last executing test programs: 10.307495479s ago: executing program 1 (id=2024): r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x7) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ptrace$peekuser(0x3, 0x0, 0x92eb) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000140)={r3, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r3, 0x1, 0x6, @random="21e6b238ff37"}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000200)={r3, 0x1, 0x6, @local}, 0x10) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000580)={r3, 0x1, 0x6, @local}, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000000640)='X', 0x1, 0x4000001, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x88, 0x1, 0x4, 0x3}, 0xe) shutdown(r4, 0x1) recvmmsg(r4, 0x0, 0x0, 0x406, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setns(0xffffffffffffffff, 0x24020000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) 10.00425137s ago: executing program 3 (id=2029): r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x109802, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x400) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 9.828268395s ago: executing program 3 (id=2030): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) link(0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x13, 0x4, &(0x7f0000000480)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x8, 0x1, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x82100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25c96387}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000061"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9.777120347s ago: executing program 1 (id=2032): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000400), 0x0, 0x8040010) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$lan78xx(r2, &(0x7f0000000280)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3001}}}, 0x0) 9.431462747s ago: executing program 3 (id=2033): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x675) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 7.91657626s ago: executing program 3 (id=2034): openat(0xffffffffffffff9c, 0x0, 0x42, 0x130) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES8], 0x48}}, 0x800) socket(0x25, 0x3, 0x0) getpgid(0x0) listen(0xffffffffffffffff, 0x802) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='affs\x00', 0x200000, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x68, &(0x7f0000000000)=0x5, 0x4) 7.179135507s ago: executing program 2 (id=2039): sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x1906000, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_snmp6\x00') write$tun(r0, 0x0, 0xfce) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000c0c000/0x1000)=nil, 0x1000, 0x4) 6.094143673s ago: executing program 1 (id=2042): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETMODE(r0, 0x4b3d, 0x0) 6.01695064s ago: executing program 4 (id=2043): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) link(0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x13, 0x4, &(0x7f0000000480)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x8, 0x1, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x82100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25c96387}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000061"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.016351927s ago: executing program 1 (id=2044): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x4, [{0x0, 0x2, 0x10000}]}]}}, 0x0, 0x32, 0x0, 0x1}, 0x28) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32, @ANYBLOB="000000000000000014001a80100005800c00068008"], 0x34}}, 0x0) 5.680817426s ago: executing program 1 (id=2045): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r3, 0x118, 0x1, 0x0, 0x0) 5.630720608s ago: executing program 4 (id=2046): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000e86000)="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", 0x117) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000000)={0x6c}, 0x8) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0xd7, @local, 0x9}, 0x1c) 5.456804933s ago: executing program 0 (id=2048): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x63be, 0x4) openat$full(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x100000b2, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000280)=[{{&(0x7f0000000080)=@vsock, 0x80, 0x0, 0x0, &(0x7f0000000540)=""/253, 0xfd}, 0x8}], 0x1, 0x12141, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x400448c9, &(0x7f0000000080)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x6}, 0x1c) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendmmsg(r7, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001340)='qF', 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f00000024c0)}], 0x1}}], 0x2, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0}, &(0x7f0000000380)=0x40) 4.057233256s ago: executing program 0 (id=2049): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(r0, 0x0, 0x0, 0x0, 0x2) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket(0x22, 0x2, 0x3) getsockopt$packet_buf(r3, 0x107, 0x1, 0x0, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000540000000e0002006e657464657673696d0000000f0002006e6d7464657673696d3000000800030000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1b, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x800}}, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) r6 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x50, &(0x7f0000000100), 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1b, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xc, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x94) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r9, 0xffffffffffffffff}) ppoll(&(0x7f0000000000)=[{r10}], 0x1, 0x0, 0x0, 0x0) close_range(r2, r10, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r11, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 4.052126297s ago: executing program 3 (id=2050): creat(&(0x7f00000002c0)='./file0\x00', 0x1) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x8000000001, r1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000200)='/dev/comedi1\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000000)={'ni_at_a2150\x00', [0x2, 0x3, 0xb, 0x0, 0x4, 0x90cc7, 0x8, 0x10, 0xa, 0x100, 0x104be, 0x4, 0x8, 0x1100008, 0x6, 0x9, 0x1, 0x1a449, 0x9, 0x40000003, 0x10089, 0x7ffffff, 0x4, 0x8, 0x800b, 0x8, 0x5, 0x7ffffffc, 0x7, 0xfffc, 0x10001]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) 3.954760963s ago: executing program 4 (id=2051): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010100}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000340)={r1, 0x8, 0x2, "80dc"}, 0xa) 3.781797927s ago: executing program 2 (id=2052): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fsopen(&(0x7f0000000700)='affs\x00', 0x1) fcntl$dupfd(r2, 0x0, r2) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x2, 0xfe, 0x0, 0x0, 0x88, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, {0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x0, 0x8, 0x20, 0x0, 0x1000000}]}) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000001c0)={0x7, @sdr={0x3447504d, 0x8}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) pipe2(&(0x7f0000000240), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 3.781423167s ago: executing program 4 (id=2053): r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x109802, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x400) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.877422128s ago: executing program 3 (id=2054): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7e}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000180)=@conn_svc_rsp={0x0, 0x0, 0xa, '\x00', {0x3, 0x0, 0x0, 0xd, 0x2, 0x8, 0xdd}}) 2.763455943s ago: executing program 0 (id=2055): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x4, [{0x0, 0x2, 0x10000}]}]}}, 0x0, 0x32, 0x0, 0x1}, 0x28) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000014001a80100005800c00068008"], 0x34}}, 0x0) 2.625893247s ago: executing program 0 (id=2056): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) link(0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x13, 0x4, &(0x7f0000000480)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x8, 0x1, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x82100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25c96387}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000061"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.604730632s ago: executing program 4 (id=2057): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r0, &(0x7f0000000800)=""/4089, 0xff9) 2.437980346s ago: executing program 4 (id=2058): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x11, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b000000b708000000000000dbaaf8fff1000000b5080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) 2.102751945s ago: executing program 2 (id=2059): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x8890}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) add_key$user(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x5, 0x180, 0x5, 0xf, 0xf1, 0x50, 0x12, 0x7, 0x0, 0x29, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x1031c0}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000002, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0x1000000, 0x68ff, 0x5, 0x9, 0x3], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x8080000, 0xdddd0000, 0x8, 0x8, 0xb, 0xe4, 0x40, 0x0, 0x0, 0x2e, 0x80}, {0x5000, 0x4000, 0x3, 0x0, 0x52, 0x5, 0x5, 0xb, 0x15, 0x3, 0xff, 0x87}, {0x6000, 0x1, 0xe, 0x5, 0x3, 0x7, 0x0, 0xa, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0xd, 0x6, 0x4, 0x42, 0xb, 0xff, 0x2, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0x9, 0x83, 0xf7, 0x83}, {0x1000, 0xf000, 0x9, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0xf, 0x1, 0x7}, {0x3000, 0x3000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xd000, 0x4000, 0xe, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x9}, {0x4, 0x30}, {0x5000, 0xb}, 0x80000031, 0x0, 0xdddd0000, 0x2024, 0x0, 0x1500, 0x3000, [0x6800000000000000, 0x204, 0x5b, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.725434204s ago: executing program 0 (id=2060): openat(0xffffffffffffff9c, 0x0, 0x42, 0x130) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES8], 0x48}}, 0x800) socket(0x25, 0x3, 0x0) getpgid(0x0) listen(0xffffffffffffffff, 0x802) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='affs\x00', 0x200000, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x68, &(0x7f0000000000)=0x5, 0x4) 1.278232521s ago: executing program 2 (id=2061): creat(0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x200001, &(0x7f0000000540)=ANY=[@ANYBLOB='mpol=default=relative:,2219,8']) 581.703042ms ago: executing program 2 (id=2062): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, 0x0, 0x0) readv(r1, &(0x7f0000001700)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "e77000002000"}}}}}}}, 0x0) 393.99611ms ago: executing program 0 (id=2063): sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x1906000, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_snmp6\x00') write$tun(r0, 0x0, 0xfce) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000c0c000/0x1000)=nil, 0x1000, 0x4) 186.475071ms ago: executing program 2 (id=2064): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x675) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 0s ago: executing program 1 (id=2065): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(r0, 0x0, 0x0, 0x0, 0x2) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket(0x22, 0x2, 0x3) getsockopt$packet_buf(r3, 0x107, 0x1, 0x0, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000540000000e0002006e657464657673696d0000000f0002006e6d7464657673696d3000000800030000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1b, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x800}}, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) r6 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x50, &(0x7f0000000100), 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1b, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xc, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x94) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r9, 0xffffffffffffffff}) ppoll(&(0x7f0000000000)=[{r10}], 0x1, 0x0, 0x0, 0x0) close_range(r2, r10, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r11, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) kernel console output (not intermixed with test programs): 524434][ T9] cfg80211: failed to load regulatory.db [ 81.603697][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.603841][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.604014][ T5807] bridge_slave_1: entered allmulticast mode [ 81.606552][ T5807] bridge_slave_1: entered promiscuous mode [ 81.611649][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.611771][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.611926][ T5800] bridge_slave_1: entered allmulticast mode [ 81.615444][ T5800] bridge_slave_1: entered promiscuous mode [ 81.616786][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.616904][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.617321][ T5799] bridge_slave_1: entered allmulticast mode [ 81.619629][ T5799] bridge_slave_1: entered promiscuous mode [ 81.634220][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.634341][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.634748][ T5810] bridge_slave_0: entered allmulticast mode [ 81.637178][ T5810] bridge_slave_0: entered promiscuous mode [ 81.646509][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.915282][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.915415][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.915531][ T5810] bridge_slave_1: entered allmulticast mode [ 81.916935][ T5810] bridge_slave_1: entered promiscuous mode [ 81.921198][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.306280][ T5807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.309245][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.476469][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.605212][ T5807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.607224][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.609165][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.611662][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.614861][ T5809] team0: Port device team_slave_0 added [ 82.825151][ T5809] team0: Port device team_slave_1 added [ 82.827174][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.192444][ T5811] Bluetooth: hci3: command tx timeout [ 83.192479][ T5811] Bluetooth: hci1: command tx timeout [ 83.192793][ T5804] Bluetooth: hci0: command tx timeout [ 83.244589][ T5807] team0: Port device team_slave_0 added [ 83.246557][ T5799] team0: Port device team_slave_0 added [ 83.248487][ T5800] team0: Port device team_slave_0 added [ 83.272357][ T5804] Bluetooth: hci4: command tx timeout [ 83.352494][ T5804] Bluetooth: hci2: command tx timeout [ 83.405731][ T5807] team0: Port device team_slave_1 added [ 83.408467][ T5799] team0: Port device team_slave_1 added [ 83.410034][ T5800] team0: Port device team_slave_1 added [ 83.410844][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.410852][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.410865][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.694588][ T5810] team0: Port device team_slave_0 added [ 83.883570][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.883582][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.883595][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.885442][ T5810] team0: Port device team_slave_1 added [ 84.143532][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.143543][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.143556][ T5807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.144590][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.144603][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.144626][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.145827][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.145839][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.145862][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.323741][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.323757][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.323780][ T5807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.324787][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.324796][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.324809][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.326253][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.326261][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.326274][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.327117][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.327126][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.327138][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.539009][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.539020][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.539034][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.653096][ T5809] hsr_slave_0: entered promiscuous mode [ 84.654075][ T5809] hsr_slave_1: entered promiscuous mode [ 85.207992][ T5807] hsr_slave_0: entered promiscuous mode [ 85.208828][ T5807] hsr_slave_1: entered promiscuous mode [ 85.209404][ T5807] debugfs: 'hsr0' already exists in 'hsr' [ 85.209478][ T5807] Cannot create hsr debugfs directory [ 85.272503][ T5811] Bluetooth: hci3: command tx timeout [ 85.272589][ T5813] Bluetooth: hci0: command tx timeout [ 85.272656][ T5804] Bluetooth: hci1: command tx timeout [ 85.300141][ T5799] hsr_slave_0: entered promiscuous mode [ 85.301891][ T5799] hsr_slave_1: entered promiscuous mode [ 85.303037][ T5799] debugfs: 'hsr0' already exists in 'hsr' [ 85.303060][ T5799] Cannot create hsr debugfs directory [ 85.313660][ T5800] hsr_slave_0: entered promiscuous mode [ 85.315019][ T5800] hsr_slave_1: entered promiscuous mode [ 85.315892][ T5800] debugfs: 'hsr0' already exists in 'hsr' [ 85.315914][ T5800] Cannot create hsr debugfs directory [ 85.352540][ T5804] Bluetooth: hci4: command tx timeout [ 85.410788][ T5810] hsr_slave_0: entered promiscuous mode [ 85.412007][ T5810] hsr_slave_1: entered promiscuous mode [ 85.416113][ T5810] debugfs: 'hsr0' already exists in 'hsr' [ 85.416135][ T5810] Cannot create hsr debugfs directory [ 85.437815][ T5804] Bluetooth: hci2: command tx timeout [ 86.858284][ T5809] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 86.881121][ T5809] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 86.917603][ T5809] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 86.966777][ T5809] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 87.067325][ T5807] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.107531][ T5807] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.137221][ T5807] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.168747][ T5807] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.279913][ T5810] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.319506][ T5810] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.350304][ T5810] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.352561][ T5811] Bluetooth: hci3: command tx timeout [ 87.352596][ T5813] Bluetooth: hci0: command tx timeout [ 87.352627][ T5804] Bluetooth: hci1: command tx timeout [ 87.399834][ T5810] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.432435][ T5804] Bluetooth: hci4: command tx timeout [ 87.509999][ T5800] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.522301][ T5804] Bluetooth: hci2: command tx timeout [ 87.553364][ T5800] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.589965][ T5800] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.632062][ T5800] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.750454][ T5799] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.791303][ T5799] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.836726][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.837559][ T5799] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.870458][ T5799] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.961975][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.998631][ T1398] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.999464][ T1398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.021539][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.042022][ T1398] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.042152][ T1398] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.112182][ T5807] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.135082][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.141566][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.141685][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.189333][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.189449][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.234012][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.240463][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.268297][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.268413][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.320519][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.320686][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.350690][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.373162][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.401106][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.401266][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.440957][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.441050][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.515583][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.555620][ T152] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.555822][ T152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.602729][ T152] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.602888][ T152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.780847][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.115197][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.255839][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.290543][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.386092][ T5807] veth0_vlan: entered promiscuous mode [ 89.421462][ T5807] veth1_vlan: entered promiscuous mode [ 89.479416][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.505284][ T5810] veth0_vlan: entered promiscuous mode [ 89.529796][ T5800] veth0_vlan: entered promiscuous mode [ 89.549966][ T5810] veth1_vlan: entered promiscuous mode [ 89.571923][ T5807] veth0_macvtap: entered promiscuous mode [ 89.583321][ T5800] veth1_vlan: entered promiscuous mode [ 89.608930][ T5807] veth1_macvtap: entered promiscuous mode [ 89.610687][ T5809] veth0_vlan: entered promiscuous mode [ 89.653666][ T5809] veth1_vlan: entered promiscuous mode [ 89.696166][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.710593][ T5799] veth0_vlan: entered promiscuous mode [ 89.724883][ T5810] veth0_macvtap: entered promiscuous mode [ 89.730463][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.751282][ T5800] veth0_macvtap: entered promiscuous mode [ 89.767012][ T5810] veth1_macvtap: entered promiscuous mode [ 89.768724][ T3553] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.770125][ T5799] veth1_vlan: entered promiscuous mode [ 89.796506][ T3553] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.801105][ T5800] veth1_macvtap: entered promiscuous mode [ 89.803793][ T3553] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.819459][ T3553] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.940316][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.951880][ T5809] veth0_macvtap: entered promiscuous mode [ 89.977735][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.979943][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.980474][ T5809] veth1_macvtap: entered promiscuous mode [ 90.080435][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.105804][ T1398] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.123990][ T1398] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.139653][ T1398] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.143444][ T5799] veth0_macvtap: entered promiscuous mode [ 90.161512][ T1398] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.178692][ T1398] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.181799][ T1398] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.201437][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.201459][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.218712][ T1398] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.245233][ T5799] veth1_macvtap: entered promiscuous mode [ 90.251751][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.251937][ T1398] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.381021][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.503548][ T3553] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.503565][ T3553] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.531024][ T1125] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.538285][ T1125] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.543537][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.584967][ T1125] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.628615][ T1125] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.698542][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.795224][ T85] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.799512][ T1398] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.799526][ T1398] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.805586][ T1125] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.875599][ T1125] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.915243][ T44] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.673205][ T1398] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.673225][ T1398] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.890737][ T5921] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 91.916409][ T152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.916428][ T152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.985116][ T152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.985133][ T152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.124224][ T1398] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.124244][ T1398] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.259819][ T2128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.259838][ T2128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.368231][ T85] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.368251][ T85] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.283915][ T3469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.283934][ T3469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.293912][ T5929] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.7'. [ 94.003049][ T5950] netlink: 'syz.2.11': attribute type 21 has an invalid length. [ 98.006232][ T5985] netlink: 666 bytes leftover after parsing attributes in process `syz.0.23'. [ 98.426455][ T5989] IPVS: persistence engine module ip_vs_pe_ not found [ 98.594120][ T37] audit: type=1326 audit(1767161498.977:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5996 comm="syz.1.28" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8084dff749 code=0x0 [ 100.409801][ T6024] netlink: 666 bytes leftover after parsing attributes in process `syz.4.36'. [ 101.202313][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.206806][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.212312][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.213662][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.222275][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.232278][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.242280][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.252279][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.262280][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.272284][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 102.527314][ T6033] libceph: resolve '4..' (ret=-3): failed [ 102.850621][ T6045] netlink: 24 bytes leftover after parsing attributes in process `syz.4.42'. [ 102.919217][ T6045] netlink: 24 bytes leftover after parsing attributes in process `syz.4.42'. [ 103.527914][ T6056] kAFS: unable to lookup cell '' [ 103.900499][ T37] audit: type=1326 audit(1767161503.337:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6043 comm="syz.3.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafa8cef749 code=0x7ffc0000 [ 103.900556][ T37] audit: type=1326 audit(1767161503.337:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6043 comm="syz.3.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafa8cef749 code=0x7ffc0000 [ 103.900598][ T37] audit: type=1326 audit(1767161503.337:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6043 comm="syz.3.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7fafa8cef749 code=0x7ffc0000 [ 103.900639][ T37] audit: type=1326 audit(1767161503.337:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6043 comm="syz.3.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafa8cef749 code=0x7ffc0000 [ 103.900679][ T37] audit: type=1326 audit(1767161503.337:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6043 comm="syz.3.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafa8cef749 code=0x7ffc0000 [ 103.900720][ T37] audit: type=1326 audit(1767161503.337:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6043 comm="syz.3.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fafa8cef749 code=0x7ffc0000 [ 103.900769][ T37] audit: type=1326 audit(1767161503.867:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6043 comm="syz.3.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafa8cef749 code=0x7ffc0000 [ 103.900809][ T37] audit: type=1326 audit(1767161503.867:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6043 comm="syz.3.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafa8cef749 code=0x7ffc0000 [ 103.938680][ T805] IPVS: starting estimator thread 0... [ 104.005467][ T6045] Zero length message leads to an empty skb [ 104.112491][ T6057] IPVS: using max 11 ests per chain, 26400 per kthread [ 106.278128][ T6081] netlink: 666 bytes leftover after parsing attributes in process `syz.4.53'. [ 108.091419][ T6099] libceph: resolve '4..' (ret=-3): failed [ 111.681321][ T6126] netlink: 666 bytes leftover after parsing attributes in process `syz.3.66'. [ 112.633381][ T6128] faux_driver vkms: [drm] Unknown color mode 11; guessing buffer size. [ 113.073903][ T6132] libceph: resolve '4..' (ret=-3): failed [ 113.717809][ T6135] netlink: 24 bytes leftover after parsing attributes in process `syz.3.69'. [ 113.811002][ T6135] netlink: 24 bytes leftover after parsing attributes in process `syz.3.69'. [ 116.646138][ T37] audit: type=1107 audit(1767161516.437:11): pid=6167 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 117.474743][ T6183] netlink: 666 bytes leftover after parsing attributes in process `syz.4.79'. [ 118.693683][ T6201] sctp: [Deprecated]: syz.4.87 (pid 6201) Use of struct sctp_assoc_value in delayed_ack socket option. [ 118.693683][ T6201] Use struct sctp_sack_info instead [ 120.350052][ T6007] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 120.539450][ T6007] usb 5-1: Using ep0 maxpacket: 16 [ 120.594907][ T6007] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 120.594933][ T6007] usb 5-1: config 0 has no interface number 0 [ 120.595021][ T6007] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 120.595047][ T6007] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 120.645326][ T6007] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 120.645353][ T6007] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 120.645371][ T6007] usb 5-1: Product: syz [ 120.645384][ T6007] usb 5-1: SerialNumber: syz [ 121.103278][ T6222] usb usb8: usbfs: process 6222 (syz.2.93) did not claim interface 0 before use [ 121.729498][ T6007] usb 5-1: config 0 descriptor?? [ 122.409898][ T6007] usb 5-1: can't set config #0, error -71 [ 122.576617][ T6235] netlink: 666 bytes leftover after parsing attributes in process `syz.3.94'. [ 122.591781][ T6007] usb 5-1: USB disconnect, device number 2 [ 124.546721][ T6258] program syz.4.105 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 125.622352][ T992] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 125.772508][ T992] usb 4-1: Using ep0 maxpacket: 16 [ 125.779701][ T992] usb 4-1: config 0 has no interfaces? [ 125.779721][ T992] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 125.779733][ T992] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.857609][ T992] usb 4-1: config 0 descriptor?? [ 126.092034][ T6264] comedi comedi3: das16m1: I/O port conflict (0x4f27,16) [ 126.468035][ T5803] usb 4-1: USB disconnect, device number 2 [ 126.619804][ T37] audit: type=1326 audit(1767161526.997:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6271 comm="syz.1.111" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8084dff749 code=0x0 [ 130.484670][ T6309] affs: No valid root block on device nullb0 [ 131.762419][ T6075] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 131.932622][ T6075] usb 5-1: Using ep0 maxpacket: 16 [ 131.934558][ T6075] usb 5-1: config 0 has no interfaces? [ 131.934590][ T6075] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 131.934611][ T6075] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.939647][ T6075] usb 5-1: config 0 descriptor?? [ 133.309596][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.309681][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.494992][ T5812] usb 5-1: USB disconnect, device number 3 [ 134.702265][ T37] audit: type=1326 audit(1767161535.077:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6339 comm="syz.3.132" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fafa8cef749 code=0x0 [ 135.078338][ T37] audit: type=1326 audit(1767161535.457:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6344 comm="syz.4.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41818cf749 code=0x7ffc0000 [ 135.078384][ T37] audit: type=1326 audit(1767161535.457:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6344 comm="syz.4.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41818cf749 code=0x7ffc0000 [ 135.078406][ T37] audit: type=1326 audit(1767161535.457:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6344 comm="syz.4.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f41818cf749 code=0x7ffc0000 [ 135.078427][ T37] audit: type=1326 audit(1767161535.457:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6344 comm="syz.4.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41818cf749 code=0x7ffc0000 [ 135.078448][ T37] audit: type=1326 audit(1767161535.457:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6344 comm="syz.4.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41818cf749 code=0x7ffc0000 [ 135.078470][ T37] audit: type=1326 audit(1767161535.457:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6344 comm="syz.4.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f41818cf749 code=0x7ffc0000 [ 135.131241][ T5812] IPVS: starting estimator thread 0... [ 135.252472][ T6347] IPVS: using max 15 ests per chain, 36000 per kthread [ 137.668338][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805c021000: rx timeout, send abort [ 137.670447][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805c021000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 139.678769][ T37] audit: type=1326 audit(1767161540.057:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6386 comm="syz.2.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a6797f749 code=0x7ffc0000 [ 139.678819][ T37] audit: type=1326 audit(1767161540.057:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6386 comm="syz.2.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a6797f749 code=0x7ffc0000 [ 139.678860][ T37] audit: type=1326 audit(1767161540.057:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6386 comm="syz.2.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f9a6797f749 code=0x7ffc0000 [ 139.732535][ T5968] IPVS: starting estimator thread 0... [ 139.882498][ T6391] IPVS: using max 8 ests per chain, 19200 per kthread [ 144.546656][ T6414] affs: No valid root block on device nullb0 [ 146.134179][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 146.484510][ T10] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 146.484543][ T10] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 146.484579][ T10] usb 5-1: config 220 interface 0 has no altsetting 0 [ 146.492188][ T10] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 146.529233][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.529259][ T10] usb 5-1: Product: syz [ 146.529273][ T10] usb 5-1: Manufacturer: syz [ 146.529287][ T10] usb 5-1: SerialNumber: syz [ 147.386659][ T10] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 147.386709][ T10] uvcvideo 5-1:220.0: No valid video chain found. [ 147.409586][ T10] usb 5-1: USB disconnect, device number 4 [ 151.722554][ T6458] netlink: 8 bytes leftover after parsing attributes in process `syz.3.170'. [ 151.722575][ T6458] netlink: 24 bytes leftover after parsing attributes in process `syz.3.170'. [ 154.131570][ T6489] fuse: Unknown parameter '0x0000000000000003' [ 154.246862][ T6487] comedi comedi3: comedi_config --init_data is deprecated [ 155.316140][ T37] kauditd_printk_skb: 3 callbacks suppressed [ 155.316156][ T37] audit: type=1326 audit(1767161555.697:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6494 comm="syz.1.179" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8084dff749 code=0x0 [ 157.533646][ T6510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.183'. [ 157.533669][ T6510] netlink: 24 bytes leftover after parsing attributes in process `syz.4.183'. [ 159.952634][ T37] audit: type=1326 audit(1767161560.337:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6523 comm="syz.0.190" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efe26c6f749 code=0x0 [ 160.765305][ T6547] netlink: 8 bytes leftover after parsing attributes in process `syz.4.197'. [ 160.765326][ T6547] netlink: 24 bytes leftover after parsing attributes in process `syz.4.197'. [ 162.176663][ T6448] IPVS: starting estimator thread 0... [ 162.262384][ T6565] IPVS: using max 8 ests per chain, 19200 per kthread [ 164.104792][ T6588] netlink: 8 bytes leftover after parsing attributes in process `syz.4.212'. [ 164.104812][ T6588] netlink: 24 bytes leftover after parsing attributes in process `syz.4.212'. [ 164.532379][ T6448] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 164.682351][ T6448] usb 2-1: Using ep0 maxpacket: 16 [ 164.686865][ T6448] usb 2-1: config 0 has no interfaces? [ 164.686899][ T6448] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 164.686987][ T6448] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.737565][ T6448] usb 2-1: config 0 descriptor?? [ 164.942345][ T5968] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 165.096755][ T5968] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 165.096783][ T5968] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.121258][ T5968] usb 5-1: config 0 descriptor?? [ 165.136620][ T5968] cp210x 5-1:0.0: cp210x converter detected [ 165.552182][ T5968] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 165.651129][ T5968] usb 5-1: cp210x converter now attached to ttyUSB0 [ 165.753993][ T5925] usb 2-1: USB disconnect, device number 2 [ 165.807767][ T5968] usb 5-1: USB disconnect, device number 5 [ 165.846307][ T5968] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 165.850846][ T6616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.223'. [ 165.850863][ T6616] netlink: 24 bytes leftover after parsing attributes in process `syz.2.223'. [ 165.965244][ T5968] cp210x 5-1:0.0: device disconnected [ 169.144370][ T5925] IPVS: starting estimator thread 0... [ 169.245660][ T6652] IPVS: using max 8 ests per chain, 19200 per kthread [ 170.222448][ T5973] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 170.394975][ T5973] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 170.395001][ T5973] usb 3-1: config 220 contains an unexpected descriptor of type 0x1, skipping [ 170.395018][ T5973] usb 3-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config [ 170.395034][ T5973] usb 3-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 170.395045][ T5973] usb 3-1: config 220 has no interface number 1 [ 170.395069][ T5973] usb 3-1: config 220 interface 0 has no altsetting 0 [ 170.395078][ T5973] usb 3-1: config 220 interface 76 has no altsetting 0 [ 170.397715][ T5973] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 170.397739][ T5973] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.397757][ T5973] usb 3-1: Product: syz [ 170.397769][ T5973] usb 3-1: Manufacturer: syz [ 170.397776][ T5973] usb 3-1: SerialNumber: syz [ 170.572358][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 170.684133][ T930] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 170.726056][ T10] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 170.726084][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.729588][ T5973] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 170.729618][ T5973] uvcvideo 3-1:220.0: No valid video chain found. [ 170.753983][ T10] usb 2-1: config 0 descriptor?? [ 170.758029][ T10] cp210x 2-1:0.0: cp210x converter detected [ 170.786503][ T5973] usb 3-1: USB disconnect, device number 2 [ 170.852380][ T930] usb 4-1: Using ep0 maxpacket: 16 [ 170.858783][ T930] usb 4-1: config 0 has no interfaces? [ 170.858816][ T930] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 170.858837][ T930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.950265][ T930] usb 4-1: config 0 descriptor?? [ 171.320519][ T6669] netlink: 32 bytes leftover after parsing attributes in process `syz.4.242'. [ 171.793945][ T10] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 171.832876][ T10] usb 2-1: cp210x converter now attached to ttyUSB0 [ 171.999907][ T930] usb 2-1: USB disconnect, device number 3 [ 172.041071][ T930] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 172.152678][ T930] cp210x 2-1:0.0: device disconnected [ 173.361713][ T930] usb 4-1: USB disconnect, device number 3 [ 173.550421][ T6695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.249'. [ 173.550441][ T6695] netlink: 24 bytes leftover after parsing attributes in process `syz.1.249'. [ 174.964743][ T6710] netlink: 32 bytes leftover after parsing attributes in process `syz.1.254'. [ 176.025420][ T6292] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 177.112524][ T5925] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 177.282367][ T6292] usb 2-1: Using ep0 maxpacket: 32 [ 178.288002][ T6292] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 178.288029][ T6292] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 178.288049][ T6292] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 178.288100][ T6292] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 178.288120][ T6292] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 178.288142][ T6292] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 178.288164][ T6292] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 178.288183][ T6292] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 178.288223][ T6292] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 178.288244][ T6292] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.776621][ T5925] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 178.776650][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.824741][ T6292] usb 2-1: config 0 descriptor?? [ 178.844642][ T5925] usb 3-1: config 0 descriptor?? [ 178.890883][ T5925] cp210x 3-1:0.0: cp210x converter detected [ 178.951086][ T6292] usb 2-1: can't set config #0, error -71 [ 179.000407][ T6292] usb 2-1: USB disconnect, device number 4 [ 179.013451][ T5973] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 179.051907][ T5925] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 179.051931][ T5925] cp210x 3-1:0.0: querying part number failed [ 179.115032][ T5925] usb 3-1: cp210x converter now attached to ttyUSB0 [ 179.142518][ T5925] usb 3-1: USB disconnect, device number 3 [ 179.152151][ T5925] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 179.155011][ T5925] cp210x 3-1:0.0: device disconnected [ 179.172357][ T5973] usb 5-1: Using ep0 maxpacket: 16 [ 179.189658][ T5973] usb 5-1: config 0 has no interfaces? [ 179.189690][ T5973] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 179.189710][ T5973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.207736][ T6744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.264'. [ 179.207755][ T6744] netlink: 24 bytes leftover after parsing attributes in process `syz.3.264'. [ 180.279777][ T5973] usb 5-1: config 0 descriptor?? [ 180.423369][ T6753] netlink: 32 bytes leftover after parsing attributes in process `syz.1.269'. [ 182.558841][ T5812] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 182.817474][ T5812] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 182.823083][ T5812] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.067073][ T5812] usb 4-1: config 0 descriptor?? [ 183.352967][ T5812] cp210x 4-1:0.0: cp210x converter detected [ 184.094650][ T6783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.278'. [ 184.094814][ T6783] netlink: 24 bytes leftover after parsing attributes in process `syz.0.278'. [ 185.307173][ T5812] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 185.429024][ T5925] usb 5-1: USB disconnect, device number 6 [ 185.446793][ T6786] syz.2.279 uses obsolete (PF_INET,SOCK_PACKET) [ 185.466287][ T5812] usb 4-1: cp210x converter now attached to ttyUSB0 [ 185.552672][ T5812] usb 4-1: USB disconnect, device number 4 [ 185.572538][ T5812] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 185.944394][ T5812] cp210x 4-1:0.0: device disconnected [ 186.971797][ T6805] affs: No valid root block on device nullb0 [ 188.879340][ T5968] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 188.879615][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 189.021251][ T5968] usb 3-1: device descriptor read/64, error -32 [ 194.158588][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.158681][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.371278][ T6832] Bluetooth: hci2: command 0x0406 tx timeout [ 201.371312][ T6832] Bluetooth: hci4: command 0x0406 tx timeout [ 201.371330][ T6832] Bluetooth: hci1: command 0x0406 tx timeout [ 201.371348][ T6832] Bluetooth: hci3: command 0x0406 tx timeout [ 201.371946][ T6832] Bluetooth: hci0: command 0x0406 tx timeout [ 208.177099][ T6849] netlink: 104 bytes leftover after parsing attributes in process `syz.1.302'. [ 208.247297][ T5968] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 208.446849][ T5968] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 208.446866][ T5968] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.451667][ T5968] usb 4-1: config 0 descriptor?? [ 208.457358][ T5968] cp210x 4-1:0.0: cp210x converter detected [ 209.015091][ T5968] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 209.064526][ T6862] netlink: 48 bytes leftover after parsing attributes in process `syz.2.305'. [ 209.064658][ T6862] netlink: 48 bytes leftover after parsing attributes in process `syz.2.305'. [ 209.773240][ T5968] usb 4-1: cp210x converter now attached to ttyUSB0 [ 209.802818][ T5968] usb 4-1: USB disconnect, device number 5 [ 209.845842][ T5968] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 210.085460][ T5968] cp210x 4-1:0.0: device disconnected [ 210.208442][ T6870] netlink: 32 bytes leftover after parsing attributes in process `syz.1.307'. [ 212.130503][ T6895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.320'. [ 212.130524][ T6895] netlink: 12 bytes leftover after parsing attributes in process `syz.1.320'. [ 212.382455][ T6292] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 212.534645][ T6292] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 212.534673][ T6292] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.545028][ T6292] usb 5-1: config 0 descriptor?? [ 212.694628][ T6292] cp210x 5-1:0.0: cp210x converter detected [ 212.968962][ T6292] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 213.058358][ T6292] usb 5-1: cp210x converter now attached to ttyUSB0 [ 213.185054][ T5940] usb 5-1: USB disconnect, device number 7 [ 213.227300][ T5940] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 213.563154][ T5940] cp210x 5-1:0.0: device disconnected [ 214.912982][ T6931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.334'. [ 214.913005][ T6931] netlink: 12 bytes leftover after parsing attributes in process `syz.3.334'. [ 214.913030][ T6931] netlink: 'syz.3.334': attribute type 18 has an invalid length. [ 215.955034][ T6943] fuse: Unknown parameter '0x0000000000000003' [ 217.597296][ T6292] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 217.689048][ T37] audit: type=1326 audit(1767161618.057:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6954 comm="syz.0.344" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efe26c6f749 code=0x0 [ 217.742398][ T6292] usb 4-1: Using ep0 maxpacket: 32 [ 217.744217][ T6292] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 217.744241][ T6292] usb 4-1: config 0 has no interface number 0 [ 217.744286][ T6292] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 217.744309][ T6292] usb 4-1: config 0 interface 126 has no altsetting 0 [ 217.774644][ T6961] netlink: 8 bytes leftover after parsing attributes in process `syz.1.345'. [ 217.774662][ T6961] netlink: 12 bytes leftover after parsing attributes in process `syz.1.345'. [ 217.774686][ T6961] netlink: 'syz.1.345': attribute type 18 has an invalid length. [ 217.825962][ T6292] usb 4-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 217.825988][ T6292] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.826005][ T6292] usb 4-1: Product: syz [ 217.826018][ T6292] usb 4-1: Manufacturer: syz [ 217.826031][ T6292] usb 4-1: SerialNumber: syz [ 217.881755][ T6292] usb 4-1: config 0 descriptor?? [ 218.130317][ T6951] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 218.944401][ T6292] ir_usb 4-1:0.126: required endpoints missing [ 219.030550][ T6292] usb 4-1: USB disconnect, device number 6 [ 219.161438][ T6973] netlink: 24 bytes leftover after parsing attributes in process `syz.0.350'. [ 219.403479][ T6979] fuse: Unknown parameter '0x0000000000000003' [ 223.510867][ T7019] fuse: Unknown parameter '0x0000000000000003' [ 227.902553][ T7055] netlink: 24 bytes leftover after parsing attributes in process `syz.1.379'. [ 232.352763][ T7092] netlink: 24 bytes leftover after parsing attributes in process `syz.2.391'. [ 232.623224][ T7098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.394'. [ 232.623239][ T7098] netlink: 4 bytes leftover after parsing attributes in process `syz.2.394'. [ 232.623254][ T7098] netlink: 'syz.2.394': attribute type 18 has an invalid length. [ 236.413380][ T7136] netlink: 24 bytes leftover after parsing attributes in process `syz.3.404'. [ 236.436943][ T7142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.407'. [ 236.436963][ T7142] netlink: 4 bytes leftover after parsing attributes in process `syz.1.407'. [ 236.436988][ T7142] netlink: 'syz.1.407': attribute type 18 has an invalid length. [ 240.365153][ T7182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.419'. [ 240.365175][ T7182] netlink: 4 bytes leftover after parsing attributes in process `syz.0.419'. [ 240.365200][ T7182] netlink: 'syz.0.419': attribute type 18 has an invalid length. [ 240.916773][ T7190] fuse: Unknown parameter '0x0000000000000003' [ 240.977133][ T7192] comedi comedi3: comedi_config --init_data is deprecated [ 243.624513][ T7221] affs: No valid root block on device nullb0 [ 244.634717][ T7233] libceph: resolve '4..' (ret=-3): failed [ 246.592055][ T7250] fuse: Unknown parameter '0x0000000000000003' [ 246.742008][ T7250] comedi comedi3: comedi_config --init_data is deprecated [ 247.104466][ T7255] netlink: 32 bytes leftover after parsing attributes in process `syz.4.439'. [ 253.992981][ T7300] netlink: 32 bytes leftover after parsing attributes in process `syz.2.453'. [ 255.008873][ T7306] fuse: Unknown parameter '0x0000000000000003' [ 255.034002][ T7306] comedi comedi3: comedi_config --init_data is deprecated [ 255.565508][ T7313] netlink: 12 bytes leftover after parsing attributes in process `syz.3.458'. [ 255.635383][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.635453][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.509977][ T7329] netlink: 16 bytes leftover after parsing attributes in process `syz.2.462'. [ 259.858097][ T7348] netlink: 32 bytes leftover after parsing attributes in process `syz.4.467'. [ 260.910424][ T7353] fuse: Unknown parameter '0x0000000000000003' [ 260.948808][ T7353] comedi comedi3: comedi_config --init_data is deprecated [ 261.487110][ T7356] netlink: 12 bytes leftover after parsing attributes in process `syz.2.471'. [ 262.081581][ T7369] netlink: 16 bytes leftover after parsing attributes in process `syz.1.475'. [ 262.629891][ T7387] netlink: 32 bytes leftover after parsing attributes in process `syz.4.480'. [ 264.909665][ T7402] netlink: 12 bytes leftover after parsing attributes in process `syz.2.484'. [ 266.161371][ T7415] affs: No valid root block on device nullb0 [ 268.439072][ T7431] netlink: 32 bytes leftover after parsing attributes in process `syz.4.492'. [ 276.533725][ T7512] netlink: 12 bytes leftover after parsing attributes in process `syz.1.518'. [ 284.852515][ T7592] affs: No valid root block on device nullb0 [ 289.342827][ T7654] fuse: Unknown parameter '0x0000000000000003' [ 289.408519][ T7658] comedi comedi3: comedi_config --init_data is deprecated [ 289.643775][ T7661] affs: No valid root block on device nullb0 [ 291.069178][ T7676] netlink: 12 bytes leftover after parsing attributes in process `syz.0.567'. [ 291.332550][ T7683] affs: No valid root block on device nullb0 [ 294.012415][ T5803] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 294.184165][ T5803] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 294.184182][ T5803] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.188801][ T5803] usb 5-1: config 0 descriptor?? [ 294.192608][ T5803] cp210x 5-1:0.0: cp210x converter detected [ 295.424569][ T5803] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 295.455502][ T5803] usb 5-1: cp210x converter now attached to ttyUSB0 [ 295.627936][ T10] usb 5-1: USB disconnect, device number 8 [ 295.734053][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 295.759504][ T7712] affs: No valid root block on device nullb0 [ 295.862820][ T10] cp210x 5-1:0.0: device disconnected [ 295.897550][ T7714] netlink: 'syz.0.579': attribute type 1 has an invalid length. [ 295.897570][ T7714] netlink: 4 bytes leftover after parsing attributes in process `syz.0.579'. [ 303.150887][ T43] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 303.453170][ T43] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 303.453198][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.460208][ T43] usb 1-1: config 0 descriptor?? [ 304.419714][ T43] cp210x 1-1:0.0: cp210x converter detected [ 305.405695][ T43] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 305.425283][ T43] usb 1-1: cp210x converter now attached to ttyUSB0 [ 306.535661][ T6448] usb 1-1: USB disconnect, device number 2 [ 306.934292][ T6448] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 307.194638][ T7824] fuse: Unknown parameter '0x0000000000000003' [ 307.286762][ T7827] comedi comedi3: comedi_config --init_data is deprecated [ 308.422598][ T6448] cp210x 1-1:0.0: device disconnected [ 309.848810][ T7796] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 310.155600][ T7796] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 310.155618][ T7796] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.188007][ T7796] usb 3-1: config 0 descriptor?? [ 310.192086][ T7796] cp210x 3-1:0.0: cp210x converter detected [ 311.274838][ T7796] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 311.322785][ T7796] usb 3-1: cp210x converter now attached to ttyUSB0 [ 311.640095][ T5803] usb 3-1: USB disconnect, device number 6 [ 311.654940][ T5803] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 311.772941][ T5803] cp210x 3-1:0.0: device disconnected [ 312.026294][ T7877] fuse: Unknown parameter '0x0000000000000003' [ 312.027796][ T7877] comedi comedi3: comedi_config --init_data is deprecated [ 312.403059][ T7882] affs: No valid root block on device nullb0 [ 315.369139][ T7901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.638'. [ 315.369161][ T7901] netlink: 4 bytes leftover after parsing attributes in process `syz.3.638'. [ 317.140520][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.140589][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.212394][ T5973] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 317.365556][ T5973] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 317.365585][ T5973] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.404806][ T5973] usb 4-1: config 0 descriptor?? [ 317.841063][ T5973] cp210x 4-1:0.0: cp210x converter detected [ 318.297929][ T5973] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 318.342047][ T5973] usb 4-1: cp210x converter now attached to ttyUSB0 [ 318.549287][ T7796] usb 4-1: USB disconnect, device number 7 [ 318.582162][ T7796] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 318.712957][ T7796] cp210x 4-1:0.0: device disconnected [ 320.482522][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ab30000: rx timeout, send abort [ 320.483367][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805ab30000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 324.932380][ T6448] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 325.087174][ T6448] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 325.087203][ T6448] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.111382][ T6448] usb 4-1: config 0 descriptor?? [ 325.119271][ T6448] cp210x 4-1:0.0: cp210x converter detected [ 325.555015][ T6448] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 325.632889][ T6448] usb 4-1: cp210x converter now attached to ttyUSB0 [ 325.761589][ T6448] usb 4-1: USB disconnect, device number 8 [ 325.796265][ T6448] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 325.952762][ T6448] cp210x 4-1:0.0: device disconnected [ 327.702163][ T8017] libceph: resolve '4..' (ret=-3): failed [ 332.255723][ T8046] affs: No valid root block on device nullb0 [ 335.709959][ T8070] fuse: Bad value for 'fd' [ 339.842810][ T8108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.704'. [ 339.842832][ T8108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.704'. [ 340.349119][ T8116] fuse: Bad value for 'fd' [ 342.572120][ T8147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.716'. [ 342.572487][ T8147] netlink: 4 bytes leftover after parsing attributes in process `syz.3.716'. [ 343.119001][ T8156] fuse: Bad value for 'fd' [ 344.880840][ T8175] affs: No valid root block on device nullb0 [ 345.791268][ T5119] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 346.902639][ T8186] sctp: [Deprecated]: syz.4.730 (pid 8186) Use of struct sctp_assoc_value in delayed_ack socket option. [ 346.902639][ T8186] Use struct sctp_sack_info instead [ 347.740012][ T8193] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 348.261686][ T8200] affs: No valid root block on device nullb0 [ 348.656714][ T8211] fuse: Unknown parameter '0x0000000000000003' [ 348.688297][ T37] audit: type=1326 audit(1767161749.067:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8213 comm="syz.1.743" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8084dff749 code=0x0 [ 351.684883][ T8259] fuse: Unknown parameter '0x0000000000000003' [ 351.686579][ T8259] comedi comedi3: comedi_config --init_data is deprecated [ 353.372387][ T992] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 353.549529][ T992] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 353.549559][ T992] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.566825][ T992] usb 4-1: config 0 descriptor?? [ 353.594126][ T992] cp210x 4-1:0.0: cp210x converter detected [ 354.665411][ T992] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 354.759988][ T992] usb 4-1: cp210x converter now attached to ttyUSB0 [ 355.074512][ T6831] usb 4-1: USB disconnect, device number 9 [ 355.094269][ T6831] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 355.232681][ T6831] cp210x 4-1:0.0: device disconnected [ 357.023948][ T8314] affs: No valid root block on device nullb0 [ 358.922688][ T5812] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 359.072346][ T5812] usb 3-1: Using ep0 maxpacket: 8 [ 359.074457][ T5812] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 359.074480][ T5812] usb 3-1: config 0 has no interface number 0 [ 359.080782][ T5812] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 359.080808][ T5812] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.080826][ T5812] usb 3-1: Product: syz [ 359.080839][ T5812] usb 3-1: Manufacturer: syz [ 359.080859][ T5812] usb 3-1: SerialNumber: syz [ 359.136457][ T8339] netlink: 8 bytes leftover after parsing attributes in process `syz.4.788'. [ 359.136478][ T8339] netlink: 4 bytes leftover after parsing attributes in process `syz.4.788'. [ 359.181086][ T5812] usb 3-1: config 0 descriptor?? [ 359.377618][ T8344] Bluetooth: MGMT ver 1.23 [ 359.392884][ T5812] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 359.392984][ T5812] uvcvideo 3-1:0.31: No valid video chain found. [ 359.401335][ T5812] usb 3-1: USB disconnect, device number 7 [ 359.443385][ T6844] udevd[6844]: setting mode of /dev/bus/usb/003/007 to 020664 failed: No such file or directory [ 359.443561][ T6844] udevd[6844]: setting owner of /dev/bus/usb/003/007 to uid=0, gid=0 failed: No such file or directory [ 359.452444][ T6448] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 359.620856][ T6448] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 359.620886][ T6448] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.632541][ T6448] usb 1-1: config 0 descriptor?? [ 359.636075][ T6448] cp210x 1-1:0.0: cp210x converter detected [ 360.038955][ T6448] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 360.086100][ T6448] usb 1-1: cp210x converter now attached to ttyUSB0 [ 360.141429][ T8358] affs: No valid root block on device nullb0 [ 360.266123][ T5812] usb 1-1: USB disconnect, device number 3 [ 360.446115][ T5812] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 362.434329][ T5812] cp210x 1-1:0.0: device disconnected [ 364.162964][ T8397] affs: No valid root block on device nullb0 [ 367.019041][ T8426] netlink: 24 bytes leftover after parsing attributes in process `syz.4.820'. [ 368.530011][ T8445] team0: Device gtp0 is up. Set it down before adding it as a team port [ 371.574449][ T8466] netlink: 24 bytes leftover after parsing attributes in process `syz.1.833'. [ 371.942370][ T930] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 372.143778][ T930] usb 5-1: Using ep0 maxpacket: 16 [ 372.148575][ T930] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 372.148602][ T930] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 372.148621][ T930] usb 5-1: Product: syz [ 372.148634][ T930] usb 5-1: Manufacturer: syz [ 372.148647][ T930] usb 5-1: SerialNumber: syz [ 372.198006][ T930] usb 5-1: config 0 descriptor?? [ 372.423903][ T930] usb 5-1: USB disconnect, device number 9 [ 376.584679][ T8505] netlink: 24 bytes leftover after parsing attributes in process `syz.4.845'. [ 376.657008][ T8507] fuse: Unknown parameter '0x0000000000000003' [ 376.661814][ T8507] comedi comedi3: comedi_config --init_data is deprecated [ 377.459941][ T8517] process 'syz.1.850' launched './file1' with NULL argv: empty string added [ 377.616098][ T8524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.851'. [ 377.657444][ T8524] vlan2: entered promiscuous mode [ 377.657465][ T8524] bond0: entered promiscuous mode [ 377.657477][ T8524] bond_slave_0: entered promiscuous mode [ 377.657801][ T8524] bond_slave_1: entered promiscuous mode [ 378.817115][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.817182][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.274427][ T8543] netlink: 24 bytes leftover after parsing attributes in process `syz.1.856'. [ 381.594291][ T8555] fuse: Unknown parameter '0x0000000000000003' [ 381.651309][ T8555] comedi comedi3: comedi_config --init_data is deprecated [ 385.262516][ T8585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.869'. [ 385.275525][ T8585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.869'. [ 385.483924][ T8585] gretap0: entered promiscuous mode [ 385.486937][ T8585] macvlan2: entered allmulticast mode [ 385.486975][ T8585] gretap0: entered allmulticast mode [ 385.712647][ T8584] netlink: 24 bytes leftover after parsing attributes in process `syz.4.870'. [ 387.092455][ T5803] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 387.425401][ T5803] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 387.425431][ T5803] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.461101][ T5803] usb 1-1: config 0 descriptor?? [ 387.484562][ T5803] cp210x 1-1:0.0: cp210x converter detected [ 387.642335][ T6737] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 387.792488][ T6737] usb 3-1: Using ep0 maxpacket: 8 [ 387.798027][ T6737] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 387.798054][ T6737] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.798073][ T6737] usb 3-1: Product: syz [ 387.798086][ T6737] usb 3-1: Manufacturer: syz [ 387.798100][ T6737] usb 3-1: SerialNumber: syz [ 387.848665][ T6737] usb 3-1: config 0 descriptor?? [ 387.889802][ T5803] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 387.890651][ T5803] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -32 [ 387.890699][ T5803] cp210x 1-1:0.0: GPIO initialisation failed: -32 [ 387.923275][ T6737] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 387.923342][ T6737] usb 3-1: setting power ON [ 387.923892][ T6737] dvb-usb: bulk message failed: -22 (2/0) [ 388.895575][ T5803] usb 1-1: cp210x converter now attached to ttyUSB0 [ 388.903912][ T5803] usb 1-1: USB disconnect, device number 4 [ 388.909743][ T6737] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 388.916420][ T5803] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 388.917165][ T5803] cp210x 1-1:0.0: device disconnected [ 389.803396][ T6737] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 389.803488][ T6737] usb 3-1: media controller created [ 389.818106][ T8607] dvb-usb: bulk message failed: -22 (3/0) [ 389.818128][ T8607] dvb-usb: bulk message failed: -22 (3/0) [ 389.819411][ T8607] dvb-usb: bulk message failed: -22 (3/0) [ 389.871731][ T6737] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 390.066031][ T6737] usb 3-1: selecting invalid altsetting 6 [ 390.066060][ T6737] usb 3-1: digital interface selection failed (-22) [ 390.066074][ T6737] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 390.094901][ T6737] usb 3-1: setting power OFF [ 390.095044][ T6737] dvb-usb: bulk message failed: -22 (2/0) [ 390.095061][ T6737] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 390.095072][ T6737] (NULL device *): no alternate interface [ 390.237976][ T6737] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 390.263616][ T6737] usb 3-1: USB disconnect, device number 8 [ 393.267663][ T8642] netlink: 32 bytes leftover after parsing attributes in process `syz.2.889'. [ 394.878289][ T5119] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 394.892375][ T43] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 396.309476][ T43] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 396.309506][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.342205][ T43] usb 4-1: config 0 descriptor?? [ 396.360370][ T43] cp210x 4-1:0.0: cp210x converter detected [ 396.785273][ T43] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 396.818444][ T43] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -32 [ 396.818495][ T43] cp210x 4-1:0.0: GPIO initialisation failed: -32 [ 396.860206][ T43] usb 4-1: cp210x converter now attached to ttyUSB0 [ 396.874073][ T43] usb 4-1: USB disconnect, device number 10 [ 396.943001][ T43] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 396.943739][ T43] cp210x 4-1:0.0: device disconnected [ 399.685694][ T8689] netlink: 32 bytes leftover after parsing attributes in process `syz.1.906'. [ 401.443450][ T8715] affs: No valid root block on device nullb0 [ 401.719771][ T5119] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 402.428340][ T8723] netlink: 32 bytes leftover after parsing attributes in process `syz.4.918'. [ 406.899361][ T8762] fuse: Unknown parameter '0x0000000000000003' [ 406.912559][ T8762] comedi comedi3: comedi_config --init_data is deprecated [ 408.509477][ T8791] affs: No valid root block on device nullb0 [ 410.150326][ T8810] fuse: Unknown parameter '0x0000000000000003' [ 410.161590][ T8810] comedi comedi3: comedi_config --init_data is deprecated [ 412.011711][ T8825] netlink: 12 bytes leftover after parsing attributes in process `syz.1.953'. [ 416.330751][ T8880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.971'. [ 418.094486][ T8906] fuse: Unknown parameter '0x0000000000000003' [ 418.129943][ T8906] comedi comedi3: comedi_config --init_data is deprecated [ 418.262401][ T5968] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 418.359466][ T8911] affs: No valid root block on device nullb0 [ 418.402350][ T5968] usb 3-1: device descriptor read/64, error -71 [ 418.662381][ T5968] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 418.892929][ T5968] usb 3-1: device descriptor read/64, error -71 [ 419.061869][ T8920] netlink: 8 bytes leftover after parsing attributes in process `syz.3.989'. [ 419.107914][ T5968] usb usb3-port1: attempt power cycle [ 419.832430][ T5968] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 419.863295][ T5968] usb 3-1: device descriptor read/8, error -71 [ 420.122431][ T5968] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 420.143062][ T5968] usb 3-1: device descriptor read/8, error -71 [ 420.210738][ T8936] netlink: 96 bytes leftover after parsing attributes in process `syz.4.995'. [ 420.210762][ T8936] netlink: 96 bytes leftover after parsing attributes in process `syz.4.995'. [ 420.252818][ T5968] usb usb3-port1: unable to enumerate USB device [ 422.812564][ T8969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1003'. [ 423.861579][ T8981] affs: No valid root block on device nullb0 [ 425.584486][ T930] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 426.607737][ T930] usb 2-1: config index 0 descriptor too short (expected 39784, got 18) [ 426.607766][ T930] usb 2-1: config 143 has too many interfaces: 243, using maximum allowed: 32 [ 426.607785][ T930] usb 2-1: config 143 has an invalid descriptor of length 71, skipping remainder of the config [ 426.607804][ T930] usb 2-1: config 143 has 0 interfaces, different from the descriptor's value: 243 [ 426.607839][ T930] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 426.607861][ T930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.722415][ T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 427.612435][ T10] usb 3-1: device descriptor read/64, error -71 [ 427.793072][ T930] usb 2-1: string descriptor 0 read error: -71 [ 427.816435][ T930] usb 2-1: USB disconnect, device number 5 [ 427.852481][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 427.982351][ T10] usb 3-1: device descriptor read/64, error -71 [ 428.092850][ T10] usb usb3-port1: attempt power cycle [ 428.234010][ T9021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1017'. [ 432.142594][ T5968] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 432.257205][ T9067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1030'. [ 432.282423][ T5968] usb 2-1: device descriptor read/64, error -71 [ 432.522392][ T5968] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 432.653359][ T5968] usb 2-1: device descriptor read/64, error -71 [ 432.672452][ T5812] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 432.717214][ T9078] affs: No valid root block on device nullb0 [ 432.795146][ T5968] usb usb2-port1: attempt power cycle [ 433.020360][ T5812] usb 1-1: device descriptor read/64, error -71 [ 433.252403][ T5812] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 433.413086][ T5812] usb 1-1: device descriptor read/64, error -71 [ 433.540261][ T5812] usb usb1-port1: attempt power cycle [ 434.062362][ T5812] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 434.126753][ T5968] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 434.160369][ T5812] usb 1-1: device descriptor read/8, error -71 [ 434.196473][ T5968] usb 2-1: device descriptor read/8, error -71 [ 434.576904][ T5812] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 434.596730][ T5812] usb 1-1: device descriptor read/8, error -71 [ 435.170189][ T5812] usb usb1-port1: unable to enumerate USB device [ 436.891250][ T9120] affs: No valid root block on device nullb0 [ 438.488850][ T9144] affs: No valid root block on device nullb0 [ 438.547303][ T5119] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 440.015782][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.015851][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.204279][ T9155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1055'. [ 440.329857][ T9152] libceph: resolve '4..' (ret=-3): failed [ 442.256227][ T9174] affs: No valid root block on device nullb0 [ 442.355405][ T9175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1061'. [ 442.359738][ T9175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1061'. [ 442.654969][ T9175] gretap0: entered promiscuous mode [ 442.657581][ T9175] macvlan2: entered allmulticast mode [ 442.657648][ T9175] gretap0: entered allmulticast mode [ 443.196463][ T9176] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 444.052670][ T5119] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 445.336630][ T9207] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1069'. [ 446.204021][ T9213] fuse: Unknown parameter '0x0000000000000003' [ 446.234334][ T9213] comedi comedi3: comedi_config --init_data is deprecated [ 447.245163][ T9232] fuse: Bad value for 'fd' [ 449.007703][ T9259] affs: No valid root block on device nullb0 [ 449.204002][ T9261] libceph: resolve '4..' (ret=-3): failed [ 450.761837][ T5119] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 452.763513][ T9276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1084'. [ 452.790384][ T9276] vlan2: entered promiscuous mode [ 452.790404][ T9276] bond0: entered promiscuous mode [ 452.790417][ T9276] bond_slave_0: entered promiscuous mode [ 452.790623][ T9276] bond_slave_1: entered promiscuous mode [ 454.477295][ T9292] affs: No valid root block on device nullb0 [ 456.251004][ T9304] batman_adv: batadv0: Adding interface: dummy0 [ 456.251021][ T9304] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 456.251051][ T9304] batman_adv: batadv0: Interface activated: dummy0 [ 457.401882][ T9317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1096'. [ 457.519647][ T9317] vlan2: entered promiscuous mode [ 457.519668][ T9317] bond0: entered promiscuous mode [ 457.519679][ T9317] bond_slave_0: entered promiscuous mode [ 457.521082][ T9317] bond_slave_1: entered promiscuous mode [ 465.638992][ T9378] affs: No valid root block on device nullb0 [ 467.529146][ T9395] affs: No valid root block on device nullb0 [ 471.004765][ T9417] fuse: Unknown parameter '0x0000000000000003' [ 473.830982][ T9441] affs: No valid root block on device nullb0 [ 474.564473][ T9447] libceph: resolve '4..' (ret=-3): failed [ 477.934493][ T9462] fuse: Unknown parameter '0x0000000000000003' [ 478.212426][ T6831] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 478.605390][ T9476] affs: No valid root block on device nullb0 [ 480.430590][ T6831] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 480.430615][ T6831] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 480.430649][ T6831] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 480.430670][ T6831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.543784][ T6831] usb 1-1: config 0 descriptor?? [ 481.231232][ T6831] usb 1-1: USB disconnect, device number 9 [ 481.742205][ T9500] fuse: Unknown parameter '0x0000000000000003' [ 483.719034][ T9509] libceph: resolve '4..' (ret=-3): failed [ 487.780181][ T9526] affs: No valid root block on device nullb0 [ 488.042537][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 488.195145][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 488.195170][ T10] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 488.195203][ T10] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 488.195225][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.214347][ T10] usb 4-1: config 0 descriptor?? [ 489.436953][ T9539] fuse: Unknown parameter '0x0000000000000003' [ 489.461589][ T9539] comedi comedi3: comedi_config --init_data is deprecated [ 489.535233][ T9541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1163'. [ 489.969359][ T9552] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 490.785666][ T9564] affs: No valid root block on device nullb0 [ 490.916362][ T10] usb 4-1: USB disconnect, device number 11 [ 492.634271][ T9577] fuse: Unknown parameter '0x0000000000000003' [ 492.653693][ T9577] comedi comedi3: comedi_config --init_data is deprecated [ 493.362500][ T9582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1175'. [ 493.371597][ T9582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1175'. [ 493.478018][ T9582] gretap0: entered promiscuous mode [ 493.478978][ T9582] macvlan2: entered allmulticast mode [ 493.479020][ T9582] gretap0: entered allmulticast mode [ 493.965020][ T9582] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 494.253033][ T9588] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1176'. [ 494.943558][ T9602] affs: No valid root block on device nullb0 [ 496.419476][ T9609] fuse: Unknown parameter '0x0000000000000003' [ 496.467662][ T9609] comedi comedi3: comedi_config --init_data is deprecated [ 496.672421][ T5889] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 497.675585][ T9622] libceph: resolve '4..' (ret=-3): failed [ 497.982327][ T5889] usb 5-1: Using ep0 maxpacket: 8 [ 497.991407][ T5889] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 497.991431][ T5889] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 497.991448][ T5889] usb 5-1: config 0 has no interface number 0 [ 497.997501][ T5889] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 497.997527][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.997546][ T5889] usb 5-1: Product: syz [ 497.997559][ T5889] usb 5-1: Manufacturer: syz [ 497.997573][ T5889] usb 5-1: SerialNumber: syz [ 498.106114][ T5889] usb 5-1: config 0 descriptor?? [ 498.216554][ T5889] uvcvideo 5-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 498.216594][ T5889] uvcvideo 5-1:0.31: No valid video chain found. [ 498.652973][ T5889] usb 5-1: USB disconnect, device number 10 [ 499.439722][ T9633] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1189'. [ 499.442019][ T9633] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1189'. [ 499.451692][ T9633] gretap0: entered promiscuous mode [ 499.451798][ T9633] macvlan2: entered allmulticast mode [ 499.451811][ T9633] gretap0: entered allmulticast mode [ 500.107117][ T9633] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 500.196460][ T9642] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1191'. [ 500.732974][ T9654] affs: No valid root block on device nullb0 [ 501.477469][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.477537][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.204026][ T9663] fuse: Unknown parameter '0x0000000000000003' [ 503.142805][ T9669] comedi comedi3: comedi_config --init_data is deprecated [ 504.042273][ T9674] libceph: resolve '4..' (ret=-3): failed [ 504.364669][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 504.492461][ T10] usb 5-1: device descriptor read/64, error -71 [ 505.022566][ T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 505.835637][ T10] usb 5-1: device descriptor read/64, error -71 [ 505.947435][ T10] usb usb5-port1: attempt power cycle [ 506.292390][ T9705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1207'. [ 506.296572][ T9705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1207'. [ 506.460644][ T9705] macvlan3: entered allmulticast mode [ 507.375783][ T9705] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 507.760181][ T9711] affs: No valid root block on device nullb0 [ 508.092405][ T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 508.450609][ T10] usb 5-1: device not accepting address 13, error -71 [ 509.319128][ T9722] fuse: Unknown parameter '0x0000000000000003' [ 510.109913][ T9727] comedi comedi3: comedi_config --init_data is deprecated [ 510.486296][ T9732] libceph: resolve '4..' (ret=-3): failed [ 513.719978][ T9762] affs: No valid root block on device nullb0 [ 515.416240][ T9773] libceph: resolve '4..' (ret=-3): failed [ 516.373116][ T9778] fuse: Unknown parameter '0x0000000000000003' [ 516.383328][ T9778] comedi comedi3: comedi_config --init_data is deprecated [ 519.475013][ T9812] affs: No valid root block on device nullb0 [ 519.954147][ T9815] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1241'. [ 519.955187][ T9815] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1241'. [ 519.964309][ T9815] macvlan3: entered allmulticast mode [ 520.332200][ T9815] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nullb0": -EINTR [ 520.386904][ T6737] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 520.745819][ T6737] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 520.745849][ T6737] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.792009][ T6737] usb 2-1: config 0 descriptor?? [ 521.370032][ T6737] cp210x 2-1:0.0: cp210x converter detected [ 521.577008][ T6737] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 521.580978][ T6737] cp210x 2-1:0.0: GPIO initialisation failed: -524 [ 521.682320][ T9835] libceph: resolve '4..' (ret=-3): failed [ 522.595194][ T6737] usb 2-1: cp210x converter now attached to ttyUSB0 [ 522.688377][ T6737] usb 2-1: USB disconnect, device number 10 [ 522.707924][ T6737] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 522.708584][ T6737] cp210x 2-1:0.0: device disconnected [ 525.727051][ T9858] affs: No valid root block on device nullb0 [ 526.423096][ T9863] snd_dummy snd_dummy.0: control 2:16:0:syz0:-3 is already present [ 526.616214][ T9867] batman_adv: batadv0: Adding interface: dummy0 [ 526.616230][ T9867] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 526.616259][ T9867] batman_adv: batadv0: Interface activated: dummy0 [ 526.626747][ T9867] batadv0: mtu less than device minimum [ 526.744366][ T9867] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 526.755479][ T9867] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 526.766039][ T9867] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 526.774146][ T9867] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 526.783343][ T9867] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 526.790992][ T9867] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 526.819822][ T9867] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 526.837101][ T9867] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 526.849849][ T9867] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 527.351158][ T9878] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1259'. [ 529.764210][ T9908] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 529.768708][ T9908] netlink: 'syz.0.1267': attribute type 24 has an invalid length. [ 529.768725][ T9908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1267'. [ 529.768758][ T9908] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 530.004714][ T9911] affs: No valid root block on device nullb0 [ 533.500238][ T9945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1275'. [ 534.604547][ T9964] affs: No valid root block on device nullb0 [ 537.618679][ T9995] net_ratelimit: 10 callbacks suppressed [ 537.618697][ T9995] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 537.741962][ T9991] binder: BINDER_SET_CONTEXT_MGR already set [ 537.741976][ T9991] binder: 9989:9991 ioctl 4018620d 200000000040 returned -16 [ 537.900188][ T9998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1294'. [ 539.148962][T10014] affs: No valid root block on device nullb0 [ 541.777884][T10041] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1308'. [ 542.900773][T10045] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 543.033903][T10049] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1310'. [ 544.117606][T10054] libceph: resolve '4..' (ret=-3): failed [ 544.637030][T10062] affs: No valid root block on device nullb0 [ 546.270999][T10081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1320'. [ 547.406672][T10092] fuse: Unknown parameter 'group_i00000000000000000000' [ 547.521049][T10093] batadv0: mtu less than device minimum [ 547.787801][T10098] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1324'. [ 548.497827][T10093] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 548.505831][T10093] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 548.513678][T10093] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 548.521538][T10093] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 548.529409][T10093] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 548.537275][T10093] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 548.900709][T10102] libceph: resolve '4..' (ret=-3): failed [ 549.055174][T10093] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 549.083465][T10093] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 549.103989][T10093] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 549.124626][T10093] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 549.982474][T10121] affs: No valid root block on device nullb0 [ 551.255933][T10133] fuse: Unknown parameter 'group_i00000000000000000000' [ 553.994975][T10160] affs: No valid root block on device nullb0 [ 554.586654][T10162] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1348'. [ 555.188899][ T5119] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 557.853052][T10196] affs: No valid root block on device nullb0 [ 559.326579][T10208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1362'. [ 560.517116][ T5119] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 563.151748][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.151822][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.921208][T10248] affs: No valid root block on device nullb0 [ 566.692594][T10253] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1375'. [ 569.503353][T10275] fuse: Bad value for 'user_id' [ 569.503371][T10275] fuse: Bad value for 'user_id' [ 569.664504][ T5119] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 570.395969][T10297] affs: No valid root block on device nullb0 [ 571.670810][T10304] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1388'. [ 576.110158][T10326] fuse: Bad value for 'user_id' [ 576.110201][T10326] fuse: Bad value for 'user_id' [ 578.836293][T10337] affs: No valid root block on device nullb0 [ 579.265783][ T5119] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 579.735956][T10354] affs: No valid root block on device nullb0 [ 580.112365][ T930] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 580.215496][T10359] ieee802154 phy0 wpan0: encryption failed: -22 [ 580.284152][ T930] usb 4-1: config 0 has no interfaces? [ 580.284187][ T930] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 580.284208][ T930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.288488][ T930] usb 4-1: config 0 descriptor?? [ 582.836943][ T7796] usb 4-1: USB disconnect, device number 12 [ 583.336044][T10383] affs: No valid root block on device nullb0 [ 583.943773][T10382] 9p: Bad value for 'wfdno' [ 584.294996][T10387] binder_alloc: 10386: binder_alloc_buf, no vma [ 584.920963][T10398] affs: No valid root block on device nullb0 [ 586.486307][ T6831] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 586.805311][ T6831] usb 1-1: config 0 has no interfaces? [ 586.807030][ T6831] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 586.807357][ T6831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.884852][ T6831] usb 1-1: config 0 descriptor?? [ 587.189538][T10420] 9p: Bad value for 'wfdno' [ 587.280429][T10422] affs: No valid root block on device nullb0 [ 587.931551][ T5119] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 588.100499][T10427] fuse: Bad value for 'fd' [ 588.197617][T10429] binder_alloc: 10428: binder_alloc_buf, no vma [ 589.210388][ T5812] usb 1-1: USB disconnect, device number 10 [ 590.764193][T10459] affs: No valid root block on device nullb0 [ 591.515718][T10461] 9p: Bad value for 'wfdno' [ 591.601922][T10463] fuse: Bad value for 'fd' [ 593.952507][ T930] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 593.952665][ T5812] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 594.091332][T10491] affs: No valid root block on device nullb0 [ 594.712880][ T7796] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 594.817296][ T930] usb 5-1: config 0 has no interfaces? [ 594.817332][ T930] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 594.817358][ T930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.817999][ T5812] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 594.818020][ T5812] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.866137][ T930] usb 5-1: config 0 descriptor?? [ 594.887618][ T5812] usb 2-1: config 0 descriptor?? [ 594.902404][ T7796] usb 1-1: Using ep0 maxpacket: 16 [ 594.906179][ T5812] cp210x 2-1:0.0: cp210x converter detected [ 594.906734][ T7796] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 594.906746][ T7796] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 594.906755][ T7796] usb 1-1: config 0 has no interface number 0 [ 594.909923][ T7796] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 594.909938][ T7796] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.909948][ T7796] usb 1-1: Product: syz [ 594.909955][ T7796] usb 1-1: Manufacturer: syz [ 594.909962][ T7796] usb 1-1: SerialNumber: syz [ 594.994422][ T7796] usb 1-1: config 0 descriptor?? [ 595.028969][ T7796] uvcvideo 1-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 595.029268][ T7796] uvcvideo 1-1:0.105: No valid video chain found. [ 595.092637][ T5812] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 595.092654][ T5812] cp210x 2-1:0.0: querying part number failed [ 595.099798][ T5812] usb 2-1: cp210x converter now attached to ttyUSB0 [ 595.200458][ T5812] usb 1-1: USB disconnect, device number 11 [ 595.543515][T10498] fuse: Bad value for 'fd' [ 595.578947][T10500] 9p: Bad value for 'rfdno' [ 595.616189][ T5119] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 596.910394][ T6831] usb 2-1: USB disconnect, device number 11 [ 596.922741][ T6831] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 596.923576][ T6831] cp210x 2-1:0.0: device disconnected [ 597.170018][ T5812] usb 5-1: USB disconnect, device number 15 [ 600.974992][T10520] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1458'. [ 601.933178][T10535] affs: No valid root block on device nullb0 [ 604.393029][T10552] fuse: Bad value for 'fd' [ 607.089609][T10567] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1471'. [ 609.199246][ T5119] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 609.229141][T10583] fuse: Invalid rootmode [ 609.759875][T10581] affs: No valid root block on device nullb0 [ 610.196516][T10593] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1478'. [ 612.218943][T10607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1482'. [ 614.661566][T10625] affs: No valid root block on device nullb0 [ 615.862311][T10637] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1491'. [ 617.562530][ T5812] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 618.260409][ T5812] usb 4-1: config 0 has no interfaces? [ 618.260445][ T5812] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 618.260468][ T5812] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.305272][ T5812] usb 4-1: config 0 descriptor?? [ 618.323917][ T5119] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 619.327083][ T6448] usb 4-1: USB disconnect, device number 13 [ 621.120120][ T5812] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 621.289803][ T5812] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 621.418603][T10671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1496'. [ 621.809036][T10679] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1503'. [ 623.090231][T10689] affs: No valid root block on device nullb0 [ 624.323325][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.324650][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.575922][ T5815] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 624.757622][ T5815] usb 5-1: config 0 has no interfaces? [ 624.757645][ T5815] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 624.757657][ T5815] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.761238][ T5815] usb 5-1: config 0 descriptor?? [ 626.108782][T10719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1516'. [ 626.652402][ T5815] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 626.665082][ T5812] usb 5-1: USB disconnect, device number 16 [ 626.959541][ T5815] usb 3-1: Using ep0 maxpacket: 8 [ 626.962397][ T5815] usb 3-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 626.962423][ T5815] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.970219][ T5815] usb 3-1: config 0 descriptor?? [ 626.995060][ T5815] uvcvideo 3-1:0.0: probe with driver uvcvideo failed with error -22 [ 627.908059][ T6448] usb 3-1: USB disconnect, device number 16 [ 629.259529][T10762] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1529'. [ 629.259552][T10762] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1529'. [ 629.382598][ T5815] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 629.550962][ T5815] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 629.550990][ T5815] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.572490][ T7796] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 629.576508][ T5815] usb 2-1: config 0 descriptor?? [ 629.580318][ T5815] cp210x 2-1:0.0: cp210x converter detected [ 629.767893][ T7796] usb 3-1: config 0 has no interfaces? [ 629.767927][ T7796] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 629.767949][ T7796] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.882009][T10774] affs: No valid root block on device nullb0 [ 630.676888][ T7796] usb 3-1: config 0 descriptor?? [ 631.182546][T10776] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1533'. [ 631.202180][ T5815] usb 2-1: cp210x converter now attached to ttyUSB0 [ 632.755054][ T5815] usb 3-1: USB disconnect, device number 17 [ 632.922460][ T6448] usb 2-1: USB disconnect, device number 12 [ 632.949013][ T6448] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 632.949754][ T6448] cp210x 2-1:0.0: device disconnected [ 634.182434][ T6448] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 634.343342][ T6448] usb 2-1: Using ep0 maxpacket: 8 [ 634.344903][ T6448] usb 2-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 634.344918][ T6448] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.348119][ T6448] usb 2-1: config 0 descriptor?? [ 634.351514][ T6448] uvcvideo 2-1:0.0: probe with driver uvcvideo failed with error -22 [ 634.566400][ T6448] usb 2-1: USB disconnect, device number 13 [ 634.820119][T10813] affs: No valid root block on device nullb0 [ 637.187049][ T5812] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 637.382398][ T5815] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 637.404449][ T5812] usb 4-1: config 0 has no interfaces? [ 637.404483][ T5812] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 637.404505][ T5812] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.409579][ T5812] usb 4-1: config 0 descriptor?? [ 637.590301][ T5815] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 637.590329][ T5815] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.624473][ T5815] usb 2-1: config 0 descriptor?? [ 637.883267][ T5815] cp210x 2-1:0.0: cp210x converter detected [ 638.262660][ T5815] usb 2-1: cp210x converter now attached to ttyUSB0 [ 639.910929][ T5889] usb 4-1: USB disconnect, device number 14 [ 639.982907][T10854] net_ratelimit: 9 callbacks suppressed [ 639.982955][T10854] netlink: zone id is out of range [ 639.982963][T10854] netlink: zone id is out of range [ 639.984342][T10854] netlink: set zone limit has 8 unknown bytes [ 640.630165][T10861] 9p: Bad value for 'rfdno' [ 640.685698][ T5815] usb 2-1: USB disconnect, device number 14 [ 640.737266][ T5815] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 640.738029][ T5815] cp210x 2-1:0.0: device disconnected [ 643.562991][ T5815] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 644.005212][ T5815] usb 3-1: Using ep0 maxpacket: 8 [ 644.005480][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 644.006248][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 644.006510][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 644.006578][ T5815] usb 3-1: device descriptor read/all, error -32 [ 644.232398][ T5815] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 645.413232][ T6448] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 645.585573][ T6448] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 645.585601][ T6448] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.591494][ T6448] usb 5-1: config 0 descriptor?? [ 645.624449][ T6448] cp210x 5-1:0.0: cp210x converter detected [ 645.912521][ T6448] usb 5-1: cp210x converter now attached to ttyUSB0 [ 648.053390][ T6448] usb 5-1: USB disconnect, device number 17 [ 648.081759][ T6448] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 648.083484][ T6448] cp210x 5-1:0.0: device disconnected [ 649.424018][T10927] ======================================================= [ 649.424018][T10927] WARNING: The mand mount option has been deprecated and [ 649.424018][T10927] and is ignored by this kernel. Remove the mand [ 649.424018][T10927] option from the mount to silence this warning. [ 649.424018][T10927] ======================================================= [ 649.427555][T10927] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 654.827710][T10998] fuse: Bad value for 'fd' [ 658.592375][ T6737] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 658.747858][ T6737] usb 1-1: config index 0 descriptor too short (expected 126, got 72) [ 658.761750][ T6737] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 658.761777][ T6737] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.761795][ T6737] usb 1-1: Product: syz [ 658.761808][ T6737] usb 1-1: Manufacturer: syz [ 658.761820][ T6737] usb 1-1: SerialNumber: syz [ 658.833191][ T6737] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 660.394718][ T5815] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 661.876048][ T6737] usb 1-1: USB disconnect, device number 12 [ 661.992613][ T5815] usb 1-1: Service connection timeout for: 257 [ 661.992642][ T5815] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 661.994600][ T5815] ath9k_htc: Failed to initialize the device [ 661.999065][ T6737] usb 1-1: ath9k_htc: USB layer deinitialized [ 665.093119][T11091] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1632'. [ 665.093227][T11091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1632'. [ 665.879655][T11104] comedi comedi1: ni_at_a2150: I/O port conflict (0x2,28) [ 665.895943][T11104] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1636'. [ 667.935679][T11125] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1643'. [ 669.654224][T11140] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.012381][ T6448] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 670.072660][T11140] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.362347][ T6448] usb 4-1: Using ep0 maxpacket: 16 [ 670.364457][ T6448] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 670.364481][ T6448] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 670.364499][ T6448] usb 4-1: config 0 has no interface number 0 [ 670.370611][ T6448] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 670.370636][ T6448] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.370655][ T6448] usb 4-1: Product: syz [ 670.370668][ T6448] usb 4-1: Manufacturer: syz [ 670.370681][ T6448] usb 4-1: SerialNumber: syz [ 670.380211][ T6448] usb 4-1: config 0 descriptor?? [ 670.623877][ T6448] uvcvideo 4-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 670.623910][ T6448] uvcvideo 4-1:0.105: No valid video chain found. [ 670.656676][ T6448] usb 4-1: USB disconnect, device number 15 [ 671.441992][T11140] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.708798][T11176] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 671.712519][ T6448] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 671.834456][T11140] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.864027][ T6448] usb 5-1: config 0 has no interfaces? [ 671.864061][ T6448] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 671.864082][ T6448] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.868281][ T6448] usb 5-1: config 0 descriptor?? [ 672.038203][ T85] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.038274][ T85] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.055381][ T85] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.072573][ T85] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.584709][ T5815] usb 5-1: USB disconnect, device number 18 [ 675.222930][T11209] Context (ID=0x0) not attached to queue pair (handle=0x4d5:0x0) [ 675.404892][T11215] comedi comedi1: ni_at_a2150: I/O port conflict (0x2,28) [ 675.410195][T11215] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1681'. [ 676.590419][T11232] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 676.782421][ T5889] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 676.792544][ T6831] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 676.937340][ T5889] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 676.937370][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.938896][T11243] Context (ID=0x0) not attached to queue pair (handle=0x4d9:0x0) [ 676.942440][ T6831] usb 1-1: Using ep0 maxpacket: 16 [ 676.944438][ T6831] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 676.944459][ T6831] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 676.944476][ T6831] usb 1-1: config 0 has no interface number 0 [ 676.947275][ T6831] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 676.947299][ T6831] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.947317][ T6831] usb 1-1: Product: syz [ 676.947330][ T6831] usb 1-1: Manufacturer: syz [ 676.947343][ T6831] usb 1-1: SerialNumber: syz [ 676.951375][ T5889] usb 3-1: config 0 descriptor?? [ 676.985976][ T6831] usb 1-1: config 0 descriptor?? [ 677.038544][ T5889] cp210x 3-1:0.0: cp210x converter detected [ 677.093334][T11245] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1693'. [ 677.198818][ T6831] uvcvideo 1-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 677.198851][ T6831] uvcvideo 1-1:0.105: No valid video chain found. [ 677.245167][ T6831] usb 1-1: USB disconnect, device number 13 [ 677.449910][ T5889] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 677.490354][ T5889] usb 3-1: cp210x converter now attached to ttyUSB0 [ 677.656452][ T5889] usb 3-1: USB disconnect, device number 20 [ 677.668160][ T5889] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 677.782812][ T5889] cp210x 3-1:0.0: device disconnected [ 677.953378][T11262] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 678.662911][T11274] Context (ID=0x0) not attached to queue pair (handle=0x4d9:0x0) [ 679.708316][T11288] libceph: resolve '4..' (ret=-3): failed [ 680.157524][ T5815] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 680.342376][ T5815] usb 4-1: Using ep0 maxpacket: 8 [ 680.346063][ T5815] usb 4-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 680.346089][ T5815] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.399685][ T5815] usb 4-1: config 0 descriptor?? [ 680.616598][ T5815] usb 4-1: string descriptor 0 read error: -71 [ 680.616635][ T5815] uvcvideo 4-1:0.0: Found UVC 0.00 device (2833:0201) [ 680.616651][ T5815] uvcvideo 4-1:0.0: No valid video chain found. [ 680.633415][ T5815] usb 4-1: USB disconnect, device number 16 [ 680.728567][T11302] comedi comedi1: ni_at_a2150: I/O port conflict (0x2,28) [ 681.846249][ T6448] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 681.992381][ T6448] usb 3-1: Using ep0 maxpacket: 32 [ 681.994712][ T6448] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 681.994735][ T6448] usb 3-1: config 0 has no interface number 0 [ 681.997501][ T6448] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 681.997525][ T6448] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.997544][ T6448] usb 3-1: Product: syz [ 681.997557][ T6448] usb 3-1: Manufacturer: syz [ 681.997569][ T6448] usb 3-1: SerialNumber: syz [ 682.190976][ T6448] usb 3-1: config 0 descriptor?? [ 682.204114][ T6448] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 682.433806][ T6448] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 682.522780][T11332] comedi comedi1: ni_at_a2150: I/O port conflict (0x2,28) [ 683.384734][ T6448] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 683.574090][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 683.574884][ T5815] usb 3-1: USB disconnect, device number 21 [ 683.616162][ T5815] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 683.661397][ T5815] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 683.673858][ T5815] quatech2 3-1:0.51: device disconnected [ 684.540240][T11365] comedi comedi1: ni_at_a2150: I/O port conflict (0x2,28) [ 685.811004][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.811073][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.624269][T11409] syzkaller0: entered promiscuous mode [ 687.624295][T11409] syzkaller0: entered allmulticast mode [ 690.884373][T11458] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 691.233615][T11465] fuse: Bad value for 'fd' [ 694.311837][T11496] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 695.354040][T11514] 9pnet_fd: Insufficient options for proto=fd [ 695.582663][T11520] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1796'. [ 698.512404][ T5815] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 698.665517][ T5815] usb 1-1: config index 0 descriptor too short (expected 126, got 72) [ 698.672565][ T5815] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 698.672593][ T5815] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.672612][ T5815] usb 1-1: Product: syz [ 698.672625][ T5815] usb 1-1: Manufacturer: syz [ 698.672639][ T5815] usb 1-1: SerialNumber: syz [ 698.874726][ T5815] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 698.905346][ T6737] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 700.299562][ T6737] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 700.299742][ T6737] ath9k_htc: Failed to initialize the device [ 700.393217][T11558] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 701.334317][ T7796] usb 1-1: USB disconnect, device number 14 [ 701.372713][ T7796] usb 1-1: ath9k_htc: USB layer deinitialized [ 703.476568][ T6831] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 703.622916][ T6831] usb 5-1: Using ep0 maxpacket: 32 [ 703.629968][ T6831] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 703.629991][ T6831] usb 5-1: config 0 has no interface number 0 [ 703.695994][ T6831] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 703.696022][ T6831] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.696040][ T6831] usb 5-1: Product: syz [ 703.696054][ T6831] usb 5-1: Manufacturer: syz [ 703.696067][ T6831] usb 5-1: SerialNumber: syz [ 703.755806][ T6831] usb 5-1: config 0 descriptor?? [ 703.805257][ T6831] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 704.047959][ T6831] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 704.097527][ T6831] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 704.111807][ T6448] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 704.221107][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 704.221888][ T6831] usb 5-1: USB disconnect, device number 19 [ 704.262191][T11589] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 704.272324][ T6448] usb 4-1: Using ep0 maxpacket: 8 [ 704.277349][ T6448] usb 4-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 704.277373][ T6448] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.307251][ T6831] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 704.309817][T11589] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1820'. [ 704.358221][ T6448] usb 4-1: config 0 descriptor?? [ 704.360500][ T6831] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 704.361418][ T6831] quatech2 5-1:0.51: device disconnected [ 704.468040][ T6448] uvcvideo 4-1:0.0: probe with driver uvcvideo failed with error -22 [ 704.763347][ T930] usb 4-1: USB disconnect, device number 17 [ 704.842285][T11593] netlink: zone id is out of range [ 704.842321][T11593] netlink: zone id is out of range [ 704.852037][T11593] netlink: set zone limit has 8 unknown bytes [ 708.794751][T11619] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1830'. [ 708.947765][T11623] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1831'. [ 709.759567][T11635] netlink: zone id is out of range [ 709.759604][T11635] netlink: zone id is out of range [ 709.763599][T11635] netlink: set zone limit has 8 unknown bytes [ 710.757909][T11637] affs: No valid root block on device nullb0 [ 710.808391][T11643] capability: warning: `syz.0.1837' uses deprecated v2 capabilities in a way that may be insecure [ 711.854579][T11668] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 711.856200][T11668] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1848'. [ 711.981087][T11674] netlink: zone id is out of range [ 711.981121][T11674] netlink: zone id is out of range [ 711.987115][T11674] netlink: set zone limit has 8 unknown bytes [ 712.887054][ T6448] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 713.812399][ T6448] usb 1-1: Using ep0 maxpacket: 32 [ 713.814766][ T6448] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 713.814844][ T6448] usb 1-1: config 0 has no interface number 0 [ 713.818308][ T6448] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 713.818334][ T6448] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.818352][ T6448] usb 1-1: Product: syz [ 713.818365][ T6448] usb 1-1: Manufacturer: syz [ 713.818386][ T6448] usb 1-1: SerialNumber: syz [ 714.182784][ T6448] usb 1-1: config 0 descriptor?? [ 714.187707][ T6448] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 714.397620][T11695] affs: No valid root block on device nullb0 [ 715.036397][ T6448] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 715.151593][ T6448] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 715.169274][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 715.189470][ T6448] usb 1-1: USB disconnect, device number 15 [ 715.214804][ T6448] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 715.238576][ T6448] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 715.239459][ T6448] quatech2 1-1:0.51: device disconnected [ 715.417111][T11705] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1861'. [ 715.784050][ T6737] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 715.932362][ T6737] usb 4-1: Using ep0 maxpacket: 16 [ 717.157358][ T6737] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 717.157385][ T6737] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 717.157402][ T6737] usb 4-1: config 0 has no interface number 0 [ 717.160969][ T6737] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 717.160994][ T6737] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.161012][ T6737] usb 4-1: Product: syz [ 717.161024][ T6737] usb 4-1: Manufacturer: syz [ 717.161037][ T6737] usb 4-1: SerialNumber: syz [ 717.253016][T11726] affs: No valid root block on device nullb0 [ 717.782950][ T6737] usb 4-1: config 0 descriptor?? [ 717.994120][ T6737] uvcvideo 4-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 717.994140][ T6737] uvcvideo 4-1:0.105: No valid video chain found. [ 718.016299][ T6737] usb 4-1: USB disconnect, device number 18 [ 718.099754][T11736] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1873'. [ 718.371095][T11743] libceph: resolve '4..' (ret=-3): failed [ 719.698302][T11759] fuse: Unknown parameter 'fd0x0000000000000003' [ 719.719654][ T37] audit: type=1326 audit(1767162120.097:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11758 comm="syz.0.1882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efe26c665e7 code=0x7ffc0000 [ 719.719894][ T37] audit: type=1326 audit(1767162120.097:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11758 comm="syz.0.1882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efe26c0b829 code=0x7ffc0000 [ 719.720160][ T37] audit: type=1326 audit(1767162120.097:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11758 comm="syz.0.1882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe26c6f749 code=0x7ffc0000 [ 719.721041][ T37] audit: type=1326 audit(1767162120.097:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11758 comm="syz.0.1882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efe26c6f749 code=0x7ffc0000 [ 719.721304][ T37] audit: type=1326 audit(1767162120.097:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11758 comm="syz.0.1882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe26c6f749 code=0x7ffc0000 [ 719.721561][ T37] audit: type=1326 audit(1767162120.097:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11758 comm="syz.0.1882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe26c6f749 code=0x7ffc0000 [ 720.031010][T11770] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 720.392707][ T6831] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 720.661786][ T6831] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 720.661815][ T6831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.690887][ T6831] usb 1-1: config 0 descriptor?? [ 720.703181][ T6831] cp210x 1-1:0.0: cp210x converter detected [ 720.755162][T11784] libceph: resolve '4..' (ret=-3): failed [ 720.834860][ T5815] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 720.993871][ T5815] usb 4-1: Using ep0 maxpacket: 16 [ 721.007596][ T5815] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 721.007842][ T5815] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 721.007862][ T5815] usb 4-1: config 0 has no interface number 0 [ 721.048336][ T5815] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 721.048363][ T5815] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.048517][ T5815] usb 4-1: Product: syz [ 721.048531][ T5815] usb 4-1: Manufacturer: syz [ 721.048544][ T5815] usb 4-1: SerialNumber: syz [ 721.602721][ T6831] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 721.607069][ T6831] cp210x 1-1:0.0: failed to get vendor val 0x370c size 73: -32 [ 721.607092][ T6831] cp210x 1-1:0.0: GPIO initialisation failed: -32 [ 721.968078][ T5815] usb 4-1: config 0 descriptor?? [ 722.313133][ T6831] usb 1-1: cp210x converter now attached to ttyUSB0 [ 722.328930][ T6831] usb 1-1: USB disconnect, device number 16 [ 722.343538][ T6831] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 722.344200][ T6831] cp210x 1-1:0.0: device disconnected [ 722.363088][ T5815] uvcvideo 4-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 722.363117][ T5815] uvcvideo 4-1:0.105: No valid video chain found. [ 722.369571][ T5815] usb 4-1: USB disconnect, device number 19 [ 722.647202][T11800] tipc: Started in network mode [ 722.647244][T11800] tipc: Node identity 00000000800000008, cluster identity 4711 [ 723.053235][T11817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1906'. [ 723.053260][T11817] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1906'. [ 724.054797][T11846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1920'. [ 724.054821][T11846] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1920'. [ 725.226434][T11869] affs: No valid root block on device nullb0 [ 725.982154][T11880] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1932'. [ 725.982176][T11880] netlink: 200 bytes leftover after parsing attributes in process `syz.3.1932'. [ 727.882410][ T6831] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 728.034768][ T6831] usb 1-1: config 0 has no interfaces? [ 728.034804][ T6831] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 728.034826][ T6831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.039821][ T6831] usb 1-1: config 0 descriptor?? [ 729.662334][ T6831] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 729.814722][ T6831] usb 5-1: config 0 has no interfaces? [ 729.814760][ T6831] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 729.814783][ T6831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.820966][ T6831] usb 5-1: config 0 descriptor?? [ 730.930751][ T5815] usb 1-1: USB disconnect, device number 17 [ 731.088223][T11944] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1954'. [ 731.702364][ T5815] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 732.744994][ T5815] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 732.745022][ T5815] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.775043][ T5815] usb 2-1: config 0 descriptor?? [ 732.793288][ T5815] cp210x 2-1:0.0: cp210x converter detected [ 732.941277][ T6831] usb 5-1: USB disconnect, device number 20 [ 733.246025][ T5815] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 733.248474][ T5815] cp210x 2-1:0.0: failed to get vendor val 0x370c size 73: -32 [ 733.248497][ T5815] cp210x 2-1:0.0: GPIO initialisation failed: -32 [ 733.442152][ T5815] usb 2-1: cp210x converter now attached to ttyUSB0 [ 733.465712][ T5815] usb 2-1: USB disconnect, device number 15 [ 733.473379][ T5815] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 733.474098][ T5815] cp210x 2-1:0.0: device disconnected [ 733.758111][T11974] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1967'. [ 734.342518][T11982] Context (ID=0x0) not attached to queue pair (handle=0x4d5:0x0) [ 735.258102][T11998] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1966'. [ 736.312495][T12011] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1978'. [ 736.692380][ T5815] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 736.846503][ T5815] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 736.846532][ T5815] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.851517][ T5815] usb 1-1: config 0 descriptor?? [ 736.983166][ T5815] cp210x 1-1:0.0: cp210x converter detected [ 737.385209][T12024] affs: No valid root block on device nullb0 [ 737.479488][ T5815] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 737.568558][ T5815] cp210x 1-1:0.0: failed to get vendor val 0x370c size 73: -32 [ 737.568634][ T5815] cp210x 1-1:0.0: GPIO initialisation failed: -32 [ 737.885307][ T5815] usb 1-1: cp210x converter now attached to ttyUSB0 [ 737.934702][ T5815] usb 1-1: USB disconnect, device number 18 [ 737.981250][ T5815] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 737.982014][ T5815] cp210x 1-1:0.0: device disconnected [ 740.028591][ T6448] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 740.238243][T12041] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1989'. [ 740.247233][ T6448] usb 5-1: config 0 has no interfaces? [ 740.247265][ T6448] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 740.247286][ T6448] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.252002][ T6448] usb 5-1: config 0 descriptor?? [ 741.792889][ T6448] usb 5-1: USB disconnect, device number 21 [ 742.891873][T12065] affs: No valid root block on device nullb0 [ 743.794557][T12071] tmpfs: Bad value for 'mpol' [ 744.194468][T12084] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2002'. [ 745.635804][T12099] affs: No valid root block on device nullb0 [ 746.665993][T12114] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2013'. [ 747.121098][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.122864][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.412448][ T7796] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 747.692584][ T7796] usb 1-1: Using ep0 maxpacket: 16 [ 747.695613][ T7796] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 747.695637][ T7796] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 747.695656][ T7796] usb 1-1: config 0 has no interface number 0 [ 747.698719][ T7796] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 747.698746][ T7796] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.698766][ T7796] usb 1-1: Product: syz [ 747.698779][ T7796] usb 1-1: Manufacturer: syz [ 747.698792][ T7796] usb 1-1: SerialNumber: syz [ 747.836987][ T7796] usb 1-1: config 0 descriptor?? [ 747.852593][ T7796] uvcvideo 1-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 747.852623][ T7796] uvcvideo 1-1:0.105: No valid video chain found. [ 748.065673][ T7796] usb 1-1: USB disconnect, device number 19 [ 748.354162][T12137] affs: No valid root block on device nullb0 [ 749.284003][T12147] batadv_slave_1: entered promiscuous mode [ 749.338186][T12152] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2026'. [ 749.502069][T12156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2028'. [ 749.503760][T12144] batadv_slave_1: left promiscuous mode [ 751.423417][ T7796] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 751.574444][ T7796] usb 2-1: config 0 has no interfaces? [ 751.574480][ T7796] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 751.574503][ T7796] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.621597][ T7796] usb 2-1: config 0 descriptor?? [ 752.410534][T12186] comedi comedi1: ni_at_a2150: I/O port conflict (0x2,28) [ 752.418392][T12186] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2037'. [ 753.304499][ T6737] usb 2-1: USB disconnect, device number 16 [ 754.504810][T12215] affs: No valid root block on device nullb0 [ 755.719946][T12234] comedi comedi1: ni_at_a2150: I/O port conflict (0x2,28) [ 755.725211][T12234] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2050'. [ 756.942503][ T6448] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 757.315043][ T6448] usb 4-1: config index 0 descriptor too short (expected 126, got 72) [ 757.317959][ T6448] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 757.317982][ T6448] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.317996][ T6448] usb 4-1: Product: syz [ 757.318008][ T6448] usb 4-1: Manufacturer: syz [ 757.318019][ T6448] usb 4-1: SerialNumber: syz [ 757.406883][ T6448] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 757.458944][ T6831] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 758.193068][T12263] affs: No valid root block on device nullb0 [ 758.925044][ T6831] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 758.927352][ T6831] ath9k_htc: Failed to initialize the device [ 1003.112330][ C0] BUG: workqueue lockup - pool cpus=0 node=[ 1003.112330][ C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 242s! [ 1003.112402][ C0] BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=0 stuck for 242s! [ 1003.112441][ C0] BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=-20 stuck for 241s! [ 1003.112480][ C0] BUG: workqueue lockup - pool cpus=0-1 flags=0x4 nice=0 stuck for 242s! [ 1003.112516][ C0] Showing busy workqueues and worker pools: [ 1003.112537][ C0] workqueue events: flags=0x100 [ 1003.112593][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=18 refcnt=19 [ 1003.112635][ C0] pending: 4*nsim_dev_hwstats_traffic_work, vmstat_shepherd, 2*psi_avgs_work, 6*ovs_dp_masks_rebalance, 3*psi_avgs_work, destroy_super_work, delayed_vfree_work [ 1003.113102][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=3 refcnt=4 [ 1003.113143][ C0] in-flight: 6831:request_firmware_work_func [ 1003.113262][ C0] pending: nsim_dev_hwstats_traffic_work, psi_avgs_work [ 1003.113304][ C0] workqueue events_highpri: flags=0x110 [ 1003.113318][ C0] pwq 7: cpus=1 node=0 flags=0x0 nice=-20 active=1 refcnt=2 [ 1003.113358][ C0] pending: fill_page_cache_func [ 1003.113392][ C0] workqueue events_long: flags=0x100 [ 1003.113403][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=8 refcnt=9 [ 1003.113443][ C0] pending: 5*defense_work_handler, 3*br_fdb_cleanup [ 1003.113656][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=4 refcnt=5 [ 1003.113696][ C0] pending: defense_work_handler, 3*br_fdb_cleanup [ 1003.113757][ C0] workqueue events_unbound: flags=0x2 [ 1003.113769][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=2 refcnt=3 [ 1003.113807][ C0] pending: toggle_allocation_gate, flush_memcg_stats_dwork [ 1003.113879][ C0] workqueue events_unbound: flags=0x2 [ 1003.113889][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=14 refcnt=15 [ 1003.113924][ C0] in-flight: 1403:nsim_dev_trap_report_work [ 1003.113996][ C0] pending: nsim_dev_trap_report_work, 7*cfg80211_wiphy_work, 3*nsim_dev_trap_report_work, 2*macvlan_process_broadcast [ 1003.114235][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=5 refcnt=6 [ 1003.114271][ C0] pending: 3*cfg80211_wiphy_work, crng_reseed, idle_cull_fn [ 1003.114411][ C0] workqueue events_freezable: flags=0x104 [ 1003.114423][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 1003.114462][ C0] pending: update_balloon_stats_func [ 1003.114562][ C0] workqueue events_power_efficient: flags=0x180 [ 1003.114574][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=9 refcnt=10 [ 1003.114615][ C0] pending: wg_ratelimiter_gc_entries, neigh_managed_work, gc_worker, neigh_periodic_work, do_cache_clean, 2*check_lifetime, 2*hash_ip6_gc [ 1003.114969][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=9 refcnt=10 [ 1003.115008][ C0] pending: neigh_managed_work, 2*hash_ip6_gc, neigh_periodic_work, 4*check_lifetime, hash_ip6_gc [ 1003.115087][ C0] workqueue kvfree_rcu_reclaim: flags=0xa [ 1003.115098][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 1003.115134][ C0] pending: kfree_rcu_monitor [ 1003.115171][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 1003.115207][ C0] pending: kfree_rcu_monitor [ 1003.115244][ C0] workqueue mm_percpu_wq: flags=0x8 [ 1003.115254][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 1003.115292][ C0] pending: vmstat_update [ 1003.115316][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 1003.115356][ C0] pending: vmstat_update [ 1003.115382][ C0] workqueue writeback: flags=0x4a [ 1003.115393][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 1003.115429][ C0] pending: wb_workfn [ 1003.115483][ C0] workqueue kblockd: flags=0x18 [ 1003.115495][ C0] pwq 7: cpus=1 node=0 flags=0x0 nice=-20 active=1 refcnt=2 [ 1003.115541][ C0] pending: blk_mq_timeout_work [ 1003.115651][ C0] workqueue usb_hub_wq: flags=0x104 [ 1003.115664][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 1003.115703][ C0] in-flight: 6448:hub_event [ 1003.115971][ C0] workqueue ipv6_addrconf: flags=0x6000a [ 1003.115984][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=9 [ 1003.116021][ C0] pending: addrconf_verify_work [ 1003.116105][ C0] inactive: 5*addrconf_verify_work [ 1003.116143][ C0] workqueue bat_events: flags=0x6000a [ 1003.116155][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=47 [ 1003.116190][ C0] pending: batadv_mcast_mla_update [ 1003.116245][ C0] inactive: 4*batadv_mcast_mla_update, 2*batadv_iv_send_outstanding_bat_ogm_packet, 5*batadv_purge_orig, 17*batadv_iv_send_outstanding_bat_ogm_packet, 3*batadv_tt_purge, batadv_dat_purge, 3*batadv_bla_periodic_work, 2*batadv_dat_purge, 2*batadv_bla_periodic_work, 2*batadv_tt_purge, 2*batadv_dat_purge [ 1003.116615][ C0] workqueue wg-kex-wg0: flags=0x6 [ 1003.116627][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=4 refcnt=5 [ 1003.116662][ C0] pending: 2*wg_packet_handshake_send_worker, 2*wg_queued_expired_zero_key_material [ 1003.116712][ C0] workqueue wg-kex-wg1: flags=0x6 [ 1003.116722][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=3 refcnt=4 [ 1003.116756][ C0] pending: 2*wg_packet_handshake_send_worker, wg_queued_expired_zero_key_material [ 1003.116801][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 1003.116837][ C0] pending: wg_queued_expired_zero_key_material [ 1003.116866][ C0] workqueue wg-kex-wg2: flags=0x6 [ 1003.116876][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=2 refcnt=3 [ 1003.116911][ C0] pending: wg_packet_handshake_send_worker, wg_queued_expired_zero_key_material [ 1003.116953][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=2 refcnt=3 [ 1003.116989][ C0] pending: wg_packet_handshake_send_worker, wg_queued_expired_zero_key_material [ 1003.117032][ C0] workqueue wg-kex-wg0: flags=0x6 [ 1003.117042][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 1003.117078][ C0] pending: wg_packet_handshake_send_worker [ 1003.117107][ C0] workqueue wg-crypt-wg0: flags=0x128 [ 1003.117120][ C0] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 1003.117159][ C0] pending: wg_packet_encrypt_worker [ 1003.117185][ C0] workqueue wg-kex-wg0: flags=0x6 [ 1003.117196][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=3 refcnt=4 [ 1003.117231][ C0] pending: 2*wg_packet_handshake_send_worker, wg_queued_expired_zero_key_material [ 1003.117276][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 1003.117312][ C0] pending: wg_queued_expired_zero_key_material [ 1003.117342][ C0] workqueue wg-kex-wg0: flags=0x6 [ 1003.117353][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 1003.117389][ C0] pending: wg_queued_expired_zero_key_material [ 1003.117417][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=3 refcnt=4 [ 1003.117452][ C0] pending: 2*wg_packet_handshake_send_worker, wg_queued_expired_zero_key_material [ 1003.117498][ C0] workqueue wg-kex-wg1: flags=0x6 [ 1003.117509][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=2 refcnt=3 [ 1003.117549][ C0] pending: 2*wg_packet_handshake_send_worker [ 1003.117581][ C0] workqueue wg-crypt-wg1: flags=0x128 [ 1003.117592][ C0] pwq 2: cpus=0 node=0 flags=0x0 nice=0 active=1 refcnt=2 [ 1003.117633][ C0] pending: wg_packet_encrypt_worker [ 1003.117661][ C0] workqueue wg-kex-wg1: flags=0x6 [ 1003.117672][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=2 refcnt=3 [ 1003.117707][ C0] pending: wg_packet_handshake_send_worker, wg_queued_expired_zero_key_material [ 1003.117749][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=2 refcnt=3 [ 1003.117785][ C0] pending: wg_packet_handshake_send_worker, wg_queued_expired_zero_key_material [ 1003.117829][ C0] workqueue wg-kex-wg1: flags=0x6 [ 1003.117839][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=2 refcnt=3 [ 1003.117876][ C0] pending: wg_packet_handshake_send_worker, wg_queued_expired_zero_key_material [ 1003.117918][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=2 refcnt=3 [ 1003.117953][ C0] pending: wg_packet_handshake_send_worker, wg_queued_expired_zero_key_material [ 1003.117998][ C0] workqueue wg-kex-wg0: flags=0x6 [ 1003.118008][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 1003.118045][ C0] pending: wg_queued_expired_zero_key_material [ 1003.118072][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=3 refcnt=4 [ 1003.118108][ C0] pending: 2*wg_packet_handshake_send_worker, wg_queued_expired_zero_key_material [ 1003.118155][ C0] workqueue wg-kex-wg2: flags=0x6 [ 1003.118165][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=2 refcnt=3 [ 1003.118201][ C0] pending: 2*wg_packet_handshake_send_worker [ 1003.118234][ C0] workqueue wg-kex-wg2: flags=0x6 [ 1003.118245][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=2 refcnt=3 [ 1003.118279][ C0] pending: wg_packet_handshake_send_worker, wg_queued_expired_zero_key_material [ 1003.118322][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=2 refcnt=3 [ 1003.118357][ C0] pending: wg_packet_handshake_send_worker, wg_queued_expired_zero_key_material [ 1003.118401][ C0] workqueue wg-kex-wg2: flags=0x6 [ 1003.118412][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=3 refcnt=4 [ 1003.118447][ C0] pending: 2*wg_packet_handshake_send_worker, wg_queued_expired_zero_key_material [ 1003.118492][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=1 refcnt=2 [ 1003.118534][ C0] pending: wg_queued_expired_zero_key_material [ 1003.118563][ C0] workqueue wg-kex-wg1: flags=0x6 [ 1003.118574][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=2 refcnt=3 [ 1003.118610][ C0] pending: wg_packet_handshake_send_worker, wg_queued_expired_zero_key_material [ 1003.118653][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=2 refcnt=3 [ 1003.118688][ C0] pending: wg_packet_handshake_send_worker, wg_queued_expired_zero_key_material [ 1003.118732][ C0] workqueue wg-kex-wg2: flags=0x6 [ 1003.118742][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=2 refcnt=3 [ 1003.118777][ C0] pending: wg_packet_handshake_send_worker, wg_queued_expired_zero_key_material [ 1003.118820][ C0] pwq 8: cpus=0-1 flags=0x4 nice=0 active=2 refcnt=3 [ 1003.118856][ C0] pending: wg_packet_handshake_send_worker, wg_queued_expired_zero_key_material [ 1003.118913][ C0] pool 6: cpus=1 node=0 flags=0x0 nice=0 hung=242s workers=4 idle: 5889 5968 [ 1003.118980][ C0] pool 8: cpus=0-1 flags=0x4 nice=0 hung=242s workers=28 idle: 2128 8087 1121 12 1424 1125 10627 44 8958 1108 58 9214 10650 3553 7303 10536 152 3502 3469 1016 13 69 85 5933 6139 1398 6116 [ 1003.119304][ C0] Showing backtraces of running workers in stalled CPU-bound worker pools: [ 1003.119322][ C0] pool 6: [ 1003.119330][ C0] task:kworker/1:10 state:R running task stack:21240 pid:6448 tgid:6448 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1003.119397][ C0] Workqueue: usb_hub_wq hub_event [ 1003.119432][ C0] Call Trace: [ 1003.119443][ C0] [ 1003.119458][ C0] __schedule+0x145f/0x5070 [ 1003.119564][ C0] ? update_irq_load_avg+0x8c7/0xe30 [ 1003.119604][ C0] ? arch_scale_cpu_capacity+0x18/0xb0 [ 1003.119641][ C0] ? __pfx___schedule+0x10/0x10 [ 1003.119695][ C0] schedule_rtlock+0x30/0x70 [ 1003.119726][ C0] rtlock_slowlock_locked+0x3819/0x4010 [ 1003.119782][ C0] ? stack_trace_save+0x9c/0xe0 [ 1003.119839][ C0] ? kasan_save_track+0x4f/0x80 [ 1003.119870][ C0] ? __kmalloc_noprof+0x23e/0x7e0 [ 1003.119901][ C0] ? rtlock_slowlock_locked+0x286/0x4010 [ 1003.119929][ C0] ? hub_ext_port_status+0x116/0x820 [ 1003.119950][ C0] ? hub_event+0x778/0x4f30 [ 1003.119976][ C0] ? worker_thread+0x8a0/0xda0 [ 1003.120007][ C0] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 1003.120067][ C0] rt_spin_lock+0x158/0x3e0 [ 1003.120099][ C0] ? __pfx_rt_spin_lock+0x10/0x10 [ 1003.120140][ C0] dummy_hub_control+0xaf/0x1a30 [ 1003.120232][ C0] ? usb_hcd_submit_urb+0x786/0x1b60 [ 1003.120271][ C0] usb_hcd_submit_urb+0xdbe/0x1b60 [ 1003.120317][ C0] usb_start_wait_urb+0x115/0x4f0 [ 1003.120351][ C0] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1003.120405][ C0] usb_control_msg+0x232/0x3e0 [ 1003.120439][ C0] hub_ext_port_status+0x116/0x820 [ 1003.120481][ C0] hub_event+0x778/0x4f30 [ 1003.120522][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 1003.120582][ C0] ? finish_task_switch+0x162/0x940 [ 1003.120624][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1003.120654][ C0] ? __pfx_hub_event+0x10/0x10 [ 1003.120683][ C0] ? process_scheduled_works+0x9ef/0x1770 [ 1003.120717][ C0] ? process_scheduled_works+0x9ef/0x1770 [ 1003.120740][ C0] ? process_scheduled_works+0x9ef/0x1770 [ 1003.120767][ C0] process_scheduled_works+0xad1/0x1770 [ 1003.120827][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1003.120849][ C0] ? do_raw_spin_lock+0x121/0x290 [ 1003.120894][ C0] worker_thread+0x8a0/0xda0 [ 1003.120936][ C0] ? __kthread_parkme+0x7b/0x200 [ 1003.120974][ C0] kthread+0x711/0x8a0 [ 1003.121008][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1003.121033][ C0] ? __pfx_kthread+0x10/0x10 [ 1003.121060][ C0] ? rt_spin_unlock+0x150/0x200 [ 1003.121094][ C0] ? rt_spin_unlock+0x161/0x200 [ 1003.121119][ C0] ? __pfx_kthread+0x10/0x10 [ 1003.121162][ C0] ret_from_fork+0x510/0xa50 [ 1003.121196][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1003.121218][ C0] ? __switch_to+0xc9e/0x1480 [ 1003.121256][ C0] ? __pfx_kthread+0x10/0x10 [ 1003.121286][ C0] ret_from_fork_asm+0x1a/0x30 [ 1003.121362][ C0] [ 1026.932448][ T38] INFO: task rcu_tasks_trace:36 blocked for more than 251 seconds. [ 1026.932483][ T38] Tainted: G L syzkaller #0 [ 1026.932495][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1026.932504][ T38] task:rcu_tasks_trace state:D stack:27952 pid:36 tgid:36 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1026.932561][ T38] Call Trace: [ 1026.932569][ T38] [ 1026.932584][ T38] __schedule+0x145f/0x5070 [ 1026.932627][ T38] ? __lock_acquire+0x6b6/0x2cf0 [ 1026.932658][ T38] ? finish_task_switch+0x23d/0x940 [ 1026.932687][ T38] ? rcu_is_watching+0x15/0xb0 [ 1026.932708][ T38] ? trace_sched_exit_tp+0x36/0xf0 [ 1026.932733][ T38] ? __schedule+0x1475/0x5070 [ 1026.932768][ T38] ? __pfx___schedule+0x10/0x10 [ 1026.932804][ T38] ? schedule+0x91/0x360 [ 1026.932833][ T38] schedule+0x165/0x360 [ 1026.932862][ T38] schedule_timeout+0x9a/0x270 [ 1026.932889][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 1026.932916][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 1026.932941][ T38] ? preempt_schedule_common+0x83/0xd0 [ 1026.932968][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 1026.932992][ T38] ? wait_for_completion+0x267/0x5d0 [ 1026.933013][ T38] wait_for_completion+0x2bf/0x5d0 [ 1026.933043][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 1026.933064][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1026.933083][ T38] ? lockdep_hardirqs_on+0x7b/0x110 [ 1026.933101][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1026.933125][ T38] synchronize_rcu_normal+0x17d/0x260 [ 1026.933147][ T38] ? __pfx_synchronize_rcu_normal+0x10/0x10 [ 1026.933169][ T38] ? __pfx___schedule+0x10/0x10 [ 1026.933208][ T38] ? irqentry_exit+0x5dd/0x660 [ 1026.933226][ T38] ? lockdep_hardirqs_on+0x7b/0x110 [ 1026.933244][ T38] ? irqentry_exit+0x5dd/0x660 [ 1026.933260][ T38] ? rcu_is_watching+0x15/0xb0 [ 1026.933304][ T38] synchronize_rcu_expedited+0x13b/0x6e0 [ 1026.933329][ T38] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 1026.933356][ T38] ? cpus_read_unlock+0xa6/0x140 [ 1026.933397][ T38] ? rcu_tasks_trace_pregp_step+0xe2a/0xe70 [ 1026.933450][ T38] rcu_tasks_wait_gp+0x4a5/0xb80 [ 1026.933477][ T38] ? do_raw_spin_lock+0x121/0x290 [ 1026.933508][ T38] ? __pfx_rcu_tasks_wait_gp+0x10/0x10 [ 1026.933531][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1026.933550][ T38] ? lockdep_hardirqs_on+0x7b/0x110 [ 1026.933569][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1026.933590][ T38] ? rcu_tasks_one_gp+0xaf9/0xdf0 [ 1026.933616][ T38] rcu_tasks_one_gp+0xc19/0xdf0 [ 1026.933652][ T38] ? rcu_tasks_one_gp+0xe9/0xdf0 [ 1026.933684][ T38] rcu_tasks_kthread+0x195/0x1c0 [ 1026.933712][ T38] kthread+0x711/0x8a0 [ 1026.933741][ T38] ? __pfx_rcu_tasks_kthread+0x10/0x10 [ 1026.933765][ T38] ? __pfx_kthread+0x10/0x10 [ 1026.933787][ T38] ? rt_spin_unlock+0x150/0x200 [ 1026.933815][ T38] ? rt_spin_unlock+0x161/0x200 [ 1026.933837][ T38] ? __pfx_kthread+0x10/0x10 [ 1026.933863][ T38] ret_from_fork+0x510/0xa50 [ 1026.933887][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1026.933907][ T38] ? __switch_to+0xc9e/0x1480 [ 1026.933937][ T38] ? __pfx_kthread+0x10/0x10 [ 1026.933963][ T38] ret_from_fork_asm+0x1a/0x30 [ 1026.934006][ T38] [ 1026.934208][ T38] [ 1026.934208][ T38] Showing all locks held in the system: [ 1026.934218][ T38] 4 locks held by pr/legacy/17: [ 1026.934230][ T38] 3 locks held by rcuc/0/20: [ 1026.934242][ T38] 4 locks held by ktimers/1/29: [ 1026.934253][ T38] 1 lock held by rcu_tasks_trace/36: [ 1026.934264][ T38] #0: ffffffff8d5af660 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{4:4}, at: rcu_tasks_one_gp+0xaf9/0xdf0 [ 1026.934325][ T38] 1 lock held by khungtaskd/38: [ 1026.934335][ T38] #0: ffffffff8d5ae940 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1026.934396][ T38] 7 locks held by kworker/u8:2/44: [ 1026.934416][ T38] 6 locks held by kworker/u8:12/1403: [ 1026.934428][ T38] 4 locks held by kworker/u8:14/2128: [ 1026.934439][ T38] #0: ffff88813ff69938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1026.934491][ T38] #1: ffffc90005cc7bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1026.934537][ T38] #2: ffff88805cab08b8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x450 [ 1026.934587][ T38] #3: ffff8880b88293f8 ((lock)#3){+.+.}-{3:3}, at: kcov_remote_start+0xe1/0x710 [ 1026.934652][ T38] 3 locks held by klogd/5159: [ 1026.934664][ T38] 2 locks held by getty/5564: [ 1026.934674][ T38] #0: ffff88814dcc50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1026.934783][ T38] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x44f/0x1460 [ 1026.934833][ T38] 6 locks held by kworker/1:10/6448: [ 1026.934845][ T38] 3 locks held by kworker/1:11/6831: [ 1026.934855][ T38] #0: ffff88813ff55138 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1026.934902][ T38] #1: ffffc9000c60fbc0 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1026.934949][ T38] #2: ffff888144fe4058 (&dum_hcd->dum->lock){+.+.}-{3:3}, at: dummy_urb_dequeue+0x50/0x170 [ 1026.935004][ T38] 3 locks held by kworker/0:13/7796: [ 1026.935015][ T38] 4 locks held by kworker/u8:23/8958: [ 1026.935026][ T38] #0: ffff88813ff69938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 1026.935075][ T38] #1: ffffc9000d80fbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 1026.935121][ T38] #2: ffff88805ce408b8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x450 [ 1026.935167][ T38] #3: ffff8880b88293f8 ((lock)#3){+.+.}-{3:3}, at: kcov_remote_start+0xe1/0x710 [ 1026.935216][ T38] 5 locks held by kworker/u8:26/10627: [ 1026.935227][ T38] 3 locks held by syz.2.2039/12206: [ 1026.935239][ T38] 1 lock held by syz.3.2054/12238: [ 1026.935249][ T38] #0: ffff888144fe4058 (&dum_hcd->dum->lock){+.+.}-{3:3}, at: dummy_disable+0xb8/0x360 [ 1026.935306][ T38] 1 lock held by syz.4.2058/12253: [ 1026.935317][ T38] 1 lock held by syz.0.2063/12278: [ 1026.935328][ T38] 1 lock held by syz.2.2064/12270: [ 1026.935338][ T38] #0: ffff88813ff5e9b0 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x214/0x4d0 [ 1026.935388][ T38] 7 locks held by syz.2.2064/12272: [ 1026.935399][ T38] 2 locks held by syz.1.2065/12275: [ 1026.935410][ T38] [ 1026.935415][ T38] ============================================= [ 1026.935415][ T38] [ 1026.935424][ T38] NMI backtrace for cpu 0 [ 1026.935455][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1026.935483][ T38] Tainted: [L]=SOFTLOCKUP [ 1026.935490][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1026.935501][ T38] Call Trace: [ 1026.935509][ T38] [ 1026.935517][ T38] dump_stack_lvl+0xe8/0x150 [ 1026.935543][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 1026.935607][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1026.935631][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1026.935657][ T38] sys_info+0x135/0x170 [ 1026.935703][ T38] watchdog+0xf95/0xfe0 [ 1026.935728][ T38] ? watchdog+0x20a/0xfe0 [ 1026.935755][ T38] kthread+0x711/0x8a0 [ 1026.935782][ T38] ? __pfx_watchdog+0x10/0x10 [ 1026.935802][ T38] ? __pfx_kthread+0x10/0x10 [ 1026.935824][ T38] ? rt_spin_unlock+0x150/0x200 [ 1026.935852][ T38] ? rt_spin_unlock+0x161/0x200 [ 1026.935873][ T38] ? __pfx_kthread+0x10/0x10 [ 1026.935898][ T38] ret_from_fork+0x510/0xa50 [ 1026.935921][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1026.935940][ T38] ? __switch_to+0xc9e/0x1480 [ 1026.935970][ T38] ? __pfx_kthread+0x10/0x10 [ 1026.935995][ T38] ret_from_fork_asm+0x1a/0x30 [ 1026.936036][ T38] [ 1026.936043][ T38] Sending NMI from CPU 0 to CPUs 1: [ 1026.936072][ C1] NMI backtrace for cpu 1 [ 1026.936092][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1026.936132][ C1] Tainted: [L]=SOFTLOCKUP [ 1026.936138][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1026.936150][ C1] RIP: 0010:__lock_acquire+0x525/0x2cf0 [ 1026.936175][ C1] Code: 00 48 83 c3 28 41 89 c4 49 39 cf 0f 8d c7 00 00 00 49 83 ff 31 0f 83 83 00 00 00 8b 03 25 ff 1f 00 00 48 0f a3 05 6b 2d 1e 11 <73> 10 48 69 c0 c8 00 00 00 48 8d 88 90 b3 5b 92 eb 32 83 3d 72 bd [ 1026.936191][ C1] RSP: 0018:ffffc90000a3f130 EFLAGS: 00000003 [ 1026.936206][ C1] RAX: 0000000000000615 RBX: ffff88801bebaa90 RCX: 0000000000000006 [ 1026.936219][ C1] RDX: 0000000000000003 RSI: 0000000000000003 RDI: 0000000000000000 [ 1026.936230][ C1] RBP: ffff88801bebaac0 R08: ffffffff8173dd35 R09: ffffffff8d5ae940 [ 1026.936244][ C1] R10: ffffc90000a3f438 R11: ffffffff81ab9860 R12: 0000000000000003 [ 1026.936257][ C1] R13: ffff88801bebaac0 R14: ffff88801beb9e40 R15: 0000000000000004 [ 1026.936270][ C1] FS: 0000000000000000(0000) GS:ffff888126def000(0000) knlGS:0000000000000000 [ 1026.936286][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1026.936298][ C1] CR2: 0000001b2f51eff8 CR3: 000000002887c000 CR4: 00000000003526f0 [ 1026.936313][ C1] Call Trace: [ 1026.936320][ C1] [ 1026.936333][ C1] ? unwind_next_frame+0xa5/0x23d0 [ 1026.936370][ C1] ? unwind_next_frame+0xa5/0x23d0 [ 1026.936390][ C1] lock_acquire+0x107/0x340 [ 1026.936411][ C1] ? unwind_next_frame+0xa5/0x23d0 [ 1026.936435][ C1] ? unwind_next_frame+0xa5/0x23d0 [ 1026.936456][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 1026.936479][ C1] ? unwind_next_frame+0xa5/0x23d0 [ 1026.936500][ C1] unwind_next_frame+0xc2/0x23d0 [ 1026.936520][ C1] ? unwind_next_frame+0xa5/0x23d0 [ 1026.936543][ C1] ? unwind_next_frame+0xa5/0x23d0 [ 1026.936564][ C1] ? ret_from_fork+0x510/0xa50 [ 1026.936581][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 1026.936605][ C1] ? dummy_timer+0x83e/0x46f0 [ 1026.936620][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1026.936641][ C1] arch_stack_walk+0x11c/0x150 [ 1026.936664][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 1026.936690][ C1] stack_trace_save+0x9c/0xe0 [ 1026.936709][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1026.936729][ C1] ? rtlock_slowlock_locked+0xd8/0x4010 [ 1026.936753][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 1026.936775][ C1] kasan_save_track+0x3e/0x80 [ 1026.936797][ C1] ? kasan_save_track+0x3e/0x80 [ 1026.936817][ C1] ? kasan_save_free_info+0x46/0x50 [ 1026.936836][ C1] ? __kasan_slab_free+0x5c/0x80 [ 1026.936858][ C1] ? kfree+0x1bd/0x900 [ 1026.936878][ C1] ? dummy_timer+0x83e/0x46f0 [ 1026.936892][ C1] ? __hrtimer_run_queues+0x542/0xd00 [ 1026.936913][ C1] ? hrtimer_run_softirq+0x1a3/0x2e0 [ 1026.936930][ C1] ? handle_softirqs+0x1df/0x650 [ 1026.936949][ C1] ? run_ktimerd+0x69/0x100 [ 1026.936969][ C1] ? smpboot_thread_fn+0x542/0xa60 [ 1026.936989][ C1] ? kthread+0x711/0x8a0 [ 1026.937009][ C1] ? ret_from_fork+0x510/0xa50 [ 1026.937026][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 1026.937071][ C1] kasan_save_free_info+0x46/0x50 [ 1026.937090][ C1] __kasan_slab_free+0x5c/0x80 [ 1026.937113][ C1] kfree+0x1bd/0x900 [ 1026.937132][ C1] ? dummy_timer+0x83e/0x46f0 [ 1026.937149][ C1] dummy_timer+0x83e/0x46f0 [ 1026.937169][ C1] ? try_to_take_rt_mutex+0x840/0xb00 [ 1026.937196][ C1] ? __pfx_sched_balance_rq+0x10/0x10 [ 1026.937220][ C1] ? do_raw_spin_lock+0x121/0x290 [ 1026.937247][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1026.937263][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1026.937281][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1026.937295][ C1] __hrtimer_run_queues+0x542/0xd00 [ 1026.937319][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1026.937336][ C1] ? read_tsc+0x9/0x20 [ 1026.937354][ C1] hrtimer_run_softirq+0x1a3/0x2e0 [ 1026.937375][ C1] handle_softirqs+0x1df/0x650 [ 1026.937396][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 1026.937416][ C1] run_ktimerd+0x69/0x100 [ 1026.937436][ C1] smpboot_thread_fn+0x542/0xa60 [ 1026.937456][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 1026.937480][ C1] kthread+0x711/0x8a0 [ 1026.937502][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1026.937522][ C1] ? __pfx_kthread+0x10/0x10 [ 1026.937543][ C1] ? rt_spin_unlock+0x150/0x200 [ 1026.937565][ C1] ? rt_spin_unlock+0x161/0x200 [ 1026.937585][ C1] ? __pfx_kthread+0x10/0x10 [ 1026.937607][ C1] ret_from_fork+0x510/0xa50 [ 1026.937626][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1026.937643][ C1] ? __switch_to+0xc9e/0x1480 [ 1026.937667][ C1] ? __pfx_kthread+0x10/0x10 [ 1026.937690][ C1] ret_from_fork_asm+0x1a/0x30 [ 1026.937719][ C1] [ 1026.938074][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 1026.938091][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1026.938117][ T38] Tainted: [L]=SOFTLOCKUP [ 1026.938123][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1026.938135][ T38] Call Trace: [ 1026.938142][ T38] [ 1026.938150][ T38] vpanic+0x1e0/0x670 [ 1026.938178][ T38] panic+0xb9/0xc0 [ 1026.938202][ T38] ? __pfx_panic+0x10/0x10 [ 1026.938235][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 1026.938263][ T38] watchdog+0xfdf/0xfe0 [ 1026.938288][ T38] ? watchdog+0x20a/0xfe0 [ 1026.938322][ T38] kthread+0x711/0x8a0 [ 1026.938349][ T38] ? __pfx_watchdog+0x10/0x10 [ 1026.938369][ T38] ? __pfx_kthread+0x10/0x10 [ 1026.938390][ T38] ? rt_spin_unlock+0x150/0x200 [ 1026.938417][ T38] ? rt_spin_unlock+0x161/0x200 [ 1026.938439][ T38] ? __pfx_kthread+0x10/0x10 [ 1026.938465][ T38] ret_from_fork+0x510/0xa50 [ 1026.938488][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1026.938507][ T38] ? __switch_to+0xc9e/0x1480 [ 1026.938536][ T38] ? __pfx_kthread+0x10/0x10 [ 1026.938562][ T38] ret_from_fork_asm+0x1a/0x30 [ 1026.938603][ T38] [ 1026.938981][ T38] Kernel Offset: disabled