7f0000000000)={{}, {0x0, 0xea60}}, 0x0) unshare(0x42040200) 36.117137217s ago: executing program 8 (id=1647): r0 = socket$inet(0x2, 0x3, 0xd) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x7, 0x0, 0x0, 0xfffffffb}]}) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 35.710578785s ago: executing program 8 (id=1650): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) fcntl$setflags(r0, 0x2, 0x1) 35.226701753s ago: executing program 8 (id=1654): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2024) lseek(r0, 0xe, 0x1) 34.696674252s ago: executing program 8 (id=1658): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="0000d63f9a8eecdeb6fb0a2beaa6920ddb0700000000007f0000000000000080", 0x20) 34.217933096s ago: executing program 8 (id=1662): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x5, 0x192, 0x1, 0x0, 0xdd9f83, 0x1, 0x9, 0x1, 0x2, 0x5, 0x722, 0x13, 0x7, 0x7f, 0x3f, 0xb763599953cb091d, {0x0, 0x6fd8e84b}, 0x7, 0xed}}) 33.724712236s ago: executing program 8 (id=1664): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000280)={0x80, 0x0, 0x0, 0x0}) 21.574869679s ago: executing program 9 (id=1717): openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r0 = socket(0x11, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540), 0x395}, 0x24048000) 21.207393564s ago: executing program 9 (id=1720): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r1, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x8000) 20.918977583s ago: executing program 9 (id=1721): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x44, 0xe2, 0x20, 0x8, 0x13d3, 0x3224, 0xcb0d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0xe7, 0x0, 0x0, 0x20, 0x1, 0xd6}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000200)={0x0, 0x7, 0x3f, "928209a62dc943648171fae475a1f391f91c376614080e351ddd516c9f4d7657bbf171078bb9bd869970f1b0d4b0f838ae96804040336df6a39e7fdb9ce954"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 19.752499353s ago: executing program 7 (id=1725): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={0x20, 0x12, 0xa01, 0x4, 0x0, {0x80, 0x2}, [@nested={0xc, 0x0, 0x0, 0x1, [@nested={0x5, 0x135, 0x0, 0x1, [@generic="cd"]}]}]}, 0x20}}, 0x0) 19.423282896s ago: executing program 7 (id=1727): r0 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0) mq_timedsend(r0, &(0x7f0000000600)="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", 0xfd1, 0x9, 0x0) 19.122402976s ago: executing program 7 (id=1729): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x1, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x2fd, 0xea94, 0x6, 0xa, 0x4, 0xc091}, [@TCA_NETEM_RATE={0xf, 0x6, {0x8ae, 0x8, 0xffff}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xc}, @TCA_NETEM_RATE64={0xc, 0x8, 0xc074b6db8bfb5ea7}]}}}]}, 0x78}}, 0x40844) 18.872516168s ago: executing program 7 (id=1731): r0 = userfaultfd(0x80001) syz_usbip_server_init(0x1) close_range(r0, 0xffffffffffffffff, 0x0) 18.510428324s ago: executing program 38 (id=1664): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000280)={0x80, 0x0, 0x0, 0x0}) 17.967633294s ago: executing program 7 (id=1736): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89b0, &(0x7f0000000040)={'macvlan0\x00', 0x800}) 17.587190364s ago: executing program 9 (id=1738): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000940)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x337, {0x400, 0x512}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x54}, 0x1, 0xba01}, 0x0) 17.57406474s ago: executing program 7 (id=1739): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001300), 0x21002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000001b40)={0x80a}) 17.048019953s ago: executing program 5 (id=1741): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x162682, 0x0) r1 = dup(r0) fallocate(r1, 0x10, 0x0, 0x1062200) 16.943613743s ago: executing program 9 (id=1742): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=@newlink={0x28, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r1, 0x2093}, [@IFLA_MASTER={0x8, 0xa, r1}]}, 0x28}}, 0x20000000) 16.509566582s ago: executing program 9 (id=1743): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d"], 0xffdd) 16.359406298s ago: executing program 5 (id=1744): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = epoll_create(0x4000100) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000300)={0xb0000004}) 16.135556685s ago: executing program 5 (id=1745): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001a00010000000000000000001cf9"], 0x24}}, 0x0) 15.889374449s ago: executing program 5 (id=1746): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x3a, 0x16, 0x0, 0xfffffffffffffe71) 15.662167197s ago: executing program 5 (id=1747): r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x400000000000000) mmap$IORING_OFF_SQES(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2000000, 0x12, r0, 0x10000000) 15.406115499s ago: executing program 5 (id=1748): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000000)={0x2, 0x1aa12815bf4de82, 0x0, 0x0}) 2.069928931s ago: executing program 39 (id=1739): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001300), 0x21002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000001b40)={0x80a}) 1.061015429s ago: executing program 40 (id=1743): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d"], 0xffdd) 0s ago: executing program 41 (id=1748): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000000)={0x2, 0x1aa12815bf4de82, 0x0, 0x0}) kernel console output (not intermixed with test programs): address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 155.051039][ T7958] netlink: 'syz.4.949': attribute type 7 has an invalid length. [ 155.080144][ T7958] netlink: 'syz.4.949': attribute type 8 has an invalid length. [ 155.869686][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 155.968963][ T7995] netlink: 28 bytes leftover after parsing attributes in process `syz.2.968'. [ 156.029931][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 156.044719][ T9] usb 5-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 156.069498][ T9] usb 5-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.090231][ T9] usb 5-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 156.108740][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 156.108757][ T30] audit: type=1326 audit(1750760822.332:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8001 comm="syz.2.971" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f86d318e929 code=0x0 [ 156.151550][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 156.158338][ T9] usb 5-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 156.178896][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.200703][ T9] usb 5-1: config 0 descriptor?? [ 156.230486][ T8005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.973'. [ 156.245096][ T8005] netlink: 16 bytes leftover after parsing attributes in process `syz.1.973'. [ 156.267482][ T8005] gretap0: entered promiscuous mode [ 156.273151][ T8005] macvlan2: entered promiscuous mode [ 156.279553][ T8005] macvlan2: entered allmulticast mode [ 156.285100][ T8005] gretap0: entered allmulticast mode [ 156.636482][ T9] hid-alps 0003:044E:120B.0016: hidraw0: USB HID v0.00 Device [HID 044e:120b] on usb-dummy_hcd.4-1/input0 [ 156.847638][ T10] usb 5-1: USB disconnect, device number 9 [ 157.339203][ T5923] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 157.543789][ T5923] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 157.573250][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.599168][ T5923] usb 4-1: config 0 descriptor?? [ 157.614891][ T5923] cp210x 4-1:0.0: cp210x converter detected [ 157.758785][ T5920] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 157.955763][ T5920] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 157.976957][ T5920] usb 3-1: config 0 has no interface number 0 [ 157.991475][ T5920] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 158.012999][ T5920] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 158.031880][ T5920] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 158.045491][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.091007][ T5920] usb 3-1: config 0 descriptor?? [ 158.099224][ T8050] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 158.137747][ T5920] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 158.224170][ T5923] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 158.234809][ T5923] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 158.255432][ T5923] usb 4-1: cp210x converter now attached to ttyUSB0 [ 158.286018][ T5923] usb 4-1: USB disconnect, device number 14 [ 158.339453][ T5923] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 158.347840][ T5923] cp210x 4-1:0.0: device disconnected [ 158.403496][ T5904] usb 3-1: USB disconnect, device number 9 [ 158.419193][ T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 158.591904][ T10] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 158.603860][ T10] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 158.616302][ T10] usb 2-1: config 220 has an invalid descriptor of length 13, skipping remainder of the config [ 158.627511][ T10] usb 2-1: config 220 has no interface number 2 [ 158.634945][ T10] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 158.648614][ T10] usb 2-1: config 220 interface 0 has no altsetting 0 [ 158.655445][ T10] usb 2-1: config 220 interface 76 has no altsetting 0 [ 158.678151][ T10] usb 2-1: config 220 interface 1 has no altsetting 0 [ 158.697674][ T10] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 158.711120][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.721092][ T10] usb 2-1: Product: syz [ 158.725315][ T10] usb 2-1: Manufacturer: syz [ 158.729959][ T44] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 158.741631][ T10] usb 2-1: SerialNumber: syz [ 158.881865][ T44] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.902459][ T44] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 158.931327][ T44] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 158.951222][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.971667][ T44] usb 5-1: Product: syz [ 158.988847][ T44] usb 5-1: Manufacturer: syz [ 159.002433][ T10] usb 2-1: selecting invalid altsetting 0 [ 159.012672][ T44] usb 5-1: SerialNumber: syz [ 159.050051][ T10] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 159.056673][ T10] usb 2-1: No valid video chain found. [ 159.107247][ T10] usb 2-1: selecting invalid altsetting 0 [ 159.125111][ T10] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 159.164995][ T10] usb 2-1: USB disconnect, device number 10 [ 159.308189][ T44] usb 5-1: 0:2 : does not exist [ 159.343524][ T44] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 159.433070][ T44] usb 5-1: USB disconnect, device number 10 [ 159.532574][ T5889] udevd[5889]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 159.663347][ T8115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1023'. [ 159.778735][ T5904] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 159.940958][ T5904] usb 1-1: Using ep0 maxpacket: 32 [ 159.960143][ T5904] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 159.981735][ T5904] usb 1-1: config 0 has no interface number 0 [ 159.998138][ T5904] usb 1-1: config 0 interface 184 has no altsetting 0 [ 160.037289][ T5904] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 160.058214][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.081450][ T5904] usb 1-1: Product: syz [ 160.085713][ T5904] usb 1-1: Manufacturer: syz [ 160.110696][ T5904] usb 1-1: SerialNumber: syz [ 160.118505][ T5904] usb 1-1: config 0 descriptor?? [ 160.137527][ T5904] smsc75xx v1.0.0 [ 160.493183][ T5923] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 160.669411][ T5923] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 160.701891][ T5923] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 160.719346][ T5923] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 160.760557][ T5904] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 160.771548][ T5923] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 160.799086][ T5904] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 160.809383][ T5923] usb 4-1: config 0 interface 0 has no altsetting 0 [ 160.824490][ T5923] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 160.849137][ T5904] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 160.866181][ T5923] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 160.887749][ T5904] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 160.899747][ T5923] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 160.919025][ T5904] usb 1-1: USB disconnect, device number 10 [ 160.930049][ T5923] usb 4-1: config 0 interface 0 has no altsetting 0 [ 160.957503][ T5923] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 161.000219][ T5923] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 161.028660][ T5923] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 161.050915][ T5923] usb 4-1: config 0 interface 0 has no altsetting 0 [ 161.063943][ T5923] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 161.087878][ T5923] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 161.118856][ T5923] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 161.148660][ T5923] usb 4-1: config 0 interface 0 has no altsetting 0 [ 161.165806][ T5923] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 161.185221][ T5923] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 161.210315][ T5923] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 161.253354][ T5923] usb 4-1: config 0 interface 0 has no altsetting 0 [ 161.275065][ T5923] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 161.294781][ T5923] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 161.358669][ T5923] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 161.384456][ T5923] usb 4-1: config 0 interface 0 has no altsetting 0 [ 161.406678][ T5923] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 161.420154][ T8170] netlink: 'syz.2.1049': attribute type 6 has an invalid length. [ 161.441268][ T5923] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 161.475491][ T5923] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 161.521616][ T5923] usb 4-1: config 0 interface 0 has no altsetting 0 [ 161.549856][ T5923] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 161.578113][ T5923] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 161.616886][ T5923] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 161.649803][ T5923] usb 4-1: config 0 interface 0 has no altsetting 0 [ 161.690097][ T5923] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 161.719156][ T5923] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 161.727572][ T5923] usb 4-1: Product: syz [ 161.768652][ T5923] usb 4-1: Manufacturer: syz [ 161.773978][ T5923] usb 4-1: SerialNumber: syz [ 161.809885][ T5923] usb 4-1: config 0 descriptor?? [ 161.838503][ T5923] yurex 4-1:0.0: Could not submitting URB [ 161.848268][ T5923] yurex 4-1:0.0: probe with driver yurex failed with error -5 [ 161.892535][ T8191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1057'. [ 162.060330][ T9] usb 4-1: USB disconnect, device number 15 [ 162.678056][ T8218] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.728472][ T8218] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.836838][ T8227] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.844156][ T8227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.891025][ T8227] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.898295][ T8227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.937705][ T8232] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 162.944488][ T8232] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 162.962288][ T8232] vhci_hcd vhci_hcd.0: Device attached [ 162.974055][ T8233] vhci_hcd: connection closed [ 162.976095][ T1014] vhci_hcd: stop threads [ 162.987314][ T1014] vhci_hcd: release socket [ 162.998065][ T1014] vhci_hcd: disconnect device [ 163.004577][ T8226] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1075'. [ 163.020693][ T8223] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1076'. [ 163.226948][ T8244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1084'. [ 163.250873][ T8244] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 163.268834][ T8244] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.967309][ T8279] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1101'. [ 164.446215][ T8305] netlink: 'syz.2.1112': attribute type 29 has an invalid length. [ 164.869380][ T5920] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 165.038850][ T5920] usb 4-1: Using ep0 maxpacket: 16 [ 165.059925][ T5920] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.078450][ T5920] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 165.107959][ T5920] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 165.125579][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.146227][ T5920] usb 4-1: Product: syz [ 165.155793][ T5920] usb 4-1: Manufacturer: syz [ 165.169259][ T5920] usb 4-1: SerialNumber: syz [ 165.190834][ T8337] bridge1: entered promiscuous mode [ 165.209565][ T8337] bridge1: entered allmulticast mode [ 165.230757][ T8337] team0: Port device bridge1 added [ 165.601211][ T5920] usb 4-1: cannot find UAC_HEADER [ 165.655631][ T5920] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 165.702930][ T5889] udevd[5889]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 165.799047][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 165.813909][ T5923] usb 4-1: USB disconnect, device number 16 [ 165.968637][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 165.985913][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.006054][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.016465][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 166.042872][ T9] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 166.075639][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.090747][ T9] usb 1-1: config 0 descriptor?? [ 166.103501][ T5904] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 166.126954][ T8373] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1146'. [ 166.206981][ T8377] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1148'. [ 166.223632][ T8377] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1148'. [ 166.232892][ T8377] netlink: 'syz.4.1148': attribute type 6 has an invalid length. [ 166.270657][ T5904] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 166.283159][ T5904] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 166.297040][ T5904] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 166.312403][ T5904] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 166.352600][ T5904] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 166.366925][ T5904] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 166.377854][ T5904] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 166.400553][ T5904] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 166.423069][ T5904] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 166.455637][ T5904] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 166.487902][ T5904] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 166.502549][ T5904] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 166.537003][ T5904] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 166.560455][ T5904] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 166.578770][ T9] input: HID 0955:7214 Haptics as /devices/virtual/input/input13 [ 166.597880][ T5904] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 166.617429][ T5904] usb 3-1: string descriptor 0 read error: -22 [ 166.624438][ T5904] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 166.637178][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.691474][ T9] shield 0003:0955:7214.0017: Registered Thunderstrike controller [ 166.701605][ T5904] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 166.713495][ T9] shield 0003:0955:7214.0017: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 166.809086][ T9] usb 1-1: USB disconnect, device number 11 [ 166.833036][ T30] audit: type=1326 audit(1750760833.062:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8393 comm="syz.4.1155" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb8cf78e929 code=0x0 [ 166.862642][ T5920] shield 0003:0955:7214.0017: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 166.906522][ T5920] shield 0003:0955:7214.0017: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 166.931096][ T5920] shield 0003:0955:7214.0017: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 166.943814][ T5920] shield 0003:0955:7214.0017: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 166.953882][ T5904] usb 3-1: USB disconnect, device number 10 [ 167.128405][ T8405] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1160'. [ 167.478686][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 167.486437][ T5920] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 167.670915][ T5920] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.691484][ T9] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 167.706323][ T5920] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 167.727106][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.747319][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 167.756042][ T9] usb 2-1: Product: syz [ 167.764414][ T9] usb 2-1: Manufacturer: syz [ 167.776789][ T5920] usb 4-1: Product: syz [ 167.789092][ T5920] usb 4-1: Manufacturer: syz [ 167.793756][ T5920] usb 4-1: SerialNumber: syz [ 167.798893][ T9] usb 2-1: SerialNumber: syz [ 167.817701][ T9] usb 2-1: config 0 descriptor?? [ 167.830706][ T5920] usb 4-1: config 0 descriptor?? [ 167.843348][ T9] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 168.056286][ T8426] netlink: 'syz.4.1170': attribute type 1 has an invalid length. [ 168.142832][ T5920] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 168.174211][ T5920] usb 4-1: USB disconnect, device number 17 [ 168.233078][ T6200] udevd[6200]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 168.489701][ T9] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 168.507899][ T9] sq905c 2-1:0.0: probe with driver sq905c failed with error -71 [ 168.525851][ T9] usb 2-1: USB disconnect, device number 11 [ 168.916087][ T8448] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1181'. [ 169.625553][ T8481] dummy0: entered allmulticast mode [ 169.959156][ T5920] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 170.008759][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 170.109111][ T5920] usb 4-1: Using ep0 maxpacket: 16 [ 170.122967][ T5920] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 170.149392][ T5920] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 170.175041][ T5920] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 170.192738][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.209072][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.217806][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.230623][ T5920] usb 4-1: Product: syz [ 170.234846][ T5920] usb 4-1: Manufacturer: syz [ 170.246213][ T9] usb 5-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 170.255644][ T5920] usb 4-1: SerialNumber: syz [ 170.264739][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.287123][ T9] usb 5-1: config 0 descriptor?? [ 170.484414][ T5920] usb 4-1: 0:2 : does not exist [ 170.504138][ T5920] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 170.587746][ T5920] usb 4-1: USB disconnect, device number 18 [ 170.673716][ T5889] udevd[5889]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 170.752736][ T9] uclogic 0003:5543:0042.0018: No inputs registered, leaving [ 170.762926][ T9] uclogic 0003:5543:0042.0018: hidraw0: USB HID v0.00 Device [HID 5543:0042] on usb-dummy_hcd.4-1/input0 [ 170.960075][ T5920] usb 5-1: USB disconnect, device number 11 [ 172.019178][ T5904] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 172.191566][ T5904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.234181][ T5904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.265753][ T5904] usb 5-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 172.284090][ T5904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.313727][ T5904] usb 5-1: config 0 descriptor?? [ 172.823852][ T5904] hid_mf 0003:0079:1846.0019: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.4-1/input0 [ 172.867256][ T5904] hid_mf 0003:0079:1846.0019: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler [ 173.032418][ T5904] usb 5-1: USB disconnect, device number 12 [ 173.325629][ T8623] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 173.375662][ T8625] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 173.994585][ T8655] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1277'. [ 174.941838][ T8697] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 175.318807][ T5923] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 175.365292][ T8721] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1308'. [ 175.493625][ T5923] usb 4-1: Using ep0 maxpacket: 8 [ 175.505864][ T5923] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 175.522550][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.532990][ T5923] usb 4-1: Product: syz [ 175.537348][ T5923] usb 4-1: Manufacturer: syz [ 175.552029][ T5923] usb 4-1: SerialNumber: syz [ 175.554397][ T8727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1311'. [ 175.567348][ T5923] usb 4-1: config 0 descriptor?? [ 175.576804][ T5923] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 175.588310][ T5923] usb 4-1: setting power ON [ 175.593097][ T5904] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 175.608134][ T5923] dvb-usb: bulk message failed: -22 (2/0) [ 175.627019][ T5923] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 175.644390][ T5923] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 175.663760][ T5923] usb 4-1: media controller created [ 175.678729][ T5913] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 175.707044][ T5923] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 175.735611][ T5923] usb 4-1: selecting invalid altsetting 6 [ 175.748647][ T5904] usb 5-1: Using ep0 maxpacket: 16 [ 175.754424][ T5923] usb 4-1: digital interface selection failed (-22) [ 175.766066][ T5904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.785821][ T5923] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 175.796269][ T8706] dvb-usb: bulk message failed: -22 (3/0) [ 175.803651][ T5904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.814504][ T8706] dvb-usb: bulk message failed: -22 (4/0) [ 175.820550][ T8706] cxusb: i2c read failed [ 175.826085][ T5904] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 175.826551][ T5923] usb 4-1: setting power OFF [ 175.848729][ T5904] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 175.867856][ T5923] dvb-usb: bulk message failed: -22 (2/0) [ 175.875358][ T5904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.884682][ T5923] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 175.895898][ T5913] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 175.907756][ T5913] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 175.919329][ T5904] usb 5-1: config 0 descriptor?? [ 175.928354][ T5923] (NULL device *): no alternate interface [ 175.959139][ T5913] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 176.004585][ T5913] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 176.042094][ T5923] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 176.058865][ T5913] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 176.089947][ T5923] usb 4-1: USB disconnect, device number 19 [ 176.097003][ T5913] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 176.117518][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 176.149334][ T5913] usb 3-1: Product: syz [ 176.156471][ T5913] usb 3-1: Manufacturer: syz [ 176.212750][ T5913] cdc_wdm 3-1:1.0: skipping garbage [ 176.218053][ T5913] cdc_wdm 3-1:1.0: skipping garbage [ 176.259718][ T5913] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 176.265857][ T5913] cdc_wdm 3-1:1.0: Unknown control protocol [ 176.362591][ T8743] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1320'. [ 176.374854][ T5904] input: HID 0955:7214 Haptics as /devices/virtual/input/input17 [ 176.437911][ T5904] shield 0003:0955:7214.001A: Registered Thunderstrike controller [ 176.481536][ T5920] usb 3-1: USB disconnect, device number 11 [ 176.489112][ T5904] shield 0003:0955:7214.001A: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 176.597845][ T5923] shield 0003:0955:7214.001A: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 176.619872][ T5904] usb 5-1: USB disconnect, device number 13 [ 176.630563][ T5923] shield 0003:0955:7214.001A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 176.686055][ T5923] shield 0003:0955:7214.001A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 176.702080][ T5923] shield 0003:0955:7214.001A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 177.954022][ T30] audit: type=1326 audit(1750760844.172:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8809 comm="syz.1.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763878e929 code=0x7ffc0000 [ 177.977084][ T5904] IPVS: starting estimator thread 0... [ 178.046587][ T30] audit: type=1326 audit(1750760844.202:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8809 comm="syz.1.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763878e929 code=0x7ffc0000 [ 178.098870][ T8817] IPVS: using max 26 ests per chain, 62400 per kthread [ 178.125495][ T30] audit: type=1326 audit(1750760844.212:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8809 comm="syz.1.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f763878e929 code=0x7ffc0000 [ 178.147786][ C0] vkms_vblank_simulate: vblank timer overrun [ 178.209720][ T30] audit: type=1326 audit(1750760844.212:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8809 comm="syz.1.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763878e929 code=0x7ffc0000 [ 178.231924][ C0] vkms_vblank_simulate: vblank timer overrun [ 178.265794][ T30] audit: type=1326 audit(1750760844.212:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8809 comm="syz.1.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763878e929 code=0x7ffc0000 [ 178.335322][ T30] audit: type=1326 audit(1750760844.212:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8809 comm="syz.1.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f763878e929 code=0x7ffc0000 [ 178.396534][ T30] audit: type=1326 audit(1750760844.212:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8809 comm="syz.1.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763878e929 code=0x7ffc0000 [ 178.450952][ T30] audit: type=1326 audit(1750760844.212:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8809 comm="syz.1.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f763878e929 code=0x7ffc0000 [ 178.468695][ T5904] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 178.690298][ T5904] usb 5-1: Using ep0 maxpacket: 32 [ 178.705565][ T5904] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.733834][ T5904] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 178.761026][ T5904] usb 5-1: config 0 interface 0 has no altsetting 0 [ 178.769014][ T5904] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 178.784754][ T5904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.820318][ T5904] usb 5-1: config 0 descriptor?? [ 179.261555][ T30] audit: type=1326 audit(1750760845.492:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8869 comm="syz.2.1379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86d318e929 code=0x7ffc0000 [ 179.311791][ T5904] corsair-cpro 0003:1B1C:0C10.001B: hidraw0: USB HID v0.00 Device [HID 1b1c:0c10] on usb-dummy_hcd.4-1/input0 [ 179.322265][ T30] audit: type=1326 audit(1750760845.512:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8869 comm="syz.2.1379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86d318e929 code=0x7ffc0000 [ 179.345634][ C0] vkms_vblank_simulate: vblank timer overrun [ 179.457393][ T5904] corsair-cpro 0003:1B1C:0C10.001B: probe with driver corsair-cpro failed with error -38 [ 179.514786][ T5904] usb 5-1: USB disconnect, device number 14 [ 180.365508][ T8906] cgroup: fork rejected by pids controller in /syz2 [ 180.886350][ T8928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1403'. [ 181.066129][ T8932] usb usb8: usbfs: process 8932 (syz.3.1405) did not claim interface 0 before use [ 181.459247][ T5897] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 181.556927][ T8949] netlink: 165 bytes leftover after parsing attributes in process `syz.0.1414'. [ 181.641006][ T5897] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 181.661604][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.698757][ T5923] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 181.699886][ T5897] usb 2-1: config 0 descriptor?? [ 181.751955][ T5897] cp210x 2-1:0.0: cp210x converter detected [ 181.868924][ T5923] usb 5-1: Using ep0 maxpacket: 32 [ 181.889150][ T5923] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 181.921750][ T5923] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 181.950233][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.989338][ T5923] usb 5-1: config 0 descriptor?? [ 182.038703][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 182.048713][ T5920] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 182.056489][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 182.065446][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 182.078335][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 182.086873][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 182.199719][ T5920] usb 1-1: Using ep0 maxpacket: 16 [ 182.211941][ T5897] usb 2-1: cp210x converter now attached to ttyUSB0 [ 182.253792][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.288682][ T5920] usb 1-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 182.311264][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.352044][ T5920] usb 1-1: config 0 descriptor?? [ 182.391765][ T5904] usb 2-1: USB disconnect, device number 12 [ 182.428097][ T5904] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 182.457693][ T5923] steelseries 0003:1038:1410.001C: missing HID_OUTPUT_REPORT 0 [ 182.484257][ T5904] cp210x 2-1:0.0: device disconnected [ 182.650430][ T5897] usb 5-1: USB disconnect, device number 15 [ 182.712553][ T8960] chnl_net:caif_netlink_parms(): no params data found [ 182.812056][ T5920] logitech-djreceiver 0003:046D:C513.001D: hidraw0: USB HID v0.05 Device [HID 046d:c513] on usb-dummy_hcd.0-1/input0 [ 182.902504][ T8960] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.918843][ T8960] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.926345][ T8960] bridge_slave_0: entered allmulticast mode [ 182.948382][ T8960] bridge_slave_0: entered promiscuous mode [ 182.980258][ T8960] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.997908][ T8960] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.021195][ T5904] usb 1-1: USB disconnect, device number 12 [ 183.040965][ T8960] bridge_slave_1: entered allmulticast mode [ 183.052854][ T8960] bridge_slave_1: entered promiscuous mode [ 183.166420][ T8960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.185405][ T8960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.338135][ T8960] team0: Port device team_slave_0 added [ 183.365840][ T8960] team0: Port device team_slave_1 added [ 183.485058][ T8960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.498639][ T8960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.534641][ T8960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.554188][ T8960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.562946][ T8960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.595196][ T8960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.918144][ T8960] hsr_slave_0: entered promiscuous mode [ 183.944067][ T8960] hsr_slave_1: entered promiscuous mode [ 183.965271][ T8960] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 183.978661][ T8960] Cannot create hsr debugfs directory [ 184.179584][ T5840] Bluetooth: hci0: command tx timeout [ 184.382256][ T9011] openvswitch: netlink: IPv6 tunnel dst address is zero [ 184.584558][ T8960] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.693334][ T9023] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1442'. [ 184.824280][ T8960] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.091492][ T8960] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.145646][ T9043] ptrace attach of "./syz-executor exec"[5844] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ [ 185.249151][ T8960] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.368333][ T9051] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 185.705216][ T8960] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 185.752125][ T8960] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 185.771301][ T8960] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 185.794280][ T9066] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1462'. [ 185.807485][ T9063] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1462'. [ 185.817480][ T8960] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 186.185927][ T8960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.253683][ T8960] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.262979][ T5840] Bluetooth: hci0: command tx timeout [ 186.300724][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.307970][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.387586][ T1014] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.394838][ T1014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.614053][ T8960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.678849][ T5923] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 186.696962][ T8960] veth0_vlan: entered promiscuous mode [ 186.725245][ T8960] veth1_vlan: entered promiscuous mode [ 186.796242][ T8960] veth0_macvtap: entered promiscuous mode [ 186.811334][ T8960] veth1_macvtap: entered promiscuous mode [ 186.841673][ T5923] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 186.862958][ T8960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.866748][ T5923] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 186.884137][ T8960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.912185][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 186.927377][ T8960] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.945309][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 186.956887][ T8960] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.972524][ T8960] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.986106][ T8960] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.995909][ T5923] usb 5-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 187.011233][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.020335][ T5923] usb 5-1: Product: syz [ 187.024622][ T5923] usb 5-1: Manufacturer: syz [ 187.029831][ T5923] usb 5-1: SerialNumber: syz [ 187.041644][ T5923] usb 5-1: config 0 descriptor?? [ 187.052966][ T9097] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 187.205572][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.228083][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.267422][ T9119] xt_socket: unknown flags 0xd0 [ 187.282370][ T5923] powermate: Expected payload of 3--6 bytes, found 64 bytes! [ 187.301139][ T5923] input: Griffin SoundKnob as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input18 [ 187.310085][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.338260][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.575178][ T9124] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1485'. [ 187.797263][ C1] powermate: config urb returned -71 [ 187.805483][ C1] powermate: config urb returned -71 [ 187.817802][ C1] powermate: config urb returned -71 [ 187.823753][ T5923] usb 5-1: USB disconnect, device number 16 [ 187.829913][ C1] powermate 5-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 188.338971][ T5840] Bluetooth: hci0: command tx timeout [ 190.262251][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 190.262273][ T30] audit: type=1326 audit(1750760856.472:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9180 comm="syz.2.1513" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f114578e929 code=0x0 [ 190.418943][ T5840] Bluetooth: hci0: command tx timeout [ 190.959126][ T5913] hid-generic 00A0:0006:0003.001E: unknown main item tag 0x0 [ 191.026805][ T5913] hid-generic 00A0:0006:0003.001E: unknown main item tag 0x0 [ 191.078250][ T5913] hid-generic 00A0:0006:0003.001E: unknown main item tag 0x0 [ 191.128750][ T5913] hid-generic 00A0:0006:0003.001E: unknown main item tag 0x0 [ 191.136217][ T5913] hid-generic 00A0:0006:0003.001E: unknown main item tag 0x0 [ 191.230989][ T5913] hid-generic 00A0:0006:0003.001E: unknown main item tag 0x0 [ 191.304218][ T5913] hid-generic 00A0:0006:0003.001E: unknown main item tag 0x0 [ 191.365677][ T5913] hid-generic 00A0:0006:0003.001E: unknown main item tag 0x0 [ 191.427147][ T5913] hid-generic 00A0:0006:0003.001E: unknown main item tag 0x0 [ 191.475607][ T5913] hid-generic 00A0:0006:0003.001E: unknown main item tag 0x0 [ 191.520892][ T5913] hid-generic 00A0:0006:0003.001E: unknown main item tag 0x0 [ 191.578752][ T5913] hid-generic 00A0:0006:0003.001E: unknown main item tag 0x0 [ 191.586221][ T5913] hid-generic 00A0:0006:0003.001E: unknown main item tag 0x0 [ 191.696338][ T5913] hid-generic 00A0:0006:0003.001E: unknown main item tag 0x0 [ 191.738684][ T5913] hid-generic 00A0:0006:0003.001E: unknown main item tag 0x0 [ 191.823559][ T5913] hid-generic 00A0:0006:0003.001E: hidraw0: HID v0.05 Device [syz1] on syz0 [ 192.341177][ T9214] fido_id[9214]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 193.298915][ T5923] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 193.488985][ T5923] usb 5-1: Using ep0 maxpacket: 16 [ 193.512276][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 193.575503][ T5923] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 193.633250][ T5923] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 193.666424][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.719466][ T5923] usb 5-1: config 0 descriptor?? [ 194.192800][ T5923] kovaplus 0003:1E7D:2D50.001F: unknown main item tag 0x0 [ 194.223398][ T5923] kovaplus 0003:1E7D:2D50.001F: unknown main item tag 0x0 [ 194.257903][ T5923] kovaplus 0003:1E7D:2D50.001F: unknown main item tag 0x0 [ 194.309053][ T5923] kovaplus 0003:1E7D:2D50.001F: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.4-1/input0 [ 194.372017][ T9256] binder: 9255:9256 ioctl c0306201 200000000380 returned -22 [ 194.443602][ T5923] kovaplus 0003:1E7D:2D50.001F: couldn't init struct kovaplus_device [ 194.464750][ T5923] kovaplus 0003:1E7D:2D50.001F: couldn't install mouse [ 194.489192][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.495879][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.597116][ T5923] kovaplus 0003:1E7D:2D50.001F: probe with driver kovaplus failed with error -71 [ 194.683548][ T5923] usb 5-1: USB disconnect, device number 17 [ 194.998935][ T5913] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 195.168734][ T5913] usb 1-1: Using ep0 maxpacket: 8 [ 195.188687][ T5913] usb 1-1: config 2 has an invalid interface number: 31 but max is 0 [ 195.213511][ T5913] usb 1-1: config 2 has no interface number 0 [ 195.233971][ T5913] usb 1-1: config 2 interface 31 has no altsetting 0 [ 195.254353][ T5913] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 195.281324][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.305464][ T5913] usb 1-1: Product: syz [ 195.315580][ T5913] usb 1-1: Manufacturer: syz [ 195.333958][ T5913] usb 1-1: SerialNumber: syz [ 196.004602][ T5913] ch9200 1-1:2.31: probe with driver ch9200 failed with error -22 [ 196.030853][ T5913] usb 1-1: USB disconnect, device number 13 [ 197.288668][ T5913] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 197.442556][ T5913] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.458193][ T5913] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.476374][ T5913] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 197.487912][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.506931][ T5913] usb 1-1: config 0 descriptor?? [ 197.966218][ T5913] elan 0003:04F3:0755.0020: bogus close delimiter [ 197.983218][ T5913] elan 0003:04F3:0755.0020: item 0 1 2 10 parsing failed [ 197.992593][ T5913] elan 0003:04F3:0755.0020: Hid Parse failed [ 198.004929][ T5913] elan 0003:04F3:0755.0020: probe with driver elan failed with error -22 [ 198.195942][ T5913] usb 1-1: USB disconnect, device number 14 [ 201.278571][ C0] sched: DL replenish lagged too much [ 208.724847][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 208.740322][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 208.748460][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 208.756838][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 208.795838][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 209.572255][ T9297] chnl_net:caif_netlink_parms(): no params data found [ 209.659613][ T5840] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 209.675680][ T5840] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 209.683998][ T5840] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 209.693256][ T5840] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 209.702502][ T5840] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 210.618588][ T5842] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 210.627841][ T5842] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 210.639432][ T5842] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 210.648148][ T5842] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 210.656576][ T5842] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 210.818907][ T5842] Bluetooth: hci5: command tx timeout [ 211.632241][ T5838] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 211.650231][ T5838] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 211.659395][ T5838] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 211.667966][ T5838] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 211.677871][ T5838] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 211.779210][ T5842] Bluetooth: hci6: command tx timeout [ 211.864803][ T5842] Bluetooth: hci2: command 0x0406 tx timeout [ 211.871458][ T5838] Bluetooth: hci4: command 0x0406 tx timeout [ 211.877569][ T5838] Bluetooth: hci3: command 0x0406 tx timeout [ 211.885291][ T5842] Bluetooth: hci1: command 0x0406 tx timeout [ 212.773712][ T5842] Bluetooth: hci7: command tx timeout [ 212.900672][ T51] Bluetooth: hci5: command tx timeout [ 213.579804][ T9297] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.663599][ T9297] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.718827][ T5836] Bluetooth: hci8: command tx timeout [ 213.733619][ T9297] bridge_slave_0: entered allmulticast mode [ 213.792725][ T9297] bridge_slave_0: entered promiscuous mode [ 213.878845][ T5836] Bluetooth: hci6: command tx timeout [ 213.899755][ T9297] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.906951][ T9297] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.010095][ T9297] bridge_slave_1: entered allmulticast mode [ 214.079993][ T9297] bridge_slave_1: entered promiscuous mode [ 214.302211][ T9262] bridge0: port 3(syz_tun) entered disabled state [ 214.438078][ T9262] syz_tun (unregistering): left allmulticast mode [ 214.467282][ T9262] syz_tun (unregistering): left promiscuous mode [ 214.477649][ T9262] bridge0: port 3(syz_tun) entered disabled state [ 214.828167][ T5836] Bluetooth: hci7: command tx timeout [ 214.978843][ T5836] Bluetooth: hci5: command tx timeout [ 215.468328][ T9297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.554529][ T9297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.778960][ T5836] Bluetooth: hci8: command tx timeout [ 215.890512][ T9297] team0: Port device team_slave_0 added [ 215.938989][ T5836] Bluetooth: hci6: command tx timeout [ 216.060954][ T9297] team0: Port device team_slave_1 added [ 216.315932][ T9297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.328210][ T9297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.365560][ T9297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.431135][ T9297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.442673][ T9297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.480023][ T9297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.898808][ T5836] Bluetooth: hci7: command tx timeout [ 216.935313][ T9297] hsr_slave_0: entered promiscuous mode [ 216.960023][ T9297] hsr_slave_1: entered promiscuous mode [ 216.968095][ T9297] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 217.002847][ T9297] Cannot create hsr debugfs directory [ 217.059112][ T5836] Bluetooth: hci5: command tx timeout [ 217.642960][ T9306] chnl_net:caif_netlink_parms(): no params data found [ 217.859709][ T5836] Bluetooth: hci8: command tx timeout [ 217.884822][ T9302] chnl_net:caif_netlink_parms(): no params data found [ 217.934475][ T9309] chnl_net:caif_netlink_parms(): no params data found [ 218.025030][ T5836] Bluetooth: hci6: command tx timeout [ 218.979014][ T5836] Bluetooth: hci7: command tx timeout [ 219.938703][ T5836] Bluetooth: hci8: command tx timeout [ 220.961179][ T9309] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.968384][ T9309] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.990505][ T9309] bridge_slave_0: entered allmulticast mode [ 221.005707][ T9309] bridge_slave_0: entered promiscuous mode [ 221.164838][ T9309] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.182778][ T9309] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.192985][ T9309] bridge_slave_1: entered allmulticast mode [ 221.211289][ T9309] bridge_slave_1: entered promiscuous mode [ 221.236325][ T9302] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.253334][ T9302] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.263472][ T9302] bridge_slave_0: entered allmulticast mode [ 221.286066][ T9302] bridge_slave_0: entered promiscuous mode [ 221.300980][ T9306] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.318823][ T9306] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.326124][ T9306] bridge_slave_0: entered allmulticast mode [ 221.344558][ T9306] bridge_slave_0: entered promiscuous mode [ 221.456891][ T9302] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.489117][ T9302] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.496439][ T9302] bridge_slave_1: entered allmulticast mode [ 221.525370][ T9302] bridge_slave_1: entered promiscuous mode [ 221.632769][ T9306] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.646710][ T9306] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.665599][ T9306] bridge_slave_1: entered allmulticast mode [ 221.686185][ T9306] bridge_slave_1: entered promiscuous mode [ 222.095006][ T9309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.125004][ T9302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.203746][ T9306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.256500][ T9309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.367664][ T9302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.390346][ T9306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.720805][ T9309] team0: Port device team_slave_0 added [ 222.737190][ T9302] team0: Port device team_slave_0 added [ 222.865309][ T9309] team0: Port device team_slave_1 added [ 222.882604][ T9297] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 222.910145][ T9302] team0: Port device team_slave_1 added [ 222.923672][ T9297] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 222.949494][ T9306] team0: Port device team_slave_0 added [ 223.207042][ T9297] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 223.239279][ T9297] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 223.280998][ T9306] team0: Port device team_slave_1 added [ 223.301880][ T9309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.323691][ T9309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.360060][ T9309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.476554][ T9302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.485403][ T9302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.526518][ T9302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.829540][ T9309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.836559][ T9309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.877191][ T9309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.905934][ T9302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.922842][ T9302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.959379][ T9302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.294886][ T9306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.307684][ T9306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.352664][ T9306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.540524][ T9302] hsr_slave_0: entered promiscuous mode [ 224.558392][ T9302] hsr_slave_1: entered promiscuous mode [ 224.581727][ T9302] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 224.597435][ T9302] Cannot create hsr debugfs directory [ 224.604382][ T9306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.620575][ T9306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.657750][ T9306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.703008][ T9309] hsr_slave_0: entered promiscuous mode [ 224.714824][ T9309] hsr_slave_1: entered promiscuous mode [ 224.724877][ T9309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 224.745333][ T9309] Cannot create hsr debugfs directory [ 225.417719][ T9306] hsr_slave_0: entered promiscuous mode [ 225.426012][ T9306] hsr_slave_1: entered promiscuous mode [ 225.443910][ T9306] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 225.465606][ T9306] Cannot create hsr debugfs directory [ 226.602910][ T9297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.734195][ T9297] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.746834][ T9302] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 226.822902][ T9302] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 226.883425][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.890675][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.925969][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.933302][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.952302][ T9302] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 227.055203][ T9302] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 227.254589][ T9309] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 227.349430][ T9309] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 227.400153][ T9309] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 227.506792][ T9309] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 227.742763][ T9306] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 227.782279][ T9306] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 227.866338][ T9306] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 228.109926][ T9306] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 228.174644][ T9297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.401747][ T9302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.542068][ T9297] veth0_vlan: entered promiscuous mode [ 228.592246][ T9302] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.635805][ T9309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.668138][ T9297] veth1_vlan: entered promiscuous mode [ 228.693057][ T1014] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.700309][ T1014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.807429][ T1014] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.814776][ T1014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.911043][ T9309] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.024308][ T9306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.064325][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.071592][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.132130][ T9297] veth0_macvtap: entered promiscuous mode [ 229.218445][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.225721][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.338410][ T9297] veth1_macvtap: entered promiscuous mode [ 229.483954][ T9306] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.730336][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.737565][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.813102][ T9297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.843091][ T9297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.957657][ T9297] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.999636][ T9297] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.008490][ T9297] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.061038][ T9297] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.144618][ T9309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 230.200465][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.207659][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.351002][ T9302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.682587][ T9306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 230.713162][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 230.723852][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 230.732445][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 230.748834][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 230.757322][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 230.964642][ T9309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.123768][ T9302] veth0_vlan: entered promiscuous mode [ 231.264831][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.294264][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.320196][ T9302] veth1_vlan: entered promiscuous mode [ 231.400820][ T9306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.613334][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.666553][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.688059][ T9309] veth0_vlan: entered promiscuous mode [ 231.775615][ T9309] veth1_vlan: entered promiscuous mode [ 231.880806][ T9302] veth0_macvtap: entered promiscuous mode [ 231.997206][ T9302] veth1_macvtap: entered promiscuous mode [ 232.280796][ T9306] veth0_vlan: entered promiscuous mode [ 232.323018][ T9309] veth0_macvtap: entered promiscuous mode [ 232.414869][ T9309] veth1_macvtap: entered promiscuous mode [ 232.461492][ T9306] veth1_vlan: entered promiscuous mode [ 232.492662][ T9302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.544832][ T9302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.642630][ T9302] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.688282][ T9302] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.718510][ T9302] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.755982][ T9302] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.824906][ T5831] Bluetooth: hci1: command tx timeout [ 232.977495][ T9377] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1569'. [ 233.045749][ T9309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.284369][ T9309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.442153][ T9306] veth0_macvtap: entered promiscuous mode [ 233.482119][ T9309] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.525114][ T9309] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.576553][ T9309] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.616544][ T9309] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.713242][ T9306] veth1_macvtap: entered promiscuous mode [ 233.755847][ T9368] chnl_net:caif_netlink_parms(): no params data found [ 234.044641][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.069566][ T9306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.098281][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.316410][ T9306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.508901][ T978] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 234.670434][ T978] usb 6-1: Using ep0 maxpacket: 32 [ 234.678312][ T978] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.703531][ T978] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.715153][ T9368] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.728794][ T9368] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.738209][ T978] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 234.749398][ T9368] bridge_slave_0: entered allmulticast mode [ 234.757373][ T9368] bridge_slave_0: entered promiscuous mode [ 234.780653][ T978] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.816324][ T9306] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.834804][ T978] usb 6-1: config 0 descriptor?? [ 234.867743][ T9306] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.878328][ T978] hub 6-1:0.0: USB hub found [ 234.899609][ T5831] Bluetooth: hci1: command tx timeout [ 234.922669][ T9306] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.946696][ T9306] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.069127][ T9368] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.076601][ T9368] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.147443][ T9368] bridge_slave_1: entered allmulticast mode [ 235.172214][ T9368] bridge_slave_1: entered promiscuous mode [ 235.186973][ T978] hub 6-1:0.0: 1 port detected [ 235.317015][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.347541][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.414158][ T978] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 235.441712][ T978] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 235.475946][ T978] usbhid 6-1:0.0: can't add hid device: -71 [ 235.488763][ T978] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 235.522859][ T9368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.562431][ T978] usb 6-1: USB disconnect, device number 2 [ 235.677054][ T9368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.849631][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.901679][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.134388][ T9368] team0: Port device team_slave_0 added [ 236.281800][ T9368] team0: Port device team_slave_1 added [ 236.663893][ T9396] netlink: 'syz.5.1574': attribute type 16 has an invalid length. [ 236.731846][ T9396] netlink: 'syz.5.1574': attribute type 17 has an invalid length. [ 236.978974][ T5831] Bluetooth: hci1: command tx timeout [ 237.042235][ T9396] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.050265][ T9396] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.696142][ T9396] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.736191][ T9396] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.152858][ T9396] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.175573][ T9396] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.195322][ T9396] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.208169][ T9396] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.709275][ T9368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.716301][ T9368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.848938][ T9368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.016222][ T9368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.048245][ T9368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.086398][ T5831] Bluetooth: hci1: command tx timeout [ 239.158423][ T9368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.235733][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.258685][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.273708][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.310216][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.651702][ T9368] hsr_slave_0: entered promiscuous mode [ 239.672197][ T9368] hsr_slave_1: entered promiscuous mode [ 239.702062][ T9368] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 239.739121][ T9368] Cannot create hsr debugfs directory [ 240.221248][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.265580][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.629247][ T5904] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 240.831705][ T5904] usb 9-1: config 0 has an invalid interface number: 217 but max is 0 [ 240.850806][ T5904] usb 9-1: config 0 has no interface number 0 [ 240.882326][ T5904] usb 9-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 240.933654][ T5904] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.988230][ T5904] usb 9-1: Product: syz [ 241.026055][ T5904] usb 9-1: Manufacturer: syz [ 241.074480][ T5904] usb 9-1: SerialNumber: syz [ 241.144765][ T5904] usb 9-1: config 0 descriptor?? [ 241.191069][ T5904] hub 9-1:0.217: bad descriptor, ignoring hub [ 241.197231][ T5904] hub 9-1:0.217: probe with driver hub failed with error -5 [ 241.404618][ T5904] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 241.474265][ T5904] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 241.509068][ T44] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 241.559970][ T5904] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 241.627433][ T5904] usb 9-1: media controller created [ 241.718758][ T44] usb 6-1: Using ep0 maxpacket: 32 [ 241.766604][ T44] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.824358][ T44] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.864978][ T5904] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 241.902142][ T44] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 241.960253][ T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.059881][ T44] usb 6-1: config 0 descriptor?? [ 242.378479][ T9368] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 242.482601][ T5904] DVB: Unable to find symbol dib7000p_attach() [ 242.492608][ T9368] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 242.518847][ T5904] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 242.555819][ T44] savu 0003:1E7D:2D5A.0021: unknown main item tag 0x0 [ 242.627285][ T9368] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 242.640474][ T44] savu 0003:1E7D:2D5A.0021: unknown main item tag 0x0 [ 242.706282][ T44] savu 0003:1E7D:2D5A.0021: unknown main item tag 0x0 [ 242.767281][ T44] savu 0003:1E7D:2D5A.0021: unknown main item tag 0x0 [ 242.790051][ T9368] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 242.838859][ T44] savu 0003:1E7D:2D5A.0021: unknown main item tag 0x0 [ 242.880624][ T44] savu 0003:1E7D:2D5A.0021: unbalanced collection at end of report description [ 242.921804][ T5904] rc_core: IR keymap rc-dib0700-rc5 not found [ 242.948465][ T5904] Registered IR keymap rc-empty [ 242.954177][ T5904] dvb-usb: could not initialize remote control. [ 242.966047][ T44] savu 0003:1E7D:2D5A.0021: parse failed [ 243.000361][ T44] savu 0003:1E7D:2D5A.0021: probe with driver savu failed with error -22 [ 243.028296][ T5904] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 243.089838][ T44] usb 6-1: USB disconnect, device number 3 [ 243.422231][ T9427] vim2m vim2m.0: vidioc_s_fmt queue busy [ 243.540425][ T44] usb 9-1: USB disconnect, device number 2 [ 243.841589][ T44] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 243.878175][ T9368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.065192][ T9368] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.157250][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.164561][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.238891][ T5923] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 244.291271][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.298651][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.538964][ T5923] usb 6-1: Using ep0 maxpacket: 8 [ 244.618496][ T5923] usb 6-1: unable to get BOS descriptor or descriptor too short [ 244.691147][ T5923] usb 6-1: config 10 has an invalid interface number: 223 but max is 2 [ 244.749704][ T5923] usb 6-1: config 10 has an invalid interface number: 79 but max is 2 [ 244.819301][ T5923] usb 6-1: config 10 has an invalid descriptor of length 0, skipping remainder of the config [ 244.880509][ T5923] usb 6-1: config 10 has 2 interfaces, different from the descriptor's value: 3 [ 244.916733][ T9368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.961109][ T5923] usb 6-1: config 10 has no interface number 0 [ 244.984920][ T5923] usb 6-1: config 10 has no interface number 1 [ 245.025800][ T5923] usb 6-1: config 10 interface 223 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 15 [ 245.121014][ T5923] usb 6-1: config 10 interface 79 altsetting 73 endpoint 0x1 has invalid wMaxPacketSize 0 [ 245.190613][ T5923] usb 6-1: config 10 interface 79 altsetting 73 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 245.260807][ T9368] veth0_vlan: entered promiscuous mode [ 245.301964][ T5923] usb 6-1: config 10 interface 223 has no altsetting 0 [ 245.358718][ T5923] usb 6-1: config 10 interface 79 has no altsetting 0 [ 245.384325][ T9368] veth1_vlan: entered promiscuous mode [ 245.418602][ T5923] usb 6-1: New USB device found, idVendor=2013, idProduct=025d, bcdDevice=a3.4b [ 245.475605][ T5923] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.518851][ T5923] usb 6-1: Product: syz [ 245.542219][ T5923] usb 6-1: Manufacturer: syz [ 245.573954][ T5923] usb 6-1: SerialNumber: syz [ 245.656884][ T9368] veth0_macvtap: entered promiscuous mode [ 245.737314][ T9368] veth1_macvtap: entered promiscuous mode [ 245.969655][ T9368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.098015][ T5923] dvb-usb: found a 'PCTV 2002e SE' in cold state, will try to load a firmware [ 246.115418][ T9368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.205752][ T9368] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.235876][ T5923] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 246.281995][ T9368] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.311478][ T5923] dib0700: firmware download failed at 7 with -8 [ 246.331638][ T9368] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.384689][ T9368] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.395196][ T5923] dvb-usb: found a 'PCTV 2002e SE' in cold state, will try to load a firmware [ 246.437582][ T5923] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 246.518047][ T5923] dib0700: firmware download failed at 7 with -8 [ 246.647898][ T5923] usb 6-1: USB disconnect, device number 4 [ 247.216261][ T3022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.319117][ T3022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.551113][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.619959][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.642650][ T9446] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1589'. [ 248.538685][ T978] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 248.768759][ T9463] tipc: Started in network mode [ 248.785863][ T9463] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 248.796244][ T978] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 248.844111][ T978] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.854615][ T9463] tipc: Enabling of bearer rejected, failed to enable media [ 248.921087][ T978] usb 6-1: Product: syz [ 248.925325][ T978] usb 6-1: Manufacturer: syz [ 248.996566][ T978] usb 6-1: SerialNumber: syz [ 249.060846][ T978] usb 6-1: config 0 descriptor?? [ 249.418754][ T44] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 249.656703][ T44] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.707864][ T44] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 249.783461][ T44] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 249.793286][ T978] usb 6-1: Firmware version (0.0) predates our first public release. [ 249.853253][ T978] usb 6-1: Please update to version 0.2 or newer [ 249.875129][ T44] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.952059][ T44] usb 9-1: config 0 descriptor?? [ 250.044480][ T44] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 250.073086][ T44] dvb-usb: bulk message failed: -22 (3/0) [ 250.113370][ T978] usb 6-1: USB disconnect, device number 5 [ 250.169816][ T44] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 250.266786][ T44] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 250.361222][ T44] usb 9-1: media controller created [ 250.426375][ T44] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 250.544143][ T44] dvb-usb: bulk message failed: -22 (6/0) [ 250.603128][ T44] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 250.690545][ T44] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input20 [ 250.797579][ T44] dvb-usb: schedule remote query interval to 150 msecs. [ 250.871343][ T44] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 250.970315][ T44] usb 9-1: USB disconnect, device number 3 [ 251.245135][ T44] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 252.350607][ T9502] trusted_key: encrypted_key: insufficient parameters specified [ 253.648694][ T5913] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 253.759117][ T9524] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1622'. [ 253.858853][ T5913] usb 9-1: Using ep0 maxpacket: 8 [ 253.894675][ T5913] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 253.996787][ T5913] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 254.070844][ T5913] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 254.177617][ T5913] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 254.247051][ T5913] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 254.327219][ T5913] usb 9-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 254.374976][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 254.387643][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 254.396510][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 254.403968][ T5923] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 254.415453][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 254.424565][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 254.486547][ T5913] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.537788][ T5913] usb 9-1: config 0 descriptor?? [ 254.592394][ T9518] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 254.659089][ T5923] usb 10-1: Using ep0 maxpacket: 32 [ 254.730518][ T5923] usb 10-1: config index 0 descriptor too short (expected 156, got 27) [ 254.793563][ T5923] usb 10-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 254.881588][ T5923] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 254.966398][ T5923] usb 10-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 254.989710][ T9518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.069349][ T9518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.097843][ T5923] usb 10-1: config 0 interface 0 has no altsetting 0 [ 255.153348][ T5831] Bluetooth: hci4: unexpected event 0x12 length: 1 < 8 [ 255.162588][ T5831] Bluetooth: hci4: Malformed Event: 0x02 [ 255.171136][ T5831] Bluetooth: hci4: unexpected event 0x04 length: 15 > 10 [ 255.171375][ T5831] Bluetooth: hci4: connection err: -111 [ 255.230323][ T5923] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 255.287056][ T5923] usb 10-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 255.346879][ T5923] usb 10-1: Product: syz [ 255.369565][ T5923] usb 10-1: Manufacturer: syz [ 255.374378][ T5923] usb 10-1: SerialNumber: syz [ 255.399263][ T5836] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 255.431919][ T44] usb 9-1: USB disconnect, device number 4 [ 255.487479][ T5923] usb 10-1: config 0 descriptor?? [ 255.553274][ T5923] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 255.661162][ T5923] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 255.795049][ T5923] usb 10-1: USB disconnect, device number 2 [ 255.847468][ T5923] ldusb 10-1:0.0: LD USB Device #0 now disconnected [ 255.889485][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.901735][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.488733][ T5923] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 256.502001][ T5836] Bluetooth: hci3: command tx timeout [ 256.531605][ T9532] chnl_net:caif_netlink_parms(): no params data found [ 256.737348][ T5923] usb 9-1: Using ep0 maxpacket: 8 [ 256.804044][ T5923] usb 9-1: unable to get BOS descriptor or descriptor too short [ 256.858792][ T5923] usb 9-1: config 4 interface 0 has no altsetting 0 [ 256.919133][ T5923] usb 9-1: string descriptor 0 read error: -22 [ 256.943547][ T5923] usb 9-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 256.969461][ T9553] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1633'. [ 257.007153][ T5923] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.072110][ T5923] usb 9-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 257.168593][ T5923] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 257.248485][ T5923] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 257.354278][ T5923] usb 9-1: media controller created [ 257.473100][ T9532] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.530786][ T9532] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.575825][ T5923] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 257.595102][ T9532] bridge_slave_0: entered allmulticast mode [ 257.659947][ T9532] bridge_slave_0: entered promiscuous mode [ 257.726161][ T9532] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.774333][ T5923] zl10353_read_register: readreg error (reg=127, ret==0) [ 257.805250][ T9532] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.813533][ T9558] netlink: 'syz.7.1635': attribute type 2 has an invalid length. [ 257.852865][ T9532] bridge_slave_1: entered allmulticast mode [ 257.869990][ T9558] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1635'. [ 257.909069][ T9532] bridge_slave_1: entered promiscuous mode [ 258.308289][ T5923] usb 9-1: USB disconnect, device number 5 [ 258.434422][ T9532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.563611][ T9532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.589844][ T5836] Bluetooth: hci3: command tx timeout [ 259.024092][ T9532] team0: Port device team_slave_0 added [ 259.113377][ T9532] team0: Port device team_slave_1 added [ 259.541854][ T9532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.597060][ T9532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.756301][ T9532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.956727][ T9532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.038247][ T9532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.197522][ T9532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.669808][ T5836] Bluetooth: hci3: command tx timeout [ 260.857026][ T9532] hsr_slave_0: entered promiscuous mode [ 260.970103][ T9532] hsr_slave_1: entered promiscuous mode [ 260.976604][ T9532] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 261.106159][ T9532] Cannot create hsr debugfs directory [ 262.517764][ T9617] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1660'. [ 262.743819][ T5836] Bluetooth: hci3: command tx timeout [ 263.316267][ T9532] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.118878][ T44] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 265.310185][ T44] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.331835][ T44] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.347943][ T44] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 265.377529][ T44] usb 10-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 265.450751][ T44] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.529355][ T44] usb 10-1: config 0 descriptor?? [ 266.012079][ T44] dragonrise 0003:0079:0011.0022: unknown main item tag 0x1 [ 266.092314][ T44] dragonrise 0003:0079:0011.0022: reserved main item tag 0xe [ 266.166126][ T44] dragonrise 0003:0079:0011.0022: hidraw0: USB HID v0.00 Device [HID 0079:0011] on usb-dummy_hcd.9-1/input0 [ 266.293947][ T44] usb 10-1: USB disconnect, device number 3 [ 266.691284][ T9641] fido_id[9641]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 267.160200][ T30] audit: type=1326 audit(1750760933.392:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9649 comm="syz.9.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f644bf8e929 code=0x7ffc0000 [ 267.182401][ C1] vkms_vblank_simulate: vblank timer overrun [ 267.424117][ T30] audit: type=1326 audit(1750760933.392:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9649 comm="syz.9.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f644bf8e929 code=0x7ffc0000 [ 267.446432][ C1] vkms_vblank_simulate: vblank timer overrun [ 267.668045][ T30] audit: type=1326 audit(1750760933.392:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9649 comm="syz.9.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f644bf8e929 code=0x7ffc0000 [ 267.785869][ T30] audit: type=1326 audit(1750760933.462:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9649 comm="syz.9.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f644bf8e929 code=0x7ffc0000 [ 267.868774][ T5923] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 268.101636][ T5923] usb 10-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 268.132022][ T5923] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.223771][ T5923] usb 10-1: config 0 descriptor?? [ 268.735345][ T5923] gembird 0003:11FF:3331.0023: unknown main item tag 0x0 [ 268.788728][ T5923] gembird 0003:11FF:3331.0023: item fetching failed at offset 3/5 [ 268.797672][ T5923] gembird 0003:11FF:3331.0023: probe with driver gembird failed with error -22 [ 268.924832][ T5923] usb 10-1: USB disconnect, device number 4 [ 269.158978][ T9674] binder: 9673:9674 ioctl 541b 0 returned -22 [ 271.346959][ T5913] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 271.530693][ T5913] usb 10-1: Using ep0 maxpacket: 32 [ 271.589803][ T5913] usb 10-1: config 0 has an invalid interface number: 219 but max is 0 [ 271.602532][ T5913] usb 10-1: config 0 has no interface number 0 [ 271.622735][ T5913] usb 10-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 271.691349][ T5913] usb 10-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 271.740279][ T5913] usb 10-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 271.814386][ T5913] usb 10-1: config 0 interface 219 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 271.882360][ T5913] usb 10-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 271.976558][ T5913] usb 10-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 272.028908][ T5913] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.069795][ T5913] usb 10-1: Product: syz [ 272.074120][ T5913] usb 10-1: Manufacturer: syz [ 272.094883][ T5913] usb 10-1: SerialNumber: syz [ 272.146900][ T5913] usb 10-1: config 0 descriptor?? [ 272.177382][ T9699] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 272.426433][ T5913] etas_es58x 10-1:0.219: Starting syz syz (Serial Number syz) [ 272.626347][ T5913] etas_es58x 10-1:0.219: could not parse product info: 'У' [ 272.917059][ T5913] usb 10-1: USB disconnect, device number 5 [ 272.945040][ T5913] etas_es58x 10-1:0.219: Disconnecting syz syz [ 273.034837][ T9716] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1707'. [ 273.114431][ T9716] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1707'. [ 276.521994][ T9766] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1724'. [ 276.888929][ T9770] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 277.441072][ T9776] netem: change failed [ 277.739565][ T9780] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4) [ 277.746253][ T9780] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 277.770471][ T9784] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1732'. [ 277.819736][ T9780] vhci_hcd vhci_hcd.0: Device attached [ 277.825705][ T9784] netlink: 'syz.5.1732': attribute type 2 has an invalid length. [ 277.833876][ T9782] vhci_hcd: connection closed [ 277.835857][ T36] vhci_hcd: stop threads [ 277.853635][ T36] vhci_hcd: release socket [ 277.858186][ T36] vhci_hcd: disconnect device [ 277.875871][ T9784] netlink: 'syz.5.1732': attribute type 1 has an invalid length. [ 277.929578][ T9784] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1732'. [ 279.239019][ T9798] vlan2: entered allmulticast mode [ 279.289085][ T9798] vlan1: entered allmulticast mode [ 279.304649][ T9798] veth0_vlan: entered allmulticast mode [ 279.631747][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 279.654285][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 279.663384][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 279.673555][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 279.690301][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 279.784760][ T9805] team0: Cannot enslave team device to itself [ 281.206334][ T9806] chnl_net:caif_netlink_parms(): no params data found [ 281.612871][ T9806] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.632600][ T9806] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.648976][ T9806] bridge_slave_0: entered allmulticast mode [ 281.661484][ T9806] bridge_slave_0: entered promiscuous mode [ 281.700332][ T9806] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.718885][ T9806] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.728396][ T9806] bridge_slave_1: entered allmulticast mode [ 281.751838][ T9806] bridge_slave_1: entered promiscuous mode [ 281.779241][ T5831] Bluetooth: hci0: command tx timeout [ 281.984280][ T9806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.014092][ T9806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.260011][ T9806] team0: Port device team_slave_0 added [ 282.285049][ T9806] team0: Port device team_slave_1 added [ 282.653905][ T9806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.669219][ T9806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.717464][ T9806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.761338][ T9806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.768363][ T9806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.804864][ T9806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.082608][ T9806] hsr_slave_0: entered promiscuous mode [ 283.100107][ T9806] hsr_slave_1: entered promiscuous mode [ 283.111796][ T9806] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 283.134239][ T9806] Cannot create hsr debugfs directory [ 283.859380][ T5831] Bluetooth: hci0: command tx timeout [ 285.940000][ T5831] Bluetooth: hci0: command tx timeout [ 288.019261][ T5836] Bluetooth: hci0: command tx timeout [ 295.120969][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 295.139604][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 295.148062][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 295.157635][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 295.165638][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 296.241528][ T9830] chnl_net:caif_netlink_parms(): no params data found [ 296.693697][ T5836] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 296.703444][ T5836] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 296.711886][ T5836] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 296.721583][ T5836] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 296.730077][ T5836] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 297.228946][ T5836] Bluetooth: hci4: command tx timeout [ 297.378306][ T5831] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 297.399285][ T5831] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 297.408189][ T5831] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 297.417801][ T5831] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 297.427578][ T5831] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 298.819119][ T5836] Bluetooth: hci9: command tx timeout [ 299.308828][ T5836] Bluetooth: hci4: command tx timeout [ 299.539932][ T5836] Bluetooth: hci10: command tx timeout [ 300.902331][ T5836] Bluetooth: hci9: command tx timeout [ 301.378931][ T5836] Bluetooth: hci4: command tx timeout [ 301.618917][ T5836] Bluetooth: hci10: command tx timeout [ 302.985415][ T5836] Bluetooth: hci9: command tx timeout [ 303.458957][ T5836] Bluetooth: hci4: command tx timeout [ 303.701134][ T5836] Bluetooth: hci10: command tx timeout [ 305.058853][ T5836] Bluetooth: hci9: command tx timeout [ 305.780815][ T5836] Bluetooth: hci10: command tx timeout [ 306.804394][ T9830] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.818965][ T9830] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.826380][ T9830] bridge_slave_0: entered allmulticast mode [ 306.856024][ T9830] bridge_slave_0: entered promiscuous mode [ 306.909786][ T9830] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.917013][ T9830] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.937016][ T9830] bridge_slave_1: entered allmulticast mode [ 306.948250][ T9830] bridge_slave_1: entered promiscuous mode [ 307.199800][ T9830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.249838][ T9830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.621293][ T9830] team0: Port device team_slave_0 added [ 307.709383][ T9830] team0: Port device team_slave_1 added [ 308.009785][ T9830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.016805][ T9830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.128994][ T9830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.168854][ T9830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.175867][ T9830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.227761][ T9830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.278740][ T9839] chnl_net:caif_netlink_parms(): no params data found [ 308.926893][ T9830] hsr_slave_0: entered promiscuous mode [ 308.960420][ T9830] hsr_slave_1: entered promiscuous mode [ 308.966985][ T9830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 309.010872][ T9830] Cannot create hsr debugfs directory [ 309.215888][ T9837] chnl_net:caif_netlink_parms(): no params data found [ 309.546794][ T9839] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.569805][ T9839] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.577536][ T9839] bridge_slave_0: entered allmulticast mode [ 309.601971][ T9839] bridge_slave_0: entered promiscuous mode [ 309.688936][ T9839] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.696216][ T9839] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.719978][ T9839] bridge_slave_1: entered allmulticast mode [ 309.728288][ T9839] bridge_slave_1: entered promiscuous mode [ 310.121517][ T9839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.211269][ T9839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.806819][ T9839] team0: Port device team_slave_0 added [ 310.832129][ T9839] team0: Port device team_slave_1 added [ 310.855621][ T9837] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.880102][ T9837] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.887494][ T9837] bridge_slave_0: entered allmulticast mode [ 310.926277][ T9837] bridge_slave_0: entered promiscuous mode [ 310.942542][ T9837] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.962301][ T9837] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.989252][ T9837] bridge_slave_1: entered allmulticast mode [ 311.013423][ T9837] bridge_slave_1: entered promiscuous mode [ 311.578784][ T9839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.599767][ T9839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.642087][ T9839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.679310][ T9839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.699464][ T9839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.745502][ T9839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.800468][ T9837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.842981][ T9837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.220841][ T9839] hsr_slave_0: entered promiscuous mode [ 312.239568][ T9839] hsr_slave_1: entered promiscuous mode [ 312.259200][ T9839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 312.266818][ T9839] Cannot create hsr debugfs directory [ 312.441679][ T5200] udevd[5200]: worker [9347] /devices/platform/dummy_hcd.5/usb6/6-1 is taking a long time [ 312.628051][ T9837] team0: Port device team_slave_0 added [ 312.822653][ T9837] team0: Port device team_slave_1 added [ 313.141858][ T9837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.168678][ T9837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.278818][ T9837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.386559][ T9837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.405465][ T9837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.487372][ T5831] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 313.507243][ T5831] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 313.519174][ T5831] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 313.529580][ T5831] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 313.542301][ T5831] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 313.622290][ T9837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.167170][ T9837] hsr_slave_0: entered promiscuous mode [ 314.187222][ T9837] hsr_slave_1: entered promiscuous mode [ 314.198327][ T9837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 314.218970][ T9837] Cannot create hsr debugfs directory [ 315.265484][ T9863] chnl_net:caif_netlink_parms(): no params data found [ 315.619000][ T5831] Bluetooth: hci11: command tx timeout [ 315.716809][ T9863] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.737902][ T9863] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.749344][ T9863] bridge_slave_0: entered allmulticast mode [ 315.769151][ T9863] bridge_slave_0: entered promiscuous mode [ 315.802730][ T9863] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.818901][ T9863] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.826290][ T9863] bridge_slave_1: entered allmulticast mode [ 315.856355][ T9863] bridge_slave_1: entered promiscuous mode [ 316.105893][ T9863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.143309][ T9863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.390810][ T9863] team0: Port device team_slave_0 added [ 316.420728][ T9863] team0: Port device team_slave_1 added [ 316.606157][ T9863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.615959][ T9863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.656157][ T9863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.699499][ T9863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.718639][ T9863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.766609][ T9863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 317.225841][ T9863] hsr_slave_0: entered promiscuous mode [ 317.252148][ T9863] hsr_slave_1: entered promiscuous mode [ 317.269158][ T9863] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 317.276877][ T9863] Cannot create hsr debugfs directory [ 317.316271][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.325462][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.700332][ T5831] Bluetooth: hci11: command tx timeout [ 319.779343][ T5831] Bluetooth: hci11: command tx timeout [ 321.858958][ T5831] Bluetooth: hci11: command tx timeout [ 334.778454][ T5831] Bluetooth: hci5: command 0x0406 tx timeout [ 334.784620][ T5831] Bluetooth: hci6: command 0x0406 tx timeout [ 334.790891][ T5838] Bluetooth: hci7: command 0x0406 tx timeout [ 334.796959][ T5838] Bluetooth: hci8: command 0x0406 tx timeout [ 338.024584][ T5200] udevd[5200]: worker [9411] /devices/platform/dummy_hcd.9/usb10/10-1 is taking a long time [ 339.173900][ T5842] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 339.193100][ T5842] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 339.201808][ T5842] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 339.212037][ T5842] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 339.223398][ T5842] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 339.877874][ T9873] chnl_net:caif_netlink_parms(): no params data found [ 340.325240][ T9873] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.341912][ T9873] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.362355][ T9873] bridge_slave_0: entered allmulticast mode [ 340.381023][ T9873] bridge_slave_0: entered promiscuous mode [ 340.410648][ T9873] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.417939][ T9873] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.439805][ T9873] bridge_slave_1: entered allmulticast mode [ 340.465134][ T9873] bridge_slave_1: entered promiscuous mode [ 340.701045][ T9873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.742257][ T9873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.047929][ T9873] team0: Port device team_slave_0 added [ 341.088811][ T9873] team0: Port device team_slave_1 added [ 341.287994][ T9873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.298913][ T5842] Bluetooth: hci12: command tx timeout [ 341.321771][ T9873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.376329][ T9873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.411498][ T9873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.428992][ T9873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.494783][ T9873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.750163][ T9873] hsr_slave_0: entered promiscuous mode [ 341.769251][ T9873] hsr_slave_1: entered promiscuous mode [ 341.775923][ T9873] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 341.810082][ T9873] Cannot create hsr debugfs directory [ 343.379024][ T5842] Bluetooth: hci12: command tx timeout [ 345.459676][ T5842] Bluetooth: hci12: command tx timeout [ 347.539019][ T51] Bluetooth: hci12: command tx timeout [ 355.220171][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 355.879392][ T5836] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 355.894540][ T5836] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 355.902885][ T5836] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 355.911860][ T5836] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 355.927029][ T5836] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 356.461395][ T5840] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 356.471571][ T5840] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 356.485296][ T5840] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 356.495211][ T5840] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 356.510049][ T5840] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 357.723945][ T5833] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 357.733797][ T5833] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 357.748202][ T5833] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 357.758856][ T5833] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 357.775530][ T5833] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 358.328926][ T5836] Bluetooth: hci13: command tx timeout [ 359.356236][ T1014] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.342442][ T5842] Bluetooth: hci13: command tx timeout [ 360.419084][ T5842] Bluetooth: hci15: command tx timeout [ 360.425374][ T5842] Bluetooth: hci14: command tx timeout [ 360.686652][ T9888] chnl_net:caif_netlink_parms(): no params data found [ 360.821351][ T9883] chnl_net:caif_netlink_parms(): no params data found [ 361.006164][ T9885] chnl_net:caif_netlink_parms(): no params data found [ 361.634882][ T9888] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.648780][ T9888] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.679206][ T9888] bridge_slave_0: entered allmulticast mode [ 361.707982][ T9888] bridge_slave_0: entered promiscuous mode [ 361.886665][ T9888] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.909887][ T9888] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.917288][ T9888] bridge_slave_1: entered allmulticast mode [ 361.941904][ T9888] bridge_slave_1: entered promiscuous mode [ 362.174324][ T9883] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.188960][ T9883] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.196690][ T9883] bridge_slave_0: entered allmulticast mode [ 362.229254][ T9883] bridge_slave_0: entered promiscuous mode [ 362.420219][ T5842] Bluetooth: hci13: command tx timeout [ 362.465584][ T9888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.496004][ T9883] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.504612][ T5842] Bluetooth: hci14: command tx timeout [ 362.512988][ T5833] Bluetooth: hci15: command tx timeout [ 362.528779][ T9883] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.536162][ T9883] bridge_slave_1: entered allmulticast mode [ 362.561391][ T9883] bridge_slave_1: entered promiscuous mode [ 362.690677][ T9885] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.697887][ T9885] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.719096][ T9885] bridge_slave_0: entered allmulticast mode [ 362.732560][ T9885] bridge_slave_0: entered promiscuous mode [ 362.755138][ T9888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.868205][ T9885] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.899207][ T9885] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.906612][ T9885] bridge_slave_1: entered allmulticast mode [ 362.932183][ T9885] bridge_slave_1: entered promiscuous mode [ 363.047661][ T9883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.340676][ T9883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.468018][ T9888] team0: Port device team_slave_0 added [ 363.493710][ T9888] team0: Port device team_slave_1 added [ 363.713620][ T9885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.753293][ T9885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.001159][ T9883] team0: Port device team_slave_0 added [ 364.009846][ T9888] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.039947][ T9888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.088290][ T9888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 364.212397][ T9883] team0: Port device team_slave_1 added [ 364.492002][ T9888] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 364.501678][ T5842] Bluetooth: hci13: command tx timeout [ 364.519257][ T9888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.574332][ T9888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 364.589173][ T5842] Bluetooth: hci14: command tx timeout [ 364.594704][ T5842] Bluetooth: hci15: command tx timeout [ 364.892333][ T9885] team0: Port device team_slave_0 added [ 365.085084][ T9883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.101788][ T9883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.169023][ T9883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 365.202614][ T9883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 365.218962][ T9883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.276956][ T9883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 365.311346][ T9885] team0: Port device team_slave_1 added [ 365.324351][ T9888] hsr_slave_0: entered promiscuous mode [ 365.349680][ T9888] hsr_slave_1: entered promiscuous mode [ 365.370395][ T9888] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 365.378000][ T9888] Cannot create hsr debugfs directory [ 365.791684][ T9885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.810931][ T9885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.868838][ T9885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.110395][ T9885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.117486][ T9885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.188801][ T9885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.316954][ T9883] hsr_slave_0: entered promiscuous mode [ 366.348149][ T9883] hsr_slave_1: entered promiscuous mode [ 366.373615][ T9883] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 366.391078][ T9883] Cannot create hsr debugfs directory [ 366.659386][ T5842] Bluetooth: hci15: command tx timeout [ 366.664943][ T5842] Bluetooth: hci14: command tx timeout [ 367.111359][ T9885] hsr_slave_0: entered promiscuous mode [ 367.132405][ T9885] hsr_slave_1: entered promiscuous mode [ 367.149257][ T9885] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 367.156864][ T9885] Cannot create hsr debugfs directory [ 373.257960][ T5833] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 373.267804][ T5833] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 373.288902][ T5833] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 373.300216][ T5833] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 373.308047][ T5833] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 374.028077][ T9909] chnl_net:caif_netlink_parms(): no params data found [ 374.589206][ T9909] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.596417][ T9909] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.619367][ T9909] bridge_slave_0: entered allmulticast mode [ 374.640450][ T9909] bridge_slave_0: entered promiscuous mode [ 374.670650][ T9909] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.679011][ T9909] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.686685][ T9909] bridge_slave_1: entered allmulticast mode [ 374.719638][ T9909] bridge_slave_1: entered promiscuous mode [ 374.976488][ T9909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.011620][ T9909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.264591][ T9909] team0: Port device team_slave_0 added [ 375.287168][ T9909] team0: Port device team_slave_1 added [ 375.383297][ T5833] Bluetooth: hci16: command tx timeout [ 375.523102][ T9909] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 375.543575][ T9909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.616870][ T9909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.652377][ T9909] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.667189][ T9909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.727499][ T9909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.022811][ T9909] hsr_slave_0: entered promiscuous mode [ 376.050129][ T9909] hsr_slave_1: entered promiscuous mode [ 376.056761][ T9909] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 376.091742][ T9909] Cannot create hsr debugfs directory [ 377.459837][ T5833] Bluetooth: hci16: command tx timeout [ 378.779894][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.786271][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.539232][ T5833] Bluetooth: hci16: command tx timeout [ 380.824589][ T5833] Bluetooth: hci3: command 0x0406 tx timeout [ 381.619231][ T5842] Bluetooth: hci16: command tx timeout [ 399.410567][ T5833] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 399.423024][ T5833] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 399.433896][ T5833] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 399.450301][ T5833] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 399.463946][ T5833] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 400.154886][ T9925] chnl_net:caif_netlink_parms(): no params data found [ 400.880654][ T9925] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.887956][ T9925] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.909462][ T9925] bridge_slave_0: entered allmulticast mode [ 400.928915][ T9925] bridge_slave_0: entered promiscuous mode [ 400.938191][ T9925] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.969236][ T9925] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.976642][ T9925] bridge_slave_1: entered allmulticast mode [ 401.012227][ T9925] bridge_slave_1: entered promiscuous mode [ 401.242865][ T9925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.274802][ T9925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.531119][ T9925] team0: Port device team_slave_0 added [ 401.541558][ T5833] Bluetooth: hci17: command tx timeout [ 401.553304][ T9925] team0: Port device team_slave_1 added [ 401.800286][ T9925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.807306][ T9925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.870528][ T9925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.906892][ T9925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.927698][ T9925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.990244][ T9925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 402.352304][ T9925] hsr_slave_0: entered promiscuous mode [ 402.369997][ T9925] hsr_slave_1: entered promiscuous mode [ 402.392014][ T9925] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 402.409881][ T9925] Cannot create hsr debugfs directory [ 403.620885][ T5833] Bluetooth: hci17: command tx timeout [ 405.701071][ T5833] Bluetooth: hci17: command tx timeout [ 406.419002][ T5833] Bluetooth: hci0: command 0x0406 tx timeout [ 407.779086][ T5842] Bluetooth: hci17: command tx timeout [ 408.179562][ T31] INFO: task syz.2.1536:9237 blocked for more than 143 seconds. [ 408.187294][ T31] Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 408.230793][ T31] Blocked by coredump. [ 408.235576][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 408.262113][ T31] task:syz.2.1536 state:D stack:25128 pid:9237 tgid:9237 ppid:8960 task_flags:0x40044c flags:0x00004006 [ 408.298629][ T31] Call Trace: [ 408.301998][ T31] [ 408.304981][ T31] __schedule+0x16f5/0x4d00 [ 408.341399][ T31] ? __lock_acquire+0xab9/0xd20 [ 408.418927][ T31] ? schedule+0x165/0x360 [ 408.423371][ T31] ? __pfx___schedule+0x10/0x10 [ 408.428287][ T31] ? schedule+0x91/0x360 [ 408.530032][ T31] schedule+0x165/0x360 [ 408.534294][ T31] schedule_preempt_disabled+0x13/0x30 [ 408.564905][ T31] __mutex_lock+0x724/0xe80 [ 408.591882][ T31] ? __mutex_lock+0x51b/0xe80 [ 408.596676][ T31] ? rcu_barrier+0x4c/0x570 [ 408.618732][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 408.623865][ T31] ? __mutex_unlock_slowpath+0x68a/0x700 [ 408.648630][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 408.654722][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 408.688983][ T31] rcu_barrier+0x4c/0x570 [ 408.693425][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 408.710092][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 408.715311][ T31] netdev_run_todo+0x327/0xea0 [ 408.730578][ T31] ? __pfx_netif_state_change+0x10/0x10 [ 408.736219][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 408.758964][ T31] ? kasan_quarantine_put+0xdd/0x220 [ 408.780852][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 408.786181][ T31] ? netdev_state_change+0x1ca/0x220 [ 408.812085][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 408.817305][ T31] tun_chr_close+0x13c/0x1c0 [ 408.832775][ T31] __fput+0x449/0xa70 [ 408.836858][ T31] task_work_run+0x1d1/0x260 [ 408.858806][ T31] ? __pfx_task_work_run+0x10/0x10 [ 408.879874][ T31] ? kmem_cache_free+0x18f/0x400 [ 408.884902][ T31] do_exit+0x6b5/0x22e0 [ 408.898917][ T31] ? do_raw_spin_lock+0x121/0x290 [ 408.904027][ T31] ? __pfx_do_exit+0x10/0x10 [ 408.922452][ T31] do_group_exit+0x21c/0x2d0 [ 408.927132][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 408.948957][ T31] get_signal+0x1286/0x1340 [ 408.953577][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 408.970150][ T31] ? blkcg_maybe_throttle_current+0x1ab/0xb40 [ 408.977667][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 409.001206][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 409.007489][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 409.028851][ T31] exit_to_user_mode_loop+0x75/0x110 [ 409.034244][ T31] do_syscall_64+0x2bd/0x3b0 [ 409.049059][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 409.054358][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.078887][ T31] ? clear_bhb_loop+0x60/0xb0 [ 409.083659][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.110953][ T31] RIP: 0033:0x7f114578e929 [ 409.115460][ T31] RSP: 002b:00007f1145adfb88 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 409.139010][ T31] RAX: 0000000000000000 RBX: 000000000002f264 RCX: 00007f114578e929 [ 409.147067][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 409.188667][ T31] RBP: 00007f11459b7ba0 R08: 0000000000000001 R09: 0000000345adfe7f [ 409.196806][ T31] R10: 00007f1145600000 R11: 0000000000000246 R12: 00007f11459b5fac [ 409.228891][ T31] R13: 00007f11459b5fa0 R14: ffffffffffffffff R15: 00007f1145adfca0 [ 409.236974][ T31] [ 409.249093][ T31] INFO: task syz.8.1664:9619 blocked for more than 144 seconds. [ 409.256878][ T31] Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 [ 409.296197][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 409.344234][ T31] task:syz.8.1664 state:D stack:25128 pid:9619 tgid:9619 ppid:9309 task_flags:0x400040 flags:0x00004006 [ 409.371260][ T31] Call Trace: [ 409.390023][ T31] [ 409.393269][ T31] __schedule+0x16f5/0x4d00 [ 409.397867][ T31] ? __lock_acquire+0xab9/0xd20 [ 409.418710][ T31] ? schedule+0x165/0x360 [ 409.423142][ T31] ? __pfx___schedule+0x10/0x10 [ 409.428086][ T31] ? schedule+0x91/0x360 [ 409.449190][ T31] schedule+0x165/0x360 [ 409.453445][ T31] schedule_preempt_disabled+0x13/0x30 [ 409.473778][ T31] __mutex_lock+0x724/0xe80 [ 409.498841][ T31] ? __mutex_lock+0x51b/0xe80 [ 409.503711][ T31] ? rcu_barrier+0x4c/0x570 [ 409.508263][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 409.530032][ T31] ? do_raw_write_lock+0x11d/0x260 [ 409.535252][ T31] ? __pfx_tdp_mmu_next_root+0x10/0x10 [ 409.548999][ T31] rcu_barrier+0x4c/0x570 [ 409.553405][ T31] ? kvm_mmu_uninit_tdp_mmu+0x32/0xc0 [ 409.578877][ T31] kvm_mmu_uninit_vm+0x23/0x60 [ 409.609035][ T31] kvm_arch_destroy_vm+0x23a/0x280 [ 409.614256][ T31] kvm_put_kvm+0xf8e/0x1650 [ 409.628933][ T31] ? _raw_spin_unlock_irq+0x2e/0x50 [ 409.634480][ T31] ? __pfx_kvm_vm_release+0x10/0x10 [ 409.648988][ T31] kvm_vm_release+0x43/0x50 [ 409.653581][ T31] __fput+0x449/0xa70 [ 409.657632][ T31] task_work_run+0x1d1/0x260 [ 409.690795][ T31] ? __pfx_task_work_run+0x10/0x10 [ 409.696016][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 409.719059][ T31] exit_to_user_mode_loop+0xec/0x110 [ 409.724532][ T31] do_syscall_64+0x2bd/0x3b0 [ 409.739541][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 409.744844][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.767981][ T31] ? clear_bhb_loop+0x60/0xb0 [ 409.774593][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.798790][ T31] RIP: 0033:0x7f65daf8e929 [ 409.803294][ T31] RSP: 002b:00007f65db2dfb88 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 409.828641][ T31] RAX: 0000000000000000 RBX: 000000000004032c RCX: 00007f65daf8e929 [ 409.836689][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 409.868063][ T31] RBP: 00007f65db1b7ba0 R08: 0000000000000001 R09: 00000003db2dfe7f [ 409.879033][ T31] R10: 00007f65dae00000 R11: 0000000000000246 R12: 00007f65db1b5fac [ 409.908689][ T31] R13: 00007f65db1b5fa0 R14: ffffffffffffffff R15: 00007f65db2dfca0 [ 409.916765][ T31] [ 409.939218][ T31] [ 409.939218][ T31] Showing all locks held in the system: [ 409.947003][ T31] 1 lock held by khungtaskd/31: [ 409.973465][ T31] #0: ffffffff8e13ee60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 409.998941][ T31] 2 locks held by kworker/u8:2/36: [ 410.004134][ T31] 6 locks held by kworker/u8:6/1014: [ 410.031153][ T31] #0: ffff88801b2fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 410.069189][ T31] #1: ffffc9000399fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 410.088595][ T31] #2: ffffffff8f503350 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 410.119065][ T31] #3: ffff88807f8af0e8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x10a/0x3d0 [ 410.150027][ T31] #4: ffff888056d00250 (&devlink->lock_key#5){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x11c/0x3d0 [ 410.169703][ T31] #5: ffffffff8e144840 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 410.200516][ T31] 2 locks held by getty/5589: [ 410.205269][ T31] #0: ffff8880349120a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 410.228953][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 410.260328][ T31] 6 locks held by kworker/0:5/5897: [ 410.265600][ T31] 6 locks held by kworker/1:4/5913: [ 410.289071][ T31] #0: ffff88823be1c148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 410.318729][ T31] #1: ffffc90004b0fbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 410.351647][ T31] #2: ffff888145392198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 410.369815][ T31] #3: ffff888024313198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xf8/0x910 [ 410.403536][ T31] #4: ffff888078768160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x7c0 [ 410.418848][ T31] #5: ffffffff8e144840 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 410.449271][ T31] 1 lock held by syz.2.1536/9237: [ 410.454427][ T31] #0: ffffffff8e144840 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 410.479884][ T31] 2 locks held by syz.0.1566/9317: [ 410.485073][ T31] #0: ffffffff8f503350 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 410.519235][ T31] #1: ffffffff8e144840 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 410.549277][ T31] 2 locks held by kworker/0:8/9339: [ 410.554549][ T31] 2 locks held by syz.6.1575/9399: [ 410.571598][ T31] #0: ffffffff8f503350 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 410.599565][ T31] #1: ffffffff8e144840 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 410.629209][ T31] 4 locks held by udevd/9411: [ 410.633968][ T31] #0: ffff8880362da0a0 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 410.659143][ T31] #1: ffff888044202488 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x55/0x3c0 [ 410.682015][ T31] #2: ffff888060e39a58 (kn->active#27){++++}-{0:0}, at: kernfs_seq_start+0x75/0x3c0 [ 410.710623][ T31] #3: ffff888024313198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 410.741692][ T31] 3 locks held by kworker/0:9/9522: [ 410.747058][ T31] 7 locks held by syz-executor/9532: [ 410.759151][ T31] #0: ffff888034fc4428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 410.768165][ T31] #1: ffff88806647dc88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 410.814386][ T31] #2: ffff888027415a58 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 410.838840][ T31] #3: ffffffff8edaaae8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 410.858884][ T31] #4: ffff88807704a0e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x7c0 [ 410.886839][ T31] #5: ffff88807704d250 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 410.916585][ T31] #6: ffffffff8e144840 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 410.941156][ T31] 1 lock held by syz.8.1664/9619: [ 410.946246][ T31] #0: ffffffff8e144840 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 410.973279][ T31] 1 lock held by syz.7.1739/9795: [ 410.978396][ T31] #0: ffffffff8e144840 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 411.011601][ T31] 4 locks held by syz-executor/9806: [ 411.040261][ T31] #0: ffff888034fc4428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 411.058942][ T31] #1: ffff888052fa6c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 411.079566][ T31] #2: ffff888027415a58 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 411.107556][ T31] #3: ffffffff8edaaae8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 411.139394][ T31] 1 lock held by syz.9.1743/9807: [ 411.144485][ T31] #0: ffffffff8e144840 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 411.170123][ T31] 1 lock held by syz.5.1748/9821: [ 411.175232][ T31] #0: ffffffff8e144840 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 411.208763][ T31] 4 locks held by syz-executor/9830: [ 411.214131][ T31] #0: ffff888034fc4428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 411.248810][ T31] #1: ffff888085877488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 411.269644][ T31] #2: ffff888027415a58 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 411.299508][ T31] #3: ffffffff8edaaae8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 411.318650][ T31] 4 locks held by syz-executor/9837: [ 411.351241][ T31] #0: ffff888034fc4428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 411.369825][ T31] #1: ffff888086f98088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 411.398777][ T31] #2: ffff888027415a58 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 411.414887][ T31] #3: ffffffff8edaaae8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 411.451897][ T31] 4 locks held by syz-executor/9839: [ 411.457277][ T31] #0: ffff888034fc4428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 411.490290][ T31] #1: ffff88802794c488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 411.508730][ T31] #2: ffff888027415a58 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 411.531707][ T31] #3: ffffffff8edaaae8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 411.561457][ T31] 4 locks held by syz-executor/9863: [ 411.566816][ T31] #0: ffff888034fc4428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 411.599925][ T31] #1: ffff888087dc7c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 411.618771][ T31] #2: ffff888027415a58 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 411.648786][ T31] #3: ffffffff8edaaae8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 411.679115][ T31] 4 locks held by syz-executor/9873: [ 411.684476][ T31] #0: ffff888034fc4428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 411.709763][ T31] #1: ffff88804e4a0088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 411.736570][ T31] #2: ffff888027415a58 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 411.758910][ T31] #3: ffffffff8edaaae8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 411.789174][ T31] 4 locks held by syz-executor/9883: [ 411.794529][ T31] #0: ffff888034fc4428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 411.828807][ T31] #1: ffff88808e38ec88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 411.855512][ T31] #2: ffff888027415a58 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 411.878977][ T31] #3: ffffffff8edaaae8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 411.910965][ T31] 4 locks held by syz-executor/9885: [ 411.916320][ T31] #0: ffff888034fc4428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 411.948780][ T31] #1: ffff88808e387c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 411.964578][ T31] #2: ffff888027415a58 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 411.988935][ T31] #3: ffffffff8edaaae8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 412.026242][ T31] 4 locks held by syz-executor/9888: [ 412.032571][ T31] #0: ffff888034fc4428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 412.068987][ T31] #1: ffff888062277488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 412.088737][ T31] #2: ffff888027415a58 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 412.113359][ T31] #3: ffffffff8edaaae8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 412.144616][ T31] 4 locks held by syz-executor/9909: [ 412.158643][ T31] #0: ffff888034fc4428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 412.167661][ T31] #1: ffff888086eec088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 412.198369][ T31] #2: ffff888027415a58 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 412.229145][ T31] #3: ffffffff8edaaae8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 412.263537][ T31] 4 locks held by syz-executor/9925: [ 412.278750][ T31] #0: ffff888034fc4428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 412.287761][ T31] #1: ffff88803571b088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 412.324962][ T31] #2: ffff888027415a58 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 412.351183][ T31] #3: ffffffff8edaaae8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 412.378950][ T31] [ 412.381467][ T31] ============================================= [ 412.381467][ T31] [ 412.408826][ T31] NMI backtrace for cpu 1 [ 412.408859][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 412.408913][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 412.408926][ T31] Call Trace: [ 412.408934][ T31] [ 412.408944][ T31] dump_stack_lvl+0x189/0x250 [ 412.408979][ T31] ? __wake_up_klogd+0xd9/0x110 [ 412.409005][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 412.409037][ T31] ? __pfx__printk+0x10/0x10 [ 412.409072][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 412.409101][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 412.409124][ T31] ? _printk+0xcf/0x120 [ 412.409150][ T31] ? __pfx__printk+0x10/0x10 [ 412.409174][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 412.409204][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 412.409233][ T31] watchdog+0xfee/0x1030 [ 412.409262][ T31] ? watchdog+0x1de/0x1030 [ 412.409297][ T31] kthread+0x70e/0x8a0 [ 412.409323][ T31] ? __pfx_watchdog+0x10/0x10 [ 412.409348][ T31] ? __pfx_kthread+0x10/0x10 [ 412.409372][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 412.409399][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 412.409426][ T31] ? __pfx_kthread+0x10/0x10 [ 412.409450][ T31] ret_from_fork+0x3fc/0x770 [ 412.409481][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 412.409516][ T31] ? __switch_to_asm+0x39/0x70 [ 412.409535][ T31] ? __switch_to_asm+0x33/0x70 [ 412.409554][ T31] ? __pfx_kthread+0x10/0x10 [ 412.409577][ T31] ret_from_fork_asm+0x1a/0x30 [ 412.409615][ T31] [ 412.409623][ T31] Sending NMI from CPU 1 to CPUs 0: [ 412.576933][ C0] NMI backtrace for cpu 0 [ 412.576951][ C0] CPU: 0 UID: 0 PID: 9828 Comm: kworker/0:11 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 412.576973][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 412.576985][ C0] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 412.577016][ C0] RIP: 0010:trace_irq_enable+0x30/0x110 [ 412.577053][ C0] Code: 8b 05 08 18 d5 10 83 f8 08 73 3c 89 c3 c1 e8 06 48 8d 3c c5 f0 0b a1 8f be 08 00 00 00 e8 18 fa 5b 00 48 0f a3 1d a0 33 d9 0d <73> 12 e8 c9 3a df ff 84 c0 75 09 80 3d 26 22 c3 0d 00 74 0f 5b 41 [ 412.577068][ C0] RSP: 0018:ffffc90000007a20 EFLAGS: 00000057 [ 412.577082][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff81c7d848 [ 412.577093][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8fa10bf0 [ 412.577103][ C0] RBP: ffffc90000007ad0 R08: ffffffff8fa10bf7 R09: 1ffffffff1f4217e [ 412.577116][ C0] R10: dffffc0000000000 R11: fffffbfff1f4217f R12: dffffc0000000000 [ 412.577128][ C0] R13: ffff888032dda2a0 R14: ffffffff99d68d68 R15: 1ffff92000000f48 [ 412.577141][ C0] FS: 0000000000000000(0000) GS:ffff888125c51000(0000) knlGS:0000000000000000 [ 412.577154][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 412.577165][ C0] CR2: 0000001b3031bff8 CR3: 000000000df38000 CR4: 00000000003526f0 [ 412.577179][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 412.577189][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 412.577200][ C0] Call Trace: [ 412.577206][ C0] [ 412.577214][ C0] trace_hardirqs_on+0x18/0x40 [ 412.577234][ C0] _raw_spin_unlock_irqrestore+0x85/0x110 [ 412.577258][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 412.577285][ C0] debug_object_assert_init+0x20e/0x380 [ 412.577309][ C0] __mod_timer+0x4a/0xf30 [ 412.577326][ C0] ? pie_calculate_probability+0x6a9/0x7e0 [ 412.577355][ C0] ? pie_timer+0x4a/0x360 [ 412.577379][ C0] pie_timer+0x20a/0x360 [ 412.577401][ C0] ? call_timer_fn+0x155/0x5f0 [ 412.577424][ C0] call_timer_fn+0x17e/0x5f0 [ 412.577445][ C0] ? __pfx_pie_timer+0x10/0x10 [ 412.577467][ C0] ? call_timer_fn+0xbe/0x5f0 [ 412.577487][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 412.577513][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 412.577533][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 412.577556][ C0] ? __pfx_pie_timer+0x10/0x10 [ 412.577580][ C0] __run_timer_base+0x61a/0x860 [ 412.577607][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 412.577634][ C0] run_timer_softirq+0xb7/0x180 [ 412.577654][ C0] handle_softirqs+0x286/0x870 [ 412.577680][ C0] ? do_softirq+0xec/0x180 [ 412.577705][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 412.577731][ C0] ? wg_packet_tx_worker+0x24a/0x7c0 [ 412.577754][ C0] do_softirq+0xec/0x180 [ 412.577776][ C0] [ 412.577781][ C0] [ 412.577787][ C0] ? __pfx_do_softirq+0x10/0x10 [ 412.577810][ C0] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 412.577835][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 412.577859][ C0] ? lockdep_softirqs_on+0x13b/0x1c0 [ 412.577882][ C0] __local_bh_enable_ip+0x17d/0x1c0 [ 412.577905][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 412.577931][ C0] ? wg_packet_tx_worker+0x24a/0x7c0 [ 412.577954][ C0] ? wg_packet_tx_worker+0x24a/0x7c0 [ 412.577976][ C0] wg_packet_tx_worker+0x70b/0x7c0 [ 412.577998][ C0] ? wg_packet_tx_worker+0x24a/0x7c0 [ 412.578021][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 412.578047][ C0] process_scheduled_works+0xae1/0x17b0 [ 412.578086][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 412.578118][ C0] worker_thread+0x8a0/0xda0 [ 412.578154][ C0] kthread+0x70e/0x8a0 [ 412.578173][ C0] ? __pfx_worker_thread+0x10/0x10 [ 412.578197][ C0] ? __pfx_kthread+0x10/0x10 [ 412.578215][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 412.578236][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 412.578258][ C0] ? __pfx_kthread+0x10/0x10 [ 412.578275][ C0] ret_from_fork+0x3fc/0x770 [ 412.578299][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 412.578324][ C0] ? __switch_to_asm+0x39/0x70 [ 412.578340][ C0] ? __switch_to_asm+0x33/0x70 [ 412.578355][ C0] ? __pfx_kthread+0x10/0x10 [ 412.578373][ C0] ret_from_fork_asm+0x1a/0x30 [ 412.578397][ C0] [ 413.127153][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 413.134083][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 413.145942][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 413.156132][ T31] Call Trace: [ 413.159452][ T31] [ 413.162409][ T31] dump_stack_lvl+0x99/0x250 [ 413.167064][ T31] ? __asan_memcpy+0x40/0x70 [ 413.171707][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 413.176984][ T31] ? __pfx__printk+0x10/0x10 [ 413.181640][ T31] panic+0x2db/0x790 [ 413.185590][ T31] ? __pfx_panic+0x10/0x10 [ 413.190053][ T31] ? __pfx_delay_tsc+0x10/0x10 [ 413.194862][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 413.200723][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 413.206142][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 413.212348][ T31] watchdog+0x102d/0x1030 [ 413.216733][ T31] ? watchdog+0x1de/0x1030 [ 413.221212][ T31] kthread+0x70e/0x8a0 [ 413.225320][ T31] ? __pfx_watchdog+0x10/0x10 [ 413.230035][ T31] ? __pfx_kthread+0x10/0x10 [ 413.234680][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 413.239922][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 413.245162][ T31] ? __pfx_kthread+0x10/0x10 [ 413.249792][ T31] ret_from_fork+0x3fc/0x770 [ 413.254427][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 413.259589][ T31] ? __switch_to_asm+0x39/0x70 [ 413.264385][ T31] ? __switch_to_asm+0x33/0x70 [ 413.269176][ T31] ? __pfx_kthread+0x10/0x10 [ 413.273804][ T31] ret_from_fork_asm+0x1a/0x30 [ 413.278625][ T31] [ 413.282062][ T31] Kernel Offset: disabled [ 413.286424][ T31] Rebooting in 86400 seconds..