last executing test programs: 29.200054005s ago: executing program 0 (id=523): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xbd, 0x2, 0xc4, 0x40, 0x856, 0xac31, 0x931e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd2, 0xc8, 0x7f}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_emit_vhci(0x0, 0x22) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x0, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb", 0x94, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, &(0x7f0000000000)) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcc2, 0x0, 0x0}, &(0x7f0000000180)=0x40) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x0) syz_emit_vhci(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x8) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'geneve0\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r3, &(0x7f00000000c0)="3f05fe7f7028120006001e0089e9aaa921d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000280)={0x0, 0x0, 0x1, "ad"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 26.575230259s ago: executing program 0 (id=537): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f226e2966667482d50703b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5dffd691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6be", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x300}}], 0x3, 0x240080e4) 26.37424404s ago: executing program 0 (id=539): syz_usb_connect(0x1, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a86200000904000002ca744d07090503020000ff99090805848f"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x4002) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000880)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e24, 0x80, 0x4e24, 0x3, 0xa, 0x20, 0x20, 0x62}, {0x7fffffff, 0x11, 0x0, 0x8, 0x4, 0x16d9, 0x6b34, 0x1}, {0x30000000000000, 0x0, 0xfffffffffffffffd, 0xb}, 0x7, 0x6e6bb9, 0x0, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4d6, 0xff}, 0xa, @in=@multicast2, 0x3501, 0x2, 0x2, 0xff, 0x3f2, 0x7, 0x4}}, 0xe8) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f0000000440)={0x168, 0x13, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_OBJ_USERDATA={0x58, 0x8, "bea121de3aa2d5a0f25bfac116e71c11e467dd25d5a43ae7137827d348cbe4e094eab5f30eb0f494e5f387f750db7c9259cc8188a5c3152f152bd592a44fc0fdba2a80285538389ea84a6cbcf9be0e0428bf1692"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_USERDATA={0xcc, 0x8, "8ea07e3cd94ad634ce6f25c96abcf8cd62d7c6118e27524d79467a952eab3afeaf07d8183d08526c030fb998d9fc4269f1044a65be88d1fd11576e6838775688529c380b9178600432e29ca52f87ed0dea53df5e91fc54486087d322ec86ce0cf58f52abb0018c84a8c16a3d8dab7a3f7e0406bfe779c6bef856f9b80dce41f7e9c019dcea2b33e4d3576ef6bc5fdcb5d7783059a56d5384ea953633958b6067f56693cc035c30e1dc4edd09e4b12f7c44c6e5929b52817c57e5af9c91883bb13b2dfdc3a1b4992d"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, 0x168}, 0x1, 0x0, 0x0, 0x40000}, 0x8001) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) read$FUSE(r3, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000380)) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000740)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r5, @ANYBLOB="010000000000000000003900000008000300", @ANYBLOB="84005a8080000080140005000200020000000000000000000000000014000300000000000000000000000000000000000e00010002000000000000000000000014000500090000008000050002000200bd000800150002000000000000000030000000000000e00000000000140005000000000000000000000000000000000004000100"], 0xa0}}, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000140)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x4e20, @multicast1}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SOUND_PCM_READ_BITS(r2, 0x80045005, &(0x7f00000003c0)) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x2, {}, [@IFLA_IFALIAS={0x14, 0x14, 'pimreg0\x00'}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x4000080) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000800)=""/113, 0x71}, {0x0}], 0x2, 0x0, 0x200) 23.139196561s ago: executing program 0 (id=561): r0 = syz_open_dev$I2C(&(0x7f0000000140), 0x0, 0x101180) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000020c0)={&(0x7f0000002040)=[{0x7, 0x8811, 0x1, &(0x7f0000000cc0)='@'}, {0x2, 0x3e11, 0x0, 0x0}], 0x2}) 22.908078041s ago: executing program 0 (id=564): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001708000640ffffff000800034000000038242000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000f81f0380200000800800034000000002100002800c000280080001800000000004000640b000"], 0x20b8}}, 0x2000c800) 22.58965374s ago: executing program 0 (id=565): socket$nl_generic(0x10, 0x3, 0x10) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) bind$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e20}, 0x1c) listen(0xffffffffffffffff, 0x80080400) r0 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r0, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r0, 0x10d, 0xdb, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) getpid() r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r2, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000074931d40450c4a61afe6f4712f4d09021200010000000009040000009c80f400"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x103841) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000080)=@urb_type_iso={0x0, {}, 0x0, 0x0, 0x0, 0x45, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r3, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000180)=ANY=[@ANYBLOB="06aec48b8f6a"], 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0xfff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x87c5) write$binfmt_script(r6, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r5, 0xc040563d, &(0x7f0000000080)) listen(r2, 0x0) accept4(r2, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000340)='autofs\x00', 0x0) 20.96181471s ago: executing program 3 (id=574): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000240)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @remote, 0x19}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000540)="79408e00004c", 0x6}], 0x1, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x8008801) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="1f3c522d992b29", 0x7}], 0x1}}], 0x1, 0x0) 20.797270206s ago: executing program 3 (id=576): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x0) 20.621937274s ago: executing program 3 (id=578): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000f000140020203600e4109000800ac0008000400100016001200020002000000035c3b61c1d68af92542ffc15644fa80857f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79926835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b", 0xd8}], 0x1}, 0x0) 20.301858531s ago: executing program 3 (id=582): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89f1, &(0x7f0000000040)={'ip6_vti0\x00', @random='\a\x00\x00 \x00'}) 20.166102725s ago: executing program 3 (id=584): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000010002000000000800040001000000", 0x24) 20.046554977s ago: executing program 1 (id=585): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x28, 0x0, &(0x7f00000006c0)="e000000000000107ff82762f86dd1f1fba2dff09007ad265128380cf53be2749249d7687a200c778", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e21, 0x1, @empty, 0x5}, 0x1c) bpf$ENABLE_STATS(0x20, &(0x7f00000000c0), 0x4) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x3, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000280)={'\x00', 0x11, 0x8, 0x401}) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000791058000000000007000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x12, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x38, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4, 0x2}]}]}]}, 0x38}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xff00000000000000, 0x777fe6a4b23f}, 0x0, 0x0, 0x2, 0x9, 0x0, 0x0, 0x5}, 0x20) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) setxattr$system_posix_acl(&(0x7f0000000340)='./cgroup\x00', &(0x7f0000000380)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000180)={'\x00', 0x9, 0x7fffffff, 0x401, 0x1, 0x7, r6}) 19.902097193s ago: executing program 3 (id=586): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x28, 0x0, &(0x7f00000006c0)="e000000000000107ff82762f86dd1f1fba2dff09007ad265128380cf53be2749249d7687a200c778", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e21, 0x1, @empty, 0x5}, 0x1c) bpf$ENABLE_STATS(0x20, &(0x7f00000000c0), 0x4) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x3, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000280)={'\x00', 0x11, 0x8, 0x401}) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000791058000000000007000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x12, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x38, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4, 0x2}]}]}]}, 0x38}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xff00000000000000, 0x777fe6a4b23f}, 0x0, 0x0, 0x2, 0x9, 0x0, 0x0, 0x5}, 0x20) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) setxattr$system_posix_acl(&(0x7f0000000340)='./cgroup\x00', &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f0000000900)={{}, {}, [{}, {}, {0x2, 0x6}, {0x2, 0x3}, {}], {0x4, 0x3}, [], {0x10, 0x1}}, 0x4c, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000180)={'\x00', 0x9, 0x7fffffff, 0x401, 0x1, 0x7, r6}) 19.098697466s ago: executing program 1 (id=593): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="2703020001f300000600002fb96dbcf706e10500000086ddffff1144ee162bd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21880b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0xfca6}, {&(0x7f0000001400)="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", 0xa91}], 0x3}, 0x0) 18.907047965s ago: executing program 4 (id=594): r0 = mq_open(&(0x7f0000000040)='eth0\x00', 0x42, 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000880)=@orangefs={0x14, 0x1, {"efc80f23b44cab4d44a38f6a6f0b53fb", 0x6}}, 0x294900) 18.756691977s ago: executing program 4 (id=596): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x5, 0x11d, 0x0, 0x1, [{0x4, 0x0, 0x0, 0x0}]}]}, 0x24}}, 0x0) 18.713868245s ago: executing program 1 (id=597): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r0, 0xc0105702, &(0x7f00000000c0)) 18.537760587s ago: executing program 4 (id=598): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)="27030200590200000000002f1eafbcf706e105000000894f000f1105ee162bd4b8bf4a82f6184b8a34f90186ce", 0x2d}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93", 0x44}, {&(0x7f0000000280)="fe112162c63e6da8bc8432294ef18af53cc330a62a2c7035246635093ba4d30fcf19a90804f04a10939db8f4e13069cda6d167bf1b68c94d8d694d6ad1a4d51a715975560ad48770706eb1b88d021e1119f2eb75275cfe77f862368649be0f7aff5e7826729816e3d3e7986d9434f891c71ca6e4210c6757083cfd8e732048c504f28b6d309fc129ed8eb5a82e224eb648f90134d1d315977c6ea360a7fece4baa3dd7dcc970759f29df0e86469e954e2b050e87b203ca27a2a519b7555c3b73f2681d49442d9647ff5ea64110cc5020fdeafe53a7d8be70f3260816bc376bcdc5352771fa55d9733e27730ec7103520e8359c78edd21ee6c68feb3685a55722f5da09ffe8ba9f05081a8d214156376f99906245f2f390ad717979d98f0574f8c5b52dcc2fa494f461be6c2560ddbaafb80c5b4583cbe56d24f14ab78fd718947077ea736251c7b8eee267267534c84daa6f095e94bfb85986a03ddea362cc7e6682884e710727c1163cd4f336c13b844605b7a815fe39e43bd0d2e414410a82958455b8a6bd9194c631d66295675fed64", 0x191}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b58144028420f659013866dacd66dd1b8997b8e6584f5cb1076afdde0595a87f7349612e", 0x2e}, {&(0x7f0000000200)="0b20dfc5cf657be121b2513a1c13a44e7167aa48d7ad20d6e64d6f2cfe37dbbfba6effbf208610802a824eb98292e0e894d75de383c1d4a1b982c350676fc5093607fc170eee72c2", 0x48}], 0x5}, 0x0) 18.534611668s ago: executing program 1 (id=599): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec", 0x4) 18.376754706s ago: executing program 4 (id=600): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x12c, @pic={0x81, 0x5, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1}}) 18.084232485s ago: executing program 1 (id=601): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='hybla\x00', 0x6) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) 17.118220673s ago: executing program 1 (id=603): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x28, 0x0, &(0x7f00000006c0)="e000000000000107ff82762f86dd1f1fba2dff09007ad265128380cf53be2749249d7687a200c778", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e21, 0x1, @empty, 0x5}, 0x1c) bpf$ENABLE_STATS(0x20, &(0x7f00000000c0), 0x4) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x3, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000280)={'\x00', 0x11, 0x8, 0x401}) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000791058000000000007000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x12, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x38, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4, 0x2}]}]}]}, 0x38}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xff00000000000000, 0x777fe6a4b23f}, 0x0, 0x0, 0x2, 0x9, 0x0, 0x0, 0x5}, 0x20) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) setxattr$system_posix_acl(&(0x7f0000000340)='./cgroup\x00', &(0x7f0000000380)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000180)={'\x00', 0x9, 0x7fffffff, 0x401, 0x1, 0x7, r6}) 10.743971204s ago: executing program 2 (id=609): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000140)=0x34fd, 0x4) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f0000000080)) 10.554049442s ago: executing program 2 (id=610): write$FUSE_GETXATTR(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xa5, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x93, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0x13, 0x24, 0x6, 0x0, 0x0, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x2}, @selector_unit={0x9, 0x24, 0x5, 0x4, 0x0, "f8431cfd"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x305, 0x0, 0x4, 0x3}, @selector_unit={0x6, 0x24, 0x5, 0x4, 0x0, "fd"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) 10.113148828s ago: executing program 4 (id=611): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000004c0)={0x400, 0x300, 0x2000, 0x240, 0x0, 0x0, 0x0, 0x2, {}, {}, {0x0, 0x7}, {}, 0x0, 0x3f0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x1, 0x0, 0x5}) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 9.375046309s ago: executing program 4 (id=613): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, 0x0, 0x0, 0xfffffffa, 0xffffffff}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000480)={'syztnl0\x00', 0x0}) 9.003169039s ago: executing program 2 (id=614): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) 8.709012036s ago: executing program 2 (id=615): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fe1d0e0014000000000000000000008000"}}) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socket$alg(0x26, 0x5, 0x0) socket$key(0xf, 0x3, 0x2) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x280000, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = dup(r4) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b00)={0x50, 0x2, 0x6, 0x3, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9000000}]}]}, 0x50}}, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000040)={0x0, 0x59555956, 0x0, @stepwise}) r6 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) ioctl$FS_IOC_GETVERSION(r7, 0xc0145b0e, &(0x7f0000000040)) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x8, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x54}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_STREAMON(r10, 0x40045612, &(0x7f0000000000)=0xc) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000, 0x8, &(0x7f0000ffe000/0x1000)=nil) 839.204132ms ago: executing program 2 (id=617): r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffe, "00207d2000000000201b14700c1e0ac74f000000001200000000000900"}) ioctl(r0, 0x4500, 0x0) 0s ago: executing program 2 (id=618): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000007a000106000000000000000007"], 0x18}], 0x1}, 0x0) kernel console output (not intermixed with test programs): 22] bridge_slave_1: left allmulticast mode [ 218.152468][ T1122] bridge_slave_1: left promiscuous mode [ 218.160142][ T1122] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.171207][ T1122] bridge_slave_0: left allmulticast mode [ 218.177584][ T1122] bridge_slave_0: left promiscuous mode [ 218.184876][ T1122] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.319683][ T5237] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 218.330114][ T7329] sctp: [Deprecated]: syz.1.327 (pid 7329) Use of int in max_burst socket option deprecated. [ 218.330114][ T7329] Use struct sctp_assoc_value instead [ 218.347955][ T8] usb 3-1: USB disconnect, device number 10 [ 218.364958][ T5237] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 218.374422][ T5237] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 219.201340][ T7347] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 220.033141][ T7360] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 220.060450][ T7360] kvm: pic: level sensitive irq not supported [ 220.060540][ T7360] kvm: pic: non byte read [ 220.075674][ T7360] kvm: pic: level sensitive irq not supported [ 220.075823][ T7360] kvm: pic: non byte read [ 220.265806][ T1122] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.309049][ T1122] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.342580][ T1122] bond0 (unregistering): Released all slaves [ 220.401793][ T7347] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 220.441692][ T7368] tipc: Enabling of bearer rejected, failed to enable media [ 220.459028][ T5237] Bluetooth: hci0: command tx timeout [ 220.599126][ T1122] tipc: Left network mode [ 220.701488][ T29] audit: type=1326 audit(1726910993.186:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7376 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77c57def9 code=0x7ffc0000 [ 220.752220][ T29] audit: type=1326 audit(1726910993.186:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7376 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77c57def9 code=0x7ffc0000 [ 220.823678][ T29] audit: type=1326 audit(1726910993.186:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7376 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7fe77c57def9 code=0x7ffc0000 [ 220.889739][ T29] audit: type=1326 audit(1726910993.186:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7376 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77c57def9 code=0x7ffc0000 [ 220.969125][ T7383] binder: 7379:7383 ioctl c0306201 0 returned -14 [ 220.975241][ T29] audit: type=1326 audit(1726910993.186:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7376 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77c57def9 code=0x7ffc0000 [ 221.003506][ T29] audit: type=1326 audit(1726910993.186:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7376 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe77c57def9 code=0x7ffc0000 [ 221.028481][ T29] audit: type=1326 audit(1726910993.186:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7376 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77c57def9 code=0x7ffc0000 [ 221.069442][ T29] audit: type=1326 audit(1726910993.186:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7376 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77c57def9 code=0x7ffc0000 [ 221.167333][ T29] audit: type=1326 audit(1726910993.186:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7376 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fe77c57def9 code=0x7ffc0000 [ 221.250563][ T29] audit: type=1326 audit(1726910993.186:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7376 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77c57def9 code=0x7ffc0000 [ 221.334467][ T1122] hsr_slave_0: left promiscuous mode [ 221.359357][ T1122] hsr_slave_1: left promiscuous mode [ 221.448092][ T1122] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.492489][ T1122] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.745338][ T1173] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 221.777765][ T1122] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.822830][ T1122] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.855170][ T8] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 221.905364][ T1173] usb 3-1: Using ep0 maxpacket: 8 [ 221.927977][ T1122] veth1_macvtap: left promiscuous mode [ 221.936968][ T1122] veth0_macvtap: left promiscuous mode [ 221.942682][ T1122] veth1_vlan: left promiscuous mode [ 221.948326][ T1122] veth0_vlan: left promiscuous mode [ 221.970164][ T1173] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 221.997057][ T5275] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 222.010665][ T1173] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 222.023321][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 222.054014][ T8] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 222.070758][ T1173] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 222.084152][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.092569][ T1173] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 222.108234][ T8] usb 5-1: Product: syz [ 222.113581][ T8] usb 5-1: Manufacturer: syz [ 222.120010][ T8] usb 5-1: SerialNumber: syz [ 222.129405][ T1173] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 222.145309][ T8] usb 5-1: config 0 descriptor?? [ 222.155959][ T1173] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.364707][ T8] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 222.395407][ T5275] usb 4-1: Using ep0 maxpacket: 8 [ 222.433690][ T1173] usb 3-1: GET_CAPABILITIES returned 0 [ 222.440375][ T5275] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 222.485755][ T1173] usbtmc 3-1:16.0: can't read capabilities [ 222.492526][ T5275] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 222.533336][ T5275] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 222.557403][ T5237] Bluetooth: hci0: command tx timeout [ 222.583132][ T5275] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 222.605411][ T5275] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 222.614812][ T5275] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.650557][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 222.661642][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 222.740020][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 222.749149][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 222.758239][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 222.770949][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 222.780122][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 222.789164][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 222.798228][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 222.807369][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 222.885438][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 222.894660][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 222.903849][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 222.912952][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 222.943172][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 222.952522][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 222.962266][ T5275] usb 4-1: GET_CAPABILITIES returned 0 [ 222.968321][ T5275] usbtmc 4-1:16.0: can't read capabilities [ 223.145514][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 223.154639][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 223.163724][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 223.172804][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 223.181857][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 223.190903][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 223.199968][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 223.241561][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 223.250711][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 223.259813][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 223.268912][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 223.280226][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 223.289532][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 223.301920][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 223.311069][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 223.320174][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 223.827201][ T1173] usb 4-1: USB disconnect, device number 15 [ 224.056000][ T7423] coredump: 216(syz.1.341): written to core: VMAs: 3, size 12439552; core: 6867 bytes, pos 12443648 [ 224.316561][ T1122] team0 (unregistering): Port device team_slave_1 removed [ 224.321453][ T1173] usb 3-1: USB disconnect, device number 11 [ 224.459675][ T1122] team0 (unregistering): Port device team_slave_0 removed [ 224.543805][ T5237] Bluetooth: hci2: unexpected cc 0x2027 length: 2 > 1 [ 224.619880][ T5237] Bluetooth: hci0: command tx timeout [ 224.700561][ T8] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 225.345653][ T8] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 225.526023][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.564766][ T7333] chnl_net:caif_netlink_parms(): no params data found [ 225.586239][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.623668][ T8] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 225.650233][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.724606][ T8] usb 3-1: config 0 descriptor?? [ 225.816502][ T7448] binder: 7444:7448 ioctl c0306201 0 returned -14 [ 225.917314][ T7333] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.960790][ T9] usb 5-1: USB disconnect, device number 15 [ 226.010332][ T7333] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.062943][ T7333] bridge_slave_0: entered allmulticast mode [ 226.095738][ T7333] bridge_slave_0: entered promiscuous mode [ 226.177447][ T7333] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.265500][ T7333] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.313614][ T7333] bridge_slave_1: entered allmulticast mode [ 226.398947][ T8] hid-led 0003:1D34:000A.0006: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.2-1/input0 [ 226.399920][ T7333] bridge_slave_1: entered promiscuous mode [ 226.487230][ T8] hid-led 0003:1D34:000A.0006: Dream Cheeky Webmail Notifier initialized [ 226.591829][ T7333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.600083][ T1122] IPVS: stop unused estimator thread 0... [ 226.695412][ T5237] Bluetooth: hci0: command tx timeout [ 226.754572][ T7333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.755995][ T7474] fuse: Bad value for 'user_id' [ 226.785120][ T7474] fuse: Bad value for 'user_id' [ 226.856411][ T7333] team0: Port device team_slave_0 added [ 226.890255][ T7333] team0: Port device team_slave_1 added [ 226.980145][ T7333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.009608][ T7333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.035834][ C1] vkms_vblank_simulate: vblank timer overrun [ 227.121217][ T7333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.186583][ T7333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.217300][ T7333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.281922][ T7333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.386630][ T7333] hsr_slave_0: entered promiscuous mode [ 227.394785][ T7333] hsr_slave_1: entered promiscuous mode [ 227.576702][ T51] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 227.787495][ T51] usb 5-1: Using ep0 maxpacket: 16 [ 227.843162][ T51] usb 5-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 227.853248][ T51] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.877470][ T51] usb 5-1: Product: syz [ 227.881734][ T51] usb 5-1: Manufacturer: syz [ 227.907031][ T51] usb 5-1: SerialNumber: syz [ 227.924211][ T51] usb 5-1: config 0 descriptor?? [ 227.974284][ T51] as10x_usb: device has been detected [ 227.981480][ T51] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 228.024192][ T51] usb 5-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 228.042973][ T5275] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 228.044020][ T8] usb 3-1: USB disconnect, device number 12 [ 228.113293][ T51] as10x_usb: error during firmware upload part1 [ 228.120136][ T51] Registered device Sky IT Digital Key (green led) [ 228.215172][ T5275] usb 2-1: Using ep0 maxpacket: 8 [ 228.246137][ T7490] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.353'. [ 228.291973][ T5275] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 228.368145][ T5275] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 228.401296][ T7490] xt_hashlimit: invalid rate [ 228.444874][ T5275] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 228.489918][ T5275] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 228.562898][ T5275] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 228.594012][ T7495] netlink: 28 bytes leftover after parsing attributes in process `syz.3.354'. [ 228.617842][ T5237] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 228.627895][ T7499] random: crng reseeded on system resumption [ 228.635117][ T5237] Bluetooth: hci2: Injecting HCI hardware error event [ 228.646091][ T5235] Bluetooth: hci2: hardware error 0x00 [ 228.658067][ T5275] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.934854][ T5275] usb 2-1: GET_CAPABILITIES returned 0 [ 228.941884][ T5275] usbtmc 2-1:16.0: can't read capabilities [ 229.756017][ T5275] usb 2-1: USB disconnect, device number 16 [ 230.102122][ T7333] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 230.133892][ T7333] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 230.144494][ T7499] netlink: 'syz.4.351': attribute type 1 has an invalid length. [ 230.162377][ T7333] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 230.190305][ T7333] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 230.197582][ T51] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 230.230641][ T7524] netlink: 12 bytes leftover after parsing attributes in process `syz.2.358'. [ 230.362439][ T7333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.376936][ T7333] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.402886][ T7333] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 230.413455][ T7333] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 230.427638][ T1122] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.434833][ T1122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.455377][ T51] usb 4-1: Using ep0 maxpacket: 8 [ 230.466624][ T51] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 230.477180][ T51] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.522977][ T51] usb 4-1: Product: syz [ 230.525493][ T1122] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.534436][ T1122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.563582][ T51] usb 4-1: Manufacturer: syz [ 230.594694][ T51] usb 4-1: SerialNumber: syz [ 230.650890][ T7333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.671143][ T51] usb 4-1: config 0 descriptor?? [ 230.846904][ T7531] sctp: [Deprecated]: syz.1.359 (pid 7531) Use of int in max_burst socket option deprecated. [ 230.846904][ T7531] Use struct sctp_assoc_value instead [ 230.871491][ T7333] veth0_vlan: entered promiscuous mode [ 230.918237][ T51] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 230.935737][ T7333] veth1_vlan: entered promiscuous mode [ 230.947441][ T5235] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 231.050391][ T7333] veth0_macvtap: entered promiscuous mode [ 231.108366][ T7333] veth1_macvtap: entered promiscuous mode [ 231.200322][ T7333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.217495][ T7333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.231893][ T7333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.288660][ T7333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.305471][ T7333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.325550][ T7333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.336322][ T7333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.348049][ T7333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.362890][ T7333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.378081][ T5233] usb 5-1: USB disconnect, device number 16 [ 231.403311][ T7333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.477258][ T7333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.508999][ T5233] Unregistered device Sky IT Digital Key (green led) [ 231.514454][ T5233] as10x_usb: device has been disconnected [ 231.533948][ T7333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.565677][ T7333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.578569][ T7333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.621359][ T7333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.652193][ T7333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.688350][ T7333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.709650][ T7333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.774432][ T7333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.785464][ T7333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.796913][ T7333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.854446][ T7333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.976734][ T7333] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.985857][ T7333] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.994923][ T7333] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.013915][ T7333] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.065548][ T5233] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 232.146071][ T7546] bridge2: entered promiscuous mode [ 232.195542][ T7546] bridge2: entered allmulticast mode [ 232.245513][ T5233] usb 2-1: Using ep0 maxpacket: 8 [ 232.351239][ T5233] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 232.369974][ T5233] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 232.386758][ T5233] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 232.400030][ T5233] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 232.423854][ T5233] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 232.442738][ T5233] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.705854][ T5233] usb 2-1: GET_CAPABILITIES returned 0 [ 232.721122][ T1066] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.751111][ T5233] usbtmc 2-1:16.0: can't read capabilities [ 232.769624][ T1066] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.963897][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 232.973377][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 233.117030][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 233.126230][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 233.135300][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 233.144368][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 233.153457][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 233.162726][ C0] vkms_vblank_simulate: vblank timer overrun [ 233.183817][ T51] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 233.193552][ T2579] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.201759][ T2579] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.210950][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 233.220049][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 233.229152][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 233.238346][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 233.261662][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 233.270861][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 233.279977][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 233.289464][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 233.337973][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 233.845352][ T51] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 234.017040][ T51] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 234.028186][ T51] usb 5-1: New USB device found, idVendor=0499, idProduct=1058, bcdDevice=31.95 [ 234.037577][ T51] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.057098][ T51] usb 5-1: config 0 descriptor?? [ 234.080823][ T51] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 234.108219][ T51] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 234.153087][ T5222] udevd[5222]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 234.429895][ T5272] usb 4-1: USB disconnect, device number 16 [ 234.768036][ T7597] netlink: 12 bytes leftover after parsing attributes in process `syz.0.368'. [ 234.971067][ T8] usb 2-1: USB disconnect, device number 17 [ 235.285340][ T1909] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.363309][ T1909] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 44344 - 0 [ 235.693886][ T5237] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 235.709427][ T5237] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 235.733518][ T5237] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 235.749903][ T5237] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 235.765181][ T5237] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 235.776179][ T5237] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 235.806801][ T1909] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.875303][ T1909] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 44344 - 0 [ 235.977871][ T7614] netlink: 12 bytes leftover after parsing attributes in process `syz.3.371'. [ 236.096538][ T1909] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.141758][ T1909] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 44344 - 0 [ 236.337768][ T1909] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.371557][ T1909] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 44344 - 0 [ 236.670838][ T9] usb 5-1: USB disconnect, device number 17 [ 236.998864][ T5235] Bluetooth: hci4: unexpected event 0x06 length: 17 > 3 [ 237.038426][ T7620] chnl_net:caif_netlink_parms(): no params data found [ 237.134770][ T5235] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 237.141521][ T5235] Bluetooth: Wrong link type (-22) [ 237.147611][ T5235] Bluetooth: hci4: link tx timeout [ 237.153286][ T5235] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 237.298175][ T1909] bridge_slave_1: left allmulticast mode [ 237.324311][ T1909] bridge_slave_1: left promiscuous mode [ 237.359571][ T1909] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.406208][ T1909] bridge_slave_0: left allmulticast mode [ 237.447330][ T1909] bridge_slave_0: left promiscuous mode [ 237.498247][ T1909] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.817527][ T5235] Bluetooth: hci2: command tx timeout [ 238.355448][ T5272] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 238.442438][ T51] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 238.525131][ T5272] usb 1-1: Using ep0 maxpacket: 8 [ 238.601904][ T5272] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 238.615258][ T5272] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.636143][ T51] usb 4-1: Using ep0 maxpacket: 8 [ 238.642609][ T5272] usb 1-1: Product: syz [ 238.649529][ T5272] usb 1-1: Manufacturer: syz [ 238.656677][ T51] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 238.666405][ T51] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.674445][ T51] usb 4-1: Product: syz [ 238.683551][ T5272] usb 1-1: SerialNumber: syz [ 238.695591][ T1909] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.724208][ T5272] usb 1-1: config 0 descriptor?? [ 238.731768][ T51] usb 4-1: Manufacturer: syz [ 238.743830][ T51] usb 4-1: SerialNumber: syz [ 238.749735][ T1909] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.761369][ T51] usb 4-1: config 0 descriptor?? [ 238.776132][ T1909] bond0 (unregistering): Released all slaves [ 238.859151][ T7654] netlink: 16 bytes leftover after parsing attributes in process `syz.1.375'. [ 238.961104][ T5272] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 238.971853][ T1909] tipc: Left network mode [ 238.977413][ T51] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 239.175287][ T5235] Bluetooth: hci4: command 0x0406 tx timeout [ 239.176720][ T7620] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.193708][ T7620] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.245500][ T7620] bridge_slave_0: entered allmulticast mode [ 239.272683][ T7620] bridge_slave_0: entered promiscuous mode [ 239.320622][ T7620] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.345113][ T7620] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.352446][ T7620] bridge_slave_1: entered allmulticast mode [ 239.386356][ T7620] bridge_slave_1: entered promiscuous mode [ 239.592713][ T1909] hsr_slave_0: left promiscuous mode [ 239.601609][ T1909] hsr_slave_1: left promiscuous mode [ 239.617408][ T1909] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.632553][ T1909] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.641987][ T1909] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.661105][ T1909] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.709509][ T1909] veth1_macvtap: left promiscuous mode [ 239.734057][ T1909] veth0_macvtap: left promiscuous mode [ 239.750911][ T1909] veth1_vlan: left promiscuous mode [ 239.761553][ T1909] veth0_vlan: left promiscuous mode [ 239.896669][ T5237] Bluetooth: hci2: command tx timeout [ 240.816388][ T1909] team0 (unregistering): Port device team_slave_1 removed [ 240.903114][ T1909] team0 (unregistering): Port device team_slave_0 removed [ 241.260593][ T51] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 241.669007][ T7620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.713352][ T7620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.875776][ T7620] team0: Port device team_slave_0 added [ 241.926466][ T7620] team0: Port device team_slave_1 added [ 241.986143][ T5235] Bluetooth: hci2: command tx timeout [ 242.338553][ T7620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.352612][ T7620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.387403][ T7620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.406784][ T7620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.421198][ T7620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.483230][ T7620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.567332][ T9] usb 4-1: USB disconnect, device number 17 [ 242.663101][ T7620] hsr_slave_0: entered promiscuous mode [ 242.684528][ T5272] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 242.722930][ T5272] usb 1-1: USB disconnect, device number 14 [ 242.727701][ T7620] hsr_slave_1: entered promiscuous mode [ 242.752141][ T7620] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 242.763842][ T7620] Cannot create hsr debugfs directory [ 243.528931][ T7739] hub 9-0:1.0: USB hub found [ 243.546377][ T7739] hub 9-0:1.0: 8 ports detected [ 244.065334][ T5235] Bluetooth: hci2: command tx timeout [ 244.371869][ T7620] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 244.490314][ T7620] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 244.536171][ T7620] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 244.580299][ T7754] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 244.604732][ T7620] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 244.649216][ T7754] fuse: Invalid rootmode [ 245.186836][ T7620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.325551][ T7620] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.375258][ T5233] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 245.401576][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.408853][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.498138][ T1066] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.505313][ T1066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.578487][ T5233] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.606464][ T5233] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.616558][ T51] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 245.644846][ T5233] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 245.661565][ T5233] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.728500][ T5233] usb 5-1: config 0 descriptor?? [ 245.805295][ T51] usb 2-1: Using ep0 maxpacket: 8 [ 245.839958][ T51] usb 2-1: config 0 has no interfaces? [ 245.861906][ T51] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 245.892559][ T51] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.898182][ T7620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.945103][ T51] usb 2-1: Product: syz [ 245.959001][ T51] usb 2-1: Manufacturer: syz [ 245.994826][ T51] usb 2-1: SerialNumber: syz [ 246.028033][ T51] usb 2-1: config 0 descriptor?? [ 246.199728][ T7620] veth0_vlan: entered promiscuous mode [ 246.312830][ T7620] veth1_vlan: entered promiscuous mode [ 246.403668][ T5233] hid-led 0003:1D34:000A.0007: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.4-1/input0 [ 246.483750][ T51] usb 2-1: USB disconnect, device number 18 [ 246.508094][ T5233] hid-led 0003:1D34:000A.0007: Dream Cheeky Webmail Notifier initialized [ 246.564269][ T7620] veth0_macvtap: entered promiscuous mode [ 246.607705][ T7774] netlink: 16 bytes leftover after parsing attributes in process `syz.3.390'. [ 246.756696][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 246.756721][ T29] audit: type=1326 audit(1726911019.226:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7759 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5277def9 code=0x7ffc0000 [ 246.785097][ C0] vkms_vblank_simulate: vblank timer overrun [ 246.826889][ T7620] veth1_macvtap: entered promiscuous mode [ 246.843965][ T7620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.877722][ T7620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.902999][ T7620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.927938][ T7620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.950280][ T29] audit: type=1326 audit(1726911019.286:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7759 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5277def9 code=0x7ffc0000 [ 246.978085][ T7620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.015102][ T7620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.057079][ T7620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.111405][ T7620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.162547][ T7620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.224159][ T7620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.319720][ T7620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.435819][ T7620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.492138][ T7620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.522947][ T7620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.562098][ T7620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.597883][ T7738] syz.0.385 (7738): drop_caches: 1 [ 247.603512][ T7620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.622999][ T7620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.633395][ T7620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.669537][ T7620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.681852][ T7620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.692574][ T7620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.722679][ T7620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.791545][ T7620] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.813509][ T7620] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.836834][ T7620] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.866394][ T7620] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.109501][ T1909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.117682][ T1909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.125365][ T1909] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.133358][ T1909] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.166153][ T5233] usb 5-1: USB disconnect, device number 18 [ 248.426996][ T7804] netlink: 4 bytes leftover after parsing attributes in process `syz.1.394'. [ 248.437744][ T7804] netlink: 4 bytes leftover after parsing attributes in process `syz.1.394'. [ 248.490609][ T7811] hub 9-0:1.0: USB hub found [ 248.499966][ T7811] hub 9-0:1.0: 8 ports detected [ 248.595163][ T5233] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 248.757089][ T5233] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 248.773745][ T5233] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 248.793102][ T5233] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 248.804358][ T5233] usb 5-1: New USB device found, idVendor=856b, idProduct=0099, bcdDevice= 0.00 [ 248.819518][ T5233] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.339604][ T5233] usb 5-1: 0:2 : does not exist [ 249.382289][ T7822] netlink: 16 bytes leftover after parsing attributes in process `syz.1.400'. [ 249.695611][ T8] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 249.846074][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 249.891496][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 249.903183][ T7838] random: crng reseeded on system resumption [ 249.933549][ T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 249.933610][ T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 249.933665][ T8] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 249.933695][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.956513][ T7824] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 249.963574][ T8] hub 3-1:1.0: bad descriptor, ignoring hub [ 249.963613][ T8] hub 3-1:1.0: probe with driver hub failed with error -5 [ 249.964653][ T8] cdc_wdm 3-1:1.0: skipping garbage [ 249.964679][ T8] cdc_wdm 3-1:1.0: skipping garbage [ 250.001763][ T8] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 250.001807][ T8] cdc_wdm 3-1:1.0: Unknown control protocol [ 250.005265][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.005305][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.005357][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 250.005401][ T9] usb 4-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00 [ 250.005431][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.009025][ T9] usb 4-1: config 0 descriptor?? [ 250.547509][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 250.547593][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 250.548055][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 250.548070][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 250.548282][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 250.548304][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 250.548510][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 250.548530][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 250.548722][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 250.548742][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 250.548940][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 250.548959][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 250.549150][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 250.549169][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 250.549359][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 250.549378][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 250.549566][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 250.549585][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 250.549789][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 250.549809][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 250.617935][ T7845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.655405][ T7845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.698343][ T7819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.746554][ T7819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.780265][ T9] waltop 0003:172F:0038.0008: hidraw0: USB HID v0.00 Device [HID 172f:0038] on usb-dummy_hcd.3-1/input0 [ 250.894476][ T29] audit: type=1326 audit(1726911023.356:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7850 comm="syz.0.403" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f76ffb7def9 code=0x0 [ 251.249861][ T7855] netlink: 'syz.2.401': attribute type 30 has an invalid length. [ 251.256503][ T5271] usb 5-1: USB disconnect, device number 19 [ 251.944571][ T7870] netlink: 'syz.4.404': attribute type 10 has an invalid length. [ 252.031481][ T7870] team0: Port device netdevsim0 added [ 252.408429][ T5275] usb 4-1: USB disconnect, device number 18 [ 253.085604][ T7892] hub 9-0:1.0: USB hub found [ 253.105257][ T7892] hub 9-0:1.0: 8 ports detected [ 253.185195][ T5275] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 253.195400][ T5233] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 253.339982][ T5275] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.356837][ T5233] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.434610][ T5275] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.504215][ T5233] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.540607][ T5275] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 253.550874][ T5233] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 253.591371][ T5233] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.600568][ T5275] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.670618][ T5233] usb 4-1: config 0 descriptor?? [ 253.680040][ T5275] usb 5-1: config 0 descriptor?? [ 254.261531][ T7903] netlink: 136 bytes leftover after parsing attributes in process `syz.1.410'. [ 254.373744][ T5275] hid-led 0003:1D34:000A.0009: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.4-1/input0 [ 254.396210][ T8] usb 3-1: USB disconnect, device number 13 [ 254.421783][ T5233] hid-led 0003:1D34:000A.000A: hidraw1: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.3-1/input0 [ 254.447459][ T5275] hid-led 0003:1D34:000A.0009: Dream Cheeky Webmail Notifier initialized [ 254.522962][ T5233] hid-led 0003:1D34:000A.000A: Dream Cheeky Webmail Notifier initialized [ 254.706332][ T29] audit: type=1326 audit(1726911027.186:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7882 comm="syz.4.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5277def9 code=0x7ffc0000 [ 254.792619][ T29] audit: type=1326 audit(1726911027.186:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7882 comm="syz.4.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5277def9 code=0x7ffc0000 [ 254.862087][ T7917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.411'. [ 254.862186][ T29] audit: type=1326 audit(1726911027.276:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7880 comm="syz.3.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f405c77def9 code=0x7ffc0000 [ 254.893623][ T5275] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 254.905661][ T7917] netlink: 4 bytes leftover after parsing attributes in process `syz.0.411'. [ 254.969921][ T29] audit: type=1326 audit(1726911027.276:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7880 comm="syz.3.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f405c77def9 code=0x7ffc0000 [ 254.985589][ T7917] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 36229 - 0 [ 254.993892][ T29] audit: type=1326 audit(1726911027.276:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7880 comm="syz.3.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f405c77def9 code=0x7ffc0000 [ 255.026106][ T29] audit: type=1326 audit(1726911027.306:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7882 comm="syz.4.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f7a5277def9 code=0x7ffc0000 [ 255.042607][ T7917] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 36229 - 0 [ 255.049883][ T29] audit: type=1326 audit(1726911027.306:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7882 comm="syz.4.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5277def9 code=0x7ffc0000 [ 255.091694][ T5275] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.104841][ T5275] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.121556][ T5275] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 255.139614][ T7917] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 36229 - 0 [ 255.148669][ T29] audit: type=1326 audit(1726911027.306:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7882 comm="syz.4.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5277def9 code=0x7ffc0000 [ 255.155171][ T7917] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 36229 - 0 [ 255.171251][ T5275] usb 2-1: New USB device found, idVendor=0c70, idProduct=f00e, bcdDevice= 0.00 [ 255.191279][ T29] audit: type=1326 audit(1726911027.306:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7880 comm="syz.3.406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f405c77def9 code=0x7ffc0000 [ 255.196659][ T7917] geneve2: entered promiscuous mode [ 255.218504][ T5275] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.271118][ T7917] geneve2: entered allmulticast mode [ 255.315377][ T5275] usb 2-1: config 0 descriptor?? [ 255.658987][ T7924] netlink: 'syz.2.413': attribute type 1 has an invalid length. [ 255.669965][ T7924] bond0: option mode: unable to set because the bond device has slaves [ 255.852511][ T7909] netlink: 144 bytes leftover after parsing attributes in process `syz.1.410'. [ 255.902907][ T8] usb 5-1: USB disconnect, device number 20 [ 255.916289][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.925406][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.037849][ T5272] usb 4-1: USB disconnect, device number 19 [ 256.816007][ T7931] ptrace attach of "./syz-executor exec"[7933] was attempted by ""[7931] [ 257.065290][ T8] usb 3-1: new low-speed USB device number 14 using dummy_hcd [ 257.313401][ T8] usb 3-1: string descriptor 0 read error: -22 [ 257.330382][ T8] usb 3-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 257.462003][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.686522][ T8] usb 3-1: config 0 descriptor?? [ 257.748922][ T5275] usbhid 2-1:0.0: can't add hid device: -71 [ 257.755365][ T5275] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 257.859402][ T5275] usb 2-1: USB disconnect, device number 19 [ 257.923054][ T7940] team0: Port device virt_wifi0 added [ 258.012545][ T7935] netlink: 'syz.2.417': attribute type 21 has an invalid length. [ 258.169592][ T7935] netlink: 128 bytes leftover after parsing attributes in process `syz.2.417'. [ 258.224230][ T7935] netlink: 'syz.2.417': attribute type 4 has an invalid length. [ 258.274504][ T7935] netlink: 3 bytes leftover after parsing attributes in process `syz.2.417'. [ 258.381298][ T7948] input: syz1 as /devices/virtual/input/input10 [ 258.652136][ T8] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 258.721700][ T8] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 258.740764][ T8] dib0700: firmware download failed at 7 with -22 [ 258.795112][ T8] usb 3-1: USB disconnect, device number 14 [ 259.955209][ T5233] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 260.022519][ T8] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 260.120123][ T7977] bridge1: entered promiscuous mode [ 260.161755][ T5233] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.175401][ T7977] bridge1: entered allmulticast mode [ 260.219197][ T5233] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.253402][ T5233] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 260.265262][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 260.282214][ T5233] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.285738][ T8] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 260.325920][ T5233] usb 3-1: config 0 descriptor?? [ 260.335654][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 260.393153][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 260.452069][ T8] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 260.481255][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.490768][ T7981] netlink: 4 bytes leftover after parsing attributes in process `syz.3.428'. [ 260.532377][ T8] usb 2-1: config 0 descriptor?? [ 260.555788][ T7973] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 260.567879][ T8] hub 2-1:0.0: USB hub found [ 260.683446][ T7986] use of bytesused == 0 is deprecated and will be removed in the future, [ 260.758600][ T7986] use the actual size instead. [ 260.860444][ T7984] team_slave_0: entered promiscuous mode [ 260.866866][ T7984] team_slave_1: entered promiscuous mode [ 260.872737][ T7984] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 260.963963][ T5233] hid-led 0003:1D34:000A.000B: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.2-1/input0 [ 261.063003][ T5233] hid-led 0003:1D34:000A.000B: Dream Cheeky Webmail Notifier initialized [ 261.223622][ T29] audit: type=1326 audit(1726911033.706:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7965 comm="syz.2.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98de57def9 code=0x7ffc0000 [ 261.379865][ T29] audit: type=1326 audit(1726911033.736:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7965 comm="syz.2.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98de57def9 code=0x7ffc0000 [ 261.426224][ T29] audit: type=1326 audit(1726911033.746:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7965 comm="syz.2.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f98de57def9 code=0x7ffc0000 [ 261.469152][ T29] audit: type=1326 audit(1726911033.746:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7965 comm="syz.2.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98de57def9 code=0x7ffc0000 [ 261.529614][ T29] audit: type=1326 audit(1726911033.746:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7965 comm="syz.2.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98de57def9 code=0x7ffc0000 [ 261.674195][ T7998] syz.0.430 (7998): attempted to duplicate a private mapping with mremap. This is not supported. [ 261.927936][ T8002] vxcan2: entered allmulticast mode [ 262.326160][ T5271] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 262.541299][ T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 262.550733][ T5271] usb 5-1: Using ep0 maxpacket: 8 [ 262.584498][ T5271] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 262.640581][ T5271] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 262.780632][ T5271] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 262.879965][ T9] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 262.922368][ T5271] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 262.971065][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.012028][ T1173] usb 3-1: USB disconnect, device number 15 [ 263.138052][ T8] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 263.152288][ T9] usb 4-1: Product: syz [ 263.180495][ T5271] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 263.207282][ T9] usb 4-1: Manufacturer: syz [ 263.211976][ T9] usb 4-1: SerialNumber: syz [ 263.238498][ T5271] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.255252][ T8] usbhid 2-1:0.0: can't add hid device: -71 [ 263.268290][ T9] usb 4-1: config 0 descriptor?? [ 263.286718][ T8] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 263.518847][ T5271] usb 5-1: GET_CAPABILITIES returned 0 [ 263.528098][ T5271] usbtmc 5-1:16.0: can't read capabilities [ 263.566876][ T8] usb 2-1: reset high-speed USB device number 20 using dummy_hcd [ 263.774041][ T8] usb 2-1: device reset changed ep0 maxpacket size! [ 263.785141][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 263.794679][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 263.800111][ T8] usb 2-1: USB disconnect, device number 20 [ 263.827445][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 263.836555][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 263.845961][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 263.855062][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 263.864139][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 263.873199][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 263.974724][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 264.071102][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 264.080202][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 264.089374][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 264.098546][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 264.107597][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 264.116641][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 264.195935][ T5237] Bluetooth: hci0: command 0x0406 tx timeout [ 264.277230][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 264.306456][ T9] mos7840 4-1:0.0: required endpoints missing [ 264.322017][ T9] usb 4-1: USB disconnect, device number 20 [ 264.395195][ T8] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 264.462675][ T5233] usb 5-1: USB disconnect, device number 21 [ 264.567429][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 264.592630][ T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.625138][ T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.659719][ T8] usb 2-1: New USB device found, idVendor=0b05, idProduct=19b6, bcdDevice= 0.40 [ 264.675817][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.684350][ T8] usb 2-1: Product: syz [ 264.690385][ T7933] coredump: 105(syz.3.415): written to core: VMAs: 40, size 99655680; core: 62264690 bytes, pos 99663872 [ 264.702580][ T8] usb 2-1: Manufacturer: syz [ 264.715102][ T8] usb 2-1: SerialNumber: syz [ 264.768668][ T8032] hub 9-0:1.0: USB hub found [ 264.781018][ T8032] hub 9-0:1.0: 8 ports detected [ 264.885276][ T5272] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 265.040384][ T29] audit: type=1326 audit(1726911037.526:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8033 comm="syz.2.442" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f98de57def9 code=0x0 [ 265.062256][ T5272] usb 1-1: Using ep0 maxpacket: 8 [ 265.074741][ T5272] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 265.074783][ T5272] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.112145][ C1] vkms_vblank_simulate: vblank timer overrun [ 265.113824][ T5272] usb 1-1: config 0 descriptor?? [ 265.374018][ T8036] netlink: 12 bytes leftover after parsing attributes in process `syz.2.442'. [ 265.374155][ T8036] netlink: 36 bytes leftover after parsing attributes in process `syz.2.442'. [ 265.727003][ T5272] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 265.727132][ T5272] asix 1-1:0.0: probe with driver asix failed with error -61 [ 265.915355][ T5233] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 266.092910][ T5233] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.104784][ T5233] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.127252][ T5233] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 266.176990][ T5233] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.223144][ T5233] usb 5-1: config 0 descriptor?? [ 266.295428][ T5275] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 266.456881][ T5275] usb 3-1: Using ep0 maxpacket: 32 [ 266.501854][ T5275] usb 3-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=e1.fc [ 266.540364][ T5275] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.602412][ T5275] usb 3-1: config 0 descriptor?? [ 266.627037][ T5275] ljca 3-1:0.0: bulk endpoints not found [ 266.690895][ T8054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.762227][ T8054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.792342][ T8] usbhid 2-1:1.0: can't add hid device: -71 [ 266.798508][ T8] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 266.830548][ T8] usb 2-1: USB disconnect, device number 21 [ 266.840501][ T1848] usb 3-1: USB disconnect, device number 16 [ 266.866494][ T5233] hid-led 0003:1D34:000A.000C: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.4-1/input0 [ 266.940708][ T8058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.982485][ T5233] hid-led 0003:1D34:000A.000C: Dream Cheeky Webmail Notifier initialized [ 267.010171][ T8058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.090229][ T29] audit: type=1326 audit(1726911039.566:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8044 comm="syz.4.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5277def9 code=0x7ffc0000 [ 267.173075][ T29] audit: type=1326 audit(1726911039.566:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8044 comm="syz.4.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5277def9 code=0x7ffc0000 [ 267.253262][ T29] audit: type=1326 audit(1726911039.566:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8044 comm="syz.4.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f7a5277def9 code=0x7ffc0000 [ 267.309188][ T29] audit: type=1326 audit(1726911039.616:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8044 comm="syz.4.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5277def9 code=0x7ffc0000 [ 267.336085][ T5235] Bluetooth: hci4: command 0x0406 tx timeout [ 267.418232][ T8] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 267.452475][ T29] audit: type=1326 audit(1726911039.626:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8044 comm="syz.4.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5277def9 code=0x7ffc0000 [ 267.608368][ T8] usb 2-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice= 3.90 [ 267.639821][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.697622][ T8] usb 2-1: config 0 descriptor?? [ 267.737587][ T8] bfusb 2-1:0.0: probe with driver bfusb failed with error -5 [ 267.925185][ T1848] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 267.981419][ T5275] usb 2-1: USB disconnect, device number 22 [ 268.105869][ T1848] usb 4-1: Using ep0 maxpacket: 8 [ 268.122432][ T1848] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 268.148733][ T1848] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 268.191588][ T1848] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 268.202570][ T1848] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 268.215533][ T1848] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 268.231258][ T1848] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 268.240867][ T1848] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.527866][ T1848] usb 4-1: usb_control_msg returned -32 [ 268.550930][ T1848] usbtmc 4-1:16.0: can't read capabilities [ 268.589027][ T1848] usb 1-1: USB disconnect, device number 15 [ 268.767015][ T5271] usb 5-1: USB disconnect, device number 22 [ 269.035217][ T8] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 269.105200][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 269.185261][ T6924] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 269.205153][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 269.216050][ T8] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 269.231286][ T8] usb 2-1: config 0 has no interface number 0 [ 269.239389][ T1848] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 269.242125][ T8] usb 2-1: Dual-Role OTG device on HNP port [ 269.280506][ T9] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 269.309092][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.318361][ T8] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 269.335848][ T9] usb 3-1: Product: syz [ 269.340293][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.350467][ T6924] usb 1-1: Using ep0 maxpacket: 8 [ 269.361657][ T9] usb 3-1: Manufacturer: syz [ 269.369021][ T6924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 269.379255][ T9] usb 3-1: SerialNumber: syz [ 269.384883][ T8] usb 2-1: Product: syz [ 269.394747][ T8] usb 2-1: Manufacturer: syz [ 269.400197][ T6924] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 269.411391][ T9] usb 3-1: config 0 descriptor?? [ 269.416580][ T8] usb 2-1: SerialNumber: syz [ 269.416614][ T1848] usb 5-1: Using ep0 maxpacket: 8 [ 269.434554][ T6924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 269.446207][ T6924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 269.461666][ T6924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 269.483556][ T8] usb 2-1: config 0 descriptor?? [ 269.523276][ T1848] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 269.549263][ T6924] usb 1-1: New USB device found, idVendor=0499, idProduct=1055, bcdDevice= 1.a4 [ 269.560187][ T6924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.570038][ T6924] usb 1-1: Product: syz [ 269.577533][ T6924] usb 1-1: Manufacturer: syz [ 269.584618][ T6924] usb 1-1: SerialNumber: syz [ 269.595718][ T6924] usb 1-1: config 0 descriptor?? [ 269.615177][ T1848] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 269.659836][ T1848] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 269.672173][ T1848] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 269.696169][ T1848] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 269.713399][ T1848] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.725758][ T5275] usb 2-1: USB disconnect, device number 23 [ 269.828384][ T6924] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 269.921993][ T6924] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 269.948885][ T6924] usb 1-1: USB disconnect, device number 16 [ 270.013843][ T5363] udevd[5363]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 270.044404][ T1848] usb 5-1: GET_CAPABILITIES returned 0 [ 270.069258][ T1848] usbtmc 5-1:16.0: can't read capabilities [ 270.249631][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 270.258735][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 270.267797][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 270.276980][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 270.286066][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 270.295147][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 270.304276][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 270.387023][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 270.396176][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 270.405294][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 270.414390][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 270.428940][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 270.438060][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 270.447130][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 270.459252][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 270.469605][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 270.562551][ T9] mos7840 3-1:0.0: required endpoints missing [ 270.571404][ T9] usb 3-1: USB disconnect, device number 17 [ 270.611450][ T6924] usb 4-1: USB disconnect, device number 21 [ 270.745198][ T8] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 270.917299][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 270.982503][ T8] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 271.023083][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.081124][ T8] usb 2-1: Product: syz [ 271.095264][ T8] usb 2-1: Manufacturer: syz [ 271.144697][ T5233] usb 5-1: USB disconnect, device number 23 [ 271.145050][ T8] usb 2-1: SerialNumber: syz [ 271.199498][ T8] usb 2-1: config 0 descriptor?? [ 271.447515][ T8] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 271.593190][ T8103] vxcan1: tx address claim with dlc 1 [ 272.102867][ T5235] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 272.557703][ T5233] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 272.635093][ T1848] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 272.741619][ T5233] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.799340][ T5233] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.810538][ T1848] usb 1-1: Using ep0 maxpacket: 8 [ 272.822417][ T1848] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 272.842179][ T5233] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 272.855201][ T1848] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 272.884445][ T5233] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.902410][ T1848] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 272.934641][ T1848] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 272.948808][ T5233] usb 5-1: config 0 descriptor?? [ 272.972849][ T1848] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 272.989897][ T1848] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.015795][ T1848] usb 1-1: Product: syz [ 273.038993][ T1848] usb 1-1: Manufacturer: syz [ 273.060875][ T1848] usb 1-1: SerialNumber: syz [ 273.086991][ T1848] usb 1-1: config 0 descriptor?? [ 273.105832][ T1848] hub 1-1:0.0: bad descriptor, ignoring hub [ 273.120736][ T1848] hub 1-1:0.0: probe with driver hub failed with error -5 [ 273.139319][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 273.316340][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 273.360597][ T9] usb 3-1: config 9 has an invalid interface number: 39 but max is 0 [ 273.393727][ T9] usb 3-1: config 9 has no interface number 0 [ 273.411373][ T9] usb 3-1: config 9 interface 39 altsetting 9 bulk endpoint 0x6 has invalid maxpacket 64 [ 273.434918][ T9] usb 3-1: config 9 interface 39 has no altsetting 0 [ 273.435488][ T1848] usb 1-1: USB disconnect, device number 17 [ 273.481404][ T9] usb 3-1: New USB device found, idVendor=0a07, idProduct=0082, bcdDevice=ce.ab [ 273.504252][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.523627][ T9] usb 3-1: Product: syz [ 273.529571][ T9] usb 3-1: Manufacturer: syz [ 273.537923][ T9] usb 3-1: SerialNumber: syz [ 273.568593][ T5233] hid-led 0003:1D34:000A.000D: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.4-1/input0 [ 273.586841][ T8118] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 273.633161][ T5233] hid-led 0003:1D34:000A.000D: Dream Cheeky Webmail Notifier initialized [ 273.680433][ T8] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 273.781595][ T29] audit: type=1326 audit(1726911046.266:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8112 comm="syz.4.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5277def9 code=0x7ffc0000 [ 273.821447][ T9] adutux 3-1:9.39: interrupt endpoints not found [ 273.834466][ T29] audit: type=1326 audit(1726911046.266:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8112 comm="syz.4.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5277def9 code=0x7ffc0000 [ 273.881497][ T9] usb 3-1: USB disconnect, device number 18 [ 273.921611][ T29] audit: type=1326 audit(1726911046.286:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8112 comm="syz.4.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f7a5277def9 code=0x7ffc0000 [ 273.964447][ T29] audit: type=1326 audit(1726911046.286:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8112 comm="syz.4.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5277def9 code=0x7ffc0000 [ 273.995377][ T29] audit: type=1326 audit(1726911046.286:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8112 comm="syz.4.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5277def9 code=0x7ffc0000 [ 274.005748][ T8128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.469'. [ 274.026522][ T5233] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 274.059997][ T8128] netlink: 12 bytes leftover after parsing attributes in process `syz.0.469'. [ 274.199868][ T5233] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 274.249667][ T5233] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.274684][ T5233] usb 4-1: Product: syz [ 274.295473][ T5233] usb 4-1: Manufacturer: syz [ 274.304660][ T5233] usb 4-1: SerialNumber: syz [ 274.324735][ T5233] usb 4-1: config 0 descriptor?? [ 274.714444][ T5275] usb 4-1: USB disconnect, device number 22 [ 275.003549][ T8] usb 2-1: USB disconnect, device number 24 [ 275.521000][ T8] usb 5-1: USB disconnect, device number 24 [ 275.655345][ T5233] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 275.893416][ T5233] usb 2-1: Using ep0 maxpacket: 8 [ 275.915916][ T5233] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 275.925898][ T5233] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 275.935909][ T5233] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 275.946218][ T5233] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 275.959440][ T5233] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 275.968600][ T5233] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.083498][ T6924] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 276.105556][ T8] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 276.187456][ T5235] Bluetooth: hci4: unexpected event for opcode 0x200f [ 276.265218][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 276.274624][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.306421][ T5233] usb 2-1: GET_CAPABILITIES returned 0 [ 276.313407][ T5233] usbtmc 2-1:16.0: can't read capabilities [ 276.480951][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.492410][ T6924] usb 3-1: Using ep0 maxpacket: 8 [ 276.509843][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 276.519057][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 276.528140][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 276.540575][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 276.549794][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 276.558900][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 276.641614][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 276.650703][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 276.659756][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 276.669049][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 276.678101][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 276.687138][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 276.696174][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 276.705472][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 276.731333][ T8] usb 1-1: New USB device found, idVendor=05ac, idProduct=027b, bcdDevice= 0.00 [ 276.815193][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.836090][ T8] usb 1-1: config 0 descriptor?? [ 276.842484][ T6924] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 276.852837][ T6924] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 276.862860][ T6924] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 276.874752][ T6924] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 276.894200][ T6924] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 276.903481][ T6924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.066611][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 277.075753][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 277.130838][ T8170] hub 9-0:1.0: USB hub found [ 277.140919][ T6924] usb 3-1: GET_CAPABILITIES returned 0 [ 277.152258][ T6924] usbtmc 3-1:16.0: can't read capabilities [ 277.182488][ T8170] hub 9-0:1.0: 8 ports detected [ 277.207955][ T9] usb 2-1: USB disconnect, device number 25 [ 277.373594][ T8] apple 0003:05AC:027B.000E: hidraw0: USB HID v0.00 Device [HID 05ac:027b] on usb-dummy_hcd.0-1/input0 [ 277.435122][ T5275] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 277.585296][ T5275] usb 4-1: Using ep0 maxpacket: 8 [ 277.620559][ T5275] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 277.675605][ T5275] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.683786][ T5275] usb 4-1: Product: syz [ 277.688142][ T5275] usb 4-1: Manufacturer: syz [ 277.692837][ T5275] usb 4-1: SerialNumber: syz [ 277.699899][ T5275] usb 4-1: config 0 descriptor?? [ 277.949960][ T5275] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 278.286608][ T8] usb 5-1: new low-speed USB device number 25 using dummy_hcd [ 278.400592][ T8178] tipc: Enabling of bearer rejected, failed to enable media [ 278.451520][ T5272] usb 3-1: USB disconnect, device number 19 [ 278.465949][ T8] usb 5-1: too many configurations: 21, using maximum allowed: 8 [ 278.476601][ T8] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 278.484640][ T8] usb 5-1: can't read configurations, error -61 [ 278.646217][ T8] usb 5-1: new low-speed USB device number 26 using dummy_hcd [ 278.817127][ T8] usb 5-1: too many configurations: 21, using maximum allowed: 8 [ 278.834616][ T8] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 278.848829][ T6924] usb 1-1: USB disconnect, device number 18 [ 278.878357][ T8] usb 5-1: can't read configurations, error -61 [ 278.891310][ T8] usb usb5-port1: attempt power cycle [ 279.265237][ T8] usb 5-1: new low-speed USB device number 27 using dummy_hcd [ 279.306461][ T8] usb 5-1: too many configurations: 21, using maximum allowed: 8 [ 279.347127][ T8] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 279.354794][ T8] usb 5-1: can't read configurations, error -61 [ 279.362206][ T6924] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 279.455628][ T5272] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 279.515139][ T8] usb 5-1: new low-speed USB device number 28 using dummy_hcd [ 279.537417][ T8] usb 5-1: too many configurations: 21, using maximum allowed: 8 [ 279.551559][ T6924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.576779][ T8] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 279.597558][ T8] usb 5-1: can't read configurations, error -61 [ 279.605317][ T6924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.618425][ T8] usb usb5-port1: unable to enumerate USB device [ 279.632293][ T6924] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 279.645097][ T5272] usb 3-1: config 0 has an invalid interface number: 29 but max is 0 [ 279.670352][ T6924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.677704][ T5272] usb 3-1: config 0 has no interface number 0 [ 279.691325][ T6924] usb 1-1: config 0 descriptor?? [ 279.698976][ T5272] usb 3-1: config 0 interface 29 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 279.726525][ T8194] binder: BINDER_SET_CONTEXT_MGR already set [ 279.745763][ T8194] binder: 8192:8194 ioctl 4018620d 20000040 returned -16 [ 279.766008][ T5272] usb 3-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=60.74 [ 279.782679][ T5272] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.795499][ T5272] usb 3-1: Product: syz [ 279.803662][ T5272] usb 3-1: Manufacturer: syz [ 279.810992][ T5272] usb 3-1: SerialNumber: syz [ 279.824090][ T5272] usb 3-1: config 0 descriptor?? [ 279.830828][ T8188] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 279.852951][ T5272] as10x_usb: device has been detected [ 279.860368][ T5272] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 279.883803][ T5272] usb 3-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 279.927040][ T5272] as10x_usb: error during firmware upload part1 [ 279.934444][ T5272] Registered device PCTV Systems picoStick (74e) [ 280.171486][ T8] usb 3-1: USB disconnect, device number 20 [ 280.218222][ T5275] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 280.223025][ T8] Unregistered device PCTV Systems picoStick (74e) [ 280.229419][ T5237] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 280.247331][ T5237] Bluetooth: hci4: Injecting HCI hardware error event [ 280.257065][ T5235] Bluetooth: hci4: hardware error 0x00 [ 280.310897][ T8] as10x_usb: device has been disconnected [ 280.328728][ T6924] hid-led 0003:1D34:000A.000F: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.0-1/input0 [ 280.341908][ T6924] hid-led 0003:1D34:000A.000F: Dream Cheeky Webmail Notifier initialized [ 280.544901][ T29] audit: type=1326 audit(1726911053.026:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8181 comm="syz.0.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76ffb7def9 code=0x7ffc0000 [ 280.570625][ T29] audit: type=1326 audit(1726911053.036:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8181 comm="syz.0.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76ffb7def9 code=0x7ffc0000 [ 280.644863][ T29] audit: type=1326 audit(1726911053.036:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8181 comm="syz.0.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f76ffb7def9 code=0x7ffc0000 [ 280.667223][ C1] vkms_vblank_simulate: vblank timer overrun [ 280.721838][ T29] audit: type=1326 audit(1726911053.036:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8181 comm="syz.0.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76ffb7def9 code=0x7ffc0000 [ 280.791079][ T29] audit: type=1326 audit(1726911053.046:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8181 comm="syz.0.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76ffb7def9 code=0x7ffc0000 [ 280.925688][ T5275] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 281.097114][ T5275] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 281.115372][ T6924] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 281.139844][ T5275] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.163483][ T5275] usb 2-1: Product: syz [ 281.177853][ T5275] usb 2-1: Manufacturer: syz [ 281.186911][ T5275] usb 2-1: SerialNumber: syz [ 281.207184][ T5275] usb 2-1: config 0 descriptor?? [ 281.265226][ T6924] usb 3-1: Using ep0 maxpacket: 8 [ 281.295221][ T6924] usb 3-1: config 0 has an invalid interface number: 154 but max is 0 [ 281.305815][ T6924] usb 3-1: config 0 has no interface number 0 [ 281.322828][ T6924] usb 3-1: config 0 interface 154 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 281.353901][ T6924] usb 3-1: config 0 interface 154 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 281.394936][ T6924] usb 3-1: config 0 interface 154 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 281.416790][ T6924] usb 3-1: config 0 interface 154 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 281.454902][ T6924] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=9e.bc [ 281.484129][ T51] usb 4-1: USB disconnect, device number 23 [ 281.511828][ T6924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.544512][ T6924] usb 3-1: Product: syz [ 281.566269][ T6924] usb 3-1: Manufacturer: syz [ 281.607214][ T6924] usb 3-1: SerialNumber: syz [ 281.641903][ T6924] usb 3-1: config 0 descriptor?? [ 281.666936][ T6924] appletouch 3-1:0.154: Could not find int-in endpoint [ 281.678093][ T6924] appletouch 3-1:0.154: probe with driver appletouch failed with error -5 [ 281.706553][ T6924] usbhid 3-1:0.154: couldn't find an input interrupt endpoint [ 281.964566][ T51] usb 3-1: USB disconnect, device number 21 [ 282.042495][ T5272] usb 1-1: USB disconnect, device number 19 [ 282.263056][ T8219] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 282.286786][ T8219] ptrace attach of "./syz-executor exec"[6824] was attempted by "./syz-executor exec"[8219] [ 282.376929][ T8225] x_tables: (null)_tables: IDLETIMER.0 target: invalid size 40 (kernel) != (user) 96 [ 282.392872][ T5235] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 282.662296][ T8233] tipc: Started in network mode [ 282.680899][ T8233] tipc: Node identity ffff000000a0ffffff00000000000001, cluster identity 4711 [ 282.709176][ T8233] tipc: Enabling of bearer rejected, failed to enable media [ 282.805486][ T5272] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 282.969097][ T5272] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 282.986622][ T51] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 282.994535][ T5272] usb 1-1: too many endpoints for config 0 interface 0 altsetting 255: 255, using maximum allowed: 30 [ 283.023428][ T5272] usb 1-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 283.045359][ T5272] usb 1-1: config 0 interface 0 has no altsetting 0 [ 283.055763][ T5272] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 283.065377][ T5272] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.074781][ T5272] usb 1-1: Product: syz [ 283.079282][ T5272] usb 1-1: Manufacturer: syz [ 283.084080][ T5272] usb 1-1: SerialNumber: syz [ 283.092105][ T5272] usb 1-1: config 0 descriptor?? [ 283.165205][ T51] usb 5-1: Using ep0 maxpacket: 8 [ 283.186920][ T51] usb 5-1: config 0 has an invalid interface number: 246 but max is 0 [ 283.199765][ T51] usb 5-1: config 0 has no interface number 0 [ 283.206122][ T51] usb 5-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 283.218298][ T51] usb 5-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 283.228352][ T51] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.236788][ T51] usb 5-1: Product: syz [ 283.241239][ T51] usb 5-1: Manufacturer: syz [ 283.246148][ T51] usb 5-1: SerialNumber: syz [ 283.264281][ T51] usb 5-1: config 0 descriptor?? [ 283.359438][ T5272] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 283.400600][ T5272] usb 1-1: selecting invalid altsetting 0 [ 283.456743][ T5272] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 283.553179][ T5272] usb 1-1: USB disconnect, device number 20 [ 283.561783][ T51] msi2500 5-1:0.246: Registered as swradio16 [ 283.571489][ T51] msi2500 5-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 283.620700][ T51] usb 5-1: USB disconnect, device number 29 [ 283.651208][ T5222] udevd[5222]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 283.816110][ T5275] mos7840 2-1:0.0: required endpoints missing [ 283.872242][ T5275] usb 2-1: USB disconnect, device number 26 [ 284.035149][ T5233] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 284.175133][ T5272] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 284.197373][ T5233] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.232827][ T5233] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.275246][ T5233] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 284.315963][ T5233] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.344511][ T5272] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 284.372898][ T5233] usb 3-1: config 0 descriptor?? [ 284.393950][ T5272] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.465560][ T5272] usb 4-1: config 0 descriptor?? [ 284.492936][ T5272] cp210x 4-1:0.0: cp210x converter detected [ 284.622242][ T8270] netlink: 40 bytes leftover after parsing attributes in process `syz.4.517'. [ 284.735273][ T5272] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 284.765849][ T5272] cp210x 4-1:0.0: querying part number failed [ 284.794854][ T5272] usb 4-1: cp210x converter now attached to ttyUSB0 [ 285.069605][ T5233] hid-led 0003:1D34:000A.0010: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.2-1/input0 [ 285.125619][ T5233] hid-led 0003:1D34:000A.0010: Dream Cheeky Webmail Notifier initialized [ 285.317309][ T29] audit: type=1326 audit(1726911057.806:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8247 comm="syz.2.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98de57def9 code=0x7ffc0000 [ 285.396439][ T29] audit: type=1326 audit(1726911057.836:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8247 comm="syz.2.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98de57def9 code=0x7ffc0000 [ 285.470438][ T29] audit: type=1326 audit(1726911057.836:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8247 comm="syz.2.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f98de57def9 code=0x7ffc0000 [ 285.540722][ T29] audit: type=1326 audit(1726911057.836:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8247 comm="syz.2.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98de57def9 code=0x7ffc0000 [ 285.605116][ T5233] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 285.612864][ T29] audit: type=1326 audit(1726911057.836:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8247 comm="syz.2.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98de57def9 code=0x7ffc0000 [ 285.800918][ T5233] usb 1-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 285.815843][ T29] audit: type=1326 audit(1726911058.306:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8285 comm="syz.1.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77c57def9 code=0x7ffc0000 [ 285.825181][ T5233] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.903738][ T29] audit: type=1326 audit(1726911058.306:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8285 comm="syz.1.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77c57def9 code=0x7ffc0000 [ 285.921566][ T5233] usb 1-1: Product: syz [ 285.961577][ T5233] usb 1-1: Manufacturer: syz [ 285.962057][ T29] audit: type=1326 audit(1726911058.306:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8285 comm="syz.1.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fe77c57def9 code=0x7ffc0000 [ 286.041715][ T29] audit: type=1326 audit(1726911058.306:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8285 comm="syz.1.524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe77c57def9 code=0x7ffc0000 [ 286.045474][ T5233] usb 1-1: SerialNumber: syz [ 286.129396][ T5233] usb 1-1: config 0 descriptor?? [ 286.385130][ T8] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 286.555120][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 286.572516][ T5272] usb 3-1: USB disconnect, device number 22 [ 286.587506][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 286.629081][ T8] usb 2-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 286.648372][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.759080][ T8] usb 2-1: Product: syz [ 286.779203][ T8] usb 2-1: Manufacturer: syz [ 286.784858][ T8] usb 2-1: SerialNumber: syz [ 286.813241][ T8] usb 2-1: config 0 descriptor?? [ 286.825341][ T51] usb 4-1: USB disconnect, device number 24 [ 286.842076][ T8] smsusb:smsusb_probe: board id=2, interface number 0 [ 286.863979][ T8] smsusb:smsusb_probe: Device initialized with return code -19 [ 286.887110][ T51] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 286.911394][ T51] cp210x 4-1:0.0: device disconnected [ 287.124557][ T5233] mos7840 1-1:0.0: required endpoints missing [ 287.131576][ T8] usb 2-1: USB disconnect, device number 27 [ 287.187510][ T5233] usb 1-1: USB disconnect, device number 21 [ 287.995868][ T6924] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 288.165166][ T6924] usb 5-1: Using ep0 maxpacket: 8 [ 288.192643][ T6924] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 288.235801][ T6924] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 288.263209][ T6924] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 288.323426][ T6924] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 288.370892][ T6924] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 288.403507][ T6924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.449060][ T51] usb 1-1: new low-speed USB device number 22 using dummy_hcd [ 288.559897][ T8333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.543'. [ 288.581076][ T8334] blktrace: Concurrent blktraces are not allowed on loop3 [ 288.650245][ T51] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 288.693111][ T51] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 288.727905][ T51] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 288.738612][ T8306] netlink: 4 bytes leftover after parsing attributes in process `syz.4.532'. [ 288.748363][ T51] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 288.803194][ T51] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 288.829840][ T51] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 288.851483][ T51] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 288.866227][ T51] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 288.877085][ T51] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 288.897048][ T51] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 288.947208][ T51] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 288.966055][ T51] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 289.009879][ T51] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 289.037267][ T51] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 289.059865][ T51] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 289.081662][ T51] usb 1-1: string descriptor 0 read error: -22 [ 289.088556][ T51] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 289.102972][ T51] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.129215][ T51] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 289.796015][ T8353] netlink: 284 bytes leftover after parsing attributes in process `syz.3.550'. [ 289.907830][ T9] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 290.150591][ T9] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 290.164275][ T8359] bridge2: entered promiscuous mode [ 290.174768][ T8359] bridge2: entered allmulticast mode [ 290.174902][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.232654][ T9] usb 2-1: Product: syz [ 290.251854][ T9] usb 2-1: Manufacturer: syz [ 290.275254][ T9] usb 2-1: SerialNumber: syz [ 290.309857][ T9] usb 2-1: config 0 descriptor?? [ 290.732060][ T6924] usb 5-1: usb_control_msg returned -71 [ 290.750521][ T6924] usbtmc 5-1:16.0: can't read capabilities [ 290.810470][ T6924] usb 5-1: USB disconnect, device number 30 [ 291.252465][ T51] usb 1-1: USB disconnect, device number 22 [ 291.283081][ T8377] bridge3: entered promiscuous mode [ 291.324234][ T8377] bridge3: entered allmulticast mode [ 291.679876][ T8388] netlink: 172 bytes leftover after parsing attributes in process `syz.0.564'. [ 291.713438][ T8388] netlink: 172 bytes leftover after parsing attributes in process `syz.0.564'. [ 292.549349][ T51] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 292.597492][ T9] mos7840 2-1:0.0: required endpoints missing [ 292.602631][ T9] usb 2-1: USB disconnect, device number 28 [ 292.716671][ T51] usb 1-1: too many configurations: 77, using maximum allowed: 8 [ 292.804315][ T51] usb 1-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=e6.af [ 292.804347][ T51] usb 1-1: New USB device strings: Mfr=244, Product=113, SerialNumber=47 [ 292.804365][ T51] usb 1-1: Product: syz [ 292.804378][ T51] usb 1-1: Manufacturer: syz [ 292.804391][ T51] usb 1-1: SerialNumber: syz [ 292.809570][ T51] usb 1-1: config 0 descriptor?? [ 292.813477][ T51] gspca_main: 0c45:614a too many config [ 292.951684][ T8403] dvmrp0: entered allmulticast mode [ 292.996286][ T8403] input: syz1 as /devices/virtual/input/input11 [ 293.080899][ T8407] lo: entered promiscuous mode [ 293.083728][ T8407] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 293.960194][ T8426] netlink: 'syz.3.578': attribute type 15 has an invalid length. [ 293.985504][ T8426] netlink: 140 bytes leftover after parsing attributes in process `syz.3.578'. [ 294.277322][ T8437] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 294.441208][ T8439] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 294.948530][ T8457] netlink: 4 bytes leftover after parsing attributes in process `syz.2.590'. [ 294.966020][ T8457] netlink: 4 bytes leftover after parsing attributes in process `syz.2.590'. [ 296.550682][ T8490] tipc: Enabling of bearer rejected, failed to enable media [ 302.516620][ T5237] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 302.528213][ T5237] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 302.543411][ T5237] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 302.553045][ T5237] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 302.561277][ T5237] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 302.568944][ T5237] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 302.950576][ T8503] chnl_net:caif_netlink_parms(): no params data found [ 303.244215][ T8503] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.283177][ T8503] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.294888][ T8503] bridge_slave_0: entered allmulticast mode [ 303.326443][ T8503] bridge_slave_0: entered promiscuous mode [ 303.347678][ T8503] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.358153][ T8503] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.382845][ T8503] bridge_slave_1: entered allmulticast mode [ 303.408871][ T8503] bridge_slave_1: entered promiscuous mode [ 303.550221][ T8503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.593644][ T8503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.711557][ T8503] team0: Port device team_slave_0 added [ 303.768569][ T8503] team0: Port device team_slave_1 added [ 303.887811][ T8503] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.894846][ T8503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.920836][ C1] vkms_vblank_simulate: vblank timer overrun [ 304.007238][ T8503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.065782][ T8503] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.082147][ T8503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.108136][ C1] vkms_vblank_simulate: vblank timer overrun [ 304.125639][ T8503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.205188][ T51] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 304.252283][ T8503] hsr_slave_0: entered promiscuous mode [ 304.296907][ T8503] hsr_slave_1: entered promiscuous mode [ 304.324957][ T8503] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 304.350907][ T8503] Cannot create hsr debugfs directory [ 304.365244][ T51] usb 3-1: Using ep0 maxpacket: 16 [ 304.388905][ T51] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 304.429091][ T51] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 304.465501][ T51] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 304.472957][ T51] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 304.472999][ T51] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.473025][ T51] usb 3-1: Product: syz [ 304.473045][ T51] usb 3-1: Manufacturer: syz [ 304.473064][ T51] usb 3-1: SerialNumber: syz [ 304.615360][ T5237] Bluetooth: hci5: command tx timeout [ 304.820971][ T51] usb 3-1: USB disconnect, device number 23 [ 304.921701][ T8499] udevd[8499]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 305.513823][ T5235] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 305.527095][ T5235] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 305.549670][ T5235] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 305.558345][ T5235] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 305.569545][ T5235] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 305.577143][ T5235] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 306.695246][ T5235] Bluetooth: hci5: command tx timeout [ 310.645307][ T5235] Bluetooth: hci6: command tx timeout [ 310.652130][ T5235] Bluetooth: hci5: command tx timeout [ 311.935010][ C0] sched: DL replenish lagged too much [ 312.695247][ T5235] Bluetooth: hci5: command tx timeout [ 312.700745][ T5235] Bluetooth: hci6: command tx timeout [ 314.452843][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 314.463083][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 314.472300][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 314.485840][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 314.493727][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 314.507328][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 314.775402][ T54] Bluetooth: hci6: command tx timeout [ 316.116113][ T5235] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 316.127224][ T5235] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 316.135723][ T5235] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 316.149581][ T5235] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 316.158449][ T5235] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 316.166028][ T5235] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 316.615442][ T54] Bluetooth: hci3: command tx timeout [ 316.855653][ T54] Bluetooth: hci6: command tx timeout [ 317.341597][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.351053][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.215334][ T54] Bluetooth: hci7: command tx timeout [ 318.695343][ T54] Bluetooth: hci3: command tx timeout [ 320.295196][ T54] Bluetooth: hci7: command tx timeout [ 320.775331][ T54] Bluetooth: hci3: command tx timeout [ 321.722809][ T8503] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.743749][ T8503] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 36229 - 0 [ 322.376656][ T54] Bluetooth: hci7: command tx timeout [ 322.855394][ T54] Bluetooth: hci3: command tx timeout [ 324.456456][ T54] Bluetooth: hci7: command tx timeout [ 325.140582][ T5235] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 325.151168][ T5235] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 325.161099][ T5235] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 325.169296][ T5235] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 325.187282][ T5235] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 325.205783][ T5235] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 327.256873][ T5235] Bluetooth: hci8: command tx timeout [ 329.335199][ T5235] Bluetooth: hci8: command tx timeout [ 331.415421][ T54] Bluetooth: hci8: command tx timeout [ 333.495226][ T5235] Bluetooth: hci8: command tx timeout [ 362.634854][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 362.657288][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 362.676686][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 362.693388][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 362.705780][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 362.713228][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 364.775210][ T54] Bluetooth: hci0: command tx timeout [ 365.153678][ T5235] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 365.166623][ T5235] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 365.175668][ T5235] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 365.185412][ T5235] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 365.199962][ T5235] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 365.207895][ T5235] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 366.857593][ T54] Bluetooth: hci0: command tx timeout [ 367.255299][ T54] Bluetooth: hci1: command tx timeout [ 368.935288][ T54] Bluetooth: hci0: command tx timeout [ 369.335306][ T54] Bluetooth: hci1: command tx timeout [ 371.015339][ T54] Bluetooth: hci0: command tx timeout [ 371.415138][ T54] Bluetooth: hci1: command tx timeout [ 372.878172][ T8503] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.895594][ T8503] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 36229 - 0 [ 373.427604][ T8554] chnl_net:caif_netlink_parms(): no params data found [ 373.505021][ T54] Bluetooth: hci1: command tx timeout [ 373.716634][ T8554] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.723806][ T8554] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.742067][ T8554] bridge_slave_0: entered allmulticast mode [ 373.750380][ T8554] bridge_slave_0: entered promiscuous mode [ 373.759244][ T8554] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.769243][ T8554] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.776992][ T8554] bridge_slave_1: entered allmulticast mode [ 373.784159][ T8554] bridge_slave_1: entered promiscuous mode [ 373.860540][ T8554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.899749][ T8554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.050910][ T8554] team0: Port device team_slave_0 added [ 374.086344][ T8554] team0: Port device team_slave_1 added [ 374.170690][ T8554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.199713][ T8554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.294275][ T8554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.348579][ T8554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.383133][ T8554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.474381][ T8554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.494553][ T5235] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 374.512733][ T5235] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 374.522808][ T5235] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 374.532280][ T5235] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 374.541428][ T5235] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 374.549376][ T5235] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 374.738634][ T8554] hsr_slave_0: entered promiscuous mode [ 374.767120][ T8554] hsr_slave_1: entered promiscuous mode [ 374.788684][ T8554] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 374.805597][ T8554] Cannot create hsr debugfs directory [ 376.575879][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 376.591696][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 376.599931][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 376.608401][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 376.619296][ T54] Bluetooth: hci2: command tx timeout [ 376.849509][ T8588] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 376.883720][ T8588] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 377.257441][ T8589] chnl_net:caif_netlink_parms(): no params data found [ 377.470617][ T8589] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.490420][ T8589] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.503759][ T8589] bridge_slave_0: entered allmulticast mode [ 377.511407][ T8589] bridge_slave_0: entered promiscuous mode [ 377.520401][ T8589] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.529400][ T8589] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.537024][ T8589] bridge_slave_1: entered allmulticast mode [ 377.544184][ T8589] bridge_slave_1: entered promiscuous mode [ 377.636596][ T8589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.660581][ T8589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.752737][ T8589] team0: Port device team_slave_0 added [ 377.774433][ T8589] team0: Port device team_slave_1 added [ 377.852525][ T8589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.864823][ T8589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.907216][ T8589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.930140][ T8589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.946984][ T8589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.986900][ T8589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 378.137277][ T8589] hsr_slave_0: entered promiscuous mode [ 378.161901][ T8589] hsr_slave_1: entered promiscuous mode [ 378.183582][ T8589] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 378.205069][ T8589] Cannot create hsr debugfs directory [ 378.695334][ T5235] Bluetooth: hci2: command tx timeout [ 378.780753][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.787354][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.945325][ T5235] Bluetooth: hci4: command tx timeout [ 380.776126][ T5235] Bluetooth: hci2: command tx timeout [ 381.017465][ T5235] Bluetooth: hci4: command tx timeout [ 382.855981][ T5235] Bluetooth: hci2: command tx timeout [ 383.095189][ T5235] Bluetooth: hci4: command tx timeout [ 385.185272][ T5235] Bluetooth: hci4: command tx timeout [ 385.852065][ T8588] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 385.866626][ T8588] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 385.876622][ T8588] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 385.888650][ T8588] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 385.897371][ T8588] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 385.905055][ T8588] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 387.975315][ T8588] Bluetooth: hci7: command tx timeout [ 390.065404][ T8588] Bluetooth: hci7: command tx timeout [ 392.137917][ T8588] Bluetooth: hci7: command tx timeout [ 394.215846][ T8588] Bluetooth: hci7: command tx timeout [ 425.261844][ T5237] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 425.271641][ T5237] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 425.283793][ T5237] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 425.292310][ T5237] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 425.320663][ T5237] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 425.328909][ T5237] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 425.756453][ T8588] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 425.770575][ T8588] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 425.779519][ T8588] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 425.788297][ T8588] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 425.796478][ T8588] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 425.803998][ T8588] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 426.943295][ T5237] Bluetooth: hci5: command 0x0406 tx timeout [ 427.495259][ T5237] Bluetooth: hci9: command tx timeout [ 427.895224][ T5237] Bluetooth: hci10: command tx timeout [ 429.575180][ T5237] Bluetooth: hci9: command tx timeout [ 429.981723][ T5235] Bluetooth: hci10: command tx timeout [ 431.655170][ T5235] Bluetooth: hci9: command tx timeout [ 432.065196][ T5235] Bluetooth: hci10: command tx timeout [ 432.070874][ T5235] Bluetooth: hci6: command 0x0406 tx timeout [ 433.735218][ T5235] Bluetooth: hci9: command tx timeout [ 434.136698][ T5235] Bluetooth: hci10: command tx timeout [ 434.764354][ T5235] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 434.774702][ T5235] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 434.786231][ T5235] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 434.806028][ T5235] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 434.814180][ T5235] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 434.823722][ T5235] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 438.035291][ T5235] Bluetooth: hci11: command tx timeout [ 438.041985][ T5235] Bluetooth: hci3: command 0x0406 tx timeout [ 438.626966][ T5235] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 438.638113][ T5235] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 438.646769][ T5235] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 438.655646][ T5235] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 438.699227][ T5235] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 438.707123][ T5235] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 440.135257][ T8588] Bluetooth: hci11: command tx timeout [ 440.219339][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.232294][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.215141][ T8588] Bluetooth: hci11: command tx timeout [ 444.295354][ T8588] Bluetooth: hci11: command tx timeout [ 446.233884][ T54] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 446.244840][ T54] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 446.259526][ T54] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 446.275828][ T54] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 446.283674][ T54] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 446.291594][ T54] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 447.415306][ T54] Bluetooth: hci8: command 0x0406 tx timeout [ 454.939021][ T5235] Bluetooth: hci12: command tx timeout [ 457.015564][ T8588] Bluetooth: hci12: command tx timeout [ 457.021851][ T8588] Bluetooth: hci13: command tx timeout [ 459.095289][ T5235] Bluetooth: hci12: command tx timeout [ 459.102034][ T8588] Bluetooth: hci13: command tx timeout [ 461.175286][ T5235] Bluetooth: hci12: command tx timeout [ 461.180881][ T8588] Bluetooth: hci13: command tx timeout [ 463.255240][ T8588] Bluetooth: hci13: command tx timeout [ 485.345430][ T5235] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 485.385580][ T5235] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 485.398177][ T5235] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 485.406432][ T5235] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 485.417713][ T5235] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 485.425776][ T5235] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 487.525174][ T8588] Bluetooth: hci14: command tx timeout [ 489.095179][ T8588] Bluetooth: hci1: command 0x0406 tx timeout [ 489.102456][ T8588] Bluetooth: hci0: command 0x0406 tx timeout [ 489.309282][ T5237] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 489.323983][ T5237] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 489.334571][ T5237] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 489.361345][ T5237] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 489.369233][ T5237] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 489.377511][ T5237] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 489.575144][ T5237] Bluetooth: hci14: command tx timeout [ 491.495279][ T5237] Bluetooth: hci15: command tx timeout [ 491.657927][ T5237] Bluetooth: hci14: command tx timeout [ 493.575170][ T5237] Bluetooth: hci15: command tx timeout [ 493.735212][ T5237] Bluetooth: hci14: command tx timeout [ 495.303475][ T8588] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 495.313867][ T8588] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 495.335220][ T8588] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 495.348621][ T8588] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 495.356704][ T8588] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 495.364245][ T8588] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 495.656783][ T5237] Bluetooth: hci15: command tx timeout [ 497.416788][ T5237] Bluetooth: hci16: command tx timeout [ 497.735190][ T5237] Bluetooth: hci15: command tx timeout [ 498.616191][ T5237] Bluetooth: hci2: command 0x0406 tx timeout [ 498.860218][ T5237] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 498.878190][ T5237] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 498.888987][ T5237] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 498.899806][ T5237] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 498.910298][ T5237] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 498.921314][ T5237] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 499.495920][ T5237] Bluetooth: hci16: command tx timeout [ 501.015507][ T5237] Bluetooth: hci17: command tx timeout [ 501.575343][ T5237] Bluetooth: hci16: command tx timeout [ 501.659790][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.677400][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.095103][ T5237] Bluetooth: hci17: command tx timeout [ 503.655189][ T5237] Bluetooth: hci16: command tx timeout [ 503.744916][ T5237] Bluetooth: hci4: command 0x0406 tx timeout [ 505.175054][ T8588] Bluetooth: hci17: command tx timeout [ 506.945887][ T5235] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 506.967777][ T5235] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 506.976902][ T5235] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 506.991972][ T5235] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 506.999765][ T5235] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 507.008470][ T5235] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 507.255188][ T5235] Bluetooth: hci17: command tx timeout [ 508.864520][ T5235] Bluetooth: hci7: command 0x0406 tx timeout [ 509.095428][ T5235] Bluetooth: hci18: command tx timeout [ 511.175375][ T5235] Bluetooth: hci18: command tx timeout [ 513.175395][ T30] INFO: task kworker/u8:7:1909 blocked for more than 143 seconds. [ 513.183390][ T30] Not tainted 6.11.0-syzkaller-07462-g1868f9d0260e #0 [ 513.226445][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 513.264488][ T8588] Bluetooth: hci18: command tx timeout [ 513.274957][ T30] task:kworker/u8:7 state:D stack:19128 pid:1909 tgid:1909 ppid:2 flags:0x00004000 [ 513.285344][ T30] Workqueue: netns cleanup_net [ 513.290199][ T30] Call Trace: [ 513.293566][ T30] [ 513.296603][ T30] __schedule+0x1893/0x4b50 [ 513.301267][ T30] ? __pfx___schedule+0x10/0x10 [ 513.306316][ T30] ? __pfx_lock_release+0x10/0x10 [ 513.311399][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 513.316974][ T30] ? kthread_data+0x52/0xd0 [ 513.321531][ T30] ? schedule+0x90/0x320 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 513.325944][ T30] ? wq_worker_sleeping+0x66/0x240 [ 513.331116][ T30] ? schedule+0x90/0x320 [ 513.337002][ T30] schedule+0x14b/0x320 [ 513.341225][ T30] schedule_preempt_disabled+0x13/0x30 [ 513.347685][ T30] __mutex_lock+0x6a7/0xd70 [ 513.352256][ T30] ? __mutex_lock+0x52a/0xd70 [ 513.357067][ T30] ? wg_netns_pre_exit+0x1f/0x1e0 [ 513.362156][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 513.414461][ T30] wg_netns_pre_exit+0x1f/0x1e0 [ 513.476292][ T30] cleanup_net+0x615/0xcc0 [ 513.480823][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 513.542805][ T30] ? process_scheduled_works+0x976/0x1850 [ 513.574960][ T30] process_scheduled_works+0xa63/0x1850 [ 513.580651][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 513.603385][ T30] ? assign_work+0x364/0x3d0 [ 513.612758][ T30] worker_thread+0x870/0xd30 [ 513.624939][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 513.631008][ T30] ? __kthread_parkme+0x169/0x1d0 [ 513.646076][ T30] ? __pfx_worker_thread+0x10/0x10 [ 513.651281][ T30] kthread+0x2f0/0x390 [ 513.666376][ T30] ? __pfx_worker_thread+0x10/0x10 [ 513.671574][ T30] ? __pfx_kthread+0x10/0x10 [ 513.684933][ T30] ret_from_fork+0x4b/0x80 [ 513.689445][ T30] ? __pfx_kthread+0x10/0x10 [ 513.705195][ T30] ret_from_fork_asm+0x1a/0x30 [ 513.710064][ T30] [ 513.723272][ T30] INFO: task syz.4.613:8530 blocked for more than 143 seconds. [ 513.733350][ T30] Not tainted 6.11.0-syzkaller-07462-g1868f9d0260e #0 [ 513.763518][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 513.776485][ T30] task:syz.4.613 state:D stack:24816 pid:8530 tgid:8528 ppid:6772 flags:0x00004006 [ 513.798273][ T30] Call Trace: [ 513.801640][ T30] [ 513.804607][ T30] __schedule+0x1893/0x4b50 [ 513.825003][ T30] ? __pfx___schedule+0x10/0x10 [ 513.829963][ T30] ? __pfx_lock_release+0x10/0x10 [ 513.846855][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 513.852407][ T30] ? schedule+0x90/0x320 [ 513.865850][ T30] schedule+0x14b/0x320 [ 513.870103][ T30] schedule_preempt_disabled+0x13/0x30 [ 513.886593][ T30] __mutex_lock+0x6a7/0xd70 [ 513.891189][ T30] ? __mutex_lock+0x52a/0xd70 [ 513.904975][ T30] ? tun_chr_close+0x3b/0x1b0 [ 513.909726][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 513.914814][ T30] ? __pfx_call_rcu+0x10/0x10 [ 513.933770][ T30] tun_chr_close+0x3b/0x1b0 [ 513.944475][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 513.955045][ T30] __fput+0x23f/0x880 [ 513.959129][ T30] task_work_run+0x24f/0x310 [ 513.963760][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 513.982449][ T30] ? __pfx_task_work_run+0x10/0x10 [ 513.994455][ T30] ? do_exit+0xa2a/0x27f0 [ 514.004385][ T30] ? kmem_cache_free+0x1a3/0x420 [ 514.015058][ T30] ? do_exit+0xa2a/0x27f0 [ 514.019479][ T30] do_exit+0xa2f/0x27f0 [ 514.023693][ T30] ? __pfx_do_exit+0x10/0x10 [ 514.043312][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 514.055683][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 514.061841][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 514.079767][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 514.093742][ T30] do_group_exit+0x207/0x2c0 [ 514.103458][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 514.115491][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 514.120779][ T30] get_signal+0x176f/0x1810 [ 514.135960][ T30] ? __pfx_dev_ifsioc+0x10/0x10 [ 514.140884][ T30] ? __pfx_get_signal+0x10/0x10 [ 514.159826][ T30] ? __might_fault+0xc6/0x120 [ 514.164600][ T30] arch_do_signal_or_restart+0x96/0x860 [ 514.175074][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 514.181302][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 514.201801][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 514.214399][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 514.225341][ T30] do_syscall_64+0x100/0x230 [ 514.230011][ T30] ? clear_bhb_loop+0x35/0x90 [ 514.247096][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.253093][ T30] RIP: 0033:0x7f7a5277def9 [ 514.264965][ T30] RSP: 002b:00007f7a534af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 514.273459][ T30] RAX: 0000000000000000 RBX: 00007f7a52936058 RCX: 00007f7a5277def9 [ 514.293281][ T30] RDX: 0000000020000480 RSI: 00000000000089f2 RDI: 0000000000000003 [ 514.315147][ T30] RBP: 00007f7a527f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 514.323195][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 514.341497][ T30] R13: 0000000000000001 R14: 00007f7a52936058 R15: 00007f7a52a5fa28 [ 514.353462][ T30] [ 514.369176][ T30] INFO: task syz-executor:8534 blocked for more than 144 seconds. [ 514.384958][ T30] Not tainted 6.11.0-syzkaller-07462-g1868f9d0260e #0 [ 514.404283][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 514.414730][ T30] task:syz-executor state:D stack:26288 pid:8534 tgid:8534 ppid:1 flags:0x00004006 [ 514.436858][ T30] Call Trace: [ 514.440213][ T30] [ 514.443182][ T30] __schedule+0x1893/0x4b50 [ 514.459442][ T30] ? __pfx___schedule+0x10/0x10 [ 514.464405][ T30] ? __pfx_lock_release+0x10/0x10 [ 514.477462][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 514.487829][ T30] ? schedule+0x90/0x320 [ 514.504091][ T30] schedule+0x14b/0x320 [ 514.509933][ T30] schedule_preempt_disabled+0x13/0x30 [ 514.525597][ T30] __mutex_lock+0x6a7/0xd70 [ 514.530191][ T30] ? __mutex_lock+0x52a/0xd70 [ 514.549643][ T30] ? setup_net+0x602/0x9e0 [ 514.554158][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 514.565089][ T30] ? synchronize_rcu+0x11b/0x360 [ 514.570118][ T30] ? bpf_prog_array_free+0x34/0x40 [ 514.588578][ T30] setup_net+0x602/0x9e0 [ 514.592999][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 514.611426][ T30] ? __pfx_setup_net+0x10/0x10 [ 514.625216][ T30] copy_net_ns+0x33f/0x570 [ 514.629722][ T30] create_new_namespaces+0x425/0x7b0 [ 514.645356][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 514.651161][ T30] ksys_unshare+0x619/0xc10 [ 514.665407][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 514.670626][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 514.686158][ T30] ? do_syscall_64+0x100/0x230 [ 514.698358][ T30] __x64_sys_unshare+0x38/0x40 [ 514.703204][ T30] do_syscall_64+0xf3/0x230 [ 514.725858][ T30] ? clear_bhb_loop+0x35/0x90 [ 514.730634][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.751359][ T30] RIP: 0033:0x7fbfcd57f6f7 [ 514.761996][ T30] RSP: 002b:00007fbfcd85ffa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 514.775272][ T30] RAX: ffffffffffffffda RBX: 00007fbfcd5f22ec RCX: 00007fbfcd57f6f7 [ 514.783495][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 514.804107][ T30] RBP: 0000000000000000 R08: 00007fbfce267d60 R09: 0000000000000000 [ 514.820603][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 514.842523][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 514.855274][ T30] [ 514.865123][ T30] INFO: task syz.2.618:8546 blocked for more than 145 seconds. [ 514.872722][ T30] Not tainted 6.11.0-syzkaller-07462-g1868f9d0260e #0 [ 514.891231][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 514.913742][ T30] task:syz.2.618 state:D stack:25272 pid:8546 tgid:8544 ppid:7620 flags:0x00004002 [ 514.929960][ T30] Call Trace: [ 514.933299][ T30] [ 514.945276][ T30] __schedule+0x1893/0x4b50 [ 514.956940][ T30] ? __pfx___schedule+0x10/0x10 [ 514.961902][ T30] ? __pfx_lock_release+0x10/0x10 [ 514.975339][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 514.980917][ T30] ? schedule+0x90/0x320 [ 515.000288][ T30] schedule+0x14b/0x320 [ 515.014628][ T30] schedule_preempt_disabled+0x13/0x30 [ 515.025131][ T30] __mutex_lock+0x6a7/0xd70 [ 515.030363][ T30] ? __mutex_lock+0x52a/0xd70 [ 515.048054][ T30] ? tun_chr_close+0x3b/0x1b0 [ 515.052805][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 515.067010][ T30] ? __pfx_call_rcu+0x10/0x10 [ 515.071768][ T30] tun_chr_close+0x3b/0x1b0 [ 515.084997][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 515.090181][ T30] __fput+0x23f/0x880 [ 515.094230][ T30] task_work_run+0x24f/0x310 [ 515.122728][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 515.128615][ T30] ? __pfx_task_work_run+0x10/0x10 [ 515.134153][ T30] ? do_exit+0xa2a/0x27f0 [ 515.139251][ T30] ? kmem_cache_free+0x1a3/0x420 [ 515.144242][ T30] ? do_exit+0xa2a/0x27f0 [ 515.149242][ T30] do_exit+0xa2f/0x27f0 [ 515.153461][ T30] ? __pfx_do_exit+0x10/0x10 [ 515.163599][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 515.169516][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 515.176056][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 515.183139][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 515.188836][ T30] do_group_exit+0x207/0x2c0 [ 515.193481][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 515.199267][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 515.204525][ T30] get_signal+0x176f/0x1810 [ 515.210638][ T30] ? __pfx_get_signal+0x10/0x10 [ 515.216660][ T30] arch_do_signal_or_restart+0x96/0x860 [ 515.222273][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 515.230188][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 515.249087][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 515.267859][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 515.273504][ T30] do_syscall_64+0x100/0x230 [ 515.290568][ T30] ? clear_bhb_loop+0x35/0x90 [ 515.301461][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.312239][ T30] RIP: 0033:0x7f98de57def9 [ 515.324679][ T30] RSP: 002b:00007f98df3c5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 515.335151][ T8588] Bluetooth: hci18: command tx timeout [ 515.354783][ T30] RAX: 0000000000000018 RBX: 00007f98de735f80 RCX: 00007f98de57def9 [ 515.365121][ T30] RDX: 0000000000000000 RSI: 00000000200047c0 RDI: 0000000000000003 [ 515.373198][ T30] RBP: 00007f98de5f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 515.392906][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 515.404598][ T30] R13: 0000000000000000 R14: 00007f98de735f80 R15: 00007f98de85fa28 [ 515.425033][ T30] [ 515.428212][ T30] INFO: task syz-executor:8569 blocked for more than 145 seconds. [ 515.449664][ T30] Not tainted 6.11.0-syzkaller-07462-g1868f9d0260e #0 [ 515.462542][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 515.484186][ T30] task:syz-executor state:D stack:26512 pid:8569 tgid:8569 ppid:1 flags:0x00004006 [ 515.497547][ T30] Call Trace: [ 515.500884][ T30] [ 515.503851][ T30] __schedule+0x1893/0x4b50 [ 515.525068][ T30] ? __pfx___schedule+0x10/0x10 [ 515.530009][ T30] ? __pfx_lock_release+0x10/0x10 [ 515.543464][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 515.553475][ T30] ? schedule+0x90/0x320 [ 515.565527][ T30] schedule+0x14b/0x320 [ 515.569770][ T30] schedule_preempt_disabled+0x13/0x30 [ 515.585434][ T30] __mutex_lock+0x6a7/0xd70 [ 515.590023][ T30] ? __mutex_lock+0x52a/0xd70 [ 515.594755][ T30] ? register_nexthop_notifier+0x84/0x290 [ 515.611891][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 515.625417][ T30] ? __asan_memset+0x23/0x50 [ 515.630094][ T30] register_nexthop_notifier+0x84/0x290 [ 515.645492][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 515.651387][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 515.675456][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 515.681719][ T30] ? __asan_memset+0x23/0x50 [ 515.696206][ T30] ops_init+0x31e/0x590 [ 515.700439][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 515.715037][ T30] setup_net+0x287/0x9e0 [ 515.719385][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 515.744145][ T30] ? __pfx_setup_net+0x10/0x10 [ 515.749568][ T30] copy_net_ns+0x33f/0x570 [ 515.754050][ T30] create_new_namespaces+0x425/0x7b0 [ 515.772201][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 515.783920][ T30] ksys_unshare+0x619/0xc10 [ 515.795068][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 515.800164][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 515.815365][ T30] ? do_syscall_64+0x100/0x230 [ 515.820214][ T30] __x64_sys_unshare+0x38/0x40 [ 515.842904][ T30] do_syscall_64+0xf3/0x230 [ 515.855003][ T30] ? clear_bhb_loop+0x35/0x90 [ 515.859769][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.875375][ T30] RIP: 0033:0x7fdddc57f6f7 [ 515.879855][ T30] RSP: 002b:00007fdddc85ffa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 515.901071][ T30] RAX: ffffffffffffffda RBX: 00007fdddc5f22ec RCX: 00007fdddc57f6f7 [ 515.915220][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 515.923337][ T30] RBP: 0000000000000000 R08: 00007fdddd267d60 R09: 0000000000000000 [ 515.944861][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 515.964998][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 515.973153][ T30] [ 515.985394][ T30] INFO: task syz-executor:8572 blocked for more than 146 seconds. [ 515.993282][ T30] Not tainted 6.11.0-syzkaller-07462-g1868f9d0260e #0 [ 516.013234][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 516.034466][ T30] task:syz-executor state:D stack:26768 pid:8572 tgid:8572 ppid:1 flags:0x00004004 [ 516.047970][ T30] Call Trace: [ 516.051307][ T30] [ 516.054271][ T30] __schedule+0x1893/0x4b50 [ 516.068685][ T30] ? __pfx___schedule+0x10/0x10 [ 516.073717][ T30] ? __pfx_lock_release+0x10/0x10 [ 516.089290][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 516.094835][ T30] ? schedule+0x90/0x320 [ 516.110146][ T30] schedule+0x14b/0x320 [ 516.114378][ T30] schedule_preempt_disabled+0x13/0x30 [ 516.131377][ T30] __mutex_lock+0x6a7/0xd70 [ 516.141197][ T30] ? __mutex_lock+0x52a/0xd70 [ 516.150925][ T30] ? register_nexthop_notifier+0x84/0x290 [ 516.163626][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 516.176854][ T30] ? __asan_memset+0x23/0x50 [ 516.181519][ T30] register_nexthop_notifier+0x84/0x290 [ 516.197911][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 516.203795][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 516.215082][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 516.221313][ T30] ? __asan_memset+0x23/0x50 [ 516.241896][ T30] ops_init+0x31e/0x590 [ 516.250725][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 516.263037][ T30] setup_net+0x287/0x9e0 [ 516.271331][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 516.285093][ T30] ? __pfx_setup_net+0x10/0x10 [ 516.289945][ T30] copy_net_ns+0x33f/0x570 [ 516.294412][ T30] create_new_namespaces+0x425/0x7b0 [ 516.314543][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 516.325083][ T30] ksys_unshare+0x619/0xc10 [ 516.329680][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 516.344455][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 516.362903][ T30] ? do_syscall_64+0x100/0x230 [ 516.370300][ T30] __x64_sys_unshare+0x38/0x40 [ 516.387181][ T30] do_syscall_64+0xf3/0x230 [ 516.391759][ T30] ? clear_bhb_loop+0x35/0x90 [ 516.405065][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.411059][ T30] RIP: 0033:0x7fed5bb7f6f7 [ 516.426685][ T30] RSP: 002b:00007fed5be5ffa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 516.445297][ T30] RAX: ffffffffffffffda RBX: 00007fed5bbf22ec RCX: 00007fed5bb7f6f7 [ 516.453351][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 516.473618][ T30] RBP: 0000000000000000 R08: 00007fed5c867d60 R09: 0000000000000000 [ 516.493824][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 516.514576][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 516.523483][ T30] [ 516.535120][ T30] [ 516.535120][ T30] Showing all locks held in the system: [ 516.549306][ T30] 3 locks held by kworker/0:1/9: [ 516.554311][ T30] 2 locks held by ksoftirqd/0/16: [ 516.564922][ T30] 1 lock held by khungtaskd/30: [ 516.570392][ T30] #0: ffffffff8e9389e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 516.594607][ T30] 3 locks held by kworker/u8:2/35: [ 516.603844][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 516.624936][ T30] #1: ffffc90000ab7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 516.652218][ T30] #2: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 516.664428][ T30] 4 locks held by kworker/u8:7/1909: [ 516.675266][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 516.699327][ T30] #1: ffffc90004f7fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 516.725067][ T30] #2: ffffffff8fcbcd90 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 516.734612][ T30] #3: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 516.762394][ T30] 3 locks held by kworker/u8:8/2579: [ 516.770931][ T30] #0: ffff88802db99148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 516.796194][ T30] #1: ffffc900099b7d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 516.816019][ T30] #2: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 516.835243][ T30] 2 locks held by getty/4980: [ 516.839965][ T30] #0: ffff8880323820a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 516.869276][ T30] #1: ffffc90002f162f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 516.885287][ T30] 3 locks held by kworker/1:4/5233: [ 516.890580][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 516.912920][ T30] #1: ffffc900035cfd00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 516.931264][ T30] #2: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 516.954709][ T30] 2 locks held by syz.0.565/8392: [ 516.963888][ T30] 7 locks held by syz-executor/8503: [ 516.975033][ T30] #0: ffff88803261a420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 516.984030][ T30] #1: ffff888031614888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 517.004330][ T30] #2: ffff8880279a8a58 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 517.026562][ T30] #3: ffffffff8f567448 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 517.063001][ T30] #4: ffff888026dc50e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 517.084987][ T30] #5: ffff88807f762250 (&devlink->lock_key#16){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 517.125109][ T30] #6: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 517.134306][ T30] 1 lock held by syz.4.613/8530: [ 518.015273][ T30] #0: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 518.024343][ T30] 2 locks held by syz-executor/8534: [ 519.985785][ T30] #0: ffffffff8fcbcd90 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 520.014927][ T30] #1: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: setup_net+0x602/0x9e0 [ 520.042751][ T30] 2 locks held by syz-executor/8543: [ 520.058721][ T30] #0: ffffffff8fcbcd90 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 520.088920][ T30] #1: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: setup_net+0x602/0x9e0 [ 520.117525][ T30] 1 lock held by syz.2.618/8546: [ 520.122539][ T30] #0: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 520.160978][ T30] 4 locks held by syz-executor/8554: [ 520.174963][ T30] #0: ffff88803261a420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 520.183958][ T30] #1: ffff888031e23488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 520.207145][ T30] #2: ffff8880279a8a58 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 520.225010][ T30] #3: ffffffff8f567448 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 520.249318][ T30] 2 locks held by syz-executor/8569: [ 520.254684][ T30] #0: ffffffff8fcbcd90 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 520.280029][ T30] #1: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 520.295074][ T30] 2 locks held by syz-executor/8572: [ 520.300431][ T30] #0: ffffffff8fcbcd90 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 520.322749][ T30] #1: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 520.344972][ T30] 2 locks held by syz-executor/8582: [ 520.351004][ T30] #0: ffffffff8fcbcd90 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 520.371945][ T30] #1: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 520.395355][ T30] 4 locks held by syz-executor/8589: [ 520.400698][ T30] #0: ffff88803261a420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 520.421285][ T30] #1: ffff888069472c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 520.439179][ T30] #2: ffff8880279a8a58 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 520.452877][ T30] #3: ffffffff8f567448 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 520.473922][ T30] 2 locks held by syz-executor/8599: [ 520.481979][ T30] #0: ffffffff8fcbcd90 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 520.494939][ T30] #1: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 520.522455][ T30] 2 locks held by syz-executor/8606: [ 520.534760][ T30] #0: ffffffff8fcbcd90 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 520.544686][ T30] #1: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 520.565876][ T30] 2 locks held by syz-executor/8608: [ 520.571219][ T30] #0: ffffffff8fcbcd90 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 520.593534][ T30] #1: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 520.614387][ T30] 2 locks held by syz-executor/8615: [ 520.622639][ T30] #0: ffffffff8fcbcd90 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 520.647382][ T30] #1: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 520.667022][ T30] 2 locks held by syz-executor/8619: [ 520.672370][ T30] #0: ffffffff8fcbcd90 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 520.694042][ T30] #1: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 520.714982][ T30] 2 locks held by syz-executor/8626: [ 520.720334][ T30] #0: ffffffff8fcbcd90 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 520.745056][ T30] #1: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 520.766869][ T30] 2 locks held by syz-executor/8636: [ 520.772303][ T30] #0: ffffffff8fcbcd90 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 520.790439][ T30] #1: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 520.807423][ T30] 2 locks held by syz-executor/8644: [ 520.812768][ T30] #0: ffffffff8fcbcd90 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 520.833366][ T30] #1: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 520.856269][ T30] 2 locks held by syz-executor/8650: [ 520.865560][ T30] #0: ffffffff8fcbcd90 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 520.884979][ T30] #1: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 520.906893][ T30] 2 locks held by syz-executor/8655: [ 520.912239][ T30] #0: ffffffff8fcbcd90 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 520.932727][ T30] #1: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 520.948279][ T30] 2 locks held by syz-executor/8660: [ 520.953617][ T30] #0: ffffffff8fcbcd90 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 520.978448][ T30] #1: ffffffff8fcc9888 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 520.995047][ T30] [ 520.997425][ T30] ============================================= [ 520.997425][ T30] [ 521.016733][ T30] NMI backtrace for cpu 1 [ 521.021137][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-07462-g1868f9d0260e #0 [ 521.031339][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 521.041439][ T30] Call Trace: [ 521.044756][ T30] [ 521.047716][ T30] dump_stack_lvl+0x241/0x360 [ 521.052447][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 521.057694][ T30] ? __pfx__printk+0x10/0x10 [ 521.062344][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 521.067325][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 521.072820][ T30] ? _printk+0xd5/0x120 [ 521.077019][ T30] ? __pfx__printk+0x10/0x10 [ 521.081650][ T30] ? __wake_up_klogd+0xcc/0x110 [ 521.086544][ T30] ? __pfx__printk+0x10/0x10 [ 521.091176][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 521.096252][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 521.102281][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 521.108307][ T30] watchdog+0xff4/0x1040 [ 521.112600][ T30] ? watchdog+0x1ea/0x1040 [ 521.117061][ T30] ? __pfx_watchdog+0x10/0x10 [ 521.121779][ T30] kthread+0x2f0/0x390 [ 521.125879][ T30] ? __pfx_watchdog+0x10/0x10 [ 521.130594][ T30] ? __pfx_kthread+0x10/0x10 [ 521.135230][ T30] ret_from_fork+0x4b/0x80 [ 521.139690][ T30] ? __pfx_kthread+0x10/0x10 [ 521.144306][ T30] ret_from_fork_asm+0x1a/0x30 [ 521.149123][ T30] [ 521.153220][ T30] Sending NMI from CPU 1 to CPUs 0: [ 521.159114][ C0] NMI backtrace for cpu 0 [ 521.159127][ C0] CPU: 0 UID: 0 PID: 16 Comm: ksoftirqd/0 Not tainted 6.11.0-syzkaller-07462-g1868f9d0260e #0 [ 521.159148][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 521.159159][ C0] RIP: 0010:unwind_next_frame+0x1615/0x22d0 [ 521.159192][ C0] Code: 8b 44 24 70 0f b6 04 28 84 c0 0f 85 6a 08 00 00 0f b6 04 2b 84 c0 0f 85 82 08 00 00 48 8b 44 24 28 0f b7 30 c1 ee 04 83 e6 0f <83> fe 04 0f 84 d0 00 00 00 83 fe 01 0f 84 28 01 00 00 85 f6 0f 85 [ 521.159207][ C0] RSP: 0018:ffffc900001567b0 EFLAGS: 00000202 [ 521.159223][ C0] RAX: ffffffff90a1e65c RBX: 1ffffffff2143ccb RCX: 0000000000000000 [ 521.159237][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffc90000156940 [ 521.159249][ C0] RBP: dffffc0000000000 R08: ffffc9000015693f R09: 0000000000000000 [ 521.159261][ C0] R10: ffffc90000156930 R11: fffff5200002ad28 R12: ffffc90000158000 [ 521.159275][ C0] R13: ffffc900001568e0 R14: ffffffff81379505 R15: ffffc90000156930 [ 521.159289][ C0] FS: 0000000000000000(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 [ 521.159304][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 521.159316][ C0] CR2: 0000000020036000 CR3: 000000000e734000 CR4: 00000000003506f0 [ 521.159332][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 521.159343][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 521.159353][ C0] Call Trace: [ 521.159360][ C0] [ 521.159367][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 521.159387][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 521.159415][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 521.159433][ C0] ? nmi_handle+0x2a/0x5a0 [ 521.159457][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 521.159480][ C0] ? nmi_handle+0x14f/0x5a0 [ 521.159505][ C0] ? nmi_handle+0x2a/0x5a0 [ 521.159522][ C0] ? unwind_next_frame+0x1615/0x22d0 [ 521.159549][ C0] ? default_do_nmi+0x63/0x160 [ 521.159569][ C0] ? exc_nmi+0x123/0x1f0 [ 521.159587][ C0] ? end_repeat_nmi+0xf/0x53 [ 521.159612][ C0] ? arch_stack_walk+0xe5/0x150 [ 521.159634][ C0] ? unwind_next_frame+0x1615/0x22d0 [ 521.159661][ C0] ? unwind_next_frame+0x1615/0x22d0 [ 521.159688][ C0] ? unwind_next_frame+0x1615/0x22d0 [ 521.159715][ C0] [ 521.159720][ C0] [ 521.159731][ C0] ? __unwind_start+0xf8/0x740 [ 521.159760][ C0] __unwind_start+0x59a/0x740 [ 521.159787][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 521.159810][ C0] arch_stack_walk+0xe5/0x150 [ 521.159829][ C0] ? arch_stack_walk+0xe5/0x150 [ 521.159849][ C0] stack_trace_save+0x118/0x1d0 [ 521.159868][ C0] ? stack_trace_save+0x118/0x1d0 [ 521.159887][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 521.159908][ C0] ? __asan_memset+0x23/0x50 [ 521.159928][ C0] ? unwind_next_frame+0x193b/0x22d0 [ 521.159958][ C0] kasan_save_track+0x3f/0x80 [ 521.160003][ C0] __kasan_slab_alloc+0x66/0x80 [ 521.160026][ C0] ? __alloc_skb+0x1c3/0x440 [ 521.160052][ C0] kmem_cache_alloc_node_noprof+0x16b/0x320 [ 521.160072][ C0] __alloc_skb+0x1c3/0x440 [ 521.160099][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 521.160128][ C0] synproxy_send_client_synack+0x1ba/0xf30 [ 521.160153][ C0] ? kasan_quarantine_put+0xdc/0x230 [ 521.160174][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 521.160199][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 521.160222][ C0] ? synproxy_pernet+0x45/0x270 [ 521.160248][ C0] nft_synproxy_eval_v4+0x3ca/0x610 [ 521.160274][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 521.160299][ C0] ? nf_ip_checksum+0x13a/0x500 [ 521.160326][ C0] nft_synproxy_do_eval+0x362/0xa60 [ 521.160352][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 521.160379][ C0] ? __pfx_validate_chain+0x10/0x10 [ 521.160403][ C0] nft_do_chain+0x4ad/0x1da0 [ 521.160433][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 521.160456][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 521.160497][ C0] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 521.160526][ C0] nft_do_chain_inet+0x418/0x6b0 [ 521.160551][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 521.160573][ C0] ? ipt_do_table+0x312/0x1860 [ 521.160604][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 521.160627][ C0] nf_hook_slow+0xc3/0x220 [ 521.160647][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 521.160666][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 521.160683][ C0] NF_HOOK+0x29e/0x450 [ 521.160701][ C0] ? NF_HOOK+0x9a/0x450 [ 521.160717][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 521.160735][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 521.160756][ C0] ? ip_rcv_finish+0x406/0x560 [ 521.160774][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 521.160810][ C0] NF_HOOK+0x3a4/0x450 [ 521.160826][ C0] ? __lock_acquire+0x1384/0x2050 [ 521.160853][ C0] ? NF_HOOK+0x9a/0x450 [ 521.160869][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 521.160885][ C0] ? ip_rcv_core+0x801/0xd10 [ 521.160904][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 521.160925][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 521.160943][ C0] __netif_receive_skb+0x2bf/0x650 [ 521.160965][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 521.160990][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 521.161009][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 521.161035][ C0] ? __pfx_lock_release+0x10/0x10 [ 521.161061][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 521.161091][ C0] process_backlog+0x662/0x15b0 [ 521.161115][ C0] ? process_backlog+0x33b/0x15b0 [ 521.161140][ C0] ? __pfx_process_backlog+0x10/0x10 [ 521.161161][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 521.161188][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 521.161215][ C0] __napi_poll+0xcb/0x490 [ 521.161237][ C0] net_rx_action+0x89b/0x1240 [ 521.161270][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 521.161292][ C0] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 521.161333][ C0] handle_softirqs+0x2c5/0x980 [ 521.161359][ C0] ? run_ksoftirqd+0xca/0x130 [ 521.161386][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 521.161409][ C0] ? preempt_schedule+0xe1/0xf0 [ 521.161437][ C0] run_ksoftirqd+0xca/0x130 [ 521.161462][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 521.161492][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 521.161519][ C0] ? __pfx_ksoftirqd_should_run+0x10/0x10 [ 521.161545][ C0] ? smpboot_thread_fn+0x2d3/0xa30 [ 521.161568][ C0] ? smpboot_thread_fn+0x4fb/0xa30 [ 521.161591][ C0] ? smpboot_thread_fn+0x656/0xa30 [ 521.161616][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 521.161640][ C0] smpboot_thread_fn+0x544/0xa30 [ 521.161664][ C0] ? smpboot_thread_fn+0x4e/0xa30 [ 521.161692][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 521.161716][ C0] kthread+0x2f0/0x390 [ 521.161732][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 521.161757][ C0] ? __pfx_kthread+0x10/0x10 [ 521.161774][ C0] ret_from_fork+0x4b/0x80 [ 521.161798][ C0] ? __pfx_kthread+0x10/0x10 [ 521.161815][ C0] ret_from_fork_asm+0x1a/0x30 [ 521.161848][ C0] [ 521.919248][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 521.926169][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-07462-g1868f9d0260e #0 [ 521.936361][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 521.946452][ T30] Call Trace: [ 521.949761][ T30] [ 521.952718][ T30] dump_stack_lvl+0x241/0x360 [ 521.957448][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 521.962707][ T30] ? __pfx__printk+0x10/0x10 [ 521.967396][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 521.973433][ T30] ? vscnprintf+0x5d/0x90 [ 521.977805][ T30] panic+0x349/0x880 [ 521.981749][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 521.987950][ T30] ? __pfx_panic+0x10/0x10 [ 521.992407][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 521.997819][ T30] ? __irq_work_queue_local+0x137/0x410 [ 522.003409][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 522.008831][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 522.015042][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 522.021300][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 522.027495][ T30] watchdog+0x1033/0x1040 [ 522.031865][ T30] ? watchdog+0x1ea/0x1040 [ 522.036323][ T30] ? __pfx_watchdog+0x10/0x10 [ 522.041037][ T30] kthread+0x2f0/0x390 [ 522.045147][ T30] ? __pfx_watchdog+0x10/0x10 [ 522.049860][ T30] ? __pfx_kthread+0x10/0x10 [ 522.054482][ T30] ret_from_fork+0x4b/0x80 [ 522.058933][ T30] ? __pfx_kthread+0x10/0x10 [ 522.063555][ T30] ret_from_fork_asm+0x1a/0x30 [ 522.068372][ T30] [ 522.071748][ T30] Kernel Offset: disabled [ 522.076083][ T30] Rebooting in 86400 seconds..