last executing test programs: 18.206353933s ago: executing program 4 (id=9885): unshare(0x60480) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000200), 0xc0000, 0x0) ppoll(&(0x7f0000010140)=[{r0, 0x2046}], 0x1, 0x0, 0x0, 0x0) 18.056805909s ago: executing program 4 (id=9886): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000002080)=0x64, 0x23b) 15.505004731s ago: executing program 4 (id=9900): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x8001) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) 15.114366881s ago: executing program 4 (id=9904): syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) 14.472706155s ago: executing program 2 (id=9909): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0xf0}}, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000002340)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x64, 0x2b, 0x0, @private2, @local, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x3a, 0x0, 0x0, "82f63de64f6ce2ee11028289aefdb3449391a823213e6336516748a7949bb108", "402fa83b1d661c18462075368a186092", {"9ddeb8f71aa23d391b8fa99e9816af2d", "040876a663a86d97f46b9665cc18492b"}}}}}}}}, 0x0) 14.174745405s ago: executing program 2 (id=9913): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000780)='task\x00') lseek(r0, 0x2, 0x6) 13.812423678s ago: executing program 2 (id=9915): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, r1, 0x2a0531ece42be04b, 0x0, 0x0, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) 13.416714862s ago: executing program 2 (id=9918): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000280)=ANY=[], 0x18) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xfffffffc}, 0x1c) 13.07605266s ago: executing program 2 (id=9922): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x6}, @NHA_OIF={0x8, 0x5, r1}, @NHA_ENCAP={0x8, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x4}}]}, 0x30}}, 0x0) 12.707575064s ago: executing program 2 (id=9927): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x5) ioctl$TCGETA(r0, 0x8926, 0x0) 12.593477222s ago: executing program 4 (id=9928): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000440)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0) 12.272542643s ago: executing program 4 (id=9931): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r0, 0x4010744d, 0x0) 7.088988459s ago: executing program 3 (id=9960): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000600), 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x3c, &(0x7f0000000000)={0x0, 0x0}, 0x10) 6.868910214s ago: executing program 3 (id=9961): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) 6.86599387s ago: executing program 1 (id=9963): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x80}, [@RTA_DST={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @RTA_IIF={0x8}]}, 0x2c}}, 0x0) 6.714400422s ago: executing program 3 (id=9964): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0xffffffff}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) 6.658505745s ago: executing program 1 (id=9965): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r0 = syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001bc0)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000380)="948120000000", 0x0, 0x0, 0x0, 0x0, 0x0}) 6.504594826s ago: executing program 3 (id=9967): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x1f}}}, 0x0) 6.471837749s ago: executing program 1 (id=9968): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000002080)=0x64, 0x23b) 5.771826389s ago: executing program 1 (id=9971): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) get_mempolicy(0x0, 0x0, 0x4, &(0x7f0000ff9000/0x4000)=nil, 0x3) 5.57937108s ago: executing program 1 (id=9972): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_META_SREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 5.427888691s ago: executing program 1 (id=9974): sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x40, 0x0, 0x801, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}]}]}, 0x40}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89f1, &(0x7f0000000900)={'ip6tnl0\x00', @random="0600002000"}) 3.317524156s ago: executing program 3 (id=9976): r0 = syz_io_uring_setup(0x4076, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x2, 0xaf}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0) 3.259131751s ago: executing program 3 (id=9977): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, &(0x7f0000000100)) 1.34298848s ago: executing program 0 (id=9981): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000002080)=0x64, 0x23b) 1.216576637s ago: executing program 0 (id=9982): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') 1.097747689s ago: executing program 0 (id=9983): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r1}, &(0x7f0000000580), &(0x7f0000000380), 0x1000000}, 0x20) 1.040042893s ago: executing program 0 (id=9984): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x7) ioctl$TCSETA(r0, 0x8926, 0xffffffffffffffff) 113.028163ms ago: executing program 0 (id=9985): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0) 0s ago: executing program 0 (id=9986): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0xc2, &(0x7f0000001100)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x26, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @local, {[@rr={0x7, 0x13, 0x0, [@private, @empty, @empty, @private]}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@loopback}]}, @ssrr={0x89, 0xf, 0x0, [@private, @broadcast, @broadcast]}, @timestamp_addr={0x44, 0x4c, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private}, {}, {@local}, {@loopback}, {@private}, {@multicast2}, {@broadcast}, {@broadcast}]}, @timestamp={0x44, 0x4}, @ssrr={0x89, 0x3, 0xd9}]}}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x500}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) kernel console output (not intermixed with test programs): d=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23740 comm="syz.1.8756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43277dff9 code=0x7ffc0000 [ 460.791128][ T29] audit: type=1326 audit(1727684403.473:4065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23740 comm="syz.1.8756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc43277dff9 code=0x7ffc0000 [ 461.143108][T23775] netlink: 'syz.2.8773': attribute type 10 has an invalid length. [ 461.151211][T23775] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8773'. [ 461.161812][T23775] bridge0: port 4(batadv0) entered blocking state [ 461.168382][T23775] bridge0: port 4(batadv0) entered disabled state [ 461.175397][T23775] batadv0: entered allmulticast mode [ 461.182412][T23775] batadv0: entered promiscuous mode [ 461.188278][T23775] bridge0: port 4(batadv0) entered blocking state [ 461.194880][T23775] bridge0: port 4(batadv0) entered forwarding state [ 461.203507][T23777] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8775'. [ 461.418558][T23792] netlink: 2 bytes leftover after parsing attributes in process `syz.2.8779'. [ 461.577183][ T35] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 461.587656][ T35] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 461.806285][T23815] xt_cgroup: path and classid specified [ 462.259712][T23841] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 462.274445][T23846] tmpfs: Bad value for 'mpol' [ 462.278681][T23841] vhci_hcd: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 462.660023][T23871] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8820'. [ 462.700575][ T5335] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 462.910152][ T5335] usb 3-1: Using ep0 maxpacket: 8 [ 462.921125][ T5335] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 462.933135][ T5335] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 462.948602][ T5335] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 462.967468][ T5335] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 463.008298][ T5335] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 463.079012][ T5335] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0124, bcdDevice=3a.9f [ 463.091191][ T5335] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.106591][ T5335] usb 3-1: Product: syz [ 463.111387][ T5335] usb 3-1: Manufacturer: syz [ 463.116028][ T5335] usb 3-1: SerialNumber: syz [ 463.167442][ T5335] usb 3-1: config 0 descriptor?? [ 463.211789][ T5335] kvaser_usb 3-1:0.0: error -EMSGSIZE: Cannot get software info [ 463.223843][ T5335] kvaser_usb 3-1:0.0: probe with driver kvaser_usb failed with error -90 [ 463.426504][ T9] usb 3-1: USB disconnect, device number 58 [ 463.490690][ T5335] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 463.559681][T23925] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 463.568835][T23925] vhci_hcd: invalid port number 251 [ 463.574610][T23925] vhci_hcd: default hub control req: 0500 v0000 i00fb l0 [ 463.672504][ T5335] usb 5-1: unable to get BOS descriptor or descriptor too short [ 463.686436][ T5335] usb 5-1: config 1 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 463.704728][ T5335] usb 5-1: config 1 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 463.717047][ T5335] usb 5-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 463.735426][ T5335] usb 5-1: config 1 interface 0 has no altsetting 0 [ 463.748993][ T5335] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 463.758551][ T5335] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.770549][ T5335] usb 5-1: Product: syz [ 463.774767][ T5335] usb 5-1: Manufacturer: syz [ 463.789845][ T5335] usb 5-1: SerialNumber: syz [ 463.813449][T23940] Non-string source [ 463.840997][ T5273] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 463.855880][T23943] netlink: 'syz.1.8856': attribute type 10 has an invalid length. [ 463.882415][T23943] bridge0: port 3(team0) entered disabled state [ 463.889597][T23943] team0: left allmulticast mode [ 463.895767][T23943] team_slave_0: left allmulticast mode [ 463.901733][T23943] team_slave_1: left allmulticast mode [ 463.907458][T23943] team0: left promiscuous mode [ 463.916124][T23943] team_slave_0: left promiscuous mode [ 463.924796][T23943] team_slave_1: left promiscuous mode [ 463.930721][T23943] bridge0: port 3(team0) entered disabled state [ 463.938775][T23943] team0: Cannot enslave team device to itself [ 464.001093][ T5273] usb 1-1: Using ep0 maxpacket: 16 [ 464.016711][ T5273] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 464.030371][ T5335] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 464.049446][ T5273] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.061779][ T5335] usb 5-1: USB disconnect, device number 5 [ 464.090343][ T5273] usb 1-1: Product: syz [ 464.096354][ T5273] usb 1-1: Manufacturer: syz [ 464.112890][ T5273] usb 1-1: SerialNumber: syz [ 464.126438][ T5273] r8152-cfgselector 1-1: Unknown version 0x0000 [ 464.134812][ T5273] r8152-cfgselector 1-1: config 0 descriptor?? [ 464.238986][T23957] netlink: 'syz.3.8864': attribute type 2 has an invalid length. [ 464.246965][T23957] netlink: 'syz.3.8864': attribute type 1 has an invalid length. [ 464.257536][T23957] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8864'. [ 464.630201][ T5271] r8152-cfgselector 1-1: USB disconnect, device number 17 [ 464.858477][T23995] delete_channel: no stack [ 465.077379][ T29] audit: type=1400 audit(1727684407.912:4066): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="#!" requested=w pid=24010 comm="syz.3.8888" dest=20001 [ 465.197846][T24019] netlink: 211388 bytes leftover after parsing attributes in process `syz.3.8893'. [ 465.471499][T24039] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8902'. [ 465.772262][ T29] audit: type=1326 audit(1727684408.612:4067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24056 comm="syz.0.8911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb021d7dff9 code=0x7ffc0000 [ 465.805835][ T29] audit: type=1326 audit(1727684408.642:4068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24056 comm="syz.0.8911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb021d7dff9 code=0x7ffc0000 [ 465.879088][ T29] audit: type=1326 audit(1727684408.662:4069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24056 comm="syz.0.8911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7fb021d7dff9 code=0x7ffc0000 [ 465.900756][ C1] vkms_vblank_simulate: vblank timer overrun [ 465.916882][ T29] audit: type=1326 audit(1727684408.662:4070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24056 comm="syz.0.8911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb021d7dff9 code=0x7ffc0000 [ 465.977443][ T29] audit: type=1326 audit(1727684408.662:4071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24056 comm="syz.0.8911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb021d7dff9 code=0x7ffc0000 [ 465.999098][ C1] vkms_vblank_simulate: vblank timer overrun [ 466.078682][T24077] overlayfs: conflicting options: metacopy=off,verity=require [ 466.359576][T24098] dlm: no locking on control device [ 466.381255][ T5335] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 466.548208][T24109] netlink: 'syz.4.8937': attribute type 3 has an invalid length. [ 466.556591][ T5335] usb 3-1: Using ep0 maxpacket: 8 [ 466.563826][ T5335] usb 3-1: config 0 has an invalid interface number: 84 but max is 0 [ 466.572469][ T5335] usb 3-1: config 0 has no interface number 0 [ 466.582454][T24109] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.8937'. [ 466.607321][ T5335] usb 3-1: New USB device found, idVendor=1e59, idProduct=0002, bcdDevice=91.96 [ 466.621288][ T5335] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.639784][ T5335] usb 3-1: Product: syz [ 466.648953][ T5335] usb 3-1: Manufacturer: syz [ 466.656286][ T5335] usb 3-1: SerialNumber: syz [ 466.690998][ T5335] usb 3-1: config 0 descriptor?? [ 466.778390][T24121] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8943'. [ 466.815209][T24123] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8944'. [ 466.903714][T24130] netlink: 'syz.0.8947': attribute type 2 has an invalid length. [ 466.921357][ T5335] dvb-usb: found a 'EvolutePC TVWay+' in warm state. [ 466.933697][T24130] netlink: 244 bytes leftover after parsing attributes in process `syz.0.8947'. [ 466.943751][ T5335] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 466.972585][ T5335] dvbdev: DVB: registering new adapter (EvolutePC TVWay+) [ 466.987441][ T5335] usb 3-1: media controller created [ 467.006456][ T5335] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 467.070326][ T5335] DVB: Unable to find symbol dib8000_attach() [ 467.085150][ T5335] dvb-usb: no frontend was attached by 'EvolutePC TVWay+' [ 467.121340][ T5227] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 467.191801][ T5335] rc_core: IR keymap rc-dib0700-nec not found [ 467.201955][ T5335] Registered IR keymap rc-empty [ 467.207001][ T5335] dvb-usb: could not initialize remote control. [ 467.231347][ T5335] dvb-usb: EvolutePC TVWay+ successfully initialized and connected. [ 467.273288][ T5227] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 467.278205][ T5335] usb 3-1: USB disconnect, device number 59 [ 467.310786][ T5227] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 467.342327][T24151] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 467.350653][ T5335] dvb-usb: EvolutePC TVWay+ successfully deinitialized and disconnected. [ 467.357401][ T5227] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 467.418233][ T5227] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 467.431514][ T5227] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.439554][ T5227] usb 2-1: Product: syz [ 467.457617][ T5227] usb 2-1: Manufacturer: syz [ 467.467077][ T5227] usb 2-1: SerialNumber: syz [ 467.488066][ T5227] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 467.507258][ T5227] cdc_ncm 2-1:1.0: bind() failure [ 467.749995][ T5227] usb 2-1: USB disconnect, device number 127 [ 467.761522][ T5300] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 467.931546][ T5300] usb 4-1: Using ep0 maxpacket: 16 [ 467.938842][ T5300] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 467.952331][ T5300] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 467.962446][ T5300] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 467.976527][ T5335] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 467.985958][ T5300] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 467.995140][ T5300] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 468.003381][ T5300] usb 4-1: SerialNumber: syz [ 468.014464][T24162] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 468.034185][ T5300] cdc_acm 4-1:1.0: skipping garbage [ 468.163503][ T5335] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 468.175412][ T5335] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0xC has invalid wMaxPacketSize 0 [ 468.191764][ T5335] usb 5-1: config 0 interface 0 has no altsetting 0 [ 468.204367][ T5335] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=1c.92 [ 468.213923][ T5335] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.231927][ T5335] usb 5-1: Product: syz [ 468.248782][ T5300] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 468.272612][ T5300] usb 4-1: USB disconnect, device number 7 [ 468.298873][ T5335] usb 5-1: Manufacturer: syz [ 468.308593][ T5335] usb 5-1: SerialNumber: syz [ 468.333879][ T5335] usb 5-1: config 0 descriptor?? [ 468.548333][T24218] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.8987'. [ 468.560115][ T5335] usbtest 5-1:0.0: Linux user mode ISO test driver [ 468.567464][T24218] openvswitch: netlink: Key type 29 is not supported [ 468.571640][ T5335] usbtest 5-1:0.0: high-speed {control iso-out} tests (+alt) [ 468.660450][T24225] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.8991'. [ 468.774935][ T5335] usb 5-1: USB disconnect, device number 6 [ 468.811892][ T5300] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 468.966618][T24242] IPv6: NLM_F_REPLACE set, but no existing node found! [ 468.982552][ T5300] usb 2-1: Using ep0 maxpacket: 16 [ 468.993795][ T5300] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 469.009573][ T5300] usb 2-1: config 0 has no interface number 0 [ 469.016049][ T5300] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 469.038471][ T5300] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 469.056023][ T5300] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 469.064838][ T5300] usb 2-1: Product: syz [ 469.071325][ T5300] usb 2-1: SerialNumber: syz [ 469.089371][ T5300] usb 2-1: config 0 descriptor?? [ 469.108710][ T5300] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input66 [ 469.220826][T24254] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9005'. [ 469.244820][T24254] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9005'. [ 469.358585][ C0] cm109_urb_ctl_callback: 98 callbacks suppressed [ 469.358612][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 469.372517][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 469.379807][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 469.386985][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 469.394176][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 469.401364][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 469.408548][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 469.415797][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 469.422998][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 469.430248][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 469.443090][ T5270] usb 2-1: USB disconnect, device number 2 [ 469.443222][ C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 469.481118][ T5270] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 469.536252][T24266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9011'. [ 469.581905][ T5300] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 469.592061][ T5271] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 469.669276][ T29] audit: type=1326 audit(1727684412.501:4072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24271 comm="syz.0.9015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb021d7dff9 code=0x7ffc0000 [ 469.710309][ T29] audit: type=1326 audit(1727684412.501:4073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24271 comm="syz.0.9015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb021d7dff9 code=0x7ffc0000 [ 469.732006][ C1] vkms_vblank_simulate: vblank timer overrun [ 469.739793][ T29] audit: type=1326 audit(1727684412.531:4074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24271 comm="syz.0.9015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7fb021d7dff9 code=0x7ffc0000 [ 469.767657][ T29] audit: type=1326 audit(1727684412.531:4075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24271 comm="syz.0.9015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb021d7dff9 code=0x7ffc0000 [ 469.797789][ T5300] usb 4-1: Using ep0 maxpacket: 8 [ 469.805090][ T5271] usb 5-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice=cc.97 [ 469.814415][ T29] audit: type=1326 audit(1727684412.531:4076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24271 comm="syz.0.9015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb021d7dff9 code=0x7ffc0000 [ 469.826809][ T5300] usb 4-1: unable to get BOS descriptor or descriptor too short [ 469.836744][ T5271] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.854664][ T5300] usb 4-1: config 8 has an invalid interface number: 255 but max is 0 [ 469.862849][ T5271] usb 5-1: config 0 descriptor?? [ 469.878662][ T5300] usb 4-1: config 8 has no interface number 0 [ 469.886059][ T5271] sisusb 5-1:0.0: Invalid USB2VGA device [ 469.891754][ T5271] sisusb 5-1:0.0: probe with driver sisusb failed with error -22 [ 469.897946][ T5300] usb 4-1: config 8 interface 255 has no altsetting 0 [ 469.949477][T24283] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 469.956051][T24283] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 469.967102][T24283] vhci_hcd vhci_hcd.0: Device attached [ 469.976658][T24285] vhci_hcd: connection closed [ 469.977541][ T35] vhci_hcd: stop threads [ 469.988735][ T35] vhci_hcd: release socket [ 469.993504][ T35] vhci_hcd: disconnect device [ 470.005645][ T5300] usb 4-1: string descriptor 0 read error: -22 [ 470.037078][ T5300] usb 4-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 470.052811][ T5300] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.108961][ T5227] usb 5-1: USB disconnect, device number 7 [ 470.231400][T24298] @: renamed from vcan0 (while UP) [ 470.311282][T24304] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 470.491562][ T5300] eth%d: CATC EL1210A NetMate USB Ethernet at usb-dummy_hcd.3-1, 00:00:00:00:00:00. [ 470.519520][ T5300] usb 4-1: USB disconnect, device number 8 [ 470.692257][T24318] __nla_validate_parse: 1 callbacks suppressed [ 470.692279][T24318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9036'. [ 471.183102][ T5270] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 471.232779][T24358] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 471.244568][ T5227] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 471.352313][ T5270] usb 2-1: Using ep0 maxpacket: 8 [ 471.369440][ T5270] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 471.391013][ T5270] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 471.402354][ T5227] usb 5-1: Using ep0 maxpacket: 8 [ 471.412168][ T5227] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 471.425662][ T5270] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 471.444031][ T5270] usb 2-1: SerialNumber: syz [ 471.453250][ T5227] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 471.462818][ T5227] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 471.471054][ T5227] usb 5-1: SerialNumber: syz [ 471.478896][ T5270] usb 2-1: config 0 descriptor?? [ 471.488271][ T5270] usb 2-1: Found UVC 0.00 device (05ac:8501) [ 471.499226][ T5227] usb 5-1: config 0 descriptor?? [ 471.509080][ T5270] usb 2-1: No valid video chain found. [ 471.518272][ T5227] usb 5-1: Found UVC 0.00 device (05ac:8501) [ 471.526660][ T5227] usb 5-1: Failed to create links for entity 255 [ 471.540139][ T5227] usb 5-1: Failed to register entities (-22). [ 471.619295][ T5335] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 471.651288][T24380] netlink: 'syz.0.9068': attribute type 32 has an invalid length. [ 471.661179][T24380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9068'. [ 471.674266][T24380] (unnamed net_device) (uninitialized): option coupled_control: invalid value (5) [ 471.689933][ T5227] usb 2-1: USB disconnect, device number 3 [ 471.729807][ T5270] usb 5-1: USB disconnect, device number 8 [ 471.782593][ T5335] usb 3-1: Using ep0 maxpacket: 8 [ 471.809463][ T5335] usb 3-1: config 0 has an invalid interface number: 211 but max is 0 [ 471.818360][ T5335] usb 3-1: config 0 has no interface number 0 [ 471.824723][ T5335] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=76.ff [ 471.834155][ T5335] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.851318][ T5335] usb 3-1: config 0 descriptor?? [ 472.273857][ T5335] usb 3-1: f81604_write: reg: 105 data: 29 failed: -EPROTO [ 472.281292][ T5335] f81604 3-1:0.211: Setting termination of CH#0 failed: -EPROTO [ 472.301608][ T5335] f81604 3-1:0.211: probe with driver f81604 failed with error -71 [ 472.315452][ T5335] usb 3-1: USB disconnect, device number 60 [ 472.620678][T24432] tipc: Invalid UDP bearer configuration [ 472.620723][T24432] tipc: Enabling of bearer rejected, failed to enable media [ 472.988080][T24461] syz.2.9106 (24461): /proc/24459/oom_adj is deprecated, please use /proc/24459/oom_score_adj instead. [ 473.390768][T24489] No control pipe specified [ 473.968532][T24524] can0: slcan on ptm0. [ 474.054169][ T29] audit: type=1400 audit(1727684416.880:4077): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="#!" requested=w pid=24529 comm="syz.3.9139" [ 474.117229][T24521] can0 (unregistered): slcan off ptm0. [ 474.251550][T24545] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9145'. [ 474.342971][ T5270] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 474.505951][ T5270] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 474.518763][ T5270] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 474.539883][ T5270] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 474.566644][ T5270] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 474.578291][ T5270] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 474.592611][ T5270] usb 1-1: SerialNumber: syz [ 474.606070][T24534] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 474.844928][ T5270] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 474.858873][ T5270] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 474.867666][ T5270] usb 1-1: USB disconnect, device number 18 [ 474.933462][T24585] Bluetooth: MGMT ver 1.23 [ 474.982562][ T29] audit: type=1326 audit(1727684417.810:4078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24587 comm="syz.4.9167" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f28a217dff9 code=0x0 [ 474.983488][T24586] tipc: Invalid UDP bearer configuration [ 475.004926][T24586] tipc: Enabling of bearer rejected, failed to enable media [ 475.864615][T24643] netlink: 'syz.0.9181': attribute type 1 has an invalid length. [ 475.899660][T24643] netlink: 9348 bytes leftover after parsing attributes in process `syz.0.9181'. [ 475.932095][T24643] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9181'. [ 476.311721][ T29] audit: type=1400 audit(1727684419.140:4079): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=24674 comm="syz.3.9189" daddr=::ac14:140c [ 476.850235][T24708] netlink: 'syz.0.9202': attribute type 3 has an invalid length. [ 477.018011][T24722] netlink: 'syz.4.9209': attribute type 1 has an invalid length. [ 477.039673][T24722] netlink: 9380 bytes leftover after parsing attributes in process `syz.4.9209'. [ 477.050360][T24724] netlink: 'syz.2.9211': attribute type 1 has an invalid length. [ 477.065791][T24724] netlink: 236 bytes leftover after parsing attributes in process `syz.2.9211'. [ 477.167597][T24732] hsr0: entered promiscuous mode [ 477.175433][T24729] hsr0: left promiscuous mode [ 477.562931][ T29] audit: type=1400 audit(1727684420.389:4080): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="#!" requested=w pid=24757 comm="syz.0.9226" [ 477.653772][ T5271] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 477.815538][ T5271] usb 5-1: config 0 has an invalid interface number: 128 but max is 0 [ 477.827656][ T5271] usb 5-1: config 0 has no interface number 0 [ 477.835928][ T5271] usb 5-1: config 0 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 477.848380][ T5271] usb 5-1: config 0 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 477.859446][ T5271] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 477.868643][ T5271] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.879069][ T5271] usb 5-1: config 0 descriptor?? [ 478.073898][ T5227] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 478.223857][ T5227] usb 4-1: Using ep0 maxpacket: 16 [ 478.234041][ T5227] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 478.242324][ T5227] usb 4-1: config 0 has no interface number 0 [ 478.248768][ T5227] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0xA has invalid maxpacket 1032, setting to 1024 [ 478.260410][ T5227] usb 4-1: config 0 interface 35 altsetting 0 has an endpoint descriptor with address 0xC2, changing to 0x82 [ 478.272864][ T5227] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 478.284865][ T5227] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 478.308810][ T5271] uclogic 0003:256C:006D.0002: interface is invalid, ignoring [ 478.322396][ T5227] usb 4-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=a7.5c [ 478.332128][ T5227] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=19 [ 478.340440][ T5227] usb 4-1: Product: syz [ 478.344992][ T5227] usb 4-1: Manufacturer: syz [ 478.350006][ T5227] usb 4-1: SerialNumber: syz [ 478.357233][ T5227] usb 4-1: config 0 descriptor?? [ 478.364296][T24770] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 478.395816][ T5227] cypress_m8 4-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 478.469212][T24778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9236'. [ 478.482103][T24778] openvswitch: netlink: Actions may not be safe on all matching packets [ 478.508286][ T5270] usb 5-1: USB disconnect, device number 9 [ 478.602824][ T5227] usb 4-1: Nokia CA-42 V2 Adapter converter now attached to ttyUSB0 [ 478.620900][ T5227] usb 4-1: USB disconnect, device number 9 [ 478.643481][ T5227] nokiaca42v2 ttyUSB0: Nokia CA-42 V2 Adapter converter now disconnected from ttyUSB0 [ 478.680120][ T5227] cypress_m8 4-1:0.35: device disconnected [ 478.828066][T24796] netlink: 216 bytes leftover after parsing attributes in process `syz.2.9245'. [ 478.837396][T24796] netlink: 'syz.2.9245': attribute type 6 has an invalid length. [ 479.334382][ T5227] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 479.506613][ T5227] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 479.517745][ T5227] usb 1-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00 [ 479.531133][ T5227] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.550046][ T5227] usb 1-1: config 0 descriptor?? [ 479.864328][ T5270] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 479.977813][ T5227] hid-steam 0003:28DE:1205.0003: : USB HID v0.00 Device [HID 28de:1205] on usb-dummy_hcd.0-1/input0 [ 480.024402][ T5270] usb 3-1: Using ep0 maxpacket: 8 [ 480.033265][ T5270] usb 3-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 480.043073][ T5270] usb 3-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 480.051555][ T5227] hid-steam 0003:28DE:1205.0003: Steam Controller 'XXXXXXXXXX' connected [ 480.060300][ T5270] usb 3-1: Product: syz [ 480.064258][ T5300] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 480.064599][ T5270] usb 3-1: Manufacturer: syz [ 480.079959][ T5227] input: Steam Deck as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28DE:1205.0003/input/input68 [ 480.092635][ T5270] usb 3-1: SerialNumber: syz [ 480.113010][ T5270] usb 3-1: config 0 descriptor?? [ 480.121531][ T5227] input: Steam Deck Motion Sensors as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28DE:1205.0003/input/input69 [ 480.143403][ T5270] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 480.254894][ T5300] usb 5-1: Using ep0 maxpacket: 8 [ 480.267087][ T5227] hid-steam 0003:28DE:1205.0004: hidraw0: USB HID v0.00 Device [HID 28de:1205] on usb-dummy_hcd.0-1/input0 [ 480.267438][ T5300] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=7d.78 [ 480.300661][ T5227] usb 1-1: USB disconnect, device number 19 [ 480.306529][ T5300] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.332894][ T5300] usb 5-1: Product: syz [ 480.342576][ T5300] usb 5-1: Manufacturer: syz [ 480.348401][ T5300] usb 5-1: SerialNumber: syz [ 480.356002][ T5300] usb 5-1: config 0 descriptor?? [ 480.375477][ T5300] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state. [ 480.390672][ T5300] dvb-usb: bulk message failed: -22 (2/0) [ 480.398529][ T5300] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 480.416844][ T5300] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver) [ 480.433693][ T5227] hid-steam 0003:28DE:1205.0003: Steam Controller 'XXXXXXXXXX' disconnected [ 480.435338][ T5300] usb 5-1: media controller created [ 480.473878][ T5300] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 480.498102][ T5300] dvb-usb: bulk message failed: -22 (1/0) [ 480.503932][ T5300] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' [ 480.516517][ T5300] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input70 [ 480.529782][ T5300] dvb-usb: schedule remote query interval to 50 msecs. [ 480.538842][ T5300] dvb-usb: bulk message failed: -22 (2/0) [ 480.545969][ T5300] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected. [ 480.610968][ T5300] dvb-usb: bulk message failed: -22 (1/0) [ 480.630947][ T5300] dvb-usb: error while querying for an remote control event. [ 480.643446][ T9] usb 5-1: USB disconnect, device number 10 [ 480.695725][ T9] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected. [ 480.777071][ T5270] gspca_zc3xx: reg_w_i err -71 [ 480.784665][ T5270] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 480.802379][ T5270] usb 3-1: USB disconnect, device number 61 [ 481.134509][ T5227] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 481.194835][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 481.284606][ T5227] usb 1-1: Using ep0 maxpacket: 16 [ 481.295940][ T5227] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 481.303967][ T5227] usb 1-1: config 0 has no interface number 0 [ 481.311518][ T5227] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 481.322495][ T5227] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 481.340686][ T5227] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 481.350121][ T5227] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 481.358879][ T5227] usb 1-1: Product: syz [ 481.363105][ T5227] usb 1-1: SerialNumber: syz [ 481.364634][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 481.369690][ T5227] usb 1-1: config 0 descriptor?? [ 481.385512][ T5227] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 481.401884][ T5227] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input71 [ 481.410427][ T9] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 481.427244][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.444815][ T9] usb 4-1: Product: syz [ 481.450542][T24877] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9282'. [ 481.464876][ T9] usb 4-1: Manufacturer: syz [ 481.469515][ T9] usb 4-1: SerialNumber: syz [ 481.477692][T24877] netlink: 56 bytes leftover after parsing attributes in process `syz.2.9282'. [ 481.499818][T24877] netlink: 'syz.2.9282': attribute type 10 has an invalid length. [ 481.509668][ T9] usb 4-1: config 0 descriptor?? [ 481.526885][ T9] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 481.633436][ C1] cm109_urb_ctl_callback: 35 callbacks suppressed [ 481.633463][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 481.648295][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 481.656145][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 481.663527][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 481.671104][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 481.678451][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 481.685956][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 481.693334][ T5227] usb 1-1: USB disconnect, device number 20 [ 481.699315][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 481.699345][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 481.729675][ T5227] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 481.958175][ T9] usb 4-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 482.169243][ T5271] usb 4-1: USB disconnect, device number 10 [ 482.178789][ T5271] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 482.187882][ T5271] visor 4-1:0.0: device disconnected [ 482.235275][ T5227] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 482.354822][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 482.386338][ T5227] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.397620][ T5227] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.407557][ T5227] usb 3-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 482.416902][ T5227] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.428358][ T5227] usb 3-1: config 0 descriptor?? [ 482.514825][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 482.521655][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.533095][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.547530][ T5335] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 482.557471][ T9] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 482.567001][ T9] usb 5-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 482.575657][ T9] usb 5-1: Product: syz [ 482.579854][ T9] usb 5-1: Manufacturer: syz [ 482.587071][ T9] usb 5-1: config 0 descriptor?? [ 482.728425][ T5335] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.739517][ T5335] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.742471][T24906] overlayfs: failed to resolve './file0.': -2 [ 482.749972][ T5335] usb 1-1: New USB device found, idVendor=056a, idProduct=033c, bcdDevice= 0.00 [ 482.772650][ T5335] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.783439][ T5335] usb 1-1: config 0 descriptor?? [ 482.849709][ T5227] stadia 0003:18D1:9400.0005: unbalanced collection at end of report description [ 482.860579][ T5227] stadia 0003:18D1:9400.0005: parse failed [ 482.868120][ T5227] stadia 0003:18D1:9400.0005: probe with driver stadia failed with error -22 [ 483.017383][ T9] kovaplus 0003:1E7D:2D50.0006: item fetching failed at offset 5/7 [ 483.026659][ T9] kovaplus 0003:1E7D:2D50.0006: parse failed [ 483.032695][ T9] kovaplus 0003:1E7D:2D50.0006: probe with driver kovaplus failed with error -22 [ 483.050445][ T5227] usb 3-1: USB disconnect, device number 62 [ 483.106043][ T5273] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 483.207880][ T5335] wacom 0003:056A:033C.0007: Unknown device_type for 'HID 056a:033c'. Assuming pen. [ 483.227232][ T5335] wacom 0003:056A:033C.0007: hidraw0: USB HID v0.00 Device [HID 056a:033c] on usb-dummy_hcd.0-1/input0 [ 483.242404][ T5227] usb 5-1: USB disconnect, device number 11 [ 483.245769][ T5335] input: Wacom Intuos PT S 2 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:033C.0007/input/input72 [ 483.286752][ T5273] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.298047][ T5273] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 483.309555][ T5273] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 483.322689][ T5273] usb 4-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 483.331812][ T5273] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.356389][ T5273] usb 4-1: config 0 descriptor?? [ 483.418278][ T5271] usb 1-1: USB disconnect, device number 21 [ 483.860840][ T5273] hid-alps 0003:044E:120B.0008: item fetching failed at offset 3/5 [ 483.871010][ T5236] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 483.882180][ T5236] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 483.890692][ T5236] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 483.898893][ T5273] hid-alps 0003:044E:120B.0008: parse failed [ 483.906095][ T5273] hid-alps 0003:044E:120B.0008: probe with driver hid-alps failed with error -22 [ 483.916336][ T5236] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 483.930209][ T5236] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 483.937666][ T5236] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 484.070712][ T5273] usb 4-1: USB disconnect, device number 11 [ 484.186003][T24917] lo speed is unknown, defaulting to 1000 [ 484.358930][T24917] chnl_net:caif_netlink_parms(): no params data found [ 484.387873][T24939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9310'. [ 484.400692][T24939] nbd: socks must be embedded in a SOCK_ITEM attr [ 484.435884][T24941] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 484.558723][T24917] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.572552][T24917] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.635919][T24917] bridge_slave_0: entered allmulticast mode [ 484.662122][T24917] bridge_slave_0: entered promiscuous mode [ 484.688482][T24917] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.713636][T24917] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.734359][T24917] bridge_slave_1: entered allmulticast mode [ 484.744000][T24917] bridge_slave_1: entered promiscuous mode [ 484.823366][T24917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 484.873929][T24917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 485.012519][T24917] team0: Port device team_slave_0 added [ 485.021743][T24917] team0: Port device team_slave_1 added [ 485.155026][T24917] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 485.181826][T24917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 485.224890][T24917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 485.246788][T24917] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 485.254169][T24917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 485.284374][T24917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 485.305517][ T5227] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 485.369196][T24917] hsr_slave_0: entered promiscuous mode [ 485.378023][ T29] audit: type=1326 audit(1727684428.208:4081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24993 comm="syz.3.9334" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa5c8d7dff9 code=0x0 [ 485.415979][T24917] hsr_slave_1: entered promiscuous mode [ 485.423600][T24917] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 485.432291][T24917] Cannot create hsr debugfs directory [ 485.457561][T24996] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 485.475637][ T5227] usb 3-1: Using ep0 maxpacket: 16 [ 485.492306][ T5227] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.523849][ T5227] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 485.541744][ T5227] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 485.560503][ T5227] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 485.572010][ T5227] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.590074][ T5227] usb 3-1: config 0 descriptor?? [ 485.758062][T24917] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.776437][T24917] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 485.820938][ T29] audit: type=1400 audit(1727684428.648:4082): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=25008 comm="syz.0.9341" daddr=::ffff:127.0.0.1 [ 485.927567][T24917] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.946047][T24917] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 485.955556][ T29] audit: type=1326 audit(1727684428.778:4083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25014 comm="syz.4.9344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28a217dff9 code=0x7ffc0000 [ 485.992180][ T29] audit: type=1326 audit(1727684428.778:4084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25014 comm="syz.4.9344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28a217dff9 code=0x7ffc0000 [ 486.023922][ T5226] Bluetooth: hci5: command tx timeout [ 486.026597][ T5227] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 486.031166][ T29] audit: type=1326 audit(1727684428.778:4085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25014 comm="syz.4.9344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f28a217dff9 code=0x7ffc0000 [ 486.052526][ T5227] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 486.059831][ T29] audit: type=1326 audit(1727684428.778:4086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25014 comm="syz.4.9344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28a217dff9 code=0x7ffc0000 [ 486.088819][ T29] audit: type=1326 audit(1727684428.778:4087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25014 comm="syz.4.9344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28a217dff9 code=0x7ffc0000 [ 486.100576][ T5227] microsoft 0003:045E:07DA.0009: No inputs registered, leaving [ 486.133628][ T5271] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 486.142009][ T5227] microsoft 0003:045E:07DA.0009: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 486.154529][ T5227] microsoft 0003:045E:07DA.0009: no inputs found [ 486.161627][ T5227] microsoft 0003:045E:07DA.0009: could not initialize ff, continuing anyway [ 486.182154][T24917] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.192641][T24917] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 486.321022][T24917] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.332009][T24917] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 486.348571][ T5273] usb 3-1: USB disconnect, device number 63 [ 486.379637][ T5271] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 486.389060][ T5271] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.412252][ T5271] usb 1-1: config 0 descriptor?? [ 486.431479][ T5271] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 486.584893][T24917] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 486.596772][T24917] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 486.620148][T24917] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 486.662020][T24917] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 486.819684][T24917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 486.860081][T24917] 8021q: adding VLAN 0 to HW filter on device team0 [ 486.880277][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.887514][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 486.909797][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.917005][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 487.045004][ T5271] gp8psk: usb out operation failed. [ 487.058248][ T5271] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 487.076715][ T5271] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 487.098200][T25040] random: crng reseeded on system resumption [ 487.108318][ T5271] usb 1-1: media controller created [ 487.135395][ T5271] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 487.199319][ T5271] gp8psk_fe: Frontend attached [ 487.216540][ T5271] usb 1-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 487.224618][ T5271] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 487.335944][ T5271] gp8psk: usb in 138 operation failed. [ 487.341472][ T5271] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 487.367431][ T5271] gp8psk: found Genpix USB device pID = 203 (hex) [ 487.396825][ T5271] usb 1-1: USB disconnect, device number 22 [ 487.410779][T24917] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 487.526620][ T5271] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 487.538700][T24917] veth0_vlan: entered promiscuous mode [ 487.558698][T24917] veth1_vlan: entered promiscuous mode [ 487.644102][T24917] veth0_macvtap: entered promiscuous mode [ 487.673204][T24917] veth1_macvtap: entered promiscuous mode [ 487.739695][T24917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.750358][T24917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.760364][T24917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.771102][T24917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.781067][T24917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.791857][T24917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.801927][T24917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.812787][T24917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.822923][T24917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.833473][T24917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.844646][T24917] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 487.854756][T24917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.865283][T24917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.875224][T24917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.885988][T24917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.895824][T24917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.906548][T24917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.916961][T24917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.927943][T24917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.937957][T24917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.948588][T24917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.959700][T24917] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 487.970182][T24917] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.979205][T24917] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.988370][T24917] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.997515][T24917] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.097100][ T5226] Bluetooth: hci5: command tx timeout [ 488.167840][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.168252][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.175679][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.184037][T25073] openvswitch: netlink: Unknown key attributes 1 [ 488.229673][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.424775][T25087] netlink: 'syz.3.9375': attribute type 3 has an invalid length. [ 488.538712][T25093] netlink: 'syz.3.9377': attribute type 3 has an invalid length. [ 488.606459][ T25] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 488.766646][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 488.779513][ T25] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 488.787905][ T25] usb 1-1: config 0 has no interface number 0 [ 488.799673][ T25] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 488.804594][T25112] netlink: 'syz.3.9384': attribute type 3 has an invalid length. [ 488.826388][ T25] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 488.840590][T25112] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.9384'. [ 488.858489][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.903582][ T25] usb 1-1: config 0 descriptor?? [ 488.913431][ T25] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 488.980916][ T5335] kernel write not supported for file /snd/seq (pid: 5335 comm: kworker/0:6) [ 489.000420][T25120] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9390'. [ 489.013762][T25120] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9390'. [ 489.147364][ T5335] usb 1-1: USB disconnect, device number 23 [ 489.167982][ T5335] iowarrior 1-1:0.1: I/O-Warror #0 now disconnected [ 489.576901][ T5273] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 489.718602][T25160] netlink: 'syz.4.9409': attribute type 1 has an invalid length. [ 489.746948][ T5273] usb 2-1: Using ep0 maxpacket: 16 [ 489.762344][ T5273] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 489.786441][ T5273] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 489.809031][ T5273] usb 2-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00 [ 489.825646][ T5273] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.844803][ T5273] usb 2-1: config 0 descriptor?? [ 489.948142][T25172] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9413'. [ 489.986535][T25172] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9413'. [ 490.177610][ T5236] Bluetooth: hci5: command tx timeout [ 490.267089][ T25] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 490.270560][ T5273] razer 0003:1532:010D.000A: item fetching failed at offset 4/6 [ 490.292506][ T5273] razer 0003:1532:010D.000A: probe with driver razer failed with error -22 [ 490.438711][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 490.458726][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 490.478289][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 490.485559][ T5273] usb 2-1: USB disconnect, device number 4 [ 490.494726][ T25] usb 4-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 490.533674][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.556693][T25197] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9425'. [ 490.563953][ T25] usb 4-1: config 0 descriptor?? [ 490.596822][ T9] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 490.691950][ T29] audit: type=1326 audit(1727684433.517:4088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25204 comm="syz.4.9429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28a217dff9 code=0x7ffc0000 [ 490.745576][ T29] audit: type=1326 audit(1727684433.517:4089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25204 comm="syz.4.9429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28a217dff9 code=0x7ffc0000 [ 490.779537][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 490.790666][ T29] audit: type=1326 audit(1727684433.547:4090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25204 comm="syz.4.9429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f28a217dff9 code=0x7ffc0000 [ 490.790734][ T29] audit: type=1326 audit(1727684433.547:4091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25204 comm="syz.4.9429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28a217dff9 code=0x7ffc0000 [ 490.790770][ T29] audit: type=1326 audit(1727684433.547:4092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25204 comm="syz.4.9429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f28a217dff9 code=0x7ffc0000 [ 490.790802][ T29] audit: type=1326 audit(1727684433.547:4093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25204 comm="syz.4.9429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28a217dff9 code=0x7ffc0000 [ 490.879297][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 490.889677][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 490.899062][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.917945][ T9] usb 3-1: config 0 descriptor?? [ 491.027795][ T25] megaworld 0003:07B5:0312.000B: unknown main item tag 0x0 [ 491.032758][T25213] tmpfs: Group quota inode hardlimit too large. [ 491.038540][ T25] megaworld 0003:07B5:0312.000B: hidraw0: USB HID v0.00 Device [HID 07b5:0312] on usb-dummy_hcd.3-1/input0 [ 491.069983][ T25] megaworld 0003:07B5:0312.000B: no inputs found [ 491.231454][ T25] usb 4-1: USB disconnect, device number 12 [ 491.356211][ T9] logitech 0003:046D:C294.000C: unknown main item tag 0x0 [ 491.372377][ T9] logitech 0003:046D:C294.000C: unbalanced collection at end of report description [ 491.397384][ T9] logitech 0003:046D:C294.000C: parse failed [ 491.403485][ T9] logitech 0003:046D:C294.000C: probe with driver logitech failed with error -22 [ 491.459972][T25231] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9442'. [ 491.517075][ T29] audit: type=1400 audit(1727684434.336:4094): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=25232 comm="syz.0.9443" daddr=::ffff:172.20.20.170 dest=20003 [ 491.610150][ T5227] usb 3-1: USB disconnect, device number 64 [ 491.827007][ T25] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 492.017245][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 492.024393][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.039075][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.052120][ T25] usb 5-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 492.061617][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.117762][ T25] usb 5-1: config 0 descriptor?? [ 492.246944][ T5236] Bluetooth: hci5: command 0x0419 tx timeout [ 492.532819][ T25] lenovo 0003:17EF:6009.000D: unknown main item tag 0x0 [ 492.546713][ T25] lenovo 0003:17EF:6009.000D: unknown main item tag 0x0 [ 492.556805][ T25] lenovo 0003:17EF:6009.000D: unknown main item tag 0x0 [ 492.574091][ T25] lenovo 0003:17EF:6009.000D: unknown main item tag 0x0 [ 492.581639][ T25] lenovo 0003:17EF:6009.000D: unknown main item tag 0x0 [ 492.602860][ T25] lenovo 0003:17EF:6009.000D: hidraw0: USB HID v0.00 Device [HID 17ef:6009] on usb-dummy_hcd.4-1/input0 [ 492.637122][ T5335] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 492.695791][T25304] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9477'. [ 492.712976][T25304] nbd: illegal input index -1409286144 [ 492.761643][ T5273] usb 5-1: USB disconnect, device number 12 [ 492.801844][ T5335] usb 3-1: Using ep0 maxpacket: 16 [ 492.815964][ T5335] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.845135][ T5335] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.865429][ T5335] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 492.888156][ T5335] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.909147][ T5335] usb 3-1: config 0 descriptor?? [ 492.965894][T25314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9482'. [ 493.331697][ T5335] cp2112 0003:10C4:EA90.000E: unbalanced delimiter at end of report description [ 493.372848][ T5335] cp2112 0003:10C4:EA90.000E: parse failed [ 493.384072][ T5335] cp2112 0003:10C4:EA90.000E: probe with driver cp2112 failed with error -22 [ 493.537359][ T25] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 493.550476][ T5227] usb 3-1: USB disconnect, device number 65 [ 493.553255][T25349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9499'. [ 493.611645][T25349] vlan2: entered allmulticast mode [ 493.637403][T25349] gretap0: entered allmulticast mode [ 493.711847][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 493.737482][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 493.756012][ T25] usb 4-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 493.765423][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.786315][ T25] usb 4-1: config 0 descriptor?? [ 493.967534][ T5227] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 494.127599][ T5227] usb 2-1: Using ep0 maxpacket: 16 [ 494.153131][ T5227] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.168901][ T5273] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 494.173045][ T5227] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 494.186536][ T5227] usb 2-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 494.196493][ T29] audit: type=1326 audit(1727684437.026:4095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25367 comm="syz.2.9508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488017dff9 code=0x7ffc0000 [ 494.196718][ T5227] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.228583][ T29] audit: type=1326 audit(1727684437.026:4096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25367 comm="syz.2.9508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488017dff9 code=0x7ffc0000 [ 494.230434][ T25] saitek 0003:06A3:0621.000F: unbalanced delimiter at end of report description [ 494.264164][ T29] audit: type=1326 audit(1727684437.096:4097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25367 comm="syz.2.9508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f488017dff9 code=0x7ffc0000 [ 494.281980][ T5227] usb 2-1: config 0 descriptor?? [ 494.305542][ T25] saitek 0003:06A3:0621.000F: parse failed [ 494.312036][ T25] saitek 0003:06A3:0621.000F: probe with driver saitek failed with error -22 [ 494.328178][ T5226] Bluetooth: hci5: command 0x0419 tx timeout [ 494.330083][ T5273] usb 1-1: config 0 has an invalid interface number: 16 but max is 0 [ 494.357807][ T5273] usb 1-1: config 0 has no interface number 0 [ 494.366432][ T5273] usb 1-1: config 0 interface 16 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.384487][ T5273] usb 1-1: config 0 interface 16 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 494.395198][ T5273] usb 1-1: config 0 interface 16 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 494.447713][ T5273] usb 1-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 494.456805][ T5273] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.518222][ T5273] usb 1-1: config 0 descriptor?? [ 494.549549][ T5335] usb 4-1: USB disconnect, device number 13 [ 494.711503][ T5227] cypress 0003:04B4:0001.0010: unknown main item tag 0x0 [ 494.748041][ T5227] cypress 0003:04B4:0001.0010: hidraw0: USB HID v0.00 Device [HID 04b4:0001] on usb-dummy_hcd.1-1/input0 [ 494.950674][ T5273] uclogic 0003:28BD:0905.0011: interface is invalid, ignoring [ 494.987062][ T5271] usb 2-1: USB disconnect, device number 5 [ 495.028090][ T5227] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 495.164127][ T5273] usb 1-1: USB disconnect, device number 24 [ 495.190120][ T5227] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 495.214597][ T5227] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 96, setting to 64 [ 495.240707][ T5227] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 495.267063][ T5227] usb 3-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 495.285310][ T5227] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.297112][ T5227] usb 3-1: config 0 descriptor?? [ 495.308389][T25384] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 495.319050][T25402] __nla_validate_parse: 2 callbacks suppressed [ 495.319067][T25402] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9525'. [ 495.740850][ T5227] input: HID 28bd:0909 Mouse as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28BD:0909.0012/input/input77 [ 495.785051][ T5227] uclogic 0003:28BD:0909.0012: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0909] on usb-dummy_hcd.2-1/input0 [ 495.797858][ T5335] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 495.875874][T25425] netlink: 232 bytes leftover after parsing attributes in process `syz.4.9536'. [ 495.878064][ T25] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 495.886211][T25425] netlink: 80 bytes leftover after parsing attributes in process `syz.4.9536'. [ 495.934224][T25427] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 495.967745][ T5335] usb 4-1: Using ep0 maxpacket: 16 [ 495.979447][ T9] usb 3-1: USB disconnect, device number 66 [ 495.994768][ T5335] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 496.012344][ T5335] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 496.047188][ T5335] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c1e, bcdDevice= 0.00 [ 496.056779][ T5335] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.058457][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 496.075546][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 496.080704][ T5335] usb 4-1: config 0 descriptor?? [ 496.097673][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 496.109873][ T25] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 496.124119][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.147646][ T25] usb 2-1: config 0 descriptor?? [ 496.228028][ T5271] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 496.244988][T25435] netlink: 'syz.0.9541': attribute type 11 has an invalid length. [ 496.380714][ T5271] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 496.390455][ T5271] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 496.413996][ T5271] usb 5-1: config 0 has no interface number 0 [ 496.423767][ T5271] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 496.443203][ T5271] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 496.470949][ T5271] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 496.481789][ T5271] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.491711][ T5271] usb 5-1: Product: syz [ 496.496642][ T5271] usb 5-1: Manufacturer: syz [ 496.502225][ T5271] usb 5-1: SerialNumber: syz [ 496.509369][ T5271] usb 5-1: config 0 descriptor?? [ 496.541037][ T5335] corsair-psu 0003:1B1C:1C1E.0013: item fetching failed at offset 2/5 [ 496.570830][ T5335] corsair-psu 0003:1B1C:1C1E.0013: probe with driver corsair-psu failed with error -22 [ 496.628248][ T25] hid-picolcd 0003:04D8:F002.0014: No report with id 0xf3 found [ 496.650930][ T25] hid-picolcd 0003:04D8:F002.0014: No report with id 0xf4 found [ 496.721021][T25450] xt_CT: No such helper "syz1" [ 496.756582][ T25] usb 4-1: USB disconnect, device number 14 [ 496.814557][ T5273] usb 2-1: USB disconnect, device number 6 [ 496.878232][ T5335] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 497.028298][ T5335] usb 3-1: Using ep0 maxpacket: 32 [ 497.041778][ T5335] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 497.050765][ T5335] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 497.060007][ T5335] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 497.071676][ T5335] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 497.082755][ T5335] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 497.092907][ T5335] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 497.102071][ T5335] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.112253][ T5335] usb 3-1: config 0 descriptor?? [ 497.121297][ T5335] hub 3-1:0.0: USB hub found [ 497.144613][ T5273] usb 5-1: USB disconnect, device number 13 [ 497.338388][ T5335] hub 3-1:0.0: 7 ports detected [ 497.345647][ T5335] hub 3-1:0.0: insufficient power available to use all downstream ports [ 497.536887][ T5335] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 497.551591][ T5335] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 497.577080][ T5335] usbhid 3-1:0.0: can't add hid device: -71 [ 497.588303][ T5335] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 497.629135][ T5335] usb 3-1: USB disconnect, device number 67 [ 498.073421][T25493] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 498.114301][T25496] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 498.124793][T25495] IPVS: stopping backup sync thread 25496 ... [ 498.438416][ T5273] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 498.599003][ T5273] usb 4-1: Using ep0 maxpacket: 16 [ 498.629411][ T5273] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 498.662517][ T5273] usb 4-1: config 0 has no interface number 0 [ 498.689088][ T5273] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 498.713896][ T5273] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 498.737296][ T5273] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 498.747031][ T5273] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 498.772806][ T5273] usb 4-1: Product: syz [ 498.777031][ T5273] usb 4-1: SerialNumber: syz [ 498.799896][ T5273] usb 4-1: config 0 descriptor?? [ 498.815418][ T5273] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 498.842045][ T5273] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input79 [ 498.890344][ T5271] usb 3-1: new low-speed USB device number 68 using dummy_hcd [ 499.059473][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 499.066700][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 499.074544][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 499.082002][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 499.082007][ T5271] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 499.082049][ T5271] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 499.089175][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 499.089503][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 499.126184][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 499.133479][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 499.140674][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 499.147854][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 499.150536][ T5271] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 499.174560][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 499.183657][ T5273] usb 4-1: USB disconnect, device number 15 [ 499.224512][ T5271] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 499.265218][ T5271] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 499.286104][ T5271] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 499.305436][ T5271] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 499.319612][ T5273] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 499.347528][ T5271] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 499.348952][ T5271] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 499.348993][ T5271] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 499.349017][ T5271] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 499.349040][ T5271] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 499.362099][T25549] sp0: Synchronizing with TNC [ 499.372928][ T5271] usb 3-1: string descriptor 0 read error: -22 [ 499.420641][ T5271] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 499.429937][ T5271] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.444245][ T5271] adutux 3-1:168.0: interrupt endpoints not found [ 499.599934][ T5236] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 499.603205][ T5236] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 499.621707][ T5236] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 499.627216][ T1039] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.653256][ T5236] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 499.668026][ T5236] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 499.681371][ T5236] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 499.750416][ T5273] usb 3-1: USB disconnect, device number 68 [ 499.810824][ T1039] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.030712][ T1039] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.060045][T25552] lo speed is unknown, defaulting to 1000 [ 500.180964][ T1039] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.279192][ T5273] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 500.438756][ T5273] usb 3-1: Using ep0 maxpacket: 8 [ 500.464878][ T5273] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 500.492209][ T5273] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 500.534204][T25552] chnl_net:caif_netlink_parms(): no params data found [ 500.545859][ T5273] usb 3-1: config 168 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 500.568387][ T5273] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 500.624920][ T5273] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 500.658828][ T5273] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 500.678315][ T5273] usb 3-1: config 168 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 500.681286][ T1039] bridge_slave_1: left allmulticast mode [ 500.706869][ T1039] bridge_slave_1: left promiscuous mode [ 500.708826][ T5273] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 500.728600][ T1039] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.747864][ T5273] usb 3-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 500.758663][ T5273] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 500.768871][ T5273] usb 3-1: config 168 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 500.791390][ T5273] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 500.806420][ T1039] bridge_slave_0: left allmulticast mode [ 500.827323][ T5273] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 500.833769][ T1039] bridge_slave_0: left promiscuous mode [ 500.850815][ T5273] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.854417][ T1039] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.859059][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 500.892391][ T5273] usb 3-1: Product: syz [ 500.902718][ T5273] usb 3-1: Manufacturer: syz [ 500.907363][ T5273] usb 3-1: SerialNumber: syz [ 501.038996][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 501.050489][ T9] usb 2-1: config 0 has an invalid interface number: 191 but max is 0 [ 501.058749][ T9] usb 2-1: config 0 has no interface number 0 [ 501.065835][ T9] usb 2-1: config 0 interface 191 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 501.090922][ T9] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=b6.36 [ 501.106924][ T9] usb 2-1: New USB device strings: Mfr=1, Product=226, SerialNumber=2 [ 501.123609][ T9] usb 2-1: Product: syz [ 501.145609][ T9] usb 2-1: Manufacturer: syz [ 501.151528][ T5273] adutux 3-1:168.0: interrupt endpoints not found [ 501.164484][ T5273] usb 3-1: USB disconnect, device number 69 [ 501.182835][ T9] usb 2-1: SerialNumber: syz [ 501.205174][ T9] usb 2-1: config 0 descriptor?? [ 501.234161][ T9] em28xx 2-1:0.191: New device syz syz @ 480 Mbps (0413:6023, interface 191, class 191) [ 501.259761][ T9] em28xx 2-1:0.191: Video interface 191 found: isoc [ 501.436216][T25586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 501.474835][T25586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.539295][ T9] em28xx 2-1:0.191: unknown em28xx chip ID (0) [ 501.633063][ T9] em28xx 2-1:0.191: failed to trigger read from i2c address 0xa0 (error=-5) [ 501.641878][ T9] em28xx 2-1:0.191: board has no eeprom [ 501.729218][ T9] em28xx 2-1:0.191: Identified as Leadtek Winfast USB II (card=7) [ 501.738173][ T9] em28xx 2-1:0.191: analog set to isoc mode. [ 501.769237][ T5226] Bluetooth: hci0: command tx timeout [ 501.785166][ T5335] em28xx 2-1:0.191: Registering V4L2 extension [ 501.806854][ T9] usb 2-1: USB disconnect, device number 7 [ 501.840401][ T5271] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 501.840543][ T9] em28xx 2-1:0.191: Disconnecting em28xx [ 501.982441][ T5335] em28xx 2-1:0.191: Config register raw data: 0xffffffed [ 501.994877][ T5335] em28xx 2-1:0.191: AC97 chip type couldn't be determined [ 502.009443][ T5271] usb 4-1: Using ep0 maxpacket: 16 [ 502.022633][ T5335] em28xx 2-1:0.191: No AC97 audio processor [ 502.039343][ T5271] usb 4-1: New USB device found, idVendor=046d, idProduct=08b2, bcdDevice=80.59 [ 502.059810][ T5335] usb 2-1: Decoder not found [ 502.069311][ T5271] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.084467][ T5335] em28xx 2-1:0.191: failed to create media graph [ 502.085293][ T5271] usb 4-1: Product: syz [ 502.105828][ T5271] usb 4-1: Manufacturer: syz [ 502.109648][ T5335] em28xx 2-1:0.191: V4L2 device video71 deregistered [ 502.119134][ T5271] usb 4-1: SerialNumber: syz [ 502.145930][ T5271] usb 4-1: config 0 descriptor?? [ 502.152628][ T5335] em28xx 2-1:0.191: Remote control support is not available for this card. [ 502.174725][ T9] em28xx 2-1:0.191: Closing input extension [ 502.180798][ T5271] pwc: Logitech QuickCam 4000 Pro USB webcam detected. [ 502.214029][ T9] em28xx 2-1:0.191: Freeing device [ 502.659287][ T1039] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 502.659343][ T5335] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 502.681585][ T1039] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 502.694793][ T1039] bond0 (unregistering): Released all slaves [ 502.708640][ T1039] bond1 (unregistering): Released all slaves [ 502.727688][ T1039] bond2 (unregistering): Released all slaves [ 502.783982][ T5271] pwc: send_video_command error -71 [ 502.830927][ T5335] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 502.836556][ T5271] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 502.841386][ T5335] usb 3-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00 [ 502.841416][ T5335] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.868617][ T5335] usb 3-1: config 0 descriptor?? [ 502.874315][ T1039] ɶƣ0GC: left promiscuous mode [ 502.891213][ T5271] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 502.911297][ T5271] usb 4-1: USB disconnect, device number 16 [ 503.024816][T25641] netlink: 'syz.4.9627': attribute type 1 has an invalid length. [ 503.096577][ T1039] ɶƣ0GCTw: left promiscuous mode [ 503.099083][T25644] [U] ^C [ 503.159944][T25552] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.172967][T25552] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.189761][T25552] bridge_slave_0: entered allmulticast mode [ 503.202053][T25552] bridge_slave_0: entered promiscuous mode [ 503.227482][T25552] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.259501][T25552] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.266765][T25552] bridge_slave_1: entered allmulticast mode [ 503.306634][T25552] bridge_slave_1: entered promiscuous mode [ 503.314124][ T5335] aquacomputer_d5next 0003:0C70:F00B.0015: hidraw0: USB HID v0.00 Device [HID 0c70:f00b] on usb-dummy_hcd.2-1/input0 [ 503.432653][T25657] program syz.3.9635 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 503.488227][T25552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 503.575560][ T5270] usb 3-1: USB disconnect, device number 70 [ 503.656032][T25552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 503.747854][T25668] netlink: 'syz.4.9640': attribute type 3 has an invalid length. [ 503.808150][T25668] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.9640'. [ 503.831427][T25552] team0: Port device team_slave_0 added [ 503.849605][ T5226] Bluetooth: hci0: command tx timeout [ 503.913832][T25552] team0: Port device team_slave_1 added [ 503.993636][T25677] netlink: 'syz.4.9644': attribute type 30 has an invalid length. [ 504.024348][T25552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 504.050432][T25552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 504.076652][T25552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 504.089426][T25552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 504.096817][T25552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 504.123170][T25552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 504.140594][ T5335] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 504.306829][T25694] openvswitch: netlink: Actions may not be safe on all matching packets [ 504.330297][ T5335] usb 2-1: Using ep0 maxpacket: 32 [ 504.337255][ T5335] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.370085][ T5335] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 504.407971][ T5335] usb 2-1: New USB device found, idVendor=2133, idProduct=0018, bcdDevice= 0.00 [ 504.429874][ T5335] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.483590][ T5335] usb 2-1: config 0 descriptor?? [ 504.504308][T25552] hsr_slave_0: entered promiscuous mode [ 504.515382][T25552] hsr_slave_1: entered promiscuous mode [ 504.530424][T25552] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 504.530554][T25552] Cannot create hsr debugfs directory [ 504.874835][T25714] usb usb1: usbfs: process 25714 (syz.3.9657) did not claim interface 3 before use [ 504.947272][ T5335] viewsonic 0003:2133:0018.0016: hidraw0: USB HID v0.00 Device [HID 2133:0018] on usb-dummy_hcd.1-1/input0 [ 505.108108][ T9] usb 2-1: USB disconnect, device number 8 [ 505.138970][ T1039] hsr_slave_0: left promiscuous mode [ 505.166321][ T1039] hsr_slave_1: left promiscuous mode [ 505.186354][ T1039] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 505.199876][ T1039] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 505.209950][ T5335] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 505.221746][ T1039] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 505.240005][ T1039] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 505.266621][T25729] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:4096x2160 (0x38414262, 8, 0, 0, 0) [ 505.298418][ T1039] veth1_macvtap: left promiscuous mode [ 505.309620][ T1039] veth1_vlan: left promiscuous mode [ 505.321016][ T1039] veth0_vlan: left promiscuous mode [ 505.359977][ T5335] usb 5-1: Using ep0 maxpacket: 16 [ 505.373198][ T5335] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 505.405135][ T5335] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 505.427962][ T5335] usb 5-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 505.438122][ T5335] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.455093][ T5335] usb 5-1: config 0 descriptor?? [ 505.887753][ T5335] ortek 0003:1223:3F07.0017: unknown main item tag 0x6 [ 505.906985][ T5335] ortek 0003:1223:3F07.0017: report_id 29495 is invalid [ 505.915571][ T5335] ortek 0003:1223:3F07.0017: item 0 2 1 8 parsing failed [ 505.932770][ T5226] Bluetooth: hci0: command tx timeout [ 505.954753][ T5335] ortek 0003:1223:3F07.0017: probe with driver ortek failed with error -22 [ 506.123490][ T5335] usb 5-1: USB disconnect, device number 14 [ 506.166452][ T1039] team0 (unregistering): Port device team_slave_1 removed [ 506.249561][ T1039] team0 (unregistering): Port device team_slave_0 removed [ 506.623378][ T1039] team0 (unregistering): Port device dummy0 removed [ 506.935045][T25739] bridge1: entered promiscuous mode [ 506.961300][T25739] bridge1: entered allmulticast mode [ 506.973624][T25739] team0: Port device bridge1 added [ 507.189149][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 507.189168][ T29] audit: type=1400 audit(1727684450.013:4103): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=25749 comm="syz.1.9673" daddr=::ffff:172.20.20.170 dest=20000 [ 507.498112][ T9] IPVS: starting estimator thread 0... [ 507.504972][T25767] IPVS: wlc: UDP 0.0.0.0:0 - no destination available [ 507.547925][ T5270] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 507.590564][T25768] IPVS: using max 19 ests per chain, 45600 per kthread [ 507.606415][T25775] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9679'. [ 507.730412][ T5270] usb 3-1: Using ep0 maxpacket: 32 [ 507.737000][ T5270] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 507.747867][ T5270] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.768486][ T5270] usb 3-1: config 0 descriptor?? [ 507.776915][ T5270] gspca_main: sq930x-2.14.0 probing 041e:403c [ 507.931277][ T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 507.951683][T25552] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 507.964899][T25552] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 507.993263][T25552] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 508.011015][ T5226] Bluetooth: hci0: command tx timeout [ 508.023692][T25552] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 508.090513][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 508.137605][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 508.149560][T25552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 508.169324][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 508.193999][T25552] 8021q: adding VLAN 0 to HW filter on device team0 [ 508.221647][ T9] usb 4-1: New USB device found, idVendor=056a, idProduct=0333, bcdDevice= 0.00 [ 508.241538][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.256497][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.263671][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 508.296910][ T9] usb 4-1: config 0 descriptor?? [ 508.304070][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.311269][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 508.430665][ T5270] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 508.436589][ T5270] sq930x 3-1:0.0: probe with driver sq930x failed with error -71 [ 508.467702][ T5270] usb 3-1: USB disconnect, device number 71 [ 508.744737][T25806] netlink: 188 bytes leftover after parsing attributes in process `syz.1.9690'. [ 508.765971][ T9] wacom 0003:056A:0333.0018: hidraw0: USB HID v0.00 Device [HID 056a:0333] on usb-dummy_hcd.3-1/input0 [ 508.787495][T25806] netlink: 'syz.1.9690': attribute type 1 has an invalid length. [ 508.816469][T25806] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9690'. [ 508.828913][T25552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 508.921714][T25552] veth0_vlan: entered promiscuous mode [ 508.955553][T25552] veth1_vlan: entered promiscuous mode [ 508.995112][ T5335] usb 4-1: USB disconnect, device number 17 [ 509.184776][T25552] veth0_macvtap: entered promiscuous mode [ 509.216342][T25552] veth1_macvtap: entered promiscuous mode [ 509.308482][T25552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.331474][ T5227] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 509.350754][T25552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.360734][T25552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.384833][T25552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.425305][T25552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.446534][T25552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.459112][T25552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.486206][T25552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.516797][T25552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.539019][T25552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.551097][ T5227] usb 3-1: Using ep0 maxpacket: 8 [ 509.565423][ T5227] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.579013][ T5227] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 509.606101][T25552] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 509.636191][ T5227] usb 3-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00 [ 509.659205][ T5227] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.667690][T25552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 509.689805][T25552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.701842][ T5227] usb 3-1: config 0 descriptor?? [ 509.740858][T25552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 509.763420][T25552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.780035][T25552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 509.800880][T25552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.826617][T25552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 509.840152][T25552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.865963][T25552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 509.900860][T25552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.932187][T25552] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 509.968142][T25552] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.979444][T25552] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.010635][T25552] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.029775][T25552] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.127243][ T5227] hid (null): unknown global tag 0xe [ 510.136627][ T5227] semitek 0003:1EA7:0907.0019: unknown global tag 0xe [ 510.153459][ T5227] semitek 0003:1EA7:0907.0019: item 0 1 1 14 parsing failed [ 510.168656][ T5227] semitek 0003:1EA7:0907.0019: probe with driver semitek failed with error -22 [ 510.313142][ T3826] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.385115][ T5335] usb 3-1: USB disconnect, device number 72 [ 510.389738][ T3826] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.471569][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.492120][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.761960][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 510.954134][ T9] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 510.986773][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.014436][ T9] usb 2-1: config 0 descriptor?? [ 511.063360][ T9] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 511.111535][ T25] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 511.281990][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 511.304064][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 511.320768][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 511.331632][ T5227] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 511.356857][ T25] usb 4-1: New USB device found, idVendor=056a, idProduct=00f0, bcdDevice= 0.00 [ 511.380475][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.420354][ T25] usb 4-1: config 0 descriptor?? [ 511.436208][ T9] gspca_cpia1: usb_control_msg 03, error -71 [ 511.462622][ T9] gspca_cpia1: usb_control_msg 01, error -71 [ 511.469629][ T9] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 511.493245][ T9] usb 2-1: USB disconnect, device number 9 [ 511.503921][ T5227] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 511.538504][ T5227] usb 1-1: New USB device found, idVendor=0c70, idProduct=f001, bcdDevice= 0.00 [ 511.576150][ T5227] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.597367][ T5227] usb 1-1: config 0 descriptor?? [ 511.611551][ T5335] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 511.782995][ T5335] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 511.805901][ T5335] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.836844][ T5335] usb 3-1: config 0 descriptor?? [ 511.855518][ T25] wacom 0003:056A:00F0.001A: unknown main item tag 0x0 [ 511.895663][ T25] wacom 0003:056A:00F0.001A: hidraw0: USB HID v0.00 Device [HID 056a:00f0] on usb-dummy_hcd.3-1/input0 [ 512.117805][ T5227] aquacomputer_d5next 0003:0C70:F001.001B: hidraw1: USB HID v0.00 Device [HID 0c70:f001] on usb-dummy_hcd.0-1/input0 [ 512.120466][ T5300] usb 4-1: USB disconnect, device number 18 [ 512.295481][ T5335] ath6kl: Unsupported hardware version: 0x0 [ 512.302142][ T25] usb 1-1: USB disconnect, device number 25 [ 512.312868][ T5335] ath6kl: Failed to init ath6kl core: -22 [ 512.352279][ T5335] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 512.510761][ T5335] usb 3-1: USB disconnect, device number 73 [ 512.775617][ T5227] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 512.792575][ T5227] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 513.269550][T25980] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9741'. [ 513.301735][ T5300] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 513.311815][ T5335] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 513.356722][T25986] netlink: 'syz.4.9743': attribute type 1 has an invalid length. [ 513.374926][T25986] netlink: 54 bytes leftover after parsing attributes in process `syz.4.9743'. [ 513.390115][T25986] openvswitch: netlink: Actions may not be safe on all matching packets [ 513.456822][T25992] netlink: 'syz.4.9747': attribute type 3 has an invalid length. [ 513.472371][ T5273] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 513.483295][ T5335] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 513.493701][ T5335] usb 2-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00 [ 513.503135][ T5300] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 513.515607][ T5300] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 513.525872][ T5335] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.535055][ T5300] usb 4-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 513.546597][ T5335] usb 2-1: config 0 descriptor?? [ 513.561131][ T5300] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.593665][ T5300] usb 4-1: config 0 descriptor?? [ 513.621693][ T5273] usb 1-1: Using ep0 maxpacket: 8 [ 513.628749][ T5273] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 513.640551][ T5273] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 513.651805][ T5273] usb 1-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 513.661113][ T5273] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.682319][ T5273] usb 1-1: config 0 descriptor?? [ 513.968779][ T5335] aquacomputer_d5next 0003:0C70:F014.001D: hidraw0: USB HID v0.00 Device [HID 0c70:f014] on usb-dummy_hcd.1-1/input0 [ 514.027086][ T5300] ryos 0003:1E7D:3138.001E: unknown main item tag 0x0 [ 514.054010][ T5300] ryos 0003:1E7D:3138.001E: hidraw1: USB HID v0.00 Device [HID 1e7d:3138] on usb-dummy_hcd.3-1/input0 [ 514.107594][ T5273] logitech 0003:046D:C20E.001F: rdesc size test failed for formula gp [ 514.122249][ T5273] logitech 0003:046D:C20E.001F: unbalanced delimiter at end of report description [ 514.142921][ T5273] logitech 0003:046D:C20E.001F: parse failed [ 514.149081][ T5273] logitech 0003:046D:C20E.001F: probe with driver logitech failed with error -22 [ 514.184420][ T25] usb 2-1: USB disconnect, device number 10 [ 514.244354][ T5273] usb 4-1: USB disconnect, device number 19 [ 514.247898][T26010] tipc: Started in network mode [ 514.262533][T26010] tipc: Node identity e0000002, cluster identity 4711 [ 514.271634][T26010] tipc: Enabling of bearer rejected, failed to enable media [ 514.322273][ T5271] usb 1-1: USB disconnect, device number 26 [ 514.335829][ T5345] kworker/0:7 (5345) used greatest stack depth: 18328 bytes left [ 514.433619][T26016] netlink: 80 bytes leftover after parsing attributes in process `syz.4.9757'. [ 514.516578][T26018] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.523716][T26018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 514.533801][T26018] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.540960][T26018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 515.332881][T26054] tmpfs: Unknown parameter 'smackfshat' [ 515.382206][ T5273] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 515.438353][T26062] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 515.544053][ T5273] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 515.556395][ T5273] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 515.571420][ T5273] usb 2-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 515.586077][ T5273] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.612720][ T5273] usb 2-1: config 0 descriptor?? [ 515.623187][ T5335] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 515.812274][ T5335] usb 4-1: Using ep0 maxpacket: 16 [ 515.819891][ T5335] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 515.834191][ T5335] usb 4-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 515.861180][ T5335] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.887175][ T5335] usb 4-1: config 0 descriptor?? [ 516.057952][ T5273] dragonrise 0003:0079:0006.0020: unknown main item tag 0x0 [ 516.065707][T26083] sp0: Synchronizing with TNC [ 516.082656][ T5273] dragonrise 0003:0079:0006.0020: hidraw0: USB HID v0.00 Device [HID 0079:0006] on usb-dummy_hcd.1-1/input0 [ 516.094911][ T5273] dragonrise 0003:0079:0006.0020: no inputs found [ 516.113186][ T5273] dragonrise 0003:0079:0006.0020: force feedback init failed [ 516.277709][ T5273] usb 2-1: USB disconnect, device number 11 [ 516.320657][ T5335] lenovo 0003:17EF:60A3.0021: hidraw0: USB HID v0.00 Device [HID 17ef:60a3] on usb-dummy_hcd.3-1/input0 [ 516.543919][ T5273] usb 4-1: USB disconnect, device number 20 [ 516.660625][ T5335] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 516.824664][ T5335] usb 3-1: config 0 has an invalid interface number: 242 but max is 0 [ 516.847486][ T5335] usb 3-1: config 0 has no interface number 0 [ 516.862435][ T5335] usb 3-1: config 0 interface 242 has no altsetting 0 [ 516.871691][ T5335] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice=51.ba [ 516.898835][ T5335] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.917831][ T5335] usb 3-1: Product: syz [ 516.922150][ T5335] usb 3-1: Manufacturer: syz [ 516.932230][ T5335] usb 3-1: SerialNumber: syz [ 516.950810][ T5335] usb 3-1: config 0 descriptor?? [ 517.214005][ T5335] qmi_wwan 3-1:0.242: bogus CDC Union: master=0, slave=1 [ 517.233919][T26138] openvswitch: netlink: Actions may not be safe on all matching packets [ 517.370925][T26142] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9815'. [ 517.520141][ T29] audit: type=1326 audit(1727684460.341:4104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26151 comm="syz.3.9822" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa5c8d7dff9 code=0x0 [ 517.602300][ T5335] qmi_wwan 3-1:0.242: probe with driver qmi_wwan failed with error -22 [ 517.615203][ T5335] usb 3-1: USB disconnect, device number 74 [ 517.730207][T26165] tipc: Enabling of bearer rejected, failed to enable media [ 518.035546][T26185] netlink: 160 bytes leftover after parsing attributes in process `syz.4.9836'. [ 518.048168][T26185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9836'. [ 518.192886][ T25] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 518.392948][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 518.406474][ T25] usb 2-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 518.430779][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.452746][ T25] usb 2-1: config 0 descriptor?? [ 518.482852][ T5300] usb 3-1: new full-speed USB device number 75 using dummy_hcd [ 518.645128][ T5300] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 518.665614][ T5300] usb 3-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 518.696902][ T5300] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.751087][ T5300] usb 3-1: config 0 descriptor?? [ 518.881754][ T25] aquacomputer_d5next 0003:0C70:F011.0022: hidraw0: USB HID v0.00 Device [HID 0c70:f011] on usb-dummy_hcd.1-1/input0 [ 519.081360][ T25] usb 2-1: USB disconnect, device number 12 [ 519.242203][ T5300] sunplus 0003:04FC:05D8.0023: item fetching failed at offset 5/7 [ 519.251215][ T5300] sunplus 0003:04FC:05D8.0023: probe with driver sunplus failed with error -22 [ 519.324502][T26233] netlink: 'syz.4.9857': attribute type 32 has an invalid length. [ 519.332455][T26233] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9857'. [ 519.342723][T26233] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 519.488627][ T25] usb 3-1: USB disconnect, device number 75 [ 519.844454][T26252] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 519.886728][T26252] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 520.324992][ T29] audit: type=1326 audit(1727684463.090:4105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26263 comm="syz.0.9872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea1f7dff9 code=0x7ffc0000 [ 520.462547][ T29] audit: type=1326 audit(1727684463.090:4106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26263 comm="syz.0.9872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea1f7dff9 code=0x7ffc0000 [ 520.593289][ T29] audit: type=1326 audit(1727684463.090:4107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26263 comm="syz.0.9872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7f4ea1f7dff9 code=0x7ffc0000 [ 520.715141][ T29] audit: type=1326 audit(1727684463.090:4108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26263 comm="syz.0.9872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea1f7dff9 code=0x7ffc0000 [ 521.244133][ T5273] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 521.413571][ T5273] usb 1-1: Using ep0 maxpacket: 32 [ 521.427393][ T5273] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 521.444896][ T5273] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 521.467326][ T5273] usb 1-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 521.482861][ T5273] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.514697][ T5273] usb 1-1: config 0 descriptor?? [ 521.971672][ T5273] aureal 0003:0755:2626.0024: item fetching failed at offset 2/5 [ 522.017142][ T5273] aureal 0003:0755:2626.0024: probe with driver aureal failed with error -22 [ 522.211915][ T5273] usb 1-1: USB disconnect, device number 27 [ 522.794205][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 522.993916][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 523.026565][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 523.091399][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 523.174095][ T9] usb 2-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 523.215754][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.273001][ T9] usb 2-1: config 0 descriptor?? [ 523.556083][ T5273] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 523.775431][ T5273] usb 1-1: Using ep0 maxpacket: 16 [ 523.803523][ T9] macally 0003:060B:0001.0025: item fetching failed at offset 2/5 [ 523.829859][ T5273] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 523.887939][ T9] macally 0003:060B:0001.0025: probe with driver macally failed with error -22 [ 523.908987][ T5273] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 524.003993][ T5273] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 524.114274][ T9] usb 2-1: USB disconnect, device number 13 [ 524.127807][ T5273] usb 1-1: New USB device found, idVendor=056a, idProduct=0022, bcdDevice= 0.00 [ 524.217168][ T5273] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.273797][ T5273] usb 1-1: config 0 descriptor?? [ 524.323083][T26294] syz.4.9886 (26294): drop_caches: 2 [ 524.768025][ T5273] wacom 0003:056A:0022.0026: Unknown device_type for 'HID 056a:0022'. Assuming pen. [ 524.852691][ T5273] wacom 0003:056A:0022.0026: hidraw0: USB HID v0.00 Device [HID 056a:0022] on usb-dummy_hcd.0-1/input0 [ 524.952517][ T5273] input: Wacom Intuos 9x12 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0022.0026/input/input86 [ 525.032473][T26334] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9903'. [ 525.185837][ T5273] usb 1-1: USB disconnect, device number 28 [ 525.414388][ T5300] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 525.505213][T26344] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9907'. [ 525.573840][T26344] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9907'. [ 525.664735][ T5300] usb 5-1: Using ep0 maxpacket: 32 [ 525.729183][ T5300] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 525.770016][ T5300] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 525.863684][ T5300] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 525.950411][ T5300] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 526.054399][ T5300] usb 5-1: config 0 interface 0 has no altsetting 0 [ 526.130061][ T5300] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 526.197632][ T5300] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 526.270076][ T5300] usb 5-1: Product: syz [ 526.274299][ T5300] usb 5-1: Manufacturer: syz [ 526.307689][ T5300] usb 5-1: SerialNumber: syz [ 526.312022][ T5300] usb 5-1: config 0 descriptor?? [ 526.334658][ T5300] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 526.358857][ T5300] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 526.695363][ T5273] usb 5-1: USB disconnect, device number 15 [ 526.736607][ T5273] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 527.561046][T26398] mkiss: ax0: crc mode is auto. [ 527.672115][ T29] audit: type=1400 audit(1727684470.488:4109): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=26403 comm="syz.1.9929" daddr=::ffff:172.20.20.187 [ 528.370281][ T5335] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 528.545030][ T5335] usb 2-1: Using ep0 maxpacket: 16 [ 528.562410][ T5335] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 528.599898][ T5335] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 528.618113][ T5335] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 528.641801][ T5335] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00 [ 528.652047][ T5335] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.690518][ T5335] usb 2-1: config 0 descriptor?? [ 528.825255][ T5300] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 528.989244][ T5300] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 529.014662][ T5300] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 529.027283][ T5300] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 529.045066][ T5300] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.070581][ T5300] usb 1-1: config 0 descriptor?? [ 529.142323][ T5335] input: HID 0955:7214 Haptics as /devices/virtual/input/input89 [ 529.271400][ T5335] shield 0003:0955:7214.0027: Registered Thunderstrike controller [ 529.292358][ T5335] shield 0003:0955:7214.0027: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 529.394371][ T9] shield 0003:0955:7214.0027: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 529.413067][ T5335] usb 2-1: USB disconnect, device number 14 [ 529.456314][ T9] shield 0003:0955:7214.0027: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 529.527659][ T5300] hid-led 0003:1D34:000A.0028: unknown main item tag 0x0 [ 529.538435][ T9] shield 0003:0955:7214.0027: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 529.579338][ T5300] hid-led 0003:1D34:000A.0028: unbalanced delimiter at end of report description [ 529.594624][ T9] shield 0003:0955:7214.0027: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 529.615697][ T5300] hid-led 0003:1D34:000A.0028: probe with driver hid-led failed with error -22 [ 529.737743][ T5300] usb 1-1: USB disconnect, device number 29 [ 530.434505][T26438] binder: 26437:26438 ioctl c00c620f 20000440 returned -22 [ 530.936905][ T5335] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 531.137893][ T5335] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 531.185450][ T5335] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 531.229165][ T5335] usb 2-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00 [ 531.270330][ T5335] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.308314][ T5335] usb 2-1: config 0 descriptor?? [ 531.587347][T26462] openvswitch: netlink: Missing key (keys=40, expected=100) [ 531.781428][ T5335] wacom 0003:056A:0016.0029: Unknown device_type for 'HID 056a:0016'. Assuming pen. [ 531.848582][ T5335] wacom 0003:056A:0016.0029: hidraw0: USB HID v0.00 Device [HID 056a:0016] on usb-dummy_hcd.1-1/input0 [ 531.884753][ T29] audit: type=1800 audit(1727684474.697:4110): pid=26464 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.9955" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 531.928870][ T5335] input: Wacom Graphire4 6x8 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0016.0029/input/input90 [ 532.108771][ T5335] usb 2-1: USB disconnect, device number 15 [ 532.601195][T26460] syz.3.9953 (26460): drop_caches: 2 [ 534.079932][T26490] syz.1.9968 (26490): drop_caches: 2 [ 534.112697][T26490] syz.1.9968 (26490): drop_caches: 2 [ 535.849445][ T5271] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 537.769621][ T5236] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 537.785651][ T5236] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 537.796484][ T5236] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 537.807336][ T5236] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 537.815456][ T5236] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 537.823245][ T5236] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 538.246297][ T5226] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 538.260300][ T5226] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 538.272104][ T5226] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 538.280827][ T5226] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 538.291322][ T5226] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 538.302678][ T5226] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 538.718086][T26520] syz.0.9981 (26520): drop_caches: 2 [ 538.726444][T26520] syz.0.9981 (26520): drop_caches: 2 [ 539.846620][T26526] Falling back ldisc for ptm1. [ 539.940601][ T5226] Bluetooth: hci6: command tx timeout [ 540.417757][ T5226] Bluetooth: hci7: command tx timeout [ 542.018364][ T5226] Bluetooth: hci6: command tx timeout [ 542.501823][ T5226] Bluetooth: hci7: command tx timeout [ 544.098954][ T5226] Bluetooth: hci6: command tx timeout [ 544.578584][ T5226] Bluetooth: hci7: command tx timeout [ 545.273119][ T5236] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 545.289549][ T5236] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 545.298375][ T5236] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 545.309680][ T5236] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 545.317776][ T5236] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 545.326694][ T5236] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 546.179766][ T5226] Bluetooth: hci6: command tx timeout [ 546.659212][ T5226] Bluetooth: hci7: command tx timeout [ 547.286640][ T5236] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 547.297082][ T5236] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 547.306542][ T5236] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 547.315332][ T5236] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 547.323715][ T5236] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 547.333581][ T5236] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 547.379221][ T5236] Bluetooth: hci4: command tx timeout [ 549.239340][ C1] sched: DL replenish lagged too much [ 549.379668][ T5236] Bluetooth: hci8: command tx timeout [ 549.459556][ T5236] Bluetooth: hci4: command tx timeout [ 550.827519][ T5226] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 550.838068][ T5226] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 550.848342][ T5226] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 550.862806][ T5226] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 550.874389][ T5226] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 550.882287][ T5226] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 551.460721][ T5236] Bluetooth: hci8: command tx timeout [ 551.540020][ T5226] Bluetooth: hci4: command tx timeout [ 552.980634][ T5226] Bluetooth: hci9: command tx timeout [ 553.540602][ T5226] Bluetooth: hci8: command tx timeout [ 553.620556][ T5226] Bluetooth: hci4: command tx timeout [ 555.060870][ T5226] Bluetooth: hci9: command tx timeout [ 555.620819][ T5226] Bluetooth: hci8: command tx timeout [ 557.141403][ T5226] Bluetooth: hci9: command tx timeout [ 559.221746][ T5226] Bluetooth: hci9: command tx timeout [ 598.697786][ T5236] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 598.719199][ T5236] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 598.730634][ T5236] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 598.739263][ T5236] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 598.760279][ T5236] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 598.768089][ T5236] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 599.028073][ T5226] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 599.041777][ T5226] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 599.062634][ T5226] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 599.072284][ T5226] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 599.080559][ T5226] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 599.088055][ T5226] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 600.830530][ T5236] Bluetooth: hci1: command tx timeout [ 601.150768][ T5236] Bluetooth: hci10: command tx timeout [ 602.910936][ T5236] Bluetooth: hci1: command tx timeout [ 603.231118][ T5236] Bluetooth: hci10: command tx timeout [ 604.991471][ T5236] Bluetooth: hci1: command tx timeout [ 605.311564][ T5236] Bluetooth: hci10: command tx timeout [ 605.780903][ T5226] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 605.798113][ T5226] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 605.808263][ T5226] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 605.821546][ T5226] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 605.829332][ T5226] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 605.836921][ T5226] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 607.071925][ T5236] Bluetooth: hci1: command tx timeout [ 607.391823][ T5236] Bluetooth: hci10: command tx timeout [ 607.790350][ T5226] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 607.803254][ T5226] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 607.817081][ T5226] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 607.825670][ T5226] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 607.833574][ T5226] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 607.845311][ T5226] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 607.882297][ T5226] Bluetooth: hci11: command tx timeout [ 609.952660][ T5236] Bluetooth: hci11: command tx timeout [ 609.958286][ T5236] Bluetooth: hci12: command tx timeout [ 611.152984][ T5236] Bluetooth: hci5: command 0x0419 tx timeout [ 611.356460][ T5236] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 611.367493][ T5236] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 611.377163][ T5236] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 611.388988][ T5236] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 611.399906][ T5236] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 611.408268][ T5236] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 612.040795][ T5236] Bluetooth: hci12: command tx timeout [ 612.047310][ T5226] Bluetooth: hci11: command tx timeout [ 613.473188][ T5236] Bluetooth: hci13: command tx timeout [ 614.113390][ T5236] Bluetooth: hci12: command tx timeout [ 614.118968][ T5236] Bluetooth: hci11: command tx timeout [ 615.560433][ T5236] Bluetooth: hci13: command tx timeout [ 616.193967][ T5236] Bluetooth: hci12: command tx timeout [ 617.634024][ T5236] Bluetooth: hci13: command tx timeout [ 619.714579][ T5236] Bluetooth: hci13: command tx timeout [ 626.524571][ T5236] Bluetooth: hci0: command 0x0406 tx timeout [ 659.875873][ T5236] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 659.889405][ T5236] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 659.901061][ T5236] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 659.910585][ T5236] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 659.918906][ T5236] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 659.928165][ T5236] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 660.044111][ T5226] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 660.055175][ T5226] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 660.064360][ T5226] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 660.077340][ T5226] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 660.085983][ T5226] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 660.093918][ T5226] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 662.440695][ T5236] Bluetooth: hci14: command tx timeout [ 662.447931][ T5236] Bluetooth: hci15: command tx timeout [ 664.444253][ T5236] Bluetooth: hci7: command tx timeout [ 664.449751][ T5226] Bluetooth: hci6: command tx timeout [ 664.524805][ T5226] Bluetooth: hci15: command tx timeout [ 664.530376][ T5226] Bluetooth: hci14: command tx timeout [ 667.541677][ T5236] Bluetooth: hci14: command tx timeout [ 667.547452][ T5236] Bluetooth: hci15: command tx timeout [ 667.552973][ T5236] Bluetooth: hci4: command 0x0406 tx timeout [ 667.563229][ T5236] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 667.586290][ T5236] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 667.595777][ T5236] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 667.603938][ T5236] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 667.613994][ T5236] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 667.621789][ T5236] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 668.355440][ T5226] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 668.367060][ T5226] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 668.380688][ T5226] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 668.391199][ T5226] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 668.399571][ T5226] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 668.407471][ T5226] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 669.644812][ T5236] Bluetooth: hci14: command tx timeout [ 669.650421][ T5226] Bluetooth: hci15: command tx timeout [ 669.726049][ T5226] Bluetooth: hci16: command tx timeout [ 670.531159][ T5226] Bluetooth: hci17: command tx timeout [ 671.806502][ T5226] Bluetooth: hci16: command tx timeout [ 672.663949][ T5236] Bluetooth: hci17: command tx timeout [ 672.669667][ T5236] Bluetooth: hci8: command 0x0406 tx timeout [ 672.687303][ T5236] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 672.718910][ T5236] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 672.729004][ T5236] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 672.739237][ T5236] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 672.747282][ T5236] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 672.754749][ T5236] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 673.885948][ T5226] Bluetooth: hci16: command tx timeout [ 674.686015][ T5226] Bluetooth: hci17: command tx timeout [ 674.846138][ T5226] Bluetooth: hci18: command tx timeout [ 675.966573][ T5226] Bluetooth: hci16: command tx timeout [ 676.766458][ T5226] Bluetooth: hci17: command tx timeout [ 676.926560][ T5226] Bluetooth: hci18: command tx timeout [ 677.738963][ T5226] Bluetooth: hci9: command 0x0406 tx timeout [ 679.006887][ T5236] Bluetooth: hci18: command tx timeout [ 681.087219][ T5236] Bluetooth: hci18: command tx timeout [ 682.693067][ T30] INFO: task syz.1.9974:26503 blocked for more than 143 seconds. [ 682.701126][ T30] Not tainted 6.12.0-rc1-syzkaller #0 [ 682.707070][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 682.764972][ T30] task:syz.1.9974 state:D stack:27424 pid:26503 tgid:26502 ppid:24917 flags:0x00000004 [ 682.817374][ T30] Call Trace: [ 682.820729][ T30] [ 682.823687][ T30] __schedule+0x1843/0x4ae0 [ 682.913699][ T30] ? __pfx___schedule+0x10/0x10 [ 682.957414][ T30] ? __pfx_lock_release+0x10/0x10 [ 682.962520][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 682.977661][ T30] ? schedule+0x90/0x320 [ 682.981994][ T30] schedule+0x14b/0x320 [ 682.986192][ T30] schedule_preempt_disabled+0x13/0x30 [ 682.997823][ T30] __mutex_lock+0x6a7/0xd70 [ 683.002392][ T30] ? __mutex_lock+0x52a/0xd70 [ 683.007111][ T30] ? dev_ioctl+0x86e/0x1340 [ 683.023960][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 683.033959][ T30] ? dev_load+0x21/0x1f0 [ 683.043462][ T30] dev_ioctl+0x86e/0x1340 [ 683.051447][ T30] sock_ioctl+0x7ef/0x8e0 [ 683.055843][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 683.065520][ T30] ? __fget_files+0x3f3/0x470 [ 683.075931][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 683.085647][ T30] __se_sys_ioctl+0xf9/0x170 [ 683.094826][ T30] do_syscall_64+0xf3/0x230 [ 683.104272][ T30] ? clear_bhb_loop+0x35/0x90 [ 683.112873][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.131419][ T30] RIP: 0033:0x7f1f4977dff9 [ 683.135914][ T30] RSP: 002b:00007f1f4a588038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 683.153063][ T30] RAX: ffffffffffffffda RBX: 00007f1f49935f80 RCX: 00007f1f4977dff9 [ 683.164327][ T30] RDX: 0000000020000900 RSI: 00000000000089f1 RDI: 0000000000000004 [ 683.178957][ T30] RBP: 00007f1f497f0296 R08: 0000000000000000 R09: 0000000000000000 [ 683.186992][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 683.210257][ T30] R13: 0000000000000000 R14: 00007f1f49935f80 R15: 00007ffee147c488 [ 683.225093][ T30] [ 683.235804][ T30] INFO: task syz.3.9977:26509 blocked for more than 143 seconds. [ 683.257543][ T30] Not tainted 6.12.0-rc1-syzkaller #0 [ 683.263500][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 683.284234][ T30] task:syz.3.9977 state:D stack:27424 pid:26509 tgid:26508 ppid:5225 flags:0x00000004 [ 683.297758][ T30] Call Trace: [ 683.301084][ T30] [ 683.304037][ T30] __schedule+0x1843/0x4ae0 [ 683.318127][ T30] ? __pfx___schedule+0x10/0x10 [ 683.323046][ T30] ? __pfx_lock_release+0x10/0x10 [ 683.338012][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 683.343811][ T30] ? schedule+0x90/0x320 [ 683.357108][ T30] schedule+0x14b/0x320 [ 683.361676][ T30] schedule_preempt_disabled+0x13/0x30 [ 683.367181][ T30] __mutex_lock+0x6a7/0xd70 [ 683.377431][ T30] ? __mutex_lock+0x52a/0xd70 [ 683.382171][ T30] ? raw_setsockopt+0xe6d/0x1a80 [ 683.387155][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 683.400189][ T30] raw_setsockopt+0xe6d/0x1a80 [ 683.405020][ T30] ? __pfx_raw_setsockopt+0x10/0x10 [ 683.417157][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 683.426302][ T30] ? __pfx_lock_release+0x10/0x10 [ 683.437543][ T30] ? do_futex+0x33b/0x560 [ 683.441940][ T30] ? __pfx_raw_setsockopt+0x10/0x10 [ 683.447170][ T30] do_sock_setsockopt+0x3af/0x720 [ 683.463128][ T30] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 683.472854][ T30] ? __fget_files+0x29/0x470 [ 683.482181][ T30] ? __fget_files+0x3f3/0x470 [ 683.486925][ T30] ? __fget_files+0x29/0x470 [ 683.497605][ T30] __sys_setsockopt+0x1a2/0x250 [ 683.502530][ T30] __x64_sys_setsockopt+0xb5/0xd0 [ 683.517162][ T30] do_syscall_64+0xf3/0x230 [ 683.522139][ T30] ? clear_bhb_loop+0x35/0x90 [ 683.526862][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.542734][ T30] RIP: 0033:0x7fa5c8d7dff9 [ 683.547305][ T30] RSP: 002b:00007fa5c87ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 683.566416][ T30] RAX: ffffffffffffffda RBX: 00007fa5c8f35f80 RCX: 00007fa5c8d7dff9 [ 683.584376][ T30] RDX: 0000000000000001 RSI: 0000000000000065 RDI: 0000000000000003 [ 683.593044][ T30] RBP: 00007fa5c8df0296 R08: 0000000000000000 R09: 0000000000000000 [ 683.607467][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 683.615509][ T30] R13: 0000000000000000 R14: 00007fa5c8f35f80 R15: 00007ffeb93dd3e8 [ 683.631054][ T30] [ 683.634690][ T30] INFO: task syz-executor:26512 blocked for more than 144 seconds. [ 683.649613][ T30] Not tainted 6.12.0-rc1-syzkaller #0 [ 683.655573][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 683.673456][ T30] task:syz-executor state:D stack:24128 pid:26512 tgid:26512 ppid:1 flags:0x00000004 [ 683.694679][ T30] Call Trace: [ 683.699482][ T30] [ 683.702466][ T30] __schedule+0x1843/0x4ae0 [ 683.707023][ T30] ? __pfx___schedule+0x10/0x10 [ 683.719113][ T30] ? __pfx_lock_release+0x10/0x10 [ 683.724214][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 683.736874][ T30] ? schedule+0x90/0x320 [ 683.743105][ T30] schedule+0x14b/0x320 [ 683.747327][ T30] schedule_preempt_disabled+0x13/0x30 [ 683.762573][ T30] __mutex_lock+0x6a7/0xd70 [ 683.767193][ T30] ? __mutex_lock+0x52a/0xd70 [ 683.777358][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 683.782913][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 683.793974][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 683.803137][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 683.814611][ T30] ? __lock_acquire+0x1384/0x2050 [ 683.823448][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 683.833834][ T30] netlink_rcv_skb+0x1e3/0x430 [ 683.843847][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 683.854111][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 683.863803][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 683.874274][ T30] netlink_unicast+0x7f6/0x990 [ 683.882927][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 683.893342][ T30] ? __virt_addr_valid+0x183/0x530 [ 683.902713][ T30] ? __check_object_size+0x48e/0x900 [ 683.914268][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 683.922697][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 683.932888][ T30] ? __might_fault+0xaa/0x120 [ 683.941540][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 683.953572][ T30] __sock_sendmsg+0x221/0x270 [ 683.964174][ T30] __sys_sendto+0x39b/0x4f0 [ 683.974649][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 683.983542][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 683.994390][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 684.004459][ T30] ? exc_page_fault+0x590/0x8c0 [ 684.015924][ T30] __x64_sys_sendto+0xde/0x100 [ 684.025125][ T30] do_syscall_64+0xf3/0x230 [ 684.034541][ T30] ? clear_bhb_loop+0x35/0x90 [ 684.043333][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.062902][ T30] RIP: 0033:0x7f1f3837fe8c [ 684.067379][ T30] RSP: 002b:00007ffca1b62bc0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 684.080888][ T30] RAX: ffffffffffffffda RBX: 00007f1f39064620 RCX: 00007f1f3837fe8c [ 684.093689][ T30] RDX: 0000000000000028 RSI: 00007f1f39064670 RDI: 0000000000000003 [ 684.105981][ T30] RBP: 0000000000000000 R08: 00007ffca1b62c14 R09: 000000000000000c [ 684.117800][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 684.125828][ T30] R13: 0000000000000000 R14: 00007f1f39064670 R15: 0000000000000000 [ 684.143400][ T30] [ 684.146997][ T30] INFO: task syz-executor:26515 blocked for more than 144 seconds. [ 684.172011][ T30] Not tainted 6.12.0-rc1-syzkaller #0 [ 684.185186][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 684.197745][ T30] task:syz-executor state:D stack:24128 pid:26515 tgid:26515 ppid:1 flags:0x00000004 [ 684.218558][ T30] Call Trace: [ 684.221896][ T30] [ 684.224850][ T30] __schedule+0x1843/0x4ae0 [ 684.236770][ T30] ? __pfx___schedule+0x10/0x10 [ 684.244229][ T30] ? __pfx_lock_release+0x10/0x10 [ 684.260940][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 684.266491][ T30] ? schedule+0x90/0x320 [ 684.279428][ T30] schedule+0x14b/0x320 [ 684.283669][ T30] schedule_preempt_disabled+0x13/0x30 [ 684.297709][ T30] __mutex_lock+0x6a7/0xd70 [ 684.302719][ T30] ? __mutex_lock+0x52a/0xd70 [ 684.316639][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 684.322232][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 684.327315][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 684.338223][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 684.343405][ T30] ? __lock_acquire+0x1384/0x2050 [ 684.359931][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 684.365508][ T30] netlink_rcv_skb+0x1e3/0x430 [ 684.375632][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 684.385167][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 684.395523][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 684.405798][ T30] netlink_unicast+0x7f6/0x990 [ 684.415345][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 684.424307][ T30] ? __virt_addr_valid+0x183/0x530 [ 684.434242][ T30] ? __check_object_size+0x48e/0x900 [ 684.443283][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 684.455765][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 684.466863][ T30] ? __might_fault+0xaa/0x120 [ 684.476660][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 684.486049][ T30] __sock_sendmsg+0x221/0x270 [ 684.496761][ T30] __sys_sendto+0x39b/0x4f0 [ 684.504999][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 684.514505][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 684.524741][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 684.537304][ T30] ? exc_page_fault+0x590/0x8c0 [ 684.547026][ T30] __x64_sys_sendto+0xde/0x100 [ 684.558277][ T30] do_syscall_64+0xf3/0x230 [ 684.562859][ T30] ? clear_bhb_loop+0x35/0x90 [ 684.575696][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.582161][ T30] RIP: 0033:0x7efe1db7fe8c [ 684.586616][ T30] RSP: 002b:00007ffff1622750 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 684.605756][ T30] RAX: ffffffffffffffda RBX: 00007efe1e864620 RCX: 00007efe1db7fe8c [ 684.628175][ T30] RDX: 0000000000000028 RSI: 00007efe1e864670 RDI: 0000000000000003 [ 684.636384][ T30] RBP: 0000000000000000 R08: 00007ffff16227a4 R09: 000000000000000c [ 684.653638][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 684.666887][ T30] R13: 0000000000000000 R14: 00007efe1e864670 R15: 0000000000000000 [ 684.680198][ T30] [ 684.683361][ T30] [ 684.683361][ T30] Showing all locks held in the system: [ 684.700090][ T30] 1 lock held by kworker/R-mm_pe/13: [ 684.705437][ T30] #0: ffffffff8e7e23a8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x31/0x390 [ 684.725751][ T30] 3 locks held by kworker/1:0/25: [ 684.731629][ T30] 1 lock held by khungtaskd/30: [ 684.736605][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 684.756572][ T30] 3 locks held by kworker/u8:4/61: [ 684.763399][ T30] #0: ffff88814b84e148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 684.783382][ T30] #1: ffffc900015c7d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 684.799572][ T30] #2: ffffffff8fcbf208 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 684.817393][ T30] 3 locks held by kworker/1:2/936: [ 684.824165][ T30] 1 lock held by kworker/R-dm_bu/2370: [ 684.836694][ T30] #0: ffffffff8e7e23a8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x31/0x390 [ 684.850783][ T30] 1 lock held by kworker/R-krxrp/2843: [ 684.856725][ T30] #0: ffffffff8e7e23a8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x31/0x390 [ 684.875948][ T30] 2 locks held by getty/4970: [ 684.882272][ T30] #0: ffff88814bb8a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 684.900534][ T30] #1: ffffc90002efe2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 684.916779][ T30] 1 lock held by kworker/u9:4/5229: [ 684.926945][ T30] #0: ffffffff8e7e23a8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x31/0x390 [ 684.947707][ T30] 1 lock held by kworker/R-wg-cr/5263: [ 684.953222][ T30] #0: ffffffff8e7e23a8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x31/0x390 [ 684.974945][ T30] 1 lock held by kworker/R-wg-cr/5265: [ 684.982999][ T30] #0: ffffffff8e7e23a8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x31/0x390 [ 685.001655][ T30] 1 lock held by kworker/R-wg-cr/5266: [ 685.007166][ T30] 1 lock held by kworker/R-wg-cr/5267: [ 685.021227][ T30] #0: ffffffff8e7e23a8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x31/0x390 [ 685.036852][ T30] 1 lock held by kworker/R-wg-cr/5268: [ 685.047824][ T30] #0: ffffffff8e7e23a8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x31/0x390 [ 685.066358][ T30] 3 locks held by kworker/1:4/5270: [ 685.073220][ T30] 6 locks held by kworker/1:5/5271: [ 685.089886][ T30] 3 locks held by kworker/1:7/5303: [ 685.095159][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 685.116031][ T30] #1: ffffc9000413fd00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 685.127555][ T30] #2: ffffffff8fcbf208 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 685.147038][ T30] 1 lock held by kworker/R-wg-cr/13498: [ 685.154341][ T30] #0: ffffffff8e7e23a8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x31/0x390 [ 685.175884][ T30] 2 locks held by syz.1.9127/24508: [ 685.184633][ T30] #0: ffffffff8fd24f70 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 685.199178][ T30] #1: ffffffff8ec176e8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_listener_set_doit+0x12d/0x1a90 [ 685.215273][ T30] 1 lock held by kworker/R-wg-cr/24945: [ 685.224983][ T30] #0: ffffffff8e7e23a8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x31/0x390 [ 685.241995][ T30] 1 lock held by kworker/R-wg-cr/24946: [ 685.247595][ T30] #0: ffffffff8e7e23a8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x31/0x390 [ 685.272115][ T30] 1 lock held by kworker/R-wg-cr/24947: [ 685.283609][ T30] #0: ffffffff8e7e23a8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x31/0x390 [ 685.299315][ T30] 1 lock held by kworker/R-wg-cr/25635: [ 685.304910][ T30] #0: ffffffff8e7e23a8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x31/0x390 [ 685.322424][ T30] 1 lock held by kworker/R-wg-cr/25636: [ 685.337945][ T30] #0: ffffffff8e7e23a8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x31/0x390 [ 685.358115][ T30] 1 lock held by kworker/R-wg-cr/25639: [ 685.363718][ T30] #0: ffffffff8e7e23a8 (wq_pool_attach_mutex){+.+.}-{3:3}, at: worker_attach_to_pool+0x31/0x390 [ 685.386033][ T30] 1 lock held by syz.2.9927/26397: [ 685.393537][ T30] #0: ffffffff8fcbf208 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 685.408156][ T30] 1 lock held by syz.4.9931/26415: [ 685.413319][ T30] #0: ffffffff8fcbf208 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 685.431166][ T30] 1 lock held by syz.1.9974/26503: [ 685.436331][ T30] #0: ffffffff8fcbf208 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x86e/0x1340 [ 685.453613][ T30] 1 lock held by syz.3.9977/26509: [ 685.462450][ T30] #0: ffffffff8fcbf208 (rtnl_mutex){+.+.}-{3:3}, at: raw_setsockopt+0xe6d/0x1a80 [ 685.480377][ T30] 1 lock held by syz-executor/26512: [ 685.485721][ T30] #0: ffffffff8fcbf208 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 685.503254][ T30] 1 lock held by syz-executor/26515: [ 685.512561][ T30] #0: ffffffff8fcbf208 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 685.528249][ T30] 1 lock held by syz.0.9986/26531: [ 685.533446][ T30] #0: ffffffff8fcbf208 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 685.550172][ T30] 1 lock held by syz-executor/26533: [ 685.555495][ T30] #0: ffffffff8fcbf208 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 685.576854][ T30] 1 lock held by syz-executor/26538: [ 685.589573][ T30] #0: ffffffff8fcbf208 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 685.610078][ T30] 1 lock held by syz-executor/26541: [ 685.615426][ T30] #0: ffffffff8fcbf208 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 685.633356][ T30] 1 lock held by syz-executor/26549: [ 685.641395][ T30] #0: ffffffff8fcbf208 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 685.657992][ T30] 1 lock held by syz-executor/26553: [ 685.663331][ T30] #0: ffffffff8fcbf208 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 685.681392][ T30] 1 lock held by syz-executor/26559: [ 685.688439][ T30] #0: ffffffff8fcbf208 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 685.709269][ T30] 1 lock held by syz-executor/26566: [ 685.714703][ T30] #0: ffffffff8fcbf208 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 685.732519][ T30] 1 lock held by syz-executor/26571: [ 685.742632][ T30] #0: ffffffff8fcbf208 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 685.758115][ T30] 1 lock held by syz-executor/26577: [ 685.763456][ T30] #0: ffffffff8fcbf208 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 685.783477][ T30] 1 lock held by syz-executor/26581: [ 685.793099][ T30] #0: ffffffff8fcbf208 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 685.812478][ T30] 1 lock held by syz-executor/26584: [ 685.825219][ T30] #0: ffffffff8fcbf208 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 685.838174][ T30] 1 lock held by syz-executor/26588: [ 685.843505][ T30] #0: ffffffff8fcbf208 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 685.862414][ T30] 1 lock held by syz-executor/26592: [ 685.867783][ T30] #0: ffffffff8fcbf208 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 685.885014][ T30] [ 685.887474][ T30] ============================================= [ 685.887474][ T30] [ 685.928160][ T30] NMI backtrace for cpu 0 [ 685.932555][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc1-syzkaller #0 [ 685.941457][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 685.951546][ T30] Call Trace: [ 685.954845][ T30] [ 685.957796][ T30] dump_stack_lvl+0x241/0x360 [ 685.962512][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 685.967734][ T30] ? __pfx__printk+0x10/0x10 [ 685.972444][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 685.977416][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 685.982908][ T30] ? _printk+0xd5/0x120 [ 685.987094][ T30] ? __pfx__printk+0x10/0x10 [ 685.991703][ T30] ? __wake_up_klogd+0xcc/0x110 [ 685.996588][ T30] ? __pfx__printk+0x10/0x10 [ 686.001208][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 686.006271][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 686.012282][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 686.018300][ T30] watchdog+0xff4/0x1040 [ 686.022575][ T30] ? watchdog+0x1ea/0x1040 [ 686.027036][ T30] ? __pfx_watchdog+0x10/0x10 [ 686.031741][ T30] kthread+0x2f0/0x390 [ 686.035846][ T30] ? __pfx_watchdog+0x10/0x10 [ 686.040568][ T30] ? __pfx_kthread+0x10/0x10 [ 686.045198][ T30] ret_from_fork+0x4b/0x80 [ 686.049653][ T30] ? __pfx_kthread+0x10/0x10 [ 686.054273][ T30] ret_from_fork_asm+0x1a/0x30 [ 686.059085][ T30] [ 686.062980][ T30] Sending NMI from CPU 0 to CPUs 1: [ 686.068665][ C1] NMI backtrace for cpu 1 [ 686.068680][ C1] CPU: 1 UID: 0 PID: 936 Comm: kworker/1:2 Not tainted 6.12.0-rc1-syzkaller #0 [ 686.068701][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 686.068712][ C1] Workqueue: events nsim_dev_trap_report_work [ 686.068739][ C1] RIP: 0010:ip_neigh_gw4+0x4/0x500 [ 686.068758][ C1] Code: ff df e9 d2 fb ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa <55> 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 81 ec 80 00 [ 686.068773][ C1] RSP: 0018:ffffc90000a17ef8 EFLAGS: 00000246 [ 686.068787][ C1] RAX: 0000000000000000 RBX: ffff888083462000 RCX: dffffc0000000000 [ 686.068800][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: ffff888024ac2000 [ 686.068812][ C1] RBP: ffffc90000a18040 R08: 0000000000000001 R09: ffffffff8a19ceb9 [ 686.068822][ C1] R10: 0000000000000002 R11: ffff888025f48000 R12: dffffc0000000000 [ 686.068839][ C1] R13: ffffffff8a19cd5f R14: ffff888083462150 R15: ffff888024ac2000 [ 686.068852][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 686.068867][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 686.068879][ C1] CR2: 0000555581bdc808 CR3: 000000000e734000 CR4: 00000000003526f0 [ 686.068894][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 686.068905][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 686.068916][ C1] Call Trace: [ 686.068923][ C1] [ 686.068931][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 686.068952][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 686.068977][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 686.068997][ C1] ? nmi_handle+0x2a/0x5a0 [ 686.069022][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 686.069044][ C1] ? nmi_handle+0x14f/0x5a0 [ 686.069061][ C1] ? nmi_handle+0x2a/0x5a0 [ 686.069078][ C1] ? ip_neigh_gw4+0x4/0x500 [ 686.069092][ C1] ? default_do_nmi+0x63/0x160 [ 686.069114][ C1] ? exc_nmi+0x123/0x1f0 [ 686.069134][ C1] ? end_repeat_nmi+0xf/0x53 [ 686.069149][ C1] ? ip_finish_output2+0x45f/0x1390 [ 686.069166][ C1] ? ip_finish_output2+0x5b9/0x1390 [ 686.069184][ C1] ? ip_neigh_gw4+0x4/0x500 [ 686.069200][ C1] ? ip_neigh_gw4+0x4/0x500 [ 686.069216][ C1] ? ip_neigh_gw4+0x4/0x500 [ 686.069231][ C1] [ 686.069238][ C1] [ 686.069243][ C1] ip_finish_output2+0x10c5/0x1390 [ 686.069260][ C1] ? nf_hook+0x9e/0x450 [ 686.069285][ C1] ? __pfx_ip_finish_output2+0x10/0x10 [ 686.069303][ C1] ? ip_skb_dst_mtu+0x6ba/0x9b0 [ 686.069327][ C1] ? __ip_finish_output+0x349/0x400 [ 686.069345][ C1] synproxy_send_client_synack+0x8b8/0xf30 [ 686.069375][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 686.069399][ C1] ? synproxy_pernet+0x45/0x270 [ 686.069425][ C1] nft_synproxy_eval_v4+0x3ca/0x610 [ 686.069451][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 686.069476][ C1] ? nf_ip_checksum+0x13a/0x500 [ 686.069495][ C1] nft_synproxy_do_eval+0x362/0xa60 [ 686.069521][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 686.069544][ C1] ? __hrtimer_run_queues+0xcdc/0xd50 [ 686.069564][ C1] ? __pfx_validate_chain+0x10/0x10 [ 686.069588][ C1] nft_do_chain+0x4ad/0x1da0 [ 686.069611][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 686.069626][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 686.069661][ C1] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 686.069681][ C1] nft_do_chain_inet+0x418/0x6b0 [ 686.069706][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 686.069729][ C1] ? ipt_do_table+0x312/0x1860 [ 686.069760][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 686.069782][ C1] nf_hook_slow+0xc3/0x220 [ 686.069804][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 686.069824][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 686.069867][ C1] NF_HOOK+0x29e/0x450 [ 686.069888][ C1] ? NF_HOOK+0x9a/0x450 [ 686.069905][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 686.069924][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 686.069947][ C1] ? ip_rcv_finish+0x406/0x560 [ 686.069966][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 686.069985][ C1] NF_HOOK+0x3a4/0x450 [ 686.070002][ C1] ? __lock_acquire+0x1384/0x2050 [ 686.070026][ C1] ? NF_HOOK+0x9a/0x450 [ 686.070044][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 686.070061][ C1] ? ip_rcv_core+0x801/0xd10 [ 686.070081][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 686.070103][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 686.070122][ C1] __netif_receive_skb+0x2bf/0x650 [ 686.070145][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 686.070167][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 686.070187][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 686.070210][ C1] ? __pfx_lock_release+0x10/0x10 [ 686.070234][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 686.070262][ C1] process_backlog+0x662/0x15b0 [ 686.070286][ C1] ? process_backlog+0x33b/0x15b0 [ 686.070311][ C1] ? __pfx_process_backlog+0x10/0x10 [ 686.070332][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 686.070357][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 686.070382][ C1] __napi_poll+0xcb/0x490 [ 686.070403][ C1] net_rx_action+0x89b/0x1240 [ 686.070434][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 686.070457][ C1] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 686.070495][ C1] handle_softirqs+0x2c5/0x980 [ 686.070519][ C1] ? do_softirq+0x11b/0x1e0 [ 686.070540][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 686.070563][ C1] ? rcu_is_watching+0x15/0xb0 [ 686.070582][ C1] do_softirq+0x11b/0x1e0 [ 686.070602][ C1] [ 686.070608][ C1] [ 686.070614][ C1] ? __pfx_do_softirq+0x10/0x10 [ 686.070635][ C1] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 686.070660][ C1] ? rcu_is_watching+0x15/0xb0 [ 686.070679][ C1] __local_bh_enable_ip+0x1bb/0x200 [ 686.070700][ C1] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 686.070720][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 686.070741][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 686.070762][ C1] ? nsim_dev_trap_report_work+0x6a7/0xaa0 [ 686.070784][ C1] nsim_dev_trap_report_work+0x75d/0xaa0 [ 686.070810][ C1] ? process_scheduled_works+0x976/0x1850 [ 686.070836][ C1] process_scheduled_works+0xa63/0x1850 [ 686.070871][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 686.070897][ C1] ? assign_work+0x364/0x3d0 [ 686.070920][ C1] worker_thread+0x870/0xd30 [ 686.070952][ C1] ? __kthread_parkme+0x169/0x1d0 [ 686.070976][ C1] ? __pfx_worker_thread+0x10/0x10 [ 686.070997][ C1] kthread+0x2f0/0x390 [ 686.071013][ C1] ? __pfx_worker_thread+0x10/0x10 [ 686.071034][ C1] ? __pfx_kthread+0x10/0x10 [ 686.071051][ C1] ret_from_fork+0x4b/0x80 [ 686.071073][ C1] ? __pfx_kthread+0x10/0x10 [ 686.071088][ C1] ret_from_fork_asm+0x1a/0x30 [ 686.071118][ C1] [ 686.801517][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 686.808414][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc1-syzkaller #0 [ 686.817209][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 686.827296][ T30] Call Trace: [ 686.830607][ T30] [ 686.833574][ T30] dump_stack_lvl+0x241/0x360 [ 686.838275][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 686.843497][ T30] ? __pfx__printk+0x10/0x10 [ 686.848104][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 686.854118][ T30] ? vscnprintf+0x5d/0x90 [ 686.858482][ T30] panic+0x349/0x880 [ 686.862395][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 686.868577][ T30] ? __pfx_panic+0x10/0x10 [ 686.873009][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 686.878402][ T30] ? __irq_work_queue_local+0x137/0x410 [ 686.883974][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 686.889369][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 686.895544][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 686.901723][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 686.907908][ T30] watchdog+0x1033/0x1040 [ 686.912265][ T30] ? watchdog+0x1ea/0x1040 [ 686.916718][ T30] ? __pfx_watchdog+0x10/0x10 [ 686.921420][ T30] kthread+0x2f0/0x390 [ 686.925510][ T30] ? __pfx_watchdog+0x10/0x10 [ 686.930210][ T30] ? __pfx_kthread+0x10/0x10 [ 686.934824][ T30] ret_from_fork+0x4b/0x80 [ 686.939268][ T30] ? __pfx_kthread+0x10/0x10 [ 686.943874][ T30] ret_from_fork_asm+0x1a/0x30 [ 686.948707][ T30] [ 686.951921][ T30] Kernel Offset: disabled [ 686.956240][ T30] Rebooting in 86400 seconds..