last executing test programs: 7.971655848s ago: executing program 1 (id=271): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x54, 0x13, 0x507, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x1, "01040400"}]}, 0x54}}, 0x0) 7.888108582s ago: executing program 2 (id=272): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x44, &(0x7f0000000600)=ANY=[@ANYBLOB="100000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x3, 0x1ee}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0xc) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xcf0, 0x2c285829, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) brk(0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_NESTED_STATE(r3, 0xc048aeca, &(0x7f0000005580)={{0x0, 0x0, 0x80}}) syz_usb_control_io$hid(r0, 0x0, 0x0) 7.75033152s ago: executing program 1 (id=275): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0xff00}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 7.639991839s ago: executing program 1 (id=278): r0 = syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x0, 0x0, 0x4) 7.400743405s ago: executing program 1 (id=282): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) fstatat64(0xffffff9c, 0x0, 0x0, 0x900) 7.153580853s ago: executing program 3 (id=284): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x260c0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x0}, 0x10) open$dir(&(0x7f0000000000)='./file0\x00', 0x490a80, 0x0) ppoll(&(0x7f00000000c0)=[{r3, 0x856d}, {r4, 0x0, 0x64}], 0x2, 0x0, 0x0, 0x0) r5 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0xb, &(0x7f0000000040), 0x4) r6 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r6, 0x47f9, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r5, &(0x7f0000002e80)={&(0x7f0000002d40)={0x2, 0x0, @local}, 0x10, &(0x7f0000002dc0)=[{&(0x7f0000002d80)='.', 0x1}], 0x1, 0x0, 0x0, 0x1f000004}, 0x0) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000040)) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) lseek(0xffffffffffffffff, 0x3, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc532, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) 5.132643464s ago: executing program 4 (id=299): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, &(0x7f0000000180)}) stat64(0x0, &(0x7f0000000080)) r0 = socket$key(0xf, 0x3, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x220}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.log\x00', 0x1811c1, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) openat$incfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0xc0506617, &(0x7f0000000080)) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) ioctl$HIDIOCGRAWNAME(r3, 0x80404804, &(0x7f0000000100)) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x2, 0x400000000000003, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x93, 0x20, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @sadb_address={0x3, 0x7, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_x_sa2={0x2}]}, 0xe8}}, 0x0) 4.550345775s ago: executing program 4 (id=301): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, 0x0, 0x0, 0x0) 4.250798176s ago: executing program 4 (id=303): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x32, &(0x7f0000000000)={@link_local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 4.184796683s ago: executing program 1 (id=304): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000a00)={&(0x7f00000003c0)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x6}]}}}], 0x18}, 0x0) 4.009133467s ago: executing program 1 (id=306): r0 = syz_io_uring_setup(0x24fb, &(0x7f0000000000)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, &(0x7f0000000080)=0x9c) listen(r3, 0x100) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x0) accept4$vsock_stream(r5, &(0x7f0000000500)={0x28, 0x0, 0x0, @local}, 0x10, 0x80000) shutdown(r3, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x20, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r6, 0xc10c5541, &(0x7f0000000040)=0x1000000) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) syz_emit_vhci(&(0x7f0000000580)=ANY=[@ANYBLOB="03c9008015ba4907df48e677605dad04026e8ddccf6860ee9e22d806019c42aa47270a3262904fa4a0b81bac67c710028782fcce84de878988875fd16c0e5a94d493401037e44aa996f35c61013fd5ef725e2f79682fece9713ff6b20b5a0986b548e34f3b712a057eadb133023bda1085f0a06a4cc4d90785a55e8598a577c484cf312d986999999fc893484880ad494c18a9ceadf01ce1dfc3785df3e7d37ca34dd706b0c9e024ae791c7a2e22bc15131535e3a7c22abea996"], 0x84) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r6, 0xc008551a, &(0x7f0000000480)=ANY=[@ANYBLOB="070000000800000000004388"]) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) move_pages(0x0, 0x6, &(0x7f0000000440)=[&(0x7f000054a000/0x1000)=nil, &(0x7f000029b000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000136000/0x2000)=nil, &(0x7f00002db000/0x2000)=nil, &(0x7f000064b000/0x4000)=nil], &(0x7f0000000000), 0xfffffffffffffffe, 0x0) syz_io_uring_setup(0x40002627, &(0x7f0000000100)={0x0, 0x1160, 0x380d, 0x2, 0x9a}, &(0x7f0000000180), &(0x7f00000001c0)) syz_io_uring_setup(0x5e00, &(0x7f0000000380)={0x0, 0x3607, 0x4, 0x2, 0x174}, &(0x7f0000000200), &(0x7f0000000400)) socket(0x10, 0x3, 0x0) r7 = syz_io_uring_setup(0x610f, &(0x7f00000010c0)={0x0, 0xa489, 0x13580, 0x2, 0x23e}, &(0x7f0000000240), &(0x7f0000000280)) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r8, 0xaf01, 0x0) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010000a000090400000103010100092100080001220100090581", @ANYRES64], 0x0) syz_usb_control_io$hid(r9, &(0x7f00000001c0)={0x14, 0x0, 0x0, 0x0, 0x0}, 0x0) r10 = eventfd2(0x0, 0x0) dup2(r10, 0xffffffffffffffff) syz_io_uring_setup(0x235, &(0x7f0000000700)={0x0, 0x0, 0x200, 0x3, 0x0, 0x0, r7}, &(0x7f0000000000), &(0x7f0000000540)) ioctl$VHOST_SET_VRING_ERR(r8, 0x4008af22, &(0x7f0000000000)) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f00000006c0)) 3.893391545s ago: executing program 4 (id=307): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r1, 0x1, &(0x7f0000000b00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 3.533080044s ago: executing program 4 (id=311): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000407d1ed43000000000000109022400010000000009040000010300010009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0x0, "f81d36c1"}, @main, @local]}}, 0x0}, 0x0) 3.322647095s ago: executing program 0 (id=313): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) syz_emit_ethernet(0x4a, &(0x7f0000001080)={@local, @random="56460a7cef90", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x2f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, {[], {{0x0, 0x8906, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 3.226439295s ago: executing program 0 (id=314): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x30, r1, 0xaa3, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x6}]}]}, 0x30}}, 0x0) 3.160561114s ago: executing program 3 (id=315): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) io_setup(0x6, &(0x7f0000000240)=0x0) ioprio_set$pid(0x2, 0x0, 0x4004) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0xf, 0x0, 0x0, r0, 0x0, 0x8000000, 0x1ffff}]) 3.020160842s ago: executing program 0 (id=316): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x7, 0x200004}, 0x20) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000140)=0xfc) 2.952219514s ago: executing program 0 (id=317): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000c472a440b72040155ab7d29a03010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x18, &(0x7f0000000240)={0x40, 0x31, 0x2, "951b"}, 0x0, 0x0, 0x0, 0x0}) 2.910884839s ago: executing program 2 (id=318): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x1, 0x0, 0x0, {[@mss={0x2, 0x4, 0xfff}]}}}}}}}, 0x0) 2.67276502s ago: executing program 3 (id=319): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000140)) 2.554553052s ago: executing program 2 (id=320): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, &(0x7f0000000180)}) stat64(0x0, &(0x7f0000000080)) r0 = socket$key(0xf, 0x3, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.log\x00', 0x1811c1, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) openat$incfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r4, 0xc0506617, &(0x7f0000000080)) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f0000000100)) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x2, 0x400000000000003, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x93, 0x20, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @sadb_address={0x3, 0x7, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_x_sa2={0x2}]}, 0xe8}}, 0x0) 1.70729926s ago: executing program 3 (id=321): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000568000/0x2000)=nil, 0x2000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) 1.478470154s ago: executing program 4 (id=322): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='environ\x00') pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x0) 1.286095272s ago: executing program 3 (id=323): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) 1.18529143s ago: executing program 2 (id=324): sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}], 0x1, 0x4040050) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000001c0)={r1, 0x8}, &(0x7f0000000240)=0x8) 684.075375ms ago: executing program 0 (id=325): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c00000008060102000000000000000003000007050001000600000005000100070000000500010007"], 0x2c}, 0x1, 0x0, 0x0, 0x24000003}, 0x0) 496.174063ms ago: executing program 2 (id=326): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000022c0)=@newlink={0x3c, 0x10, 0x11, 0x10000000, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x40140}, [@IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x9a3c, 0xea00}}]}]}]}, 0x3c}}, 0x0) 247.268241ms ago: executing program 3 (id=327): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000002900)={0x0, 0x0, &(0x7f00000028c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000040601080000000000000000000000000500010007"], 0x1c}}, 0x0) 111.839819ms ago: executing program 0 (id=328): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x44, &(0x7f0000000600)=ANY=[@ANYBLOB="100000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x3, 0x1ee}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0xc) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xcf0, 0x2c285829, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) brk(0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_NESTED_STATE(r3, 0xc048aeca, &(0x7f0000005580)={{0x0, 0x0, 0x80}}) syz_usb_control_io$hid(r0, 0x0, 0x0) 0s ago: executing program 2 (id=329): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) kernel console output (not intermixed with test programs): erface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 66.590827][ T8] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 66.613419][ T8] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 66.630685][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.641437][ T5387] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 66.656676][ T5286] usb 5-1: Using ep0 maxpacket: 16 [ 66.668565][ T5286] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 66.681016][ T5286] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 66.697623][ T5286] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 66.707188][ T5286] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.715573][ T5286] usb 5-1: Product: syz [ 66.719874][ T5286] usb 5-1: Manufacturer: syz [ 66.725446][ T5286] usb 5-1: SerialNumber: syz [ 66.732689][ T5286] usb 5-1: config 0 descriptor?? [ 66.751270][ T5286] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 66.761762][ T5286] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 67.068994][ T5399] netlink: 4 bytes leftover after parsing attributes in process `syz.1.31'. [ 67.082970][ T5399] netlink: 12 bytes leftover after parsing attributes in process `syz.1.31'. [ 67.363830][ T5233] Bluetooth: hci1: command 0x0c1a tx timeout [ 67.372274][ T5286] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 67.381876][ T5286] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 67.523898][ T5233] Bluetooth: hci0: command 0x0c1a tx timeout [ 67.530961][ T5236] Bluetooth: hci0: Opcode 0x2046 failed: -110 [ 67.603982][ T5236] Bluetooth: hci2: command 0x0c1a tx timeout [ 67.686146][ T5236] Bluetooth: hci4: command 0x0c1a tx timeout [ 67.692578][ T5236] Bluetooth: hci3: command 0x0c1a tx timeout [ 67.853214][ T5406] process 'syz.1.35' launched '/dev/fd/3' with NULL argv: empty string added [ 67.918899][ T2879] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.999824][ T5286] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 68.015127][ T5286] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 68.028579][ T5286] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 68.039978][ T2879] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.041232][ T5286] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 68.062129][ T5286] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 68.124631][ T5286] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 68.198099][ T2879] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.290955][ T5412] fuse: Bad value for 'fd' [ 68.372742][ T5286] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 68.420401][ T5286] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 68.424160][ T2879] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.430448][ T5286] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 68.480860][ T5230] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 68.492201][ T5286] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 68.507077][ T5286] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 68.514632][ T5230] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 68.524037][ T5230] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 68.534337][ T5230] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 68.542809][ T5230] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 68.551850][ T5230] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 68.574422][ T5286] usb 5-1: USB disconnect, device number 6 [ 68.788641][ T2879] bridge_slave_1: left allmulticast mode [ 68.805210][ T2879] bridge_slave_1: left promiscuous mode [ 68.813371][ T2879] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.918333][ T2879] bridge_slave_0: left allmulticast mode [ 68.945193][ T2879] bridge_slave_0: left promiscuous mode [ 68.996660][ T2879] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.454956][ T5230] Bluetooth: hci1: command 0x0c1a tx timeout [ 69.604390][ T5230] Bluetooth: hci0: command 0x0c1a tx timeout [ 69.605879][ T5281] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 69.694359][ T5230] Bluetooth: hci2: command 0x0c1a tx timeout [ 69.764864][ T5230] Bluetooth: hci3: command 0x0c1a tx timeout [ 69.817238][ T5281] usb 2-1: Using ep0 maxpacket: 16 [ 69.830392][ T5281] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.847781][ T5281] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.860941][ T5281] usb 2-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 69.871689][ T2879] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.872613][ T5281] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.912253][ T2879] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.934327][ T5281] usb 2-1: config 0 descriptor?? [ 69.934836][ T2879] bond0 (unregistering): Released all slaves [ 70.349286][ T8] aiptek 4-1:17.0: Aiptek tried all speeds, no sane response [ 70.379915][ T5281] apple 0003:05AC:0247.0001: unknown main item tag 0xd [ 70.394893][ T8] aiptek 4-1:17.0: probe with driver aiptek failed with error -22 [ 70.413276][ T5281] apple 0003:05AC:0247.0001: unexpected long global item [ 70.433257][ T8] usb 4-1: USB disconnect, device number 2 [ 70.440947][ T5281] apple 0003:05AC:0247.0001: parse failed [ 70.450644][ T5281] apple 0003:05AC:0247.0001: probe with driver apple failed with error -22 [ 70.512807][ T2879] hsr_slave_0: left promiscuous mode [ 70.550671][ T2879] hsr_slave_1: left promiscuous mode [ 70.567496][ T5230] Bluetooth: hci4: command tx timeout [ 70.620238][ T2879] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.634564][ T2879] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.654670][ T2879] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.654702][ T2879] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.709572][ T2879] veth1_macvtap: left promiscuous mode [ 70.729670][ T81] usb 2-1: USB disconnect, device number 3 [ 70.740315][ T2879] veth0_macvtap: left promiscuous mode [ 70.752425][ T2879] veth1_vlan: left promiscuous mode [ 70.758909][ T2879] veth0_vlan: left promiscuous mode [ 70.965407][ T5282] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 71.135849][ T5282] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 71.151339][ T5282] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.159916][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 71.183339][ T5282] usb 5-1: config 0 descriptor?? [ 71.323881][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 71.333304][ T8] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 71.379000][ T8] usb 1-1: string descriptor 0 read error: -22 [ 71.387908][ T8] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 71.413016][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.523883][ T5230] Bluetooth: hci1: command 0x0c1a tx timeout [ 71.607836][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.634775][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.658549][ T2879] team0 (unregistering): Port device team_slave_1 removed [ 71.683713][ T5230] Bluetooth: hci0: command 0x0c1a tx timeout [ 71.768106][ T5230] Bluetooth: hci2: command 0x0c1a tx timeout [ 71.781494][ T2879] team0 (unregistering): Port device team_slave_0 removed [ 71.843891][ T5230] Bluetooth: hci3: command 0x0c1a tx timeout [ 72.538455][ T8] cdc_ncm 1-1:1.0: bind() failure [ 72.572939][ T8] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 72.581983][ T8] cdc_ncm 1-1:1.1: bind() failure [ 72.620077][ T8] usb 1-1: USB disconnect, device number 2 [ 72.635584][ T5415] chnl_net:caif_netlink_parms(): no params data found [ 72.643949][ T5230] Bluetooth: hci4: command tx timeout [ 72.786309][ T5415] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.798133][ T5415] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.807934][ T5415] bridge_slave_0: entered allmulticast mode [ 72.815406][ T5415] bridge_slave_0: entered promiscuous mode [ 72.829196][ T5415] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.837399][ T5415] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.844958][ T5415] bridge_slave_1: entered allmulticast mode [ 72.852994][ T5415] bridge_slave_1: entered promiscuous mode [ 72.947593][ T5415] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.949898][ T5415] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.145007][ T5415] team0: Port device team_slave_0 added [ 73.153223][ T5415] team0: Port device team_slave_1 added [ 73.193525][ T5511] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 73.328635][ T5415] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.357399][ T5415] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.412929][ T5415] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.435277][ T5415] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.444709][ T5415] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.547796][ T5415] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.635066][ T5415] hsr_slave_0: entered promiscuous mode [ 73.642288][ T5415] hsr_slave_1: entered promiscuous mode [ 73.658222][ T5415] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.671277][ T5415] Cannot create hsr debugfs directory [ 73.743830][ T8] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 73.764188][ T5230] Bluetooth: hci0: command 0x0c1a tx timeout [ 73.804272][ T5286] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 73.906140][ T8] usb 4-1: config 0 has no interfaces? [ 73.946665][ T8] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 73.959243][ T5286] usb 2-1: Using ep0 maxpacket: 8 [ 73.961765][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.985781][ T8] usb 4-1: config 0 descriptor?? [ 73.992320][ T5286] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 74.033741][ T5286] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 74.072209][ T5286] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 74.103326][ T5286] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 74.130892][ T5286] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 74.157183][ T5286] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 74.206791][ T5286] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 74.282809][ T5286] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 74.320465][ T1848] usb 4-1: USB disconnect, device number 3 [ 74.323896][ T5286] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 74.337746][ T5282] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -22 [ 74.354893][ T5286] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 74.369896][ T5282] usb 5-1: USB disconnect, device number 7 [ 74.402013][ T5286] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 74.410089][ T5286] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 74.435688][ T5286] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 74.448473][ T5286] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 74.465662][ T5286] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 74.484209][ T5286] usb 2-1: string descriptor 0 read error: -22 [ 74.490548][ T5286] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 74.512802][ T5286] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.537602][ T5286] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 74.723736][ T5230] Bluetooth: hci4: command tx timeout [ 74.742961][ T5415] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.763369][ T5415] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.776503][ T5415] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.792483][ T5415] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.997414][ T5415] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.015911][ T5415] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.090259][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.097410][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.128929][ T5557] input: syz1 as /devices/virtual/input/input6 [ 75.163489][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.170619][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.275181][ T5282] usb 2-1: USB disconnect, device number 4 [ 75.282124][ T5552] usb 2-1: Couldn't submit interrupt_out_urb -19 [ 75.370552][ T5415] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 75.386277][ T5415] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.506045][ T5415] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.640125][ T5415] veth0_vlan: entered promiscuous mode [ 75.724791][ T5415] veth1_vlan: entered promiscuous mode [ 75.747933][ T5415] veth0_macvtap: entered promiscuous mode [ 75.757082][ T5415] veth1_macvtap: entered promiscuous mode [ 75.774119][ T5415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.784800][ T5415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.794839][ T5415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.805442][ T5415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.817141][ T5415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.827667][ T5415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.837596][ T5415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.848190][ T5415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.859508][ T5415] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.903317][ T5415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.916593][ T5415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.944561][ T5415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.960731][ T5415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.972588][ T5415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.992247][ T5415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.023813][ T5415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.040773][ T5415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.052476][ T5415] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.124499][ T5415] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.133502][ T5415] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.142966][ T5415] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.177315][ T5415] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.363729][ T8] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 76.407475][ T2920] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.435134][ T2920] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.525856][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 76.536408][ T2920] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.556542][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.570998][ T2920] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.589230][ T8] usb 4-1: config 0 has no interfaces? [ 76.612889][ T8] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 76.662934][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.704274][ T8] usb 4-1: config 0 descriptor?? [ 76.734748][ T9] cfg80211: failed to load regulatory.db [ 76.804046][ T5230] Bluetooth: hci4: command tx timeout [ 76.973877][ T5593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.075048][ T5593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.119459][ T5593] team_slave_0: entered promiscuous mode [ 77.125364][ T5593] team_slave_1: entered promiscuous mode [ 77.154210][ T5593] team_slave_0: left promiscuous mode [ 77.159715][ T5593] team_slave_1: left promiscuous mode [ 77.352435][ T9] usb 4-1: USB disconnect, device number 4 [ 77.515194][ T5294] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 77.715302][ T5294] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 77.746192][ T5294] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 77.828102][ T5294] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.864750][ T5294] usb 1-1: config 0 descriptor?? [ 77.876323][ T5294] pwc: Askey VC010 type 2 USB webcam detected. [ 78.352208][ T5294] pwc: send_video_command error -71 [ 78.363737][ T5294] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 78.372077][ T5294] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 78.434455][ T8] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 78.462538][ T5294] usb 1-1: USB disconnect, device number 3 [ 78.625530][ T8] usb 5-1: config 200 has an invalid descriptor of length 163, skipping remainder of the config [ 78.680804][ T8] usb 5-1: config 200 has 0 interfaces, different from the descriptor's value: 1 [ 78.737038][ T8] usb 5-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00 [ 78.766801][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.033669][ T5282] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 79.060865][ T8] usb 5-1: string descriptor 0 read error: -71 [ 79.075440][ T8] usb 5-1: USB disconnect, device number 8 [ 79.194816][ T5282] usb 2-1: Using ep0 maxpacket: 16 [ 79.212173][ T5282] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.232402][ T5282] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.254740][ T5282] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 79.273625][ T5282] usb 2-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 79.289393][ T5230] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 79.292313][ T5282] usb 2-1: Product: syz [ 79.299171][ T5235] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 79.312543][ T5282] usb 2-1: Manufacturer: syz [ 79.342436][ T5282] usb 2-1: config 0 descriptor?? [ 79.483740][ T5235] usb 3-1: Using ep0 maxpacket: 8 [ 79.496353][ T5235] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 79.517002][ T5235] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 79.544023][ T5235] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 79.565298][ T5235] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 79.612802][ T5235] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 79.650916][ T5235] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.780244][ T5282] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0xd [ 79.869597][ T5282] kovaplus 0003:1E7D:2D50.0002: hidraw0: USB HID v0.07 Device [syz syz] on usb-dummy_hcd.1-1/input0 [ 79.934082][ T5235] usb 3-1: GET_CAPABILITIES returned 0 [ 79.955754][ T5235] usbtmc 3-1:16.0: can't read capabilities [ 80.367306][ T81] usb 3-1: USB disconnect, device number 2 [ 80.388957][ T5660] usbtmc 3-1:16.0: usb_control_msg returned -71 [ 80.484332][ T5235] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 80.633895][ T5282] kovaplus 0003:1E7D:2D50.0002: couldn't init struct kovaplus_device [ 80.655996][ T5235] usb 5-1: config 108 has an invalid interface number: 85 but max is 0 [ 80.664403][ T5235] usb 5-1: config 108 has no interface number 0 [ 80.670687][ T5235] usb 5-1: config 108 interface 85 has no altsetting 0 [ 80.672669][ T5282] kovaplus 0003:1E7D:2D50.0002: couldn't install mouse [ 80.685348][ T5235] usb 5-1: language id specifier not provided by device, defaulting to English [ 80.696385][ T5235] usb 5-1: New USB device found, idVendor=12d1, idProduct=c187, bcdDevice=2b.99 [ 80.705803][ T5235] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.713875][ T5235] usb 5-1: Product: syz [ 80.718110][ T5235] usb 5-1: Manufacturer: 뫄ǹౘ噘꿴ⷜ縝䀼颤碅ﰊⳮោ͡퇂魾űㅟ뭆୼ࠒ쌟 [ 80.729205][ T5235] usb 5-1: SerialNumber: syz [ 80.890734][ T5282] kovaplus 0003:1E7D:2D50.0002: probe with driver kovaplus failed with error -71 [ 81.085591][ T5282] usb 2-1: USB disconnect, device number 5 [ 81.169275][ T5235] option 5-1:108.85: GSM modem (1-port) converter detected [ 81.180042][ T5235] usb 5-1: USB disconnect, device number 9 [ 81.194849][ T5235] option 5-1:108.85: device disconnected [ 81.404909][ T8] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 81.584309][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 81.595662][ T8] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 81.614243][ T8] usb 1-1: config 0 interface 0 altsetting 8 has 6 endpoint descriptors, different from the interface descriptor's value: 12 [ 81.633927][ T8] usb 1-1: config 0 interface 0 has no altsetting 0 [ 81.642578][ T8] usb 1-1: New USB device found, idVendor=1199, idProduct=0027, bcdDevice=1e.57 [ 81.671290][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.753747][ T8] usb 1-1: Product: syz [ 81.781976][ T8] usb 1-1: Manufacturer: syz [ 81.798609][ T8] usb 1-1: SerialNumber: syz [ 81.824461][ T8] usb 1-1: config 0 descriptor?? [ 81.838953][ T8] sierra 1-1:0.0: Sierra USB modem converter detected [ 82.508825][ T5705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.569571][ T5705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.718806][ T8] usb 1-1: Sierra USB modem converter now attached to ttyUSB0 [ 82.741810][ T8] usb 1-1: Sierra USB modem converter now attached to ttyUSB1 [ 83.334707][ T5738] team_slave_0: entered promiscuous mode [ 83.340524][ T5738] team_slave_1: entered promiscuous mode [ 83.374804][ T5738] vlan2: entered promiscuous mode [ 83.380830][ T5738] team0: entered promiscuous mode [ 83.382651][ T8] usb 1-1: USB disconnect, device number 4 [ 83.395857][ T5738] team0: Device vlan2 is already an upper device of the team interface [ 83.407540][ T8] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 83.421601][ T5738] team0: left promiscuous mode [ 83.435657][ T5738] team_slave_0: left promiscuous mode [ 83.435850][ T8] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 83.441136][ T5738] team_slave_1: left promiscuous mode [ 83.451108][ T8] sierra 1-1:0.0: device disconnected [ 83.736467][ T5724] ALSA: mixer_oss: invalid OSS volume 'verification' [ 83.771100][ T5724] ALSA: mixer_oss: invalid OSS volume 'stack' [ 83.783797][ T5724] ALSA: mixer_oss: invalid OSS volume '' [ 84.224008][ T8] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 84.290662][ T5756] netlink: 28 bytes leftover after parsing attributes in process `syz.3.85'. [ 84.415988][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 84.448111][ T8] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 84.485201][ T5235] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 84.543748][ T8] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 84.552498][ T8] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 84.583841][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 84.603632][ T8] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 84.622048][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 84.635347][ T8] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 84.644668][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.667794][ T8] usb 3-1: config 0 descriptor?? [ 84.746331][ T5761] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 84.788959][ T5230] Bluetooth: hci2: unexpected event for opcode 0x0c12 [ 84.820299][ T5761] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 84.850177][ T5757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.860805][ T5757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.903208][ T5235] usb 2-1: unable to get BOS descriptor or descriptor too short [ 84.913033][ T8] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 84.927233][ T29] audit: type=1326 audit(1728579642.583:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5745 comm="syz.2.81" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f03579 code=0x0 [ 84.948233][ C0] vkms_vblank_simulate: vblank timer overrun [ 84.966396][ T5235] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 84.984005][ T5235] usb 2-1: can't read configurations, error -71 [ 85.117616][ C1] usblp0: nonzero read bulk status received: -71 [ 85.125141][ T5282] usb 3-1: USB disconnect, device number 3 [ 85.553685][ T5281] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 85.703689][ T5281] usb 5-1: Using ep0 maxpacket: 32 [ 85.712614][ T5281] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 85.723329][ T5281] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.736009][ T5281] usb 5-1: config 0 descriptor?? [ 85.745796][ T5281] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 85.823819][ T5235] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 85.985480][ T5235] usb 2-1: config 0 has no interfaces? [ 85.992217][ T5235] usb 2-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 86.001390][ T5235] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=23 [ 86.027215][ T5235] usb 2-1: SerialNumber: syz [ 86.044527][ T5235] usb 2-1: config 0 descriptor?? [ 86.473682][ T5235] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 86.623717][ T5235] usb 4-1: Using ep0 maxpacket: 8 [ 86.630251][ T5235] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 86.642302][ T5235] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 86.654428][ T5235] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 86.665508][ T5235] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 86.675354][ T5235] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 86.690896][ T5235] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 86.700188][ T5235] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 86.708316][ T5235] usb 4-1: Product: syz [ 86.712503][ T5235] usb 4-1: Manufacturer: syz [ 86.717223][ T5235] usb 4-1: SerialNumber: syz [ 86.732774][ T5235] usb 4-1: config 0 descriptor?? [ 86.887934][ T5745] usblp0: removed [ 86.955697][ T5235] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 86.962811][ T5235] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 87.171049][ T5235] radio-si470x 4-1:0.0: software version 0, hardware version 0 [ 87.196109][ T5235] radio-si470x 4-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 87.227048][ T5235] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 87.382420][ T5281] gspca_vc032x: reg_w err -71 [ 87.396306][ T5281] gspca_vc032x: I2c Bus Busy Wait 00 [ 87.401955][ T5281] gspca_vc032x: I2c Bus Busy Wait 00 [ 87.408540][ T5281] gspca_vc032x: I2c Bus Busy Wait 00 [ 87.414197][ T5281] gspca_vc032x: I2c Bus Busy Wait 00 [ 87.420875][ T5281] gspca_vc032x: I2c Bus Busy Wait 00 [ 87.427042][ T5281] gspca_vc032x: I2c Bus Busy Wait 00 [ 87.433138][ T5281] gspca_vc032x: I2c Bus Busy Wait 00 [ 87.442575][ T5281] gspca_vc032x: I2c Bus Busy Wait 00 [ 87.448379][ T5281] gspca_vc032x: I2c Bus Busy Wait 00 [ 87.454036][ T5281] gspca_vc032x: I2c Bus Busy Wait 00 [ 87.459445][ T5281] gspca_vc032x: I2c Bus Busy Wait 00 [ 87.465026][ T5281] gspca_vc032x: I2c Bus Busy Wait 00 [ 87.470471][ T5281] gspca_vc032x: I2c Bus Busy Wait 00 [ 87.476572][ T5281] gspca_vc032x: I2c Bus Busy Wait 00 [ 87.482007][ T5281] gspca_vc032x: I2c Bus Busy Wait 00 [ 87.487576][ T5281] gspca_vc032x: I2c Bus Busy Wait 00 [ 87.493080][ T5281] gspca_vc032x: I2c Bus Busy Wait 00 [ 87.499204][ T5281] gspca_vc032x: I2c Bus Busy Wait 00 [ 87.504696][ T5281] gspca_vc032x: Unknown sensor... [ 87.510121][ T5281] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 87.524384][ T5281] usb 5-1: USB disconnect, device number 10 [ 87.533674][ T1848] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 87.693699][ T1848] usb 3-1: Using ep0 maxpacket: 8 [ 87.703837][ T5235] radio-si470x 4-1:0.0: submitting int urb failed (-90) [ 87.714276][ T1848] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.729530][ T1848] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.739858][ T1848] usb 3-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 87.750302][ T1848] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.760908][ T1848] usb 3-1: config 0 descriptor?? [ 88.183216][ T1848] smartjoyplus 0003:6666:8804.0003: hidraw0: USB HID v0.00 Device [HID 6666:8804] on usb-dummy_hcd.2-1/input0 [ 88.198782][ T1848] smartjoyplus 0003:6666:8804.0003: Force feedback for SmartJoy PLUS PS2/USB adapter [ 88.402797][ T5282] usb 3-1: USB disconnect, device number 4 [ 88.473714][ T5286] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 88.537359][ T81] usb 2-1: USB disconnect, device number 7 [ 88.596841][ T5235] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 88.614873][ T5235] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 88.639101][ T5235] usb 4-1: USB disconnect, device number 5 [ 88.639773][ T5286] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 88.658586][ T5286] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 88.672640][ T5286] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 88.684821][ T5286] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 88.695299][ T5286] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.707155][ T5798] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 88.799937][ T5803] sctp: [Deprecated]: syz.4.98 (pid 5803) Use of struct sctp_assoc_value in delayed_ack socket option. [ 88.799937][ T5803] Use struct sctp_sack_info instead [ 88.818924][ T5230] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 88.828206][ T5230] Bluetooth: hci2: Injecting HCI hardware error event [ 88.837255][ T5230] Bluetooth: hci2: hardware error 0x00 [ 88.983889][ T81] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 89.143716][ T81] usb 2-1: Using ep0 maxpacket: 8 [ 89.150869][ T81] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 89.160562][ T81] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.171383][ T5286] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 89.182298][ T5282] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 89.201607][ T5286] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input7 [ 89.215242][ T81] usb 2-1: config 0 has no interfaces? [ 89.237258][ T81] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 89.243723][ T1848] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 89.261134][ T81] usb 2-1: New USB device strings: Mfr=228, Product=255, SerialNumber=0 [ 89.295766][ T5286] usb 1-1: USB disconnect, device number 5 [ 89.301656][ C1] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 89.319200][ T81] usb 2-1: Product: syz [ 89.324252][ T81] usb 2-1: Manufacturer: syz [ 89.348936][ T81] usb 2-1: config 0 descriptor?? [ 89.393641][ T5282] usb 5-1: Using ep0 maxpacket: 16 [ 89.413525][ T5282] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.421814][ T1848] usb 3-1: config 0 has no interfaces? [ 89.439226][ T1848] usb 3-1: New USB device found, idVendor=19d2, idProduct=0040, bcdDevice=85.1f [ 89.449540][ T1848] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.459560][ T1848] usb 3-1: Product: syz [ 89.466857][ T1848] usb 3-1: Manufacturer: syz [ 89.475364][ T5282] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.481843][ T1848] usb 3-1: SerialNumber: syz [ 89.490705][ T5282] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 89.501250][ T5282] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.515399][ T1848] usb 3-1: config 0 descriptor?? [ 89.538981][ T5282] usb 5-1: config 0 descriptor?? [ 89.618649][ T5801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.629177][ T5801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.661957][ T5801] team0: entered promiscuous mode [ 89.672707][ T5801] team_slave_0: entered promiscuous mode [ 89.678875][ T5801] team_slave_1: entered promiscuous mode [ 89.692277][ T5801] team0: left promiscuous mode [ 89.697195][ T5801] team_slave_0: left promiscuous mode [ 89.702841][ T5801] team_slave_1: left promiscuous mode [ 89.761021][ T5807] QAT: failed to copy from user cfg_data. [ 89.784170][ T5807] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.100'. [ 89.815170][ T5807] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 89.861651][ T5806] dccp_close: ABORT with 548 bytes unread [ 89.888478][ T1848] usb 3-1: USB disconnect, device number 5 [ 89.924173][ T5286] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 89.932745][ T5281] usb 2-1: USB disconnect, device number 8 [ 89.957326][ T5282] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 89.964611][ T5282] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 89.971585][ T5282] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 89.978848][ T5282] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 89.985955][ T5282] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 89.998520][ T5282] cp2112 0003:10C4:EA90.0004: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 90.095406][ T5286] usb 4-1: Using ep0 maxpacket: 16 [ 90.103878][ T5286] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.119021][ T5286] usb 4-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 90.128540][ T5286] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.136687][ T1171] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 90.146678][ T5286] usb 4-1: Product: syz [ 90.150890][ T5286] usb 4-1: Manufacturer: syz [ 90.155761][ T5286] usb 4-1: SerialNumber: syz [ 90.162718][ T5286] usb 4-1: config 0 descriptor?? [ 90.178517][ T5282] cp2112 0003:10C4:EA90.0004: error requesting version [ 90.190697][ T5282] cp2112 0003:10C4:EA90.0004: probe with driver cp2112 failed with error -5 [ 90.326506][ T1171] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 90.335463][ T1171] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 90.345932][ T1171] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 90.356171][ T1171] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 90.368293][ T1171] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 90.381536][ T1171] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 90.390883][ T1171] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 90.399722][ T1171] usb 1-1: Product: syz [ 90.404872][ T1171] usb 1-1: Manufacturer: syz [ 90.419050][ T1171] cdc_wdm 1-1:1.0: skipping garbage [ 90.426919][ T1171] cdc_wdm 1-1:1.0: skipping garbage [ 90.436319][ T1171] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 90.442302][ T1171] cdc_wdm 1-1:1.0: Unknown control protocol [ 90.467814][ T1848] usb 5-1: USB disconnect, device number 11 [ 90.616710][ T5813] QAT: failed to copy from user cfg_data. [ 90.652318][ T5813] fuse: Bad value for 'fd' [ 90.657336][ T5286] usb 4-1: Found UVC 0.00 device syz (045e:0721) [ 90.657386][ T5286] usb 4-1: No valid video chain found. [ 90.862455][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 90.869297][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 90.876840][ T5281] usb 1-1: USB disconnect, device number 6 [ 90.877511][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 90.889296][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 90.895397][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 90.904584][ T5826] cdc_wdm 1-1:1.0: Tx URB error: -19 [ 90.920469][ T5230] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 90.987838][ T1848] usb 4-1: USB disconnect, device number 6 [ 91.433755][ T1171] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 91.493710][ T5281] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 91.615512][ T1171] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 91.653676][ T5281] usb 2-1: Using ep0 maxpacket: 8 [ 91.667987][ T5281] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 91.680345][ T1171] usb 5-1: config 0 has no interface number 0 [ 91.687810][ T1171] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 91.698305][ T1171] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.713769][ T5281] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 91.729277][ T1171] usb 5-1: config 0 descriptor?? [ 91.741328][ T1171] usb 5-1: selecting invalid altsetting 1 [ 91.750138][ T1171] dvb_ttusb_budget: ttusb_init_controller: error [ 91.757844][ T1171] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 91.773691][ T5281] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 91.804188][ T5281] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 91.855841][ T1171] DVB: Unable to find symbol cx22700_attach() [ 91.878875][ T5281] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 91.878910][ T5281] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.972228][ T1171] DVB: Unable to find symbol tda10046_attach() [ 91.972242][ T1171] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 92.169616][ T5843] netlink: 36 bytes leftover after parsing attributes in process `syz.1.107'. [ 92.195368][ T5843] netlink: 16 bytes leftover after parsing attributes in process `syz.1.107'. [ 92.220184][ T5843] netlink: 36 bytes leftover after parsing attributes in process `syz.1.107'. [ 92.233181][ T5843] netlink: 36 bytes leftover after parsing attributes in process `syz.1.107'. [ 92.267279][ T5281] usb 2-1: GET_CAPABILITIES returned 0 [ 92.286107][ T5281] usbtmc 2-1:16.0: can't read capabilities [ 92.382135][ T5281] usb 5-1: USB disconnect, device number 12 [ 92.479398][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 92.488830][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 92.497940][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 92.507035][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 92.576743][ T29] audit: type=1326 audit(1728579650.253:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5847 comm="syz.3.110" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 92.631745][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 92.640897][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 92.649998][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 92.659083][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 92.668153][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 92.684995][ T29] audit: type=1326 audit(1728579650.253:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5847 comm="syz.3.110" exe="/root/syz-executor" sig=0 arch=40000003 syscall=229 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 92.743059][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 92.752184][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 92.795556][ T29] audit: type=1326 audit(1728579650.253:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5847 comm="syz.3.110" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 92.819065][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 92.828207][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 92.837322][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 92.846435][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 92.855544][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 92.866595][ T29] audit: type=1326 audit(1728579650.253:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5847 comm="syz.3.110" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 92.868776][ T5281] usb 2-1: USB disconnect, device number 9 [ 92.888352][ T29] audit: type=1326 audit(1728579650.253:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5847 comm="syz.3.110" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 92.888392][ T29] audit: type=1326 audit(1728579650.253:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5847 comm="syz.3.110" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 92.888422][ T29] audit: type=1326 audit(1728579650.253:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5847 comm="syz.3.110" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 92.888452][ T29] audit: type=1326 audit(1728579650.263:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5847 comm="syz.3.110" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 92.888481][ T29] audit: type=1326 audit(1728579650.263:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5847 comm="syz.3.110" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 92.888508][ T29] audit: type=1326 audit(1728579650.263:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5847 comm="syz.3.110" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 92.916058][ C0] vkms_vblank_simulate: vblank timer overrun [ 92.981672][ C0] vkms_vblank_simulate: vblank timer overrun [ 93.045029][ T5282] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 93.216867][ T5282] usb 4-1: Using ep0 maxpacket: 8 [ 93.223671][ T5282] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.239277][ T5282] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 93.272602][ T5282] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 93.312894][ T5282] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 93.331247][ T5282] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 93.349995][ T5282] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 93.359522][ T5282] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 93.379549][ T5282] usb 4-1: Product: syz [ 93.390105][ T5282] usb 4-1: Manufacturer: syz [ 93.401893][ T5282] usb 4-1: SerialNumber: syz [ 93.414525][ T5282] usb 4-1: config 0 descriptor?? [ 93.626951][ T5282] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 93.657589][ T5282] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 93.827384][ T5282] radio-si470x 4-1:0.0: software version 0, hardware version 0 [ 93.859696][ T5282] radio-si470x 4-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 93.877703][ T5282] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 94.283352][ T1171] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 94.413813][ T5282] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -110 [ 94.485569][ T5282] radio-si470x 4-1:0.0: submitting int urb failed (-90) [ 94.504609][ T5282] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -32 [ 94.513041][ T5282] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 94.540942][ T1171] usb 3-1: device descriptor read/64, error -71 [ 94.783664][ T1171] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 94.925957][ T1171] usb 3-1: device descriptor read/64, error -71 [ 95.114788][ T1171] usb usb3-port1: attempt power cycle [ 95.137852][ T5882] capability: warning: `syz.4.117' uses 32-bit capabilities (legacy support in use) [ 95.473857][ T1171] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 95.529812][ T1171] usb 3-1: device descriptor read/8, error -71 [ 95.793661][ T1171] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 95.803715][ T5281] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 95.823662][ T1848] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 95.864078][ T1171] usb 3-1: device descriptor read/8, error -71 [ 95.954199][ T5281] usb 5-1: Using ep0 maxpacket: 32 [ 95.983921][ T1171] usb usb3-port1: unable to enumerate USB device [ 95.995986][ T5281] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 96.004367][ T1848] usb 2-1: Using ep0 maxpacket: 16 [ 96.011332][ T1848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.030986][ T5281] usb 5-1: config 0 has no interface number 0 [ 96.061354][ T1848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.086853][ T5281] usb 5-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=7d.12 [ 96.106282][ T5281] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.129617][ T1848] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 96.157011][ T5281] usb 5-1: Product: syz [ 96.163950][ T5281] usb 5-1: Manufacturer: syz [ 96.173982][ T1848] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 96.187385][ T5281] usb 5-1: SerialNumber: syz [ 96.201396][ T1848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.212021][ T5281] usb 5-1: config 0 descriptor?? [ 96.238789][ T1848] usb 2-1: config 0 descriptor?? [ 96.682030][ T1848] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 96.710767][ T5885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.764980][ T5885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.778631][ T1848] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0005/input/input8 [ 96.860613][ T1848] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 97.139878][ T5281] usb 2-1: USB disconnect, device number 10 [ 97.207130][ T1848] usb 4-1: USB disconnect, device number 7 [ 97.424048][ T5894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.461027][ T5894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.503766][ T1171] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 97.539967][ T5282] usb 5-1: USB disconnect, device number 13 [ 97.546661][ T5282] f81534a_ctrl 5-1:0.88: failed to set register 0x116: -19 [ 97.558783][ T5282] f81534a_ctrl 5-1:0.88: failed to enable ports: -19 [ 97.623822][ T1848] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 97.664534][ T1171] usb 3-1: Using ep0 maxpacket: 8 [ 97.672250][ T1171] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 97.698938][ T1171] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 97.720321][ T1171] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.733076][ T1171] usb 3-1: Product: syz [ 97.739332][ T1171] usb 3-1: Manufacturer: syz [ 97.746965][ T5230] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 97.755520][ T1171] usb 3-1: SerialNumber: syz [ 97.777589][ T1848] usb 4-1: config index 0 descriptor too short (expected 4114, got 18) [ 97.799485][ T1848] usb 4-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 97.804294][ T1171] usb 3-1: config 0 descriptor?? [ 97.819940][ T1171] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 97.853950][ T1848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.862104][ T1848] usb 4-1: Product: syz [ 97.866722][ T1848] usb 4-1: Manufacturer: syz [ 97.871516][ T1848] usb 4-1: SerialNumber: syz [ 97.890027][ T1848] usb 4-1: config 0 descriptor?? [ 98.083834][ T5294] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 98.313666][ T5294] usb 2-1: Using ep0 maxpacket: 8 [ 98.335267][ T5896] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.121'. [ 98.362817][ T1848] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 98.401605][ T5907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.413804][ T1848] asix 4-1:0.0: probe with driver asix failed with error -32 [ 98.514375][ T5294] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 98.525386][ T5294] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 98.540922][ T5294] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.554250][ T5294] usb 2-1: config 0 descriptor?? [ 98.599624][ T5907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.624945][ T1171] gspca_zc3xx: reg_w_i err -110 [ 98.770881][ T5294] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 98.908570][ T5282] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 98.963921][ T5286] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 99.083963][ T5282] usb 1-1: Using ep0 maxpacket: 32 [ 99.115527][ T5286] usb 5-1: Using ep0 maxpacket: 8 [ 99.136794][ T5286] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.223984][ T1171] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 99.254095][ T5282] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 99.278793][ T1171] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 99.292023][ T5286] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.303775][ T5282] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 99.332632][ T5286] usb 5-1: New USB device found, idVendor=056a, idProduct=0333, bcdDevice= 0.00 [ 99.343967][ T1171] usb 3-1: USB disconnect, device number 10 [ 99.387859][ T5282] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 99.435786][ T5286] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.445919][ T5282] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 99.456736][ T5286] usb 5-1: config 0 descriptor?? [ 99.462052][ T5282] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.481411][ T5282] usb 1-1: config 0 descriptor?? [ 99.488603][ T5903] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 99.518812][ T5282] hub 1-1:0.0: USB hub found [ 99.722901][ T5282] hub 1-1:0.0: 2 ports detected [ 99.934147][ T5282] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 99.947143][ T5282] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 99.965129][ T5282] usbhid 1-1:0.0: can't add hid device: -71 [ 99.972488][ T5282] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 100.009871][ T5282] usb 1-1: USB disconnect, device number 7 [ 100.037810][ T5286] wacom 0003:056A:0333.0006: hidraw0: USB HID v0.00 Device [HID 056a:0333] on usb-dummy_hcd.4-1/input0 [ 100.390982][ T5286] usb 4-1: USB disconnect, device number 8 [ 100.481370][ T5282] usb 2-1: USB disconnect, device number 11 [ 100.489138][ T5282] iowarrior 2-1:0.0: I/O-Warror #0 now disconnected [ 100.736867][ T5925] netlink: 'syz.1.128': attribute type 4 has an invalid length. [ 100.810464][ T5925] netlink: 'syz.1.128': attribute type 4 has an invalid length. [ 101.783649][ T5286] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 101.856270][ T5281] usb 5-1: USB disconnect, device number 14 [ 101.948240][ T5286] usb 3-1: Using ep0 maxpacket: 8 [ 101.985694][ T5286] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.999639][ T5286] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 102.011314][ T5286] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 102.022280][ T5286] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 102.032366][ T5286] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 102.118615][ T5286] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 102.128092][ T5286] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 102.137654][ T5286] usb 3-1: Product: syz [ 102.143197][ T5286] usb 3-1: Manufacturer: syz [ 102.148458][ T5286] usb 3-1: SerialNumber: syz [ 102.176268][ T5286] usb 3-1: config 0 descriptor?? [ 102.426469][ T5286] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 102.433351][ T5286] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 102.458484][ T5281] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 102.518036][ T5954] netlink: 12 bytes leftover after parsing attributes in process `syz.3.135'. [ 102.533949][ T1848] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 102.623764][ T5281] usb 5-1: Using ep0 maxpacket: 8 [ 102.638791][ T5281] usb 5-1: New USB device found, idVendor=1ae7, idProduct=0525, bcdDevice=73.af [ 102.647416][ T5286] radio-si470x 3-1:0.0: software version 0, hardware version 0 [ 102.665408][ T5286] radio-si470x 3-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 102.673600][ T5281] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.695770][ T5281] usb 5-1: Product: syz [ 102.700071][ T5281] usb 5-1: Manufacturer: syz [ 102.704966][ T1848] usb 2-1: Using ep0 maxpacket: 8 [ 102.718241][ T5281] usb 5-1: SerialNumber: syz [ 102.726182][ T1848] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 102.741178][ T1848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.749348][ T5281] usb 5-1: config 0 descriptor?? [ 102.759959][ T5286] radio-si470x 3-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 102.788665][ T5281] HFC-S_USB 5-1:0.0: probe with driver HFC-S_USB failed with error -5 [ 102.803024][ T1848] usb 2-1: Product: syz [ 102.811139][ T1848] usb 2-1: Manufacturer: syz [ 102.849182][ T1848] usb 2-1: SerialNumber: syz [ 102.928869][ T1848] usb 2-1: config 0 descriptor?? [ 102.989537][ T1171] usb 5-1: USB disconnect, device number 15 [ 103.203807][ T5282] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 103.222726][ T1848] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 103.308664][ T5286] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -110 [ 103.339561][ T5286] radio-si470x 3-1:0.0: submitting int urb failed (-90) [ 103.380232][ T5286] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -32 [ 103.451307][ T5286] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -22 [ 103.489461][ T5282] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.648682][ T5282] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.670553][ T5282] usb 1-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 103.765296][ T5282] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.829604][ T5282] usb 1-1: config 0 descriptor?? [ 105.912347][ T1848] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 105.946721][ T1848] usb 2-1: USB disconnect, device number 12 [ 106.268324][ T5282] usbhid 1-1:0.0: can't add hid device: -71 [ 106.287176][ T5282] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 106.317070][ T5281] usb 3-1: USB disconnect, device number 11 [ 106.379486][ T5282] usb 1-1: USB disconnect, device number 8 [ 106.441270][ T6038] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 106.703698][ T5281] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 106.853660][ T5281] usb 3-1: Using ep0 maxpacket: 8 [ 106.872834][ T5281] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 106.883912][ T5281] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 106.896736][ T5281] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 106.908577][ T5281] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 106.919855][ T5281] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 106.938835][ T5281] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 106.946533][ T5281] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 106.959054][ T5281] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 106.971588][ T5281] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 107.016825][ T5281] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 107.052671][ T5281] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 107.060882][ T5281] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 107.160167][ T5281] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 107.231077][ T6049] syz.0.148 uses obsolete (PF_INET,SOCK_PACKET) [ 107.276214][ T5281] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 107.382970][ T5281] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 107.450882][ T6056] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 107.473186][ T5281] usb 3-1: string descriptor 0 read error: -22 [ 107.479623][ T5281] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 107.488894][ T5281] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.529351][ T5281] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 107.692928][ T5230] Bluetooth: hci0: unexpected event for opcode 0x0c03 [ 107.722859][ T5230] Bluetooth: hci0: unexpected cc 0x1407 length: 100 > 9 [ 107.730391][ T5230] Bluetooth: hci0: unexpected event for opcode 0x1407 [ 108.263664][ T1171] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 108.303324][ T8] usb 3-1: USB disconnect, device number 12 [ 108.310199][ T6070] usb 3-1: Couldn't submit interrupt_out_urb -19 [ 108.453901][ T1171] usb 5-1: Using ep0 maxpacket: 8 [ 108.470346][ T1171] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.520606][ T1171] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 108.574012][ T1171] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 108.594655][ T1171] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 108.607724][ T5230] Bluetooth: hci0: unexpected event 0x01 length: 12 > 1 [ 108.615015][ T1171] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 108.677472][ T1171] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 108.691351][ T1171] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 108.707484][ T1171] usb 5-1: Product: syz [ 108.724144][ T1171] usb 5-1: Manufacturer: syz [ 108.728860][ T1171] usb 5-1: SerialNumber: syz [ 108.742294][ T6087] vivid-002: disconnect [ 108.760159][ T1171] usb 5-1: config 0 descriptor?? [ 108.971812][ T6090] bond0: (slave team0): Error: Device can not be enslaved while up [ 108.995444][ T1171] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 109.012940][ T1171] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 109.075188][ T6093] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 109.203455][ T1171] radio-si470x 5-1:0.0: software version 0, hardware version 0 [ 109.234636][ T6094] netlink: 4 bytes leftover after parsing attributes in process `syz.0.161'. [ 109.249909][ T1171] radio-si470x 5-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 109.282845][ T1171] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 109.378450][ T6094] netlink: 24 bytes leftover after parsing attributes in process `syz.0.161'. [ 109.433813][ T6095] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 109.833934][ T1171] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -110 [ 109.853744][ T6086] vivid-002: reconnect [ 109.872961][ T1171] radio-si470x 5-1:0.0: submitting int urb failed (-90) [ 109.880138][ T5294] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 109.904433][ T1171] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -32 [ 109.913026][ T1171] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22 [ 110.085572][ T5294] usb 1-1: New USB device found, idVendor=0499, idProduct=1035, bcdDevice=56.12 [ 110.097128][ T5294] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.135885][ T5294] usb 1-1: config 0 descriptor?? [ 110.159623][ T5294] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 110.260704][ T5294] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 110.388983][ T1598] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.482318][ T5286] usb 1-1: USB disconnect, device number 9 [ 110.556831][ T1598] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.711902][ T1598] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.820086][ T6116] netlink: 4 bytes leftover after parsing attributes in process `syz.0.180'. [ 110.836528][ T1598] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.876059][ T6116] ip6gretap0: entered promiscuous mode [ 110.892430][ T6116] ip6gretap0: left promiscuous mode [ 110.955738][ T5236] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 110.967749][ T5236] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 110.976315][ T5236] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 110.994395][ T5236] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 111.005114][ T5236] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 111.006166][ T6120] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 111.022415][ T5236] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 111.044683][ T6120] batman_adv: batadv0: Adding interface: ip6gretap1 [ 111.070101][ T6120] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.128215][ T6120] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 111.166836][ T6122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.180'. [ 111.213970][ T6122] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.222810][ T6122] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.233514][ T6122] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.241686][ T6122] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.250421][ T6122] batman_adv: batadv0: Removing interface: ip6gretap1 [ 111.540224][ T1598] bridge_slave_1: left allmulticast mode [ 111.546123][ T1598] bridge_slave_1: left promiscuous mode [ 111.552037][ T1598] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.581778][ T1598] bridge_slave_0: left allmulticast mode [ 111.588681][ T1598] bridge_slave_0: left promiscuous mode [ 111.595796][ T1598] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.754438][ T5281] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 111.763928][ T5236] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 111.772602][ T5236] Bluetooth: hci0: Injecting HCI hardware error event [ 111.781159][ T5230] Bluetooth: hci0: hardware error 0x00 [ 111.983727][ T5281] usb 1-1: Using ep0 maxpacket: 16 [ 111.998558][ T5281] usb 1-1: config 0 has an invalid interface number: 107 but max is 0 [ 112.023803][ T5281] usb 1-1: config 0 has no interface number 0 [ 112.043507][ T5281] usb 1-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 112.083220][ T5281] usb 1-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 112.125866][ T5281] usb 1-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 112.168222][ T5281] usb 1-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 112.191609][ T5281] usb 1-1: Product: syz [ 112.213920][ T5281] usb 1-1: Manufacturer: syz [ 112.223710][ T5281] usb 1-1: SerialNumber: syz [ 112.270724][ T5281] usb 1-1: config 0 descriptor?? [ 112.309636][ T5281] keyspan 1-1:0.107: Keyspan 4 port adapter converter detected [ 112.336326][ T5281] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 81 [ 112.338200][ T5233] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 112.345087][ T5281] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 1 [ 112.354265][ T5233] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 112.368393][ T5233] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 112.374138][ T5281] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 112.377938][ T5233] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 112.384849][ T5281] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 2 [ 112.391874][ T5233] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 112.407117][ T5233] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 112.424321][ T5281] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 112.446321][ T5281] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 4 [ 112.476093][ T5281] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 112.502919][ T5281] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 6 [ 112.530737][ T5281] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 112.596087][ T5281] usb 5-1: USB disconnect, device number 16 [ 112.693703][ T5286] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 112.764088][ T1598] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.783060][ T1598] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.806690][ T1598] bond0 (unregistering): Released all slaves [ 112.874172][ T5286] usb 4-1: Using ep0 maxpacket: 32 [ 112.895373][ T5286] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 112.903866][ T5286] usb 4-1: config 0 has no interface number 0 [ 112.911836][ T5286] usb 4-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=7d.12 [ 112.929189][ T5286] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.951556][ T5286] usb 4-1: Product: syz [ 112.974891][ T5286] usb 4-1: Manufacturer: syz [ 112.980182][ T5294] usb 1-1: USB disconnect, device number 10 [ 112.989273][ T5294] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 112.998831][ T5286] usb 4-1: SerialNumber: syz [ 113.014740][ T5286] usb 4-1: config 0 descriptor?? [ 113.022494][ T5294] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 113.043966][ T5233] Bluetooth: hci4: command tx timeout [ 113.058465][ T5294] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 113.095832][ T5281] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 113.096287][ T5294] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 113.159985][ T5294] keyspan 1-1:0.107: device disconnected [ 113.283371][ T6124] chnl_net:caif_netlink_parms(): no params data found [ 113.295541][ T5281] usb 5-1: Using ep0 maxpacket: 8 [ 113.304771][ T5281] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.333854][ T5281] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 113.352902][ T5281] usb 5-1: config 1 has no interface number 1 [ 113.363714][ T5281] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 113.395552][ T5281] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 113.406844][ T5281] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.431393][ T6132] chnl_net:caif_netlink_parms(): no params data found [ 113.435616][ T5281] usb 5-1: Product: syz [ 113.443942][ T5281] usb 5-1: Manufacturer: syz [ 113.462797][ T5281] usb 5-1: SerialNumber: syz [ 113.470609][ T6134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.538530][ T6134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.750780][ T1598] hsr_slave_0: left promiscuous mode [ 113.765220][ T1598] hsr_slave_1: left promiscuous mode [ 113.778286][ T1598] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.788732][ T6171] netlink: 72 bytes leftover after parsing attributes in process `syz.4.178'. [ 113.797927][ T1598] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.820518][ T1598] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.822785][ T5281] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 113.832104][ T1598] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.847154][ T5281] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 113.853355][ T5230] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 113.912654][ T1598] veth1_macvtap: left promiscuous mode [ 113.949692][ T1598] veth0_macvtap: left promiscuous mode [ 113.965605][ T5281] usb 5-1: USB disconnect, device number 17 [ 113.992269][ T1598] veth1_vlan: left promiscuous mode [ 114.030953][ T1598] veth0_vlan: left promiscuous mode [ 114.244400][ T6134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.268301][ T6134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.323306][ T5294] usb 4-1: USB disconnect, device number 9 [ 114.335776][ T5294] f81534a_ctrl 4-1:0.88: failed to set register 0x116: -19 [ 114.352863][ T5294] f81534a_ctrl 4-1:0.88: failed to enable ports: -19 [ 114.423754][ T8] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 114.487813][ T5230] Bluetooth: hci3: command tx timeout [ 114.613721][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 114.646352][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.673812][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.686413][ T8] usb 1-1: New USB device found, idVendor=056a, idProduct=0333, bcdDevice= 0.00 [ 114.700083][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.720589][ T8] usb 1-1: config 0 descriptor?? [ 114.760638][ T1598] team0 (unregistering): Port device team_slave_1 removed [ 114.842103][ T1598] team0 (unregistering): Port device team_slave_0 removed [ 115.129083][ T5233] Bluetooth: hci4: command tx timeout [ 115.376599][ T8] wacom 0003:056A:0333.0007: hidraw0: USB HID v0.00 Device [HID 056a:0333] on usb-dummy_hcd.0-1/input0 [ 115.597933][ T5286] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 115.712764][ T6124] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.743133][ T6124] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.751899][ T6124] bridge_slave_0: entered allmulticast mode [ 115.758120][ T5286] usb 4-1: Using ep0 maxpacket: 8 [ 115.773399][ T6124] bridge_slave_0: entered promiscuous mode [ 115.779709][ T5286] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 115.811640][ T6124] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.820169][ T5286] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 115.833510][ T5286] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.842342][ T6124] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.858368][ T5286] usb 4-1: Product: syz [ 115.858541][ T6124] bridge_slave_1: entered allmulticast mode [ 115.862963][ T5286] usb 4-1: Manufacturer: syz [ 115.869698][ T6124] bridge_slave_1: entered promiscuous mode [ 115.879898][ T5286] usb 4-1: SerialNumber: syz [ 115.881723][ T6185] netlink: 'syz.4.186': attribute type 10 has an invalid length. [ 115.892679][ T6185] bridge0: port 3(netdevsim0) entered blocking state [ 115.900153][ T5286] usb 4-1: config 0 descriptor?? [ 115.902768][ T6185] bridge0: port 3(netdevsim0) entered disabled state [ 115.919493][ T6185] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 115.930296][ T6185] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 115.938286][ T6185] bridge0: port 3(netdevsim0) entered blocking state [ 115.946074][ T6185] bridge0: port 3(netdevsim0) entered forwarding state [ 116.031729][ T6132] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.041427][ T6132] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.050130][ T6132] bridge_slave_0: entered allmulticast mode [ 116.060285][ T6132] bridge_slave_0: entered promiscuous mode [ 116.069279][ T6132] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.078122][ T6132] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.085639][ T6132] bridge_slave_1: entered allmulticast mode [ 116.092920][ T6132] bridge_slave_1: entered promiscuous mode [ 116.127087][ T6124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.130314][ T5282] usb 4-1: USB disconnect, device number 10 [ 116.171002][ T6132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.188729][ T6132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.207740][ T6124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.256656][ T6124] team0: Port device team_slave_0 added [ 116.285332][ T6132] team0: Port device team_slave_0 added [ 116.293209][ T6124] team0: Port device team_slave_1 added [ 116.320432][ T6132] team0: Port device team_slave_1 added [ 116.381222][ T6124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.392301][ T6124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.420219][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 116.420235][ T29] audit: type=1326 audit(1728579674.103:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6199 comm="syz.4.191" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f51579 code=0x0 [ 116.421964][ T6124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.481523][ T6132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.488913][ T6132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.522763][ T6132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.535249][ T6124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.542221][ T6124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.563776][ T5230] Bluetooth: hci3: command tx timeout [ 116.570392][ T6124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.596223][ T6132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.603307][ T6132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.640236][ T6132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.752251][ T6124] hsr_slave_0: entered promiscuous mode [ 116.783534][ T6124] hsr_slave_1: entered promiscuous mode [ 116.808603][ T6124] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 116.844457][ T6124] Cannot create hsr debugfs directory [ 116.969414][ T6132] hsr_slave_0: entered promiscuous mode [ 116.976685][ T6132] hsr_slave_1: entered promiscuous mode [ 116.988462][ T6132] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 116.996752][ T6132] Cannot create hsr debugfs directory [ 117.130877][ T1598] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.184425][ T8] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 117.203965][ T5230] Bluetooth: hci4: command tx timeout [ 117.240386][ T1598] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.332812][ T5286] usb 1-1: USB disconnect, device number 11 [ 117.340306][ T1598] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.354560][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 117.377199][ T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.441046][ T8] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 117.455198][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 117.463309][ T8] usb 4-1: SerialNumber: syz [ 117.482410][ T8] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 117.494593][ T1598] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.500915][ T8] cdc_acm 4-1:1.0: This needs exactly 3 endpoints [ 117.518095][ T8] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -22 [ 117.588541][ T6234] netlink: 216 bytes leftover after parsing attributes in process `syz.0.197'. [ 117.598746][ T6234] netlink: 216 bytes leftover after parsing attributes in process `syz.0.197'. [ 117.717274][ T1171] usb 4-1: USB disconnect, device number 11 [ 117.836687][ T1598] bridge_slave_1: left allmulticast mode [ 117.842387][ T1598] bridge_slave_1: left promiscuous mode [ 117.852867][ T1598] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.871510][ T1598] bridge_slave_0: left allmulticast mode [ 117.877566][ T1598] bridge_slave_0: left promiscuous mode [ 117.883349][ T1598] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.903840][ T5286] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 118.033856][ T5286] usb 5-1: device descriptor read/64, error -71 [ 118.283702][ T5286] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 118.332795][ T6252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.208'. [ 118.344233][ T1598] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.359311][ T1598] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.390741][ T1598] bond0 (unregistering): Released all slaves [ 118.438723][ T5286] usb 5-1: device descriptor read/64, error -71 [ 118.564247][ T5286] usb usb5-port1: attempt power cycle [ 118.667079][ T5230] Bluetooth: hci3: command tx timeout [ 118.914141][ T6124] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 118.978380][ T1598] hsr_slave_0: left promiscuous mode [ 118.993742][ T5286] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 119.009823][ T1598] hsr_slave_1: left promiscuous mode [ 119.026163][ T5286] usb 5-1: device descriptor read/8, error -71 [ 119.033706][ T5294] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 119.052277][ T1598] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.087789][ T1598] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.123017][ T1598] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.145779][ T1598] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.193715][ T5294] usb 1-1: Using ep0 maxpacket: 16 [ 119.202375][ T1598] veth1_macvtap: left promiscuous mode [ 119.208111][ T1598] veth0_macvtap: left promiscuous mode [ 119.211005][ T5294] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.214329][ T1598] veth1_vlan: left promiscuous mode [ 119.229194][ T1598] veth0_vlan: left promiscuous mode [ 119.254763][ T5294] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 119.264110][ T5286] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 119.285482][ T5230] Bluetooth: hci4: command tx timeout [ 119.313737][ T5294] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.334703][ T5286] usb 5-1: device descriptor read/8, error -71 [ 119.344648][ T5294] usb 1-1: Product: syz [ 119.348903][ T5294] usb 1-1: Manufacturer: syz [ 119.370619][ T5294] usb 1-1: SerialNumber: syz [ 119.405806][ T5294] cdc_ether 1-1:1.0: skipping garbage [ 119.425103][ T5294] usb 1-1: bad CDC descriptors [ 119.463876][ T5286] usb usb5-port1: unable to enumerate USB device [ 119.635531][ T5281] usb 1-1: USB disconnect, device number 12 [ 120.065237][ T1598] team0 (unregistering): Port device team_slave_1 removed [ 120.120911][ T1598] team0 (unregistering): Port device team_slave_0 removed [ 120.563918][ T5286] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 120.724354][ T5286] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 120.724805][ T5230] Bluetooth: hci3: command tx timeout [ 120.733358][ T5286] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.802545][ T5286] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 120.812000][ T5286] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 120.820491][ T5286] usb 1-1: Manufacturer: syz [ 120.831862][ T5286] usb 1-1: config 0 descriptor?? [ 120.983731][ T5286] rc_core: IR keymap rc-hauppauge not found [ 120.989795][ T5286] Registered IR keymap rc-empty [ 120.998464][ T5286] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 121.017305][ T5286] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input15 [ 121.086178][ T6124] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 121.129723][ T6124] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 121.158175][ T6124] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 121.272603][ T5282] usb 1-1: USB disconnect, device number 13 [ 121.345109][ T5281] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 121.356169][ T29] audit: type=1326 audit(1728579679.043:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6300 comm="syz.3.213" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 121.465940][ T29] audit: type=1326 audit(1728579679.043:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6300 comm="syz.3.213" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 121.559402][ T5281] usb 5-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 121.582877][ T29] audit: type=1326 audit(1728579679.043:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6300 comm="syz.3.213" exe="/root/syz-executor" sig=0 arch=40000003 syscall=300 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 121.607230][ T5281] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 121.624697][ T5281] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 121.645960][ T29] audit: type=1326 audit(1728579679.043:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6300 comm="syz.3.213" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 121.673960][ T5281] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 121.683045][ T5281] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.710986][ T6124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.718946][ T29] audit: type=1326 audit(1728579679.043:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6300 comm="syz.3.213" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61579 code=0x7ffc0000 [ 121.756518][ T6287] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 121.822541][ T6124] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.864144][ T5286] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 121.891611][ T2964] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.898880][ T2964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.931475][ T6132] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 121.966744][ T2964] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.973950][ T2964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.997776][ T6132] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 122.017310][ T6132] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 122.024588][ T5286] usb 4-1: Using ep0 maxpacket: 8 [ 122.037274][ T5286] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 122.068816][ T6132] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 122.078350][ T5286] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 122.088390][ T5286] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.122912][ T5286] usb 4-1: Product: syz [ 122.140283][ T5286] usb 4-1: Manufacturer: syz [ 122.153160][ T5286] usb 4-1: SerialNumber: syz [ 122.172952][ T5286] usb 4-1: config 0 descriptor?? [ 122.187327][ T6124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.198993][ T5281] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 122.206786][ T8] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 122.207494][ T5286] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 122.232062][ T5281] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input16 [ 122.331867][ T5281] usb 5-1: USB disconnect, device number 22 [ 122.337989][ C0] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 122.364043][ T8] usb 1-1: device descriptor read/64, error -71 [ 122.389425][ T6132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.421466][ T6124] veth0_vlan: entered promiscuous mode [ 122.487493][ T6124] veth1_vlan: entered promiscuous mode [ 122.512204][ T6132] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.536824][ T1598] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.544767][ T1598] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.571159][ T1598] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.578352][ T1598] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.608701][ T6124] veth0_macvtap: entered promiscuous mode [ 122.614771][ T8] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 122.638546][ T6306] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.215'. [ 122.660980][ T6124] veth1_macvtap: entered promiscuous mode [ 122.704251][ T6322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.720230][ T6322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.743663][ T8] usb 1-1: device descriptor read/64, error -71 [ 122.769325][ T6124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.787009][ T6124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.801910][ T6124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.820327][ T6124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.832435][ T6124] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.864257][ T8] usb usb1-port1: attempt power cycle [ 122.867042][ T6124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.894523][ T6124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.910566][ T6124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.922973][ T6124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.940673][ T6124] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.944236][ T5286] gspca_zc3xx: reg_w_i err -110 [ 122.959866][ T6132] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.036162][ T6132] veth0_vlan: entered promiscuous mode [ 123.052568][ T6124] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.078912][ T6124] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.092310][ T6124] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.101180][ T6124] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.131876][ T6132] veth1_vlan: entered promiscuous mode [ 123.223955][ T8] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 123.264476][ T8] usb 1-1: device descriptor read/8, error -71 [ 123.273009][ T2964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.298976][ T6132] veth0_macvtap: entered promiscuous mode [ 123.327940][ T2964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.361144][ T6132] veth1_macvtap: entered promiscuous mode [ 123.421344][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.438138][ T6132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.449814][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.475692][ T6132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.498150][ T6132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.513057][ T6132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.527706][ T6132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.538628][ T8] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 123.546917][ T6132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.564511][ T5286] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 123.566154][ T6132] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.570879][ T5286] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 123.581908][ T8] usb 1-1: device descriptor read/8, error -71 [ 123.642775][ T6132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.662121][ T5286] usb 4-1: USB disconnect, device number 12 [ 123.695622][ T6132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.764194][ T8] usb usb1-port1: unable to enumerate USB device [ 123.803947][ T6132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.820598][ T6132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.905843][ T6132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.925744][ T5281] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 123.936606][ T6132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.025187][ T6132] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.035582][ T6132] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.063397][ T6132] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.087338][ T6132] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.112309][ T6132] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.168218][ T6357] netlink: 'syz.3.219': attribute type 3 has an invalid length. [ 124.201331][ T6357] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.219'. [ 124.214407][ T5281] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.249678][ T5281] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.340714][ T5281] usb 5-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 124.417401][ T5281] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.464307][ T5281] usb 5-1: config 0 descriptor?? [ 124.508108][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.523250][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.648160][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.718944][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.780893][ T6377] netlink: 67 bytes leftover after parsing attributes in process `syz.2.222'. [ 124.830953][ T6377] IPv6: NLM_F_CREATE should be specified when creating new route [ 124.855730][ T6377] IPv6: Can't replace route, no match found [ 125.483758][ T5286] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 125.545161][ T6405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.227'. [ 125.742058][ T5286] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.757223][ T5286] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 125.797991][ T5286] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 125.882013][ T6421] netlink: 'syz.3.232': attribute type 4 has an invalid length. [ 125.909570][ T5286] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 125.923114][ T5286] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 125.931649][ T6421] netlink: 8 bytes leftover after parsing attributes in process `syz.3.232'. [ 125.959010][ T5286] usb 2-1: SerialNumber: syz [ 125.992536][ T5286] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 126.010215][ T5286] usb-storage 2-1:1.0: USB Mass Storage device detected [ 126.039235][ T5286] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 126.056957][ T5283] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 126.214261][ T5235] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 126.293847][ T5283] usb 1-1: Using ep0 maxpacket: 8 [ 126.300440][ T5283] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.339428][ T5283] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 126.386062][ T5235] usb 3-1: device descriptor read/64, error -71 [ 126.403838][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 126.438822][ T5283] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 126.459449][ T5294] usb 2-1: USB disconnect, device number 13 [ 126.480132][ T5281] usbhid 5-1:0.0: can't add hid device: -71 [ 126.488877][ T5283] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 126.501772][ T5281] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 126.533964][ T5283] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 126.555901][ T5281] usb 5-1: USB disconnect, device number 23 [ 126.571248][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 126.583675][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.607172][ T5283] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 126.617838][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 126.629921][ T5283] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 126.638199][ T5235] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 126.647642][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 126.660346][ T5283] usb 1-1: Product: syz [ 126.664916][ T5283] usb 1-1: Manufacturer: syz [ 126.669600][ T5283] usb 1-1: SerialNumber: syz [ 126.675658][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 126.686752][ T5283] usb 1-1: config 0 descriptor?? [ 126.692136][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 126.715613][ T9] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 126.735381][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 126.746546][ T9] usb 4-1: Product: syz [ 126.750799][ T9] usb 4-1: Manufacturer: syz [ 126.758986][ T9] usb 4-1: SerialNumber: syz [ 126.769607][ T9] usb 4-1: config 0 descriptor?? [ 126.793765][ T5235] usb 3-1: device descriptor read/64, error -71 [ 126.911645][ T5283] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 126.918862][ T5235] usb usb3-port1: attempt power cycle [ 126.934336][ T5283] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 127.003796][ T9] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 127.018525][ T9] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 127.119592][ T5283] radio-si470x 1-1:0.0: software version 0, hardware version 0 [ 127.134304][ T5283] radio-si470x 1-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 127.156603][ T5283] radio-si470x 1-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 127.199108][ T9] radio-si470x 4-1:0.0: software version 0, hardware version 0 [ 127.206828][ T9] radio-si470x 4-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 127.219452][ T9] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 127.303953][ T5235] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 127.348414][ T5235] usb 3-1: device descriptor read/8, error -71 [ 127.620570][ T5235] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 127.684058][ T5283] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -110 [ 127.699825][ T5235] usb 3-1: device descriptor read/8, error -71 [ 127.720757][ T5283] radio-si470x 1-1:0.0: submitting int urb failed (-90) [ 127.729734][ T6464] netlink: 'syz.1.241': attribute type 10 has an invalid length. [ 127.737901][ T6464] bridge0: port 3(netdevsim0) entered blocking state [ 127.743870][ T9] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -110 [ 127.753054][ T9] radio-si470x 4-1:0.0: submitting int urb failed (-90) [ 127.760540][ T5283] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -32 [ 127.769271][ T5283] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -22 [ 127.781545][ T9] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -32 [ 127.791743][ T9] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 127.801799][ T6464] bridge0: port 3(netdevsim0) entered disabled state [ 127.822445][ T6464] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 127.836649][ T5235] usb usb3-port1: unable to enumerate USB device [ 127.869725][ T6464] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 127.878563][ T6464] bridge0: port 3(netdevsim0) entered blocking state [ 127.885493][ T6464] bridge0: port 3(netdevsim0) entered forwarding state [ 128.180268][ T6478] binfmt_misc: register: failed to install interpreter file ./file0 [ 128.293793][ T5282] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 128.377236][ T6482] netlink: 24062 bytes leftover after parsing attributes in process `syz.1.250'. [ 128.387249][ T6482] netlink: 188348 bytes leftover after parsing attributes in process `syz.1.250'. [ 128.445937][ T5282] usb 5-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 128.455895][ T5282] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.467615][ T5282] usb 5-1: config 0 descriptor?? [ 128.476656][ T5282] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input17 [ 128.691909][ T5294] usb 5-1: USB disconnect, device number 24 [ 128.799094][ T6496] @: renamed from vlan0 (while UP) [ 128.961652][ T6505] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvtap0, syncid = 4, id = 0 [ 130.124707][ T5235] usb 1-1: USB disconnect, device number 18 [ 130.354072][ T5286] usb 4-1: USB disconnect, device number 13 [ 130.388600][ T6522] capability: warning: `syz.2.267' uses deprecated v2 capabilities in a way that may be insecure [ 130.864140][ T5294] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 131.033875][ T5294] usb 3-1: Using ep0 maxpacket: 8 [ 131.046519][ T5294] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.073363][ T5294] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 131.091085][ T5294] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 131.120309][ T5294] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 131.162598][ T5294] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 131.228039][ T5294] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 131.253655][ T5294] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 131.275266][ T5294] usb 3-1: Product: syz [ 131.279483][ T5294] usb 3-1: Manufacturer: syz [ 131.299044][ T5294] usb 3-1: SerialNumber: syz [ 131.325951][ T5294] usb 3-1: config 0 descriptor?? [ 131.541664][ T5294] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 131.548604][ T5294] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 131.667951][ T6577] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 131.745166][ T5294] radio-si470x 3-1:0.0: software version 0, hardware version 0 [ 131.752809][ T5294] radio-si470x 3-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 131.765727][ T5294] radio-si470x 3-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 132.313852][ T5294] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -110 [ 132.322357][ T5294] radio-si470x 3-1:0.0: submitting int urb failed (-90) [ 132.357492][ T5294] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -32 [ 132.373868][ T5294] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -22 [ 132.503699][ T5235] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 132.626218][ T6594] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 132.685585][ T5235] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.706333][ T5235] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.727531][ T5235] usb 4-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 132.748842][ T5235] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.776763][ T5235] usb 4-1: config 0 descriptor?? [ 133.046389][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.052813][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.040576][ T29] audit: type=1326 audit(1728579691.723:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6612 comm="syz.4.301" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 134.147048][ T29] audit: type=1326 audit(1728579691.723:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6612 comm="syz.4.301" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 134.234452][ T29] audit: type=1326 audit(1728579691.773:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6612 comm="syz.4.301" exe="/root/syz-executor" sig=0 arch=40000003 syscall=42 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 134.325639][ T29] audit: type=1326 audit(1728579691.773:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6612 comm="syz.4.301" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 134.434711][ T29] audit: type=1326 audit(1728579691.773:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6612 comm="syz.4.301" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 134.629053][ T29] audit: type=1326 audit(1728579691.803:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6612 comm="syz.4.301" exe="/root/syz-executor" sig=0 arch=40000003 syscall=316 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 134.667399][ T29] audit: type=1326 audit(1728579691.803:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6612 comm="syz.4.301" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 134.692790][ T29] audit: type=1326 audit(1728579691.813:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6612 comm="syz.4.301" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 134.771005][ T6634] netlink: 24 bytes leftover after parsing attributes in process `syz.0.308'. [ 135.274562][ T5235] usbhid 4-1:0.0: can't add hid device: -71 [ 135.280612][ T5283] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 135.301886][ T5235] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 135.346495][ T5235] usb 4-1: USB disconnect, device number 14 [ 135.495931][ T9] usb 3-1: USB disconnect, device number 17 [ 135.505303][ T5283] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.519800][ T5283] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.555775][ T5283] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 135.580850][ T5283] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.629112][ T5283] usb 5-1: config 0 descriptor?? [ 135.903697][ T5235] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 136.060716][ T5283] arvo 0003:1E7D:30D4.0008: unknown main item tag 0x0 [ 136.084418][ T5283] arvo 0003:1E7D:30D4.0008: unknown main item tag 0x0 [ 136.111216][ T5283] arvo 0003:1E7D:30D4.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.4-1/input0 [ 136.177689][ T5235] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 136.193761][ T5235] usb 1-1: New USB device strings: Mfr=210, Product=154, SerialNumber=3 [ 136.212683][ T5235] usb 1-1: Product: syz [ 136.228162][ T5235] usb 1-1: Manufacturer: syz [ 136.237484][ T5235] usb 1-1: SerialNumber: syz [ 136.259188][ T1848] usb 5-1: USB disconnect, device number 25 [ 136.288331][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 136.333513][ T5235] usb 1-1: config 0 descriptor?? [ 136.464419][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 136.499967][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 136.540639][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 136.592322][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 136.621806][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.687149][ T9] usb 2-1: config 0 descriptor?? [ 136.720983][ T6631] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 136.825696][ T9] hub 2-1:0.0: USB hub found [ 136.992947][ T5235] usb 1-1: Firmware version (0.0) predates our first public release. [ 137.046122][ T5235] usb 1-1: Please update to version 0.2 or newer [ 137.282096][ T5235] usb 1-1: USB disconnect, device number 19 [ 138.139571][ T9] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 138.252409][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 138.299529][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 138.412912][ T9] usb 2-1: USB disconnect, device number 14 [ 151.253568][ C1] sched: DL replenish lagged too much [ 153.916647][ T5233] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 153.927044][ T5233] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 153.945809][ T5233] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 153.954621][ T5233] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 153.965293][ T5233] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 153.973036][ T5233] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 154.093633][ T5230] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 154.122882][ T5230] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 154.143859][ T5230] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 154.154515][ T5230] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 154.162730][ T5230] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 154.170391][ T5230] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 154.480883][ T5233] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 154.495084][ T5233] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 154.505764][ T5233] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 154.516066][ T5233] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 154.530102][ T5233] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 154.595827][ T5236] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 154.608701][ T5236] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 154.632948][ T5230] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 154.640896][ T5230] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 154.649906][ T5230] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 154.661413][ T5230] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 154.668891][ T5230] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 154.793260][ T5233] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 154.805699][ T5233] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 154.828288][ T5233] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 154.837794][ T5233] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 154.845630][ T5233] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 154.853122][ T5233] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 156.003908][ T5233] Bluetooth: hci0: command tx timeout [ 156.245390][ T5233] Bluetooth: hci2: command tx timeout [ 156.644859][ T5233] Bluetooth: hci3: command tx timeout [ 156.723869][ T5233] Bluetooth: hci5: command tx timeout [ 156.885165][ T5233] Bluetooth: hci1: command tx timeout [ 158.110854][ T5233] Bluetooth: hci0: command tx timeout [ 158.323766][ T5233] Bluetooth: hci2: command tx timeout [ 158.723804][ T5233] Bluetooth: hci3: command tx timeout [ 158.803726][ T5233] Bluetooth: hci5: command tx timeout [ 158.967411][ T5233] Bluetooth: hci1: command tx timeout [ 160.163896][ T5233] Bluetooth: hci0: command tx timeout [ 160.403706][ T5233] Bluetooth: hci2: command tx timeout [ 160.803739][ T5233] Bluetooth: hci3: command tx timeout [ 160.883799][ T5233] Bluetooth: hci5: command tx timeout [ 161.045351][ T5233] Bluetooth: hci1: command tx timeout [ 162.243900][ T5233] Bluetooth: hci0: command tx timeout [ 162.484079][ T5233] Bluetooth: hci2: command tx timeout [ 162.883755][ T5233] Bluetooth: hci3: command tx timeout [ 162.963701][ T5233] Bluetooth: hci5: command tx timeout [ 163.123932][ T5233] Bluetooth: hci1: command tx timeout [ 194.489502][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.503632][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 216.424267][ T5232] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 216.461902][ T5232] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 216.477230][ T5232] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 216.485458][ T5232] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 216.493134][ T5232] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 216.501029][ T5232] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 216.941760][ T5233] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 216.953866][ T5233] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 216.962598][ T5233] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 216.974313][ T5233] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 216.981951][ T5233] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 216.989743][ T5233] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 217.269462][ T5232] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 217.278872][ T5232] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 217.288290][ T5232] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 217.296691][ T5232] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 217.304757][ T5232] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 217.321042][ T5232] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 217.394522][ T5233] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 217.407376][ T5233] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 217.415430][ T5233] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 217.425949][ T5233] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 217.437913][ T5233] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 217.445414][ T5233] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 217.507573][ T5233] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 217.525100][ T5233] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 217.539897][ T5233] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 217.548549][ T5233] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 217.562276][ T5233] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 217.570118][ T5233] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 218.563789][ T5233] Bluetooth: hci4: command tx timeout [ 219.044753][ T5233] Bluetooth: hci6: command tx timeout [ 219.363806][ T5233] Bluetooth: hci7: command tx timeout [ 219.523793][ T5233] Bluetooth: hci8: command tx timeout [ 219.684069][ T5233] Bluetooth: hci9: command tx timeout [ 220.643720][ T5233] Bluetooth: hci4: command tx timeout [ 221.123878][ T5233] Bluetooth: hci6: command tx timeout [ 221.443831][ T5233] Bluetooth: hci7: command tx timeout [ 221.610852][ T5233] Bluetooth: hci8: command tx timeout [ 221.763889][ T5233] Bluetooth: hci9: command tx timeout [ 222.723759][ T5233] Bluetooth: hci4: command tx timeout [ 223.203823][ T5233] Bluetooth: hci6: command tx timeout [ 223.523734][ T5233] Bluetooth: hci7: command tx timeout [ 223.683763][ T5233] Bluetooth: hci8: command tx timeout [ 223.843867][ T5233] Bluetooth: hci9: command tx timeout [ 224.803811][ T5233] Bluetooth: hci4: command tx timeout [ 225.283817][ T5233] Bluetooth: hci6: command tx timeout [ 225.606186][ T5233] Bluetooth: hci7: command tx timeout [ 225.765979][ T5233] Bluetooth: hci8: command tx timeout [ 225.923967][ T5233] Bluetooth: hci9: command tx timeout [ 255.927436][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.934026][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 275.958434][ T5232] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 275.972833][ T5232] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 275.984329][ T5232] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 275.992849][ T5232] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 276.003286][ T5232] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 276.031067][ T5232] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 276.616371][ T5243] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 276.631840][ T5243] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 276.640865][ T5243] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 276.649044][ T5243] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 276.657143][ T5243] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 276.665070][ T5243] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 276.875490][ T54] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 276.891525][ T54] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 276.900443][ T54] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 276.908600][ T54] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 276.920703][ T54] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 276.929050][ T54] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 277.915363][ T54] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 277.934350][ T54] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 277.943233][ T54] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 277.951997][ T54] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 277.960040][ T54] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 277.968098][ T54] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 278.040982][ T5243] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 278.051396][ T5243] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 278.060570][ T5243] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 278.070367][ T5243] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 278.079966][ T5243] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 278.088006][ T5245] Bluetooth: hci10: command tx timeout [ 278.102267][ T5245] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 278.493668][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 278.499934][ T54] Bluetooth: hci3: command 0x0406 tx timeout [ 278.506280][ T5243] Bluetooth: hci5: command 0x0406 tx timeout [ 278.512331][ T5243] Bluetooth: hci1: command 0x0406 tx timeout [ 278.519254][ T5245] Bluetooth: hci0: command 0x0406 tx timeout [ 278.723846][ T5241] Bluetooth: hci11: command tx timeout [ 278.964036][ T5241] Bluetooth: hci12: command tx timeout [ 280.003799][ T5241] Bluetooth: hci13: command tx timeout [ 280.163980][ T5232] Bluetooth: hci10: command tx timeout [ 280.171977][ T5241] Bluetooth: hci14: command tx timeout [ 280.803765][ T5241] Bluetooth: hci11: command tx timeout [ 281.043872][ T5241] Bluetooth: hci12: command tx timeout [ 282.083958][ T5241] Bluetooth: hci13: command tx timeout [ 282.243896][ T5241] Bluetooth: hci14: command tx timeout [ 282.249445][ T5241] Bluetooth: hci10: command tx timeout [ 282.883887][ T5241] Bluetooth: hci11: command tx timeout [ 283.138694][ T5241] Bluetooth: hci12: command tx timeout [ 284.163767][ T5241] Bluetooth: hci13: command tx timeout [ 284.323780][ T5232] Bluetooth: hci14: command tx timeout [ 284.331190][ T5241] Bluetooth: hci10: command tx timeout [ 284.963721][ T5241] Bluetooth: hci11: command tx timeout [ 285.204964][ T5241] Bluetooth: hci12: command tx timeout [ 286.244931][ T5241] Bluetooth: hci13: command tx timeout [ 286.403943][ T5241] Bluetooth: hci14: command tx timeout [ 317.373446][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.380633][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.387307][ T30] INFO: task kworker/u8:2:35 blocked for more than 143 seconds. [ 317.427940][ T30] Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 317.498348][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 317.593641][ T30] task:kworker/u8:2 state:D stack:22448 pid:35 tgid:35 ppid:2 flags:0x00004000 [ 317.673878][ T30] Workqueue: netns cleanup_net [ 317.678804][ T30] Call Trace: [ 317.682223][ T30] [ 317.743726][ T30] __schedule+0x1895/0x4b30 [ 317.748605][ T30] ? __pfx___schedule+0x10/0x10 [ 317.803815][ T30] ? __pfx_lock_release+0x10/0x10 [ 317.808946][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 317.873736][ T30] ? kthread_data+0x52/0xd0 [ 317.878416][ T30] ? schedule+0x90/0x320 [ 317.882790][ T30] ? wq_worker_sleeping+0x66/0x240 [ 317.948680][ T30] ? schedule+0x90/0x320 [ 317.953378][ T30] schedule+0x14b/0x320 [ 318.018125][ T30] schedule_preempt_disabled+0x13/0x30 [ 318.042203][ T30] __mutex_lock+0x6a7/0xd70 [ 318.074045][ T30] ? __mutex_lock+0x52a/0xd70 [ 318.079017][ T30] ? ppp_exit_net+0xe3/0x3d0 [ 318.134144][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 318.139852][ T30] ? net_generic+0x1f/0x240 [ 318.199578][ T30] ppp_exit_net+0xe3/0x3d0 [ 318.219000][ T30] ? __pfx_ppp_exit_net+0x10/0x10 [ 318.247122][ T30] ? __pfx_hwsim_exit_net+0x10/0x10 [ 318.252422][ T30] ? __ip_vs_dev_cleanup_batch+0x239/0x260 [ 318.299941][ T30] cleanup_net+0x802/0xcc0 [ 318.333736][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 318.339408][ T30] ? process_scheduled_works+0x976/0x1850 [ 318.403676][ T30] process_scheduled_works+0xa63/0x1850 [ 318.409337][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 318.459755][ T30] ? assign_work+0x364/0x3d0 [ 318.492559][ T30] worker_thread+0x870/0xd30 [ 318.513700][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 318.520321][ T30] ? __kthread_parkme+0x169/0x1d0 [ 318.563814][ T30] ? __pfx_worker_thread+0x10/0x10 [ 318.569050][ T30] kthread+0x2f0/0x390 [ 318.573200][ T30] ? __pfx_worker_thread+0x10/0x10 [ 318.622014][ T30] ? __pfx_kthread+0x10/0x10 [ 318.633636][ T30] ret_from_fork+0x4b/0x80 [ 318.638334][ T30] ? __pfx_kthread+0x10/0x10 [ 318.642971][ T30] ret_from_fork_asm+0x1a/0x30 [ 318.685326][ T30] [ 318.718415][ T30] INFO: task kworker/u8:7:2879 blocked for more than 144 seconds. [ 318.753621][ T30] Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 318.788916][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 318.823768][ T30] task:kworker/u8:7 state:D stack:21752 pid:2879 tgid:2879 ppid:2 flags:0x00004000 [ 318.861391][ T30] Workqueue: events_unbound linkwatch_event [ 318.888308][ T30] Call Trace: [ 318.891654][ T30] [ 318.928225][ T30] __schedule+0x1895/0x4b30 [ 318.932830][ T30] ? __pfx___schedule+0x10/0x10 [ 318.955704][ T30] ? __pfx_lock_release+0x10/0x10 [ 318.960996][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 319.008640][ T30] ? kthread_data+0x52/0xd0 [ 319.013228][ T30] ? schedule+0x90/0x320 [ 319.038277][ T30] ? wq_worker_sleeping+0x66/0x240 [ 319.063720][ T30] ? schedule+0x90/0x320 [ 319.084824][ T30] schedule+0x14b/0x320 [ 319.089115][ T30] schedule_preempt_disabled+0x13/0x30 [ 319.118611][ T30] __mutex_lock+0x6a7/0xd70 [ 319.123381][ T30] ? __mutex_lock+0x52a/0xd70 [ 319.148386][ T30] ? linkwatch_event+0xe/0x60 [ 319.153523][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 319.178718][ T30] ? process_scheduled_works+0x976/0x1850 [ 319.207386][ T30] linkwatch_event+0xe/0x60 [ 319.211967][ T30] process_scheduled_works+0xa63/0x1850 [ 319.243687][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 319.249766][ T30] ? assign_work+0x364/0x3d0 [ 319.298628][ T30] worker_thread+0x870/0xd30 [ 319.303322][ T30] ? __kthread_parkme+0x169/0x1d0 [ 319.333797][ T30] ? __pfx_worker_thread+0x10/0x10 [ 319.339092][ T30] kthread+0x2f0/0x390 [ 319.343374][ T30] ? __pfx_worker_thread+0x10/0x10 [ 319.403712][ T30] ? __pfx_kthread+0x10/0x10 [ 319.408388][ T30] ret_from_fork+0x4b/0x80 [ 319.412841][ T30] ? __pfx_kthread+0x10/0x10 [ 319.453714][ T30] ret_from_fork_asm+0x1a/0x30 [ 319.458797][ T30] [ 319.494977][ T30] INFO: task jbd2/sda1-8:4648 blocked for more than 145 seconds. [ 319.503872][ T30] Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 319.511558][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 319.563638][ T30] task:jbd2/sda1-8 state:D stack:23504 pid:4648 tgid:4648 ppid:2 flags:0x00004000 [ 319.606549][ T30] Call Trace: [ 319.609904][ T30] [ 319.612870][ T30] __schedule+0x1895/0x4b30 [ 319.647766][ T30] ? __pfx___schedule+0x10/0x10 [ 319.652976][ T30] ? __pfx_lock_release+0x10/0x10 [ 319.686358][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 319.692435][ T30] ? schedule+0x90/0x320 [ 319.710452][ T30] schedule+0x14b/0x320 [ 319.723159][ T30] io_schedule+0x8d/0x110 [ 319.732708][ T30] bit_wait_io+0x12/0xd0 [ 319.752137][ T30] __wait_on_bit+0xb0/0x2f0 [ 319.760377][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 319.778872][ T30] out_of_line_wait_on_bit+0x1d5/0x260 [ 319.793776][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 319.798841][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 319.818442][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 319.834869][ T30] jbd2_journal_commit_transaction+0x3df6/0x67e0 [ 319.856778][ T30] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 319.873748][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 319.879043][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 319.907290][ T30] ? __try_to_del_timer_sync+0x2ad/0x340 [ 319.913015][ T30] ? __timer_delete_sync+0x15c/0x310 [ 319.948228][ T30] ? __timer_delete_sync+0x25d/0x310 [ 319.961515][ T30] ? __pfx___timer_delete_sync+0x10/0x10 [ 319.977552][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 319.993641][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 320.000065][ T30] ? prepare_to_wait+0x186/0x210 [ 320.027192][ T30] ? finish_wait+0xd4/0x1e0 [ 320.031816][ T30] kjournald2+0x41c/0x7b0 [ 320.047532][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 320.068440][ T30] ? __pfx_kjournald2+0x10/0x10 [ 320.073468][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 320.090373][ T30] ? __kthread_parkme+0x169/0x1d0 [ 320.103629][ T30] ? __pfx_kjournald2+0x10/0x10 [ 320.108554][ T30] kthread+0x2f0/0x390 [ 320.112653][ T30] ? __pfx_kjournald2+0x10/0x10 [ 320.143645][ T30] ? __pfx_kthread+0x10/0x10 [ 320.148315][ T30] ret_from_fork+0x4b/0x80 [ 320.152857][ T30] ? __pfx_kthread+0x10/0x10 [ 320.179585][ T30] ret_from_fork_asm+0x1a/0x30 [ 320.193090][ T30] [ 320.199202][ T30] INFO: task syz.4.117:5883 blocked for more than 146 seconds. [ 320.218385][ T30] Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 320.241228][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 320.263623][ T30] task:syz.4.117 state:D stack:24416 pid:5883 tgid:5883 ppid:5246 flags:0x20004006 [ 320.291862][ T30] Call Trace: [ 320.308105][ T30] [ 320.311115][ T30] __schedule+0x1895/0x4b30 [ 320.333733][ T30] ? __pfx___schedule+0x10/0x10 [ 320.339169][ T30] ? __pfx_lock_release+0x10/0x10 [ 320.373803][ T30] ? schedule+0x90/0x320 [ 320.378128][ T30] schedule+0x14b/0x320 [ 320.382321][ T30] schedule_timeout+0xb0/0x310 [ 320.407114][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 320.412569][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 320.433667][ T30] ? wait_for_completion+0x2fe/0x620 [ 320.439040][ T30] ? wait_for_completion+0x2fe/0x620 [ 320.460018][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 320.476387][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 320.481855][ T30] ? wait_for_completion+0x2fe/0x620 [ 320.505664][ T30] wait_for_completion+0x355/0x620 [ 320.511011][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 320.533683][ T30] ? __flush_work+0xe7/0xc50 [ 320.538470][ T30] __flush_work+0xa37/0xc50 [ 320.543036][ T30] ? __flush_work+0xe7/0xc50 [ 320.568403][ T30] ? __pfx___flush_work+0x10/0x10 [ 320.582984][ T30] ? __pfx_wq_barrier_func+0x10/0x10 [ 320.598764][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 320.613643][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 320.618884][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 320.650596][ T30] unregister_netdevice_many_notify+0x87b/0x1da0 [ 320.663281][ T30] ? enqueue_timer+0x21b/0x570 [ 320.678748][ T30] ? __mod_timer+0xb89/0xeb0 [ 320.683437][ T30] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 320.709133][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 320.719442][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 320.738052][ T30] ? queue_delayed_work_on+0x1eb/0x390 [ 320.753661][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 320.758954][ T30] unregister_netdevice_queue+0x303/0x370 [ 320.783677][ T30] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 320.790109][ T30] __tun_detach+0x6b9/0x1600 [ 320.811544][ T30] tun_chr_close+0x105/0x1b0 [ 320.823261][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 320.839798][ T30] __fput+0x23f/0x880 [ 320.852275][ T30] task_work_run+0x24f/0x310 [ 320.863758][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 320.869434][ T30] ? __pfx_task_work_run+0x10/0x10 [ 320.898290][ T30] ? do_exit+0xa2a/0x28e0 [ 320.902748][ T30] ? kmem_cache_free+0x1a2/0x420 [ 320.923679][ T30] ? do_exit+0xa2a/0x28e0 [ 320.930948][ T30] do_exit+0xa2f/0x28e0 [ 320.943692][ T30] ? __pfx_do_exit+0x10/0x10 [ 320.948481][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 320.983698][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 320.990138][ T30] do_group_exit+0x207/0x2c0 [ 321.011959][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 321.028491][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 321.039362][ T30] get_signal+0x16a3/0x1740 [ 321.053641][ T30] ? do_nanosleep+0x80/0x600 [ 321.058417][ T30] ? __pfx_get_signal+0x10/0x10 [ 321.063303][ T30] ? hrtimer_nanosleep+0x331/0x3f0 [ 321.089828][ T30] arch_do_signal_or_restart+0x96/0x860 [ 321.104850][ T30] ? __pfx_get_old_timespec32+0x10/0x10 [ 321.110688][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 321.137236][ T30] ? __se_sys_clock_nanosleep_time32+0x32d/0x3c0 [ 321.153681][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 321.159493][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 321.184111][ T30] __do_fast_syscall_32+0xc4/0x110 [ 321.189310][ T30] ? exc_page_fault+0x590/0x8c0 [ 321.206193][ T30] do_fast_syscall_32+0x34/0x80 [ 321.211112][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 321.236525][ T30] RIP: 0023:0xf7f51579 [ 321.240997][ T30] RSP: 002b:00000000f56d6470 EFLAGS: 00000206 ORIG_RAX: 000000000000010b [ 321.271031][ T30] RAX: fffffffffffffdfc RBX: 0000000000000000 RCX: 0000000000000000 [ 321.293688][ T30] RDX: 00000000f56d64a4 RSI: 00000000f56d649c RDI: 00000000f56d64a4 [ 321.301763][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 321.349474][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 321.378391][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 321.398356][ T30] [ 321.405007][ T30] INFO: task syz.2.329:6691 blocked for more than 147 seconds. [ 321.412608][ T30] Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 321.448842][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 321.473723][ T30] task:syz.2.329 state:D stack:24000 pid:6691 tgid:6690 ppid:6124 flags:0x20004006 [ 321.498247][ T30] Call Trace: [ 321.501672][ T30] [ 321.512278][ T30] __schedule+0x1895/0x4b30 [ 321.524129][ T30] ? __pfx___schedule+0x10/0x10 [ 321.529069][ T30] ? __pfx_lock_release+0x10/0x10 [ 321.552414][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 321.567074][ T30] ? schedule+0x90/0x320 [ 321.571445][ T30] schedule+0x14b/0x320 [ 321.585963][ T30] schedule_preempt_disabled+0x13/0x30 [ 321.591491][ T30] __mutex_lock+0x6a7/0xd70 [ 321.611511][ T30] ? __mutex_lock+0x52a/0xd70 [ 321.626188][ T30] ? tun_chr_close+0x3b/0x1b0 [ 321.630942][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 321.649526][ T30] ? __pfx_call_rcu+0x10/0x10 [ 321.659695][ T30] tun_chr_close+0x3b/0x1b0 [ 321.673710][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 321.679095][ T30] __fput+0x23f/0x880 [ 321.683123][ T30] task_work_run+0x24f/0x310 [ 321.711021][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 321.723716][ T30] ? __pfx_task_work_run+0x10/0x10 [ 321.729608][ T30] ? do_exit+0xa2a/0x28e0 [ 321.758690][ T30] ? kmem_cache_free+0x1a2/0x420 [ 321.763936][ T30] ? do_exit+0xa2a/0x28e0 [ 321.768446][ T30] do_exit+0xa2f/0x28e0 [ 321.773093][ T30] ? __pfx_do_exit+0x10/0x10 [ 321.803634][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 321.809178][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 321.831475][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 321.851596][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 321.868574][ T30] do_group_exit+0x207/0x2c0 [ 321.879909][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 321.893731][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 321.899008][ T30] get_signal+0x16a3/0x1740 [ 321.918579][ T30] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 321.943707][ T30] ? __pfx_get_signal+0x10/0x10 [ 321.948823][ T30] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 321.969998][ T30] arch_do_signal_or_restart+0x96/0x860 [ 321.984882][ T30] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 321.990514][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 322.030215][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 322.047307][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 322.060408][ T30] __do_fast_syscall_32+0xc4/0x110 [ 322.073692][ T30] ? exc_page_fault+0x590/0x8c0 [ 322.079000][ T30] do_fast_syscall_32+0x34/0x80 [ 322.100113][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 322.115890][ T30] RIP: 0023:0xf747d579 [ 322.120114][ T30] RSP: 002b:00000000f576656c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 322.155966][ T30] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 322.175951][ T30] RDX: 0000000000000027 RSI: 0000000020000000 RDI: 000000000000000c [ 322.201684][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 322.223803][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 322.231865][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 322.256406][ T30] [ 322.265941][ T30] INFO: task syz-executor:6698 blocked for more than 148 seconds. [ 322.288129][ T30] Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 322.305161][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 322.327489][ T30] task:syz-executor state:D stack:25744 pid:6698 tgid:6698 ppid:1 flags:0x20004006 [ 322.358640][ T30] Call Trace: [ 322.362059][ T30] [ 322.370058][ T30] __schedule+0x1895/0x4b30 [ 322.381455][ T30] ? __pfx___schedule+0x10/0x10 [ 322.386856][ T30] ? __pfx_lock_release+0x10/0x10 [ 322.392019][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 322.402627][ T30] ? schedule+0x90/0x320 [ 322.409968][ T30] schedule+0x14b/0x320 [ 322.416817][ T30] schedule_preempt_disabled+0x13/0x30 [ 322.422337][ T30] __mutex_lock+0x6a7/0xd70 [ 322.430290][ T30] ? __mutex_lock+0x52a/0xd70 [ 322.436628][ T30] ? ip_tunnel_init_net+0x20e/0x720 [ 322.441992][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 322.451957][ T30] ? read_word_at_a_time+0xe/0x20 [ 322.458681][ T30] ? sized_strscpy+0x8d/0x220 [ 322.463430][ T30] ip_tunnel_init_net+0x20e/0x720 [ 322.472640][ T30] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 322.480420][ T30] ? ops_init+0x75/0x590 [ 322.499293][ T30] ops_init+0x31e/0x590 [ 322.503527][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 322.510631][ T30] setup_net+0x287/0x9e0 [ 322.518728][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 322.525947][ T30] ? __pfx_setup_net+0x10/0x10 [ 322.530796][ T30] copy_net_ns+0x33f/0x570 [ 322.539771][ T30] create_new_namespaces+0x425/0x7b0 [ 322.546670][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 322.557316][ T30] ksys_unshare+0x57d/0xa70 [ 322.561993][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 322.569217][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 322.579561][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 322.588023][ T30] __ia32_sys_unshare+0x37/0x40 [ 322.592937][ T30] __do_fast_syscall_32+0xb4/0x110 [ 322.601960][ T30] ? exc_page_fault+0x590/0x8c0 [ 322.608375][ T30] do_fast_syscall_32+0x34/0x80 [ 322.613277][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 322.623671][ T30] RIP: 0023:0xf740d579 [ 322.628435][ T30] RSP: 002b:00000000f755ff7c EFLAGS: 00000206 ORIG_RAX: 0000000000000136 [ 322.642036][ T30] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 322.651987][ T30] RDX: 00000000f73fbff4 RSI: 00000000f72d224b RDI: 0000000030000000 [ 322.665244][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 322.673470][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 322.684747][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 322.692879][ T30] [ 322.699910][ T30] INFO: task syz-executor:6699 blocked for more than 148 seconds. [ 322.709269][ T30] Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 322.720712][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 322.733788][ T30] task:syz-executor state:D stack:25040 pid:6699 tgid:6699 ppid:1 flags:0x20004006 [ 322.749049][ T30] Call Trace: [ 322.753959][ T30] [ 322.757109][ T30] __schedule+0x1895/0x4b30 [ 322.761670][ T30] ? __pfx___schedule+0x10/0x10 [ 322.772373][ T30] ? __pfx_lock_release+0x10/0x10 [ 322.777835][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 322.783411][ T30] ? schedule+0x90/0x320 [ 322.793048][ T30] schedule+0x14b/0x320 [ 322.797713][ T30] schedule_preempt_disabled+0x13/0x30 [ 322.803222][ T30] __mutex_lock+0x6a7/0xd70 [ 322.813347][ T30] ? __mutex_lock+0x52a/0xd70 [ 322.818402][ T30] ? register_nexthop_notifier+0x84/0x290 [ 322.829049][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 322.834627][ T30] ? __asan_memset+0x23/0x50 [ 322.839548][ T30] register_nexthop_notifier+0x84/0x290 [ 322.850306][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 322.858104][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 322.869349][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 322.876488][ T30] ? __asan_memset+0x23/0x50 [ 322.881641][ T30] ops_init+0x31e/0x590 [ 322.893633][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 322.899086][ T30] setup_net+0x287/0x9e0 [ 322.903370][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 322.913040][ T30] ? __pfx_setup_net+0x10/0x10 [ 322.918196][ T30] copy_net_ns+0x33f/0x570 [ 322.922670][ T30] create_new_namespaces+0x425/0x7b0 [ 322.932994][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 322.939256][ T30] ksys_unshare+0x57d/0xa70 [ 322.949121][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 322.954570][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 322.962630][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 322.978258][ T30] __ia32_sys_unshare+0x37/0x40 [ 322.984741][ T30] __do_fast_syscall_32+0xb4/0x110 [ 322.989904][ T30] ? exc_page_fault+0x590/0x8c0 [ 322.999696][ T30] do_fast_syscall_32+0x34/0x80 [ 323.005007][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 323.011380][ T30] RIP: 0023:0xf7fd2579 [ 323.020416][ T30] RSP: 002b:00000000f75bff7c EFLAGS: 00000206 ORIG_RAX: 0000000000000136 [ 323.029427][ T30] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 323.042670][ T30] RDX: 00000000f745bff4 RSI: 00000000f733224b RDI: 0000000030000000 [ 323.060280][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 323.073444][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 323.081863][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 323.095158][ T30] [ 323.098287][ T30] INFO: task syz-executor:6702 blocked for more than 149 seconds. [ 323.109271][ T30] Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 323.119668][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 323.131656][ T30] task:syz-executor state:D stack:26368 pid:6702 tgid:6702 ppid:1 flags:0x20004006 [ 323.144580][ T30] Call Trace: [ 323.147894][ T30] [ 323.150845][ T30] __schedule+0x1895/0x4b30 [ 323.159422][ T30] ? __pfx___schedule+0x10/0x10 [ 323.166851][ T30] ? __pfx_lock_release+0x10/0x10 [ 323.171923][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 323.181313][ T30] ? schedule+0x90/0x320 [ 323.187479][ T30] schedule+0x14b/0x320 [ 323.191694][ T30] schedule_preempt_disabled+0x13/0x30 [ 323.201224][ T30] __mutex_lock+0x6a7/0xd70 [ 323.207237][ T30] ? __mutex_lock+0x52a/0xd70 [ 323.211956][ T30] ? register_nexthop_notifier+0x84/0x290 [ 323.221912][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 323.228448][ T30] ? __asan_memset+0x23/0x50 [ 323.233173][ T30] register_nexthop_notifier+0x84/0x290 [ 323.242657][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 323.250010][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 323.260012][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 323.268763][ T30] ? __asan_memset+0x23/0x50 [ 323.273414][ T30] ops_init+0x31e/0x590 [ 323.281967][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 323.289350][ T30] setup_net+0x287/0x9e0 [ 323.297910][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 323.305116][ T30] ? __pfx_setup_net+0x10/0x10 [ 323.309954][ T30] copy_net_ns+0x33f/0x570 [ 323.318585][ T30] create_new_namespaces+0x425/0x7b0 [ 323.325942][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 323.331935][ T30] ksys_unshare+0x57d/0xa70 [ 323.343710][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 323.350948][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 323.364469][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 323.373524][ T30] __ia32_sys_unshare+0x37/0x40 [ 323.383484][ T30] __do_fast_syscall_32+0xb4/0x110 [ 323.389584][ T30] ? exc_page_fault+0x590/0x8c0 [ 323.399791][ T30] do_fast_syscall_32+0x34/0x80 [ 323.405095][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 323.411552][ T30] RIP: 0023:0xf7f97579 [ 323.420902][ T30] RSP: 002b:00000000f757ff7c EFLAGS: 00000206 ORIG_RAX: 0000000000000136 [ 323.430498][ T30] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 323.443711][ T30] RDX: 00000000f741bff4 RSI: 00000000f72f224b RDI: 0000000030000000 [ 323.451833][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 323.465042][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 323.478056][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 323.487904][ T30] [ 323.491040][ T30] INFO: task syz-executor:6704 blocked for more than 149 seconds. [ 323.506849][ T30] Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 323.518379][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 323.529048][ T30] task:syz-executor state:D stack:25840 pid:6704 tgid:6704 ppid:1 flags:0x20004004 [ 323.557532][ T30] Call Trace: [ 323.560882][ T30] [ 323.563913][ T30] __schedule+0x1895/0x4b30 [ 323.568519][ T30] ? __pfx___schedule+0x10/0x10 [ 323.589605][ T30] ? __pfx_lock_release+0x10/0x10 [ 323.600477][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 323.606525][ T30] ? schedule+0x90/0x320 [ 323.610811][ T30] schedule+0x14b/0x320 [ 323.620039][ T30] schedule_preempt_disabled+0x13/0x30 [ 323.625949][ T30] __mutex_lock+0x6a7/0xd70 [ 323.630500][ T30] ? __mutex_lock+0x52a/0xd70 [ 323.640496][ T30] ? register_nexthop_notifier+0x84/0x290 [ 323.646702][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 323.651775][ T30] ? __asan_memset+0x23/0x50 [ 323.665552][ T30] register_nexthop_notifier+0x84/0x290 [ 323.671305][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 323.681209][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 323.690177][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 323.699598][ T30] ? __asan_memset+0x23/0x50 [ 323.706900][ T30] ops_init+0x31e/0x590 [ 323.711206][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 323.719516][ T30] setup_net+0x287/0x9e0 [ 323.727044][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 323.732676][ T30] ? __pfx_setup_net+0x10/0x10 [ 323.740334][ T30] copy_net_ns+0x33f/0x570 [ 323.747435][ T30] create_new_namespaces+0x425/0x7b0 [ 323.753178][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 323.761698][ T30] ksys_unshare+0x57d/0xa70 [ 323.771590][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 323.780749][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 323.790099][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 323.799719][ T30] __ia32_sys_unshare+0x37/0x40 [ 323.807249][ T30] __do_fast_syscall_32+0xb4/0x110 [ 323.812420][ T30] ? exc_page_fault+0x590/0x8c0 [ 323.820133][ T30] do_fast_syscall_32+0x34/0x80 [ 323.827639][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 323.836891][ T30] RIP: 0023:0xf73cd579 [ 323.841198][ T30] RSP: 002b:00000000f751ff7c EFLAGS: 00000206 ORIG_RAX: 0000000000000136 [ 323.852481][ T30] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 323.863399][ T30] RDX: 00000000f73bbff4 RSI: 00000000f729224b RDI: 0000000030000000 [ 323.874319][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 323.883487][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 323.896211][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 323.906993][ T30] [ 323.910218][ T30] INFO: task syz-executor:6705 blocked for more than 149 seconds. [ 323.920898][ T30] Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 323.933615][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 323.942445][ T30] task:syz-executor state:D stack:26224 pid:6705 tgid:6705 ppid:1 flags:0x20004004 [ 323.957372][ T30] Call Trace: [ 323.960707][ T30] [ 323.965321][ T30] __schedule+0x1895/0x4b30 [ 323.969911][ T30] ? __pfx___schedule+0x10/0x10 [ 323.978782][ T30] ? __pfx_lock_release+0x10/0x10 [ 323.986386][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 323.991911][ T30] ? schedule+0x90/0x320 [ 324.000534][ T30] schedule+0x14b/0x320 [ 324.009459][ T30] schedule_preempt_disabled+0x13/0x30 [ 324.018890][ T30] __mutex_lock+0x6a7/0xd70 [ 324.023446][ T30] ? __mutex_lock+0x52a/0xd70 [ 324.029894][ T30] ? register_nexthop_notifier+0x84/0x290 [ 324.039412][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 324.046056][ T30] ? __asan_memset+0x23/0x50 [ 324.050701][ T30] register_nexthop_notifier+0x84/0x290 [ 324.060162][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 324.067751][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 324.077862][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 324.105422][ T30] ? __asan_memset+0x23/0x50 [ 324.113645][ T30] ops_init+0x31e/0x590 [ 324.117861][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 324.123282][ T30] setup_net+0x287/0x9e0 [ 324.148276][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 324.163038][ T30] ? __pfx_setup_net+0x10/0x10 [ 324.172555][ T30] copy_net_ns+0x33f/0x570 [ 324.177948][ T30] create_new_namespaces+0x425/0x7b0 [ 324.183307][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 324.193609][ T30] ksys_unshare+0x57d/0xa70 [ 324.198196][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 324.208004][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 324.215149][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 324.221790][ T30] __ia32_sys_unshare+0x37/0x40 [ 324.231717][ T30] __do_fast_syscall_32+0xb4/0x110 [ 324.237300][ T30] ? exc_page_fault+0x590/0x8c0 [ 324.242200][ T30] do_fast_syscall_32+0x34/0x80 [ 324.252119][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 324.258819][ T30] RIP: 0023:0xf7faf579 [ 324.262972][ T30] RSP: 002b:00000000f759ff7c EFLAGS: 00000206 ORIG_RAX: 0000000000000136 [ 324.273630][ T30] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 324.281663][ T30] RDX: 00000000f743bff4 RSI: 00000000f731224b RDI: 0000000030000000 [ 324.295806][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 324.306854][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 324.317835][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 324.328996][ T30] [ 324.332402][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 324.344326][ T30] [ 324.344326][ T30] Showing all locks held in the system: [ 324.352101][ T30] 3 locks held by kworker/0:1/9: [ 324.361060][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 324.378684][ T30] #1: ffffc900000e7d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 324.390300][ T30] #2: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 324.407485][ T30] 1 lock held by khungtaskd/30: [ 324.412559][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 324.425828][ T30] 4 locks held by kworker/u8:2/35: [ 324.430993][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 324.445232][ T30] #1: ffffc90000ab7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 324.459656][ T30] #2: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 324.470670][ T30] #3: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: ppp_exit_net+0xe3/0x3d0 [ 324.484809][ T30] 3 locks held by kworker/u8:7/2879: [ 324.490161][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 324.505164][ T30] #1: ffffc90009bdfd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 324.521763][ T30] #2: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 324.532391][ T30] 3 locks held by kworker/u8:8/2920: [ 324.541443][ T30] #0: ffff88802defc148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 324.554691][ T30] #1: ffffc90009d1fd00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 324.572859][ T30] #2: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 324.584131][ T30] 2 locks held by getty/4987: [ 324.588865][ T30] #0: ffff8880331fa0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 324.604931][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 324.619299][ T30] 3 locks held by kworker/0:5/5283: [ 324.626031][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 324.640824][ T30] #1: ffffc90003a8fd00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 324.653438][ T30] #2: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 324.668795][ T30] 7 locks held by kworker/1:5/5287: [ 324.674835][ T30] 2 locks held by syz.4.117/5883: [ 324.679894][ T30] #0: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 324.693980][ T30] #1: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 324.711265][ T30] 1 lock held by syz.2.329/6691: [ 324.716906][ T30] #0: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 324.730961][ T30] 2 locks held by syz-executor/6698: [ 324.736736][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 324.751069][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 324.761010][ T30] 2 locks held by syz-executor/6699: [ 324.771199][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 324.781065][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 324.796515][ T30] 2 locks held by syz-executor/6702: [ 324.802898][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 324.816502][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 324.830949][ T30] 2 locks held by syz-executor/6704: [ 324.837962][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 324.851300][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 324.862999][ T30] 2 locks held by syz-executor/6705: [ 324.872147][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 324.883173][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 324.898987][ T30] 2 locks held by syz-executor/6714: [ 324.905786][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 324.920247][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 324.932601][ T30] 2 locks held by syz-executor/6717: [ 324.942976][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 324.952842][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 324.967970][ T30] 2 locks held by syz-executor/6720: [ 324.973312][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 324.987632][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 325.002683][ T30] 2 locks held by syz-executor/6722: [ 325.009936][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 325.025108][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 325.039996][ T30] 2 locks held by syz-executor/6723: [ 325.054023][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 325.063531][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 325.082852][ T30] 2 locks held by syz-executor/6732: [ 325.093056][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 325.102996][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 325.118961][ T30] 2 locks held by syz-executor/6738: [ 325.138184][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 325.148198][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 325.165298][ T30] 2 locks held by syz-executor/6740: [ 325.170653][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 325.182954][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 325.195860][ T30] 2 locks held by syz-executor/6744: [ 325.201194][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 325.228058][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 325.243622][ T30] 2 locks held by syz-executor/6746: [ 325.249061][ T30] #0: ffffffff8fcc52d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 325.287832][ T30] #1: ffffffff8fcd1dc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 325.307058][ T30] [ 325.309447][ T30] ============================================= [ 325.309447][ T30] [ 325.343778][ T30] NMI backtrace for cpu 0 [ 325.348197][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 325.358739][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 325.368831][ T30] Call Trace: [ 325.372136][ T30] [ 325.375084][ T30] dump_stack_lvl+0x241/0x360 [ 325.379790][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 325.385099][ T30] ? __pfx__printk+0x10/0x10 [ 325.389727][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 325.394699][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 325.400184][ T30] ? _printk+0xd5/0x120 [ 325.404363][ T30] ? __pfx__printk+0x10/0x10 [ 325.408976][ T30] ? __wake_up_klogd+0xcc/0x110 [ 325.413864][ T30] ? __pfx__printk+0x10/0x10 [ 325.418480][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 325.423538][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 325.429644][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 325.435661][ T30] watchdog+0xff4/0x1040 [ 325.439943][ T30] ? watchdog+0x1ea/0x1040 [ 325.444399][ T30] ? __pfx_watchdog+0x10/0x10 [ 325.449111][ T30] kthread+0x2f0/0x390 [ 325.453209][ T30] ? __pfx_watchdog+0x10/0x10 [ 325.457920][ T30] ? __pfx_kthread+0x10/0x10 [ 325.462536][ T30] ret_from_fork+0x4b/0x80 [ 325.466983][ T30] ? __pfx_kthread+0x10/0x10 [ 325.471609][ T30] ret_from_fork_asm+0x1a/0x30 [ 325.476422][ T30] [ 325.480116][ T30] Sending NMI from CPU 0 to CPUs 1: [ 325.485711][ C1] NMI backtrace for cpu 1 [ 325.485726][ C1] CPU: 1 UID: 0 PID: 5287 Comm: kworker/1:5 Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 325.485745][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 325.485756][ C1] Workqueue: events nsim_dev_trap_report_work [ 325.485779][ C1] RIP: 0010:unwind_next_frame+0x6d5/0x22d0 [ 325.485798][ C1] Code: 89 c1 48 c1 f9 02 48 c1 e8 3f 48 01 c8 48 83 e0 fe 49 8d 1c 46 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 <84> c0 75 27 48 63 03 48 01 d8 48 8d 4b 04 4c 39 f8 4c 0f 46 f1 48 [ 325.485817][ C1] RSP: 0000:ffffc90000a17b50 EFLAGS: 00000a06 [ 325.485831][ C1] RAX: 0000000000000000 RBX: ffffffff90305060 RCX: dffffc0000000000 [ 325.485843][ C1] RDX: 00000000000b0001 RSI: ffffffff90a71c1c RDI: 0000000000000001 [ 325.485854][ C1] RBP: ffffffff90305064 R08: 000000000000000c R09: ffffc90000a17d10 [ 325.485866][ C1] R10: ffffc90000a17c70 R11: ffffffff8180a0e0 R12: ffffffff90305060 [ 325.485878][ C1] R13: ffffffff90305060 R14: ffffffff90305060 R15: ffffffff8180a017 [ 325.485892][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 325.485905][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 325.485917][ C1] CR2: 00000000f7422000 CR3: 000000000e734000 CR4: 00000000003526f0 [ 325.485931][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 325.485940][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 325.485951][ C1] Call Trace: [ 325.485957][ C1] [ 325.485964][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 325.485983][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 325.486004][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 325.486022][ C1] ? nmi_handle+0x2a/0x5a0 [ 325.486044][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 325.486063][ C1] ? nmi_handle+0x14f/0x5a0 [ 325.486078][ C1] ? nmi_handle+0x2a/0x5a0 [ 325.486094][ C1] ? unwind_next_frame+0x6d5/0x22d0 [ 325.486108][ C1] ? default_do_nmi+0x63/0x160 [ 325.486127][ C1] ? exc_nmi+0x123/0x1f0 [ 325.486144][ C1] ? end_repeat_nmi+0xf/0x53 [ 325.486158][ C1] ? stack_trace_save+0x117/0x1d0 [ 325.486177][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 325.486205][ C1] ? unwind_next_frame+0x6d5/0x22d0 [ 325.486220][ C1] ? unwind_next_frame+0x6d5/0x22d0 [ 325.486236][ C1] ? unwind_next_frame+0x6d5/0x22d0 [ 325.486251][ C1] [ 325.486256][ C1] [ 325.486266][ C1] ? stack_trace_save+0x118/0x1d0 [ 325.486284][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 325.486302][ C1] arch_stack_walk+0x11c/0x150 [ 325.486321][ C1] ? stack_trace_save+0x118/0x1d0 [ 325.486339][ C1] stack_trace_save+0x118/0x1d0 [ 325.486358][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 325.486376][ C1] ? __lock_acquire+0x1384/0x2050 [ 325.486397][ C1] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 325.486414][ C1] kasan_save_stack+0x3f/0x60 [ 325.486450][ C1] ? __phys_addr+0xba/0x170 [ 325.486466][ C1] __kasan_record_aux_stack+0xac/0xc0 [ 325.486487][ C1] call_rcu+0x167/0xa70 [ 325.486508][ C1] ? __pfx_call_rcu+0x10/0x10 [ 325.486522][ C1] ? rcuref_put+0x1e3/0x240 [ 325.486537][ C1] ? __pfx_rcuref_put+0x10/0x10 [ 325.486556][ C1] skb_release_head_state+0x73/0x250 [ 325.486574][ C1] consume_skb+0x60/0xf0 [ 325.486589][ C1] nft_synproxy_eval_v4+0x3d2/0x610 [ 325.486612][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 325.486631][ C1] ? validate_chain+0x11e/0x5920 [ 325.486648][ C1] ? nf_ip_checksum+0x13a/0x500 [ 325.486670][ C1] nft_synproxy_do_eval+0x362/0xa60 [ 325.486692][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 325.486714][ C1] ? __pfx_validate_chain+0x10/0x10 [ 325.486735][ C1] nft_do_chain+0x4ad/0x1da0 [ 325.486762][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 325.486780][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 325.486812][ C1] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 325.486829][ C1] nft_do_chain_inet+0x418/0x6b0 [ 325.486851][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 325.486870][ C1] ? ipt_do_table+0x312/0x1860 [ 325.486897][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 325.486916][ C1] nf_hook_slow+0xc3/0x220 [ 325.486934][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 325.486950][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 325.486967][ C1] NF_HOOK+0x29e/0x450 [ 325.486984][ C1] ? NF_HOOK+0x9a/0x450 [ 325.486999][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 325.487016][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 325.487035][ C1] ? ip_rcv_finish+0x406/0x560 [ 325.487052][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 325.487068][ C1] NF_HOOK+0x3a4/0x450 [ 325.487086][ C1] ? NF_HOOK+0x9a/0x450 [ 325.487101][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 325.487116][ C1] ? ip_rcv_core+0x801/0xd10 [ 325.487132][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 325.487152][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 325.487169][ C1] __netif_receive_skb+0x2bf/0x650 [ 325.487187][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 325.487211][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 325.487228][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 325.487248][ C1] ? __pfx_lock_release+0x10/0x10 [ 325.487267][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 325.487291][ C1] process_backlog+0x662/0x15b0 [ 325.487312][ C1] ? process_backlog+0x33b/0x15b0 [ 325.487333][ C1] ? __pfx_process_backlog+0x10/0x10 [ 325.487350][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 325.487371][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 325.487393][ C1] __napi_poll+0xcb/0x490 [ 325.487411][ C1] net_rx_action+0x89b/0x1240 [ 325.487438][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 325.487458][ C1] ? sched_balance_domains+0x91b/0xa90 [ 325.487480][ C1] ? sched_balance_domains+0x1b2/0xa90 [ 325.487498][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 325.487522][ C1] handle_softirqs+0x2c5/0x980 [ 325.487543][ C1] ? do_softirq+0x11b/0x1e0 [ 325.487561][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 325.487581][ C1] ? rcu_is_watching+0x15/0xb0 [ 325.487598][ C1] do_softirq+0x11b/0x1e0 [ 325.487615][ C1] [ 325.487620][ C1] [ 325.487626][ C1] ? __pfx_do_softirq+0x10/0x10 [ 325.487644][ C1] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 325.487666][ C1] ? rcu_is_watching+0x15/0xb0 [ 325.487683][ C1] __local_bh_enable_ip+0x1bb/0x200 [ 325.487701][ C1] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 325.487718][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 325.487737][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 325.487755][ C1] ? nsim_dev_trap_report_work+0x6a7/0xaa0 [ 325.487774][ C1] nsim_dev_trap_report_work+0x75d/0xaa0 [ 325.487798][ C1] ? process_scheduled_works+0x976/0x1850 [ 325.487817][ C1] process_scheduled_works+0xa63/0x1850 [ 325.487848][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 325.487870][ C1] ? assign_work+0x364/0x3d0 [ 325.487891][ C1] worker_thread+0x870/0xd30 [ 325.487913][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 325.487933][ C1] ? __kthread_parkme+0x169/0x1d0 [ 325.487954][ C1] ? __pfx_worker_thread+0x10/0x10 [ 325.487973][ C1] kthread+0x2f0/0x390 [ 325.487987][ C1] ? __pfx_worker_thread+0x10/0x10 [ 325.488004][ C1] ? __pfx_kthread+0x10/0x10 [ 325.488019][ C1] ret_from_fork+0x4b/0x80 [ 325.488038][ C1] ? __pfx_kthread+0x10/0x10 [ 325.488053][ C1] ret_from_fork_asm+0x1a/0x30 [ 325.488078][ C1] [ 326.208310][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 326.215293][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 326.225820][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 326.235922][ T30] Call Trace: [ 326.239223][ T30] [ 326.242169][ T30] dump_stack_lvl+0x241/0x360 [ 326.246884][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 326.252121][ T30] ? __pfx__printk+0x10/0x10 [ 326.256735][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 326.262750][ T30] ? vscnprintf+0x5d/0x90 [ 326.267198][ T30] panic+0x349/0x880 [ 326.271121][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 326.277418][ T30] ? __pfx_panic+0x10/0x10 [ 326.281862][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 326.287265][ T30] ? __irq_work_queue_local+0x137/0x410 [ 326.292859][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 326.298264][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 326.304449][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 326.310638][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 326.317026][ T30] watchdog+0x1033/0x1040 [ 326.321401][ T30] ? watchdog+0x1ea/0x1040 [ 326.325869][ T30] ? __pfx_watchdog+0x10/0x10 [ 326.330576][ T30] kthread+0x2f0/0x390 [ 326.334670][ T30] ? __pfx_watchdog+0x10/0x10 [ 326.339381][ T30] ? __pfx_kthread+0x10/0x10 [ 326.344089][ T30] ret_from_fork+0x4b/0x80 [ 326.348542][ T30] ? __pfx_kthread+0x10/0x10 [ 326.353172][ T30] ret_from_fork_asm+0x1a/0x30 [ 326.357980][ T30] [ 326.361411][ T30] Kernel Offset: disabled [ 326.365732][ T30] Rebooting in 86400 seconds..