last executing test programs: 1m20.084266846s ago: executing program 0 (id=1129): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x6000, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x100, 0xf4, 0xe3}}}}]}, 0x48}}, 0x0) 1m19.761607073s ago: executing program 0 (id=1133): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x1c, r1, 0xf03, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4}]}]}, 0x1c}}, 0x0) 1m15.658624291s ago: executing program 0 (id=1139): mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x12, r0, 0x604ab000) 1m15.655796441s ago: executing program 0 (id=1141): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000017c0), r0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000001800)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24844}, 0x4000000) 1m15.655581264s ago: executing program 0 (id=1142): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20,serpent)\x00'}, 0x4e) close(r0) 1m15.651710756s ago: executing program 0 (id=1146): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, 0x0) 1m14.117604108s ago: executing program 2 (id=1154): r0 = syz_io_uring_setup(0x497, &(0x7f0000002480)={0x0, 0x3f73, 0x8, 0x4, 0x17}, &(0x7f0000000340), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000002100)={&(0x7f0000003000)={[{0x0, 0x0, 0x2}]}, 0x1, 0x1}, 0x1) 1m14.116952154s ago: executing program 2 (id=1157): r0 = socket$netlink(0x10, 0x3, 0xa) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x0, 0x400, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 1m13.358814379s ago: executing program 2 (id=1158): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ppoll(&(0x7f0000000bc0)=[{r0, 0x1144}, {r1, 0x580}], 0x2, 0x0, 0x0, 0x0) 1m9.946785319s ago: executing program 2 (id=1165): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0x503, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) 1m1.86321993s ago: executing program 32 (id=1146): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, 0x0) 59.145083254s ago: executing program 2 (id=1177): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000000)={0x18, r1, 0x3, 0x0, &(0x7f0000000140)=[{0x12df, 0x2000000000000003}, {0x7ff, 0x1080}, {0x7, 0x80}]}) 58.505061878s ago: executing program 2 (id=1181): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_TSC_KHZ_vm(r1, 0xaea3) 49.638610986s ago: executing program 3 (id=1203): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001800), 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0xeac1, 0x4) 49.491523636s ago: executing program 3 (id=1204): sendmsg$key(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x2, 0x1, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r0, 0x2284, &(0x7f0000000080)) 49.302443383s ago: executing program 3 (id=1205): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x4008af83, &(0x7f00000001c0)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 43.123869671s ago: executing program 33 (id=1181): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_TSC_KHZ_vm(r1, 0xaea3) 43.123692785s ago: executing program 3 (id=1208): ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905ee63dd0000000009050300000000000009050cf2010002060209050f000000400000090507c6"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x181c82, 0x0) 41.35464927s ago: executing program 3 (id=1210): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_null}]}) 41.019586193s ago: executing program 3 (id=1212): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f00000000c0), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000100), 0x4) 35.753044354s ago: executing program 1 (id=1219): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7b}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 35.593359717s ago: executing program 4 (id=1220): r0 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000180)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e22}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000080)=""/248, 0xf8}], 0x1, 0x0, 0x18}, 0x10100) 35.441286711s ago: executing program 4 (id=1221): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r1, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x4}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 35.305189432s ago: executing program 4 (id=1222): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r0, &(0x7f00000007c0)}, 0x20) 35.057002013s ago: executing program 4 (id=1223): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001000010035bd7000fcdbdf2500000006", @ANYRES32=r1, @ANYBLOB="818c040001800700340016801800018014000a0000000080"], 0x5c}, 0x1, 0x0, 0x0, 0x40015}, 0x0) 25.535384452s ago: executing program 34 (id=1212): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f00000000c0), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000100), 0x4) 21.177155248s ago: executing program 1 (id=1225): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) 21.175354641s ago: executing program 4 (id=1226): syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$char_usb(r0, &(0x7f0000000040)="e2", 0x1) 21.175114985s ago: executing program 1 (id=1227): r0 = socket$l2tp(0x2, 0x2, 0x73) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0xc) 21.126500212s ago: executing program 1 (id=1228): capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)={0x0, 0x7ff, 0x0, 0x0, 0x9}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f00000003c0)={'tunl0\x00', 0x0, 0x20, 0x20, 0x800f, 0x9, {{0x5, 0x4, 0x0, 0x20, 0x14, 0x65, 0x0, 0x9, 0x29, 0x0, @rand_addr=0x64010100, @remote}}}}) 19.19617514s ago: executing program 4 (id=1229): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a0038"], 0x40}}, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) 15.650013955s ago: executing program 1 (id=1230): r0 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0xffffd000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001740), &(0x7f0000000080)=0xc) 15.48187436s ago: executing program 1 (id=1231): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1, 0x0, 0x8}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) 3.938501531s ago: executing program 35 (id=1229): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a0038"], 0x40}}, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) 0s ago: executing program 36 (id=1231): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1, 0x0, 0x8}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.154' (ED25519) to the list of known hosts. [ 87.029425][ T2097] cfg80211: failed to load regulatory.db [ 89.427033][ T5823] cgroup: Unknown subsys name 'net' [ 89.691189][ T5823] cgroup: Unknown subsys name 'cpuset' [ 89.727007][ T5823] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.419637][ T5823] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 95.488256][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.496752][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.512063][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.515260][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.537032][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.605395][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.609167][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.637452][ T5154] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.639082][ T5154] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.639537][ T5154] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.640375][ T5154] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.641836][ T5154] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.642848][ T5154] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.718120][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.741515][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.745357][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.751591][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 95.755992][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 95.758110][ T5851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 95.763820][ T5851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 95.764782][ T5851] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 95.768656][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.786578][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.788489][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.789272][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 96.705350][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 96.808696][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 97.000818][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 97.098313][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 97.151653][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 97.657890][ T5154] Bluetooth: hci0: command tx timeout [ 97.662003][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.663496][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.663929][ T5840] bridge_slave_0: entered allmulticast mode [ 97.665721][ T5840] bridge_slave_0: entered promiscuous mode [ 97.737682][ T5154] Bluetooth: hci2: command tx timeout [ 97.812593][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.812698][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.813075][ T5840] bridge_slave_1: entered allmulticast mode [ 97.814704][ T5840] bridge_slave_1: entered promiscuous mode [ 97.818675][ T5849] Bluetooth: hci1: command tx timeout [ 97.818855][ T5154] Bluetooth: hci3: command tx timeout [ 97.821560][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.821697][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.822011][ T5836] bridge_slave_0: entered allmulticast mode [ 97.825211][ T5836] bridge_slave_0: entered promiscuous mode [ 97.896828][ T5154] Bluetooth: hci4: command tx timeout [ 98.018221][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.018330][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.018517][ T5836] bridge_slave_1: entered allmulticast mode [ 98.021267][ T5836] bridge_slave_1: entered promiscuous mode [ 98.388882][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.389087][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.389273][ T5843] bridge_slave_0: entered allmulticast mode [ 98.392133][ T5843] bridge_slave_0: entered promiscuous mode [ 98.503404][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.579072][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.579241][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.579449][ T5842] bridge_slave_0: entered allmulticast mode [ 98.582278][ T5842] bridge_slave_0: entered promiscuous mode [ 98.585921][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.586032][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.586154][ T5843] bridge_slave_1: entered allmulticast mode [ 98.594764][ T5843] bridge_slave_1: entered promiscuous mode [ 98.710409][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.713741][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.713981][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.714106][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.714274][ T5842] bridge_slave_1: entered allmulticast mode [ 98.716215][ T5842] bridge_slave_1: entered promiscuous mode [ 98.827416][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.827553][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.827679][ T5839] bridge_slave_0: entered allmulticast mode [ 98.829303][ T5839] bridge_slave_0: entered promiscuous mode [ 98.912703][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.198919][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.199178][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.199445][ T5839] bridge_slave_1: entered allmulticast mode [ 99.202476][ T5839] bridge_slave_1: entered promiscuous mode [ 99.454709][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.540703][ T5840] team0: Port device team_slave_0 added [ 99.641086][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.643622][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.732846][ T5840] team0: Port device team_slave_1 added [ 99.736564][ T5154] Bluetooth: hci0: command tx timeout [ 99.737843][ T5836] team0: Port device team_slave_0 added [ 99.744102][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.816669][ T5154] Bluetooth: hci2: command tx timeout [ 99.873349][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.896624][ T5849] Bluetooth: hci1: command tx timeout [ 99.896722][ T5154] Bluetooth: hci3: command tx timeout [ 99.970386][ T5836] team0: Port device team_slave_1 added [ 99.978984][ T5154] Bluetooth: hci4: command tx timeout [ 100.090041][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.482062][ T5843] team0: Port device team_slave_0 added [ 100.559448][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.559467][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.559503][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.649317][ T5842] team0: Port device team_slave_0 added [ 100.652288][ T5843] team0: Port device team_slave_1 added [ 100.719370][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.719387][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.719407][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.720850][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.720859][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.720872][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.724684][ T5842] team0: Port device team_slave_1 added [ 100.860297][ T5839] team0: Port device team_slave_0 added [ 100.876562][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.876580][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.876604][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.041334][ T5839] team0: Port device team_slave_1 added [ 101.140076][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.140093][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.140116][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.243663][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.243686][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.243710][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.245503][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.245520][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.245544][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.455626][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.455640][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.455655][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.541923][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.541936][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.541950][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.689483][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.689500][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.689524][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.701389][ T5840] hsr_slave_0: entered promiscuous mode [ 101.703118][ T5840] hsr_slave_1: entered promiscuous mode [ 101.826576][ T5154] Bluetooth: hci0: command tx timeout [ 101.840624][ T5836] hsr_slave_0: entered promiscuous mode [ 101.842647][ T5836] hsr_slave_1: entered promiscuous mode [ 101.844143][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 101.844273][ T5836] Cannot create hsr debugfs directory [ 101.898441][ T5154] Bluetooth: hci2: command tx timeout [ 101.976850][ T5154] Bluetooth: hci3: command tx timeout [ 101.976887][ T5154] Bluetooth: hci1: command tx timeout [ 102.066568][ T5154] Bluetooth: hci4: command tx timeout [ 102.183055][ T5843] hsr_slave_0: entered promiscuous mode [ 102.183979][ T5843] hsr_slave_1: entered promiscuous mode [ 102.184582][ T5843] debugfs: 'hsr0' already exists in 'hsr' [ 102.184610][ T5843] Cannot create hsr debugfs directory [ 102.369137][ T5842] hsr_slave_0: entered promiscuous mode [ 102.369970][ T5842] hsr_slave_1: entered promiscuous mode [ 102.370504][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 102.370524][ T5842] Cannot create hsr debugfs directory [ 102.534004][ T5839] hsr_slave_0: entered promiscuous mode [ 102.535388][ T5839] hsr_slave_1: entered promiscuous mode [ 102.537298][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 102.537323][ T5839] Cannot create hsr debugfs directory [ 103.896577][ T5154] Bluetooth: hci0: command tx timeout [ 103.976454][ T5154] Bluetooth: hci2: command tx timeout [ 104.056827][ T5849] Bluetooth: hci3: command tx timeout [ 104.057166][ T5154] Bluetooth: hci1: command tx timeout [ 104.136548][ T5154] Bluetooth: hci4: command tx timeout [ 104.200780][ T5840] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 104.248685][ T5840] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 104.317434][ T5840] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 104.368510][ T5840] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 104.496604][ T5836] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 104.530439][ T5836] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 104.564340][ T5836] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 104.614567][ T5836] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 104.779040][ T5842] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 104.819919][ T5842] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 104.854586][ T5842] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 104.914845][ T5842] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 105.077688][ T5843] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 105.116680][ T5843] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 105.152651][ T5843] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 105.203265][ T5843] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 105.380358][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.414949][ T5839] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.451515][ T5839] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.496157][ T5839] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.542832][ T5839] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.614166][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.678299][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.678428][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.721154][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.747594][ T3603] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.749055][ T3603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.862845][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.920324][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.923510][ T2296] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.923640][ T2296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.993007][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.993174][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.075387][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.094798][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.157923][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.158175][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.228804][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.229067][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.289839][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.350157][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.350372][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.368410][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.420278][ T3589] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.420549][ T3589] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.574899][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.642263][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.642479][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.662104][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.719322][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.721549][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.031749][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.164090][ T5840] veth0_vlan: entered promiscuous mode [ 107.257411][ T5840] veth1_vlan: entered promiscuous mode [ 107.338770][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.428055][ T5836] veth0_vlan: entered promiscuous mode [ 107.484729][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.533251][ T5836] veth1_vlan: entered promiscuous mode [ 107.543515][ T5840] veth0_macvtap: entered promiscuous mode [ 107.608501][ T5840] veth1_macvtap: entered promiscuous mode [ 107.767730][ T5842] veth0_vlan: entered promiscuous mode [ 107.785833][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.792366][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.877882][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.882720][ T5842] veth1_vlan: entered promiscuous mode [ 107.910391][ T5836] veth0_macvtap: entered promiscuous mode [ 107.939898][ T3589] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.945021][ T3589] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.960869][ T3589] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.988339][ T3589] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.994570][ T5836] veth1_macvtap: entered promiscuous mode [ 108.263500][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.295151][ T5842] veth0_macvtap: entered promiscuous mode [ 108.311294][ T5839] veth0_vlan: entered promiscuous mode [ 108.318077][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.364596][ T5842] veth1_macvtap: entered promiscuous mode [ 108.403926][ T2296] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.421552][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.421577][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.421621][ T2296] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.473822][ T5839] veth1_vlan: entered promiscuous mode [ 108.474815][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.500039][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.508581][ T5843] veth0_vlan: entered promiscuous mode [ 108.614505][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.628668][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.628687][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.713428][ T5843] veth1_vlan: entered promiscuous mode [ 108.746945][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.855051][ T3589] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.878613][ T57] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.883867][ T43] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.922011][ T43] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.977498][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.977517][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.058680][ T5839] veth0_macvtap: entered promiscuous mode [ 109.223697][ T5839] veth1_macvtap: entered promiscuous mode [ 109.331629][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.331650][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.354785][ T5843] veth0_macvtap: entered promiscuous mode [ 109.424250][ T5843] veth1_macvtap: entered promiscuous mode [ 109.501808][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.537422][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.537443][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.576204][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.661253][ T2296] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.713785][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.713968][ T2296] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.747985][ T2296] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.800084][ T2296] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.817204][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.817225][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.835834][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.957241][ T67] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.011590][ T67] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.058334][ T67] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.061510][ T67] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.613793][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.613813][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.864675][ T3589] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.864695][ T3589] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.032250][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.032270][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.294292][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.294313][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.767551][ T5982] xt_limit: Overflow, try lower: 271964/0 [ 111.902037][ T5154] Bluetooth: hci4: command tx timeout [ 112.338332][ T5991] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 112.338366][ T5991] CIFS mount error: No usable UNC path provided in device string! [ 112.338366][ T5991] [ 112.338536][ T5991] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 112.509127][ T5998] netdevsim netdevsim3: Direct firmware load for . [ 112.509127][ T5998] failed with error -2 [ 112.509154][ T5998] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 112.509154][ T5998] [ 113.390290][ T6020] netlink: 8 bytes leftover after parsing attributes in process `syz.0.30'. [ 113.477233][ T5923] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 113.672569][ T5923] usb 2-1: Using ep0 maxpacket: 32 [ 113.712720][ T6029] capability: warning: `syz.2.32' uses deprecated v2 capabilities in a way that may be insecure [ 113.716088][ T5923] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 113.716125][ T5923] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 113.716144][ T5923] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 113.716165][ T5923] usb 2-1: config 1 has no interface number 0 [ 113.716219][ T5923] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 113.756409][ T5923] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 113.756462][ T5923] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 113.756484][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.928542][ T5923] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 114.304618][ T6037] /dev/nullb0: Can't open blockdev [ 114.348894][ T5923] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 114.604220][ T6028] usb 2-1: USB disconnect, device number 2 [ 114.632626][ T6028] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 116.227802][ T6081] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 116.795460][ T6096] netlink: 12 bytes leftover after parsing attributes in process `syz.4.63'. [ 116.859790][ T6098] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.64'. [ 117.227972][ T6111] xt_l2tp: missing protocol rule (udp|l2tpip) [ 117.282948][ T6115] netlink: 28 bytes leftover after parsing attributes in process `syz.1.71'. [ 117.283064][ T6115] netlink: 7 bytes leftover after parsing attributes in process `syz.1.71'. [ 117.781741][ T6123] tipc: Started in network mode [ 117.781767][ T6123] tipc: Node identity 4, cluster identity 4711 [ 117.781779][ T6123] tipc: Node number set to 4 [ 117.836432][ T31] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 117.986888][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 117.992516][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 118.011446][ T31] usb 3-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 31 [ 118.011477][ T31] usb 3-1: config 8 interface 0 has no altsetting 0 [ 118.043315][ T31] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 118.043345][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.043364][ T31] usb 3-1: Product: syz [ 118.043377][ T31] usb 3-1: Manufacturer: syz [ 118.043390][ T31] usb 3-1: SerialNumber: syz [ 118.114530][ T6120] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 118.138761][ T6129] nbd: must specify a size in bytes for the device [ 118.397812][ T31] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 118.397879][ T31] usb 3-1: selecting invalid altsetting 0 [ 118.578918][ T31] usb 3-1: USB disconnect, device number 2 [ 118.814211][ T5967] udevd[5967]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 119.296395][ T5924] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 119.449278][ T5924] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 119.449304][ T5924] usb 2-1: config 1 has an invalid descriptor of length 121, skipping remainder of the config [ 119.449323][ T5924] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 119.449350][ T5924] usb 2-1: config 1 has no interface number 1 [ 119.449394][ T5924] usb 2-1: too many endpoints for config 1 interface 2 altsetting 50: 48, using maximum allowed: 30 [ 119.449428][ T5924] usb 2-1: config 1 interface 2 altsetting 50 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 119.449454][ T5924] usb 2-1: config 1 interface 0 has no altsetting 0 [ 119.449470][ T5924] usb 2-1: config 1 interface 2 has no altsetting 1 [ 119.506444][ T5924] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 119.506473][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.506500][ T5924] usb 2-1: Product: syz [ 119.506515][ T5924] usb 2-1: Manufacturer: syz [ 119.506528][ T5924] usb 2-1: SerialNumber: syz [ 119.838943][ T5924] usb 2-1: cannot find UAC_HEADER [ 119.839879][ T5924] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 119.871142][ T5924] usb 2-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 119.871202][ T5924] usb 2-1: MIDIStreaming interface descriptor not found [ 120.004923][ T5924] usb 2-1: USB disconnect, device number 3 [ 120.434087][ T6022] udevd[6022]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 120.637512][ T6187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.104'. [ 120.997767][ T6199] netlink: 84 bytes leftover after parsing attributes in process `syz.0.109'. [ 120.997918][ T6199] Zero length message leads to an empty skb [ 121.168549][ T37] audit: type=1326 audit(1759086716.012:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6202 comm="syz.4.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3313d3eec9 code=0x7ffc0000 [ 121.203118][ T37] audit: type=1326 audit(1759086716.062:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6202 comm="syz.4.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3313d3eec9 code=0x7ffc0000 [ 121.641500][ T6221] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 122.286463][ T1238] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 122.439830][ T1238] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 122.439881][ T1238] usb 5-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 122.439903][ T1238] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.490229][ T1238] usb 5-1: config 0 descriptor?? [ 122.998540][ T1238] asus 0003:0B05:17E0.0001: item fetching failed at offset 2/5 [ 122.999418][ T1238] asus 0003:0B05:17E0.0001: Asus hid parse failed: -22 [ 122.999527][ T1238] asus 0003:0B05:17E0.0001: probe with driver asus failed with error -22 [ 123.114257][ T6257] bridge1: entered promiscuous mode [ 123.114286][ T6257] bridge1: entered allmulticast mode [ 123.145914][ T6257] team0: Port device bridge1 added [ 123.165494][ T6028] usb 5-1: USB disconnect, device number 2 [ 123.386624][ T5923] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 123.550828][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 123.550863][ T5923] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 123.550905][ T5923] usb 4-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 123.550927][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.562942][ T5923] usb 4-1: config 0 descriptor?? [ 123.579046][ T5154] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 123.579436][ T5154] Bluetooth: hci4: Injecting HCI hardware error event [ 123.580976][ T5154] Bluetooth: hci4: hardware error 0x00 [ 123.652566][ T6276] netlink: 'syz.0.143': attribute type 3 has an invalid length. [ 123.652590][ T6276] netlink: 666 bytes leftover after parsing attributes in process `syz.0.143'. [ 124.032235][ T5923] mcp2200 0003:04D8:00DF.0002: item fetching failed at offset 5/7 [ 124.033032][ T5923] mcp2200 0003:04D8:00DF.0002: can't parse reports [ 124.033138][ T5923] mcp2200 0003:04D8:00DF.0002: probe with driver mcp2200 failed with error -22 [ 124.122996][ T6287] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge0 [ 124.305720][ T6028] usb 4-1: USB disconnect, device number 2 [ 124.534337][ T6295] netlink: 4 bytes leftover after parsing attributes in process `syz.2.151'. [ 124.866717][ T6303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.154'. [ 124.866802][ T6303] netlink: 'syz.0.154': attribute type 9 has an invalid length. [ 125.396431][ T6028] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 125.546531][ T6028] usb 4-1: Using ep0 maxpacket: 8 [ 125.549189][ T6028] usb 4-1: config 2 has an invalid interface number: 31 but max is 0 [ 125.549216][ T6028] usb 4-1: config 2 has no interface number 0 [ 125.549265][ T6028] usb 4-1: config 2 interface 31 has no altsetting 0 [ 125.555066][ T6028] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 125.555094][ T6028] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.555112][ T6028] usb 4-1: Product: syz [ 125.555124][ T6028] usb 4-1: Manufacturer: syz [ 125.555137][ T6028] usb 4-1: SerialNumber: syz [ 125.985849][ T5154] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 126.066752][ T6328] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 126.324627][ T6028] ch9200 4-1:2.31: probe with driver ch9200 failed with error -22 [ 126.376959][ T6028] usb 4-1: USB disconnect, device number 3 [ 127.082589][ T6348] process 'syz.3.174' launched '/dev/fd/3/./file0' with NULL argv: empty string added [ 127.146760][ T6350] delete_channel: no stack [ 127.180818][ T6349] delete_channel: no stack [ 127.676449][ T5924] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 127.866451][ T5924] usb 5-1: Using ep0 maxpacket: 16 [ 127.875826][ T5924] usb 5-1: config 0 interface 0 altsetting 220 endpoint 0x81 has an invalid bInterval 135, changing to 11 [ 127.875862][ T5924] usb 5-1: config 0 interface 0 altsetting 220 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 127.875884][ T5924] usb 5-1: config 0 interface 0 has no altsetting 0 [ 127.875928][ T5924] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 127.875950][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.883011][ T5924] usb 5-1: config 0 descriptor?? [ 128.611054][ T5924] input: HID 054c:03d5 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:054C:03D5.0003/input/input6 [ 128.828123][ T6375] veth3: entered promiscuous mode [ 128.887749][ T5924] sony 0003:054C:03D5.0003: input,hidraw0: USB HID v5.f2 Joystick [HID 054c:03d5] on usb-dummy_hcd.4-1/input0 [ 128.979841][ T5924] usb 5-1: USB disconnect, device number 3 [ 129.212107][ T6380] fido_id[6380]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 129.739632][ T1238] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 129.905573][ T1238] usb 2-1: Using ep0 maxpacket: 32 [ 129.914735][ T1238] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 129.914761][ T1238] usb 2-1: config 0 has no interfaces? [ 129.950878][ T1238] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice= 9.57 [ 129.950909][ T1238] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.950929][ T1238] usb 2-1: Product: syz [ 129.950943][ T1238] usb 2-1: Manufacturer: syz [ 129.950956][ T1238] usb 2-1: SerialNumber: syz [ 129.991735][ T1238] usb 2-1: config 0 descriptor?? [ 130.242719][ T5154] Bluetooth: latency 39169 > 499 [ 130.244035][ T6028] usb 2-1: USB disconnect, device number 4 [ 130.394711][ T6410] netlink: 48 bytes leftover after parsing attributes in process `syz.0.200'. [ 132.296437][ T5154] Bluetooth: hci0: command tx timeout [ 132.517040][ T6479] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 133.111090][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.111182][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.197831][ T6493] program syz.2.239 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 133.199964][ T6493] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 133.926455][ T6028] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 134.079239][ T6028] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 134.079266][ T6028] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 134.079284][ T6028] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 134.079301][ T6028] usb 4-1: config 220 has no interface number 2 [ 134.079368][ T6028] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 134.079395][ T6028] usb 4-1: config 220 interface 0 has no altsetting 0 [ 134.079412][ T6028] usb 4-1: config 220 interface 76 has no altsetting 0 [ 134.079430][ T6028] usb 4-1: config 220 interface 1 has no altsetting 0 [ 134.089856][ T6028] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 134.089884][ T6028] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.089912][ T6028] usb 4-1: Product: syz [ 134.089925][ T6028] usb 4-1: Manufacturer: syz [ 134.089938][ T6028] usb 4-1: SerialNumber: syz [ 134.460075][ T6028] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 134.460115][ T6028] usb 4-1: No valid video chain found. [ 134.460269][ T6028] usb 4-1: selecting invalid altsetting 0 [ 134.532994][ T6028] usb 4-1: selecting invalid altsetting 0 [ 134.533033][ T6028] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 134.579076][ T6028] usb 4-1: USB disconnect, device number 4 [ 134.968253][ T5929] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 135.135284][ T5929] usb 5-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 135.135315][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.135334][ T5929] usb 5-1: Product: syz [ 135.135347][ T5929] usb 5-1: Manufacturer: syz [ 135.135361][ T5929] usb 5-1: SerialNumber: syz [ 135.180587][ T5929] usb 5-1: config 0 descriptor?? [ 135.199001][ T5929] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 135.649096][ T5929] input: sonixb as /devices/platform/dummy_hcd.4/usb5/5-1/input/input7 [ 135.868264][ T5924] usb 5-1: USB disconnect, device number 4 [ 136.031266][ T6559] warning: `syz.1.270' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 136.376716][ T5923] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 136.550953][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.550985][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.551023][ T5923] usb 2-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 136.551044][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.580568][ T5923] usb 2-1: config 0 descriptor?? [ 137.053589][ T5923] cypress 0003:04B4:0001.0004: unknown main item tag 0x0 [ 137.053629][ T5923] cypress 0003:04B4:0001.0004: unknown main item tag 0x0 [ 137.053655][ T5923] cypress 0003:04B4:0001.0004: unknown main item tag 0x0 [ 137.053681][ T5923] cypress 0003:04B4:0001.0004: unknown main item tag 0x0 [ 137.053707][ T5923] cypress 0003:04B4:0001.0004: unknown main item tag 0x0 [ 137.053733][ T5923] cypress 0003:04B4:0001.0004: unknown main item tag 0x0 [ 137.053756][ T5923] cypress 0003:04B4:0001.0004: unknown main item tag 0x0 [ 137.060013][ T5923] cypress 0003:04B4:0001.0004: hidraw0: USB HID v0.00 Device [HID 04b4:0001] on usb-dummy_hcd.1-1/input0 [ 137.256825][ T6028] usb 2-1: USB disconnect, device number 5 [ 137.401228][ T6585] fido_id[6585]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 137.946816][ T6602] capability: warning: `syz.0.292' uses 32-bit capabilities (legacy support in use) [ 139.176726][ T6642] mmap: syz.4.310 (6642) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 139.362053][ T6648] xt_l2tp: missing protocol rule (udp|l2tpip) [ 139.908834][ T6658] pim6reg: entered allmulticast mode [ 140.316476][ T5923] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 140.415972][ T6677] delete_channel: no stack [ 140.468920][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 140.468970][ T5923] usb 5-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 140.468993][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.480652][ T5923] usb 5-1: config 0 descriptor?? [ 140.481691][ T6665] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 141.000522][ T5923] belkin 0003:050D:3201.0005: unknown main item tag 0x2 [ 141.000561][ T5923] belkin 0003:050D:3201.0005: unknown main item tag 0x0 [ 141.107027][ T5923] belkin 0003:050D:3201.0005: hiddev0,hidraw0: USB HID v1.01 Device [HID 050d:3201] on usb-dummy_hcd.4-1/input0 [ 141.196366][ T5924] usb 5-1: USB disconnect, device number 5 [ 141.564261][ T6695] fido_id[6695]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 141.796766][ T6028] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 141.806115][ T6707] ======================================================= [ 141.806115][ T6707] WARNING: The mand mount option has been deprecated and [ 141.806115][ T6707] and is ignored by this kernel. Remove the mand [ 141.806115][ T6707] option from the mount to silence this warning. [ 141.806115][ T6707] ======================================================= [ 141.955297][ T6028] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 141.955330][ T6028] usb 2-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 141.955355][ T6028] usb 2-1: config 0 interface 0 has no altsetting 0 [ 141.955386][ T6028] usb 2-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 141.955408][ T6028] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.978815][ T6028] usb 2-1: config 0 descriptor?? [ 142.501354][ T6028] holtek 0003:1241:5015.0006: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.1-1/input0 [ 142.501388][ T6028] holtek 0003:1241:5015.0006: no inputs found [ 142.628026][ T6725] netlink: 16 bytes leftover after parsing attributes in process `syz.0.348'. [ 142.628187][ T6725] netlink: 20 bytes leftover after parsing attributes in process `syz.0.348'. [ 142.663704][ T44] usb 2-1: USB disconnect, device number 6 [ 142.888853][ T6728] fido_id[6728]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 143.766654][ T6028] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 143.780818][ T6755] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.362'. [ 143.780853][ T6755] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 143.780868][ T6755] openvswitch: netlink: Message has 6332 unknown bytes. [ 143.866506][ T5929] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 143.920901][ T6028] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 143.920928][ T6028] usb 2-1: config 0 has no interface number 0 [ 143.920977][ T6028] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 143.921005][ T6028] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.961589][ T6028] usb 2-1: config 0 descriptor?? [ 143.983099][ T6028] usb 2-1: selecting invalid altsetting 1 [ 143.984199][ T6028] dvb_ttusb_budget: ttusb_init_controller: error [ 143.984513][ T6028] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 144.022134][ T5929] usb 5-1: config 0 has an invalid interface number: 128 but max is 0 [ 144.022162][ T5929] usb 5-1: config 0 has no interface number 0 [ 144.022191][ T5929] usb 5-1: config 0 interface 128 has no altsetting 0 [ 144.033458][ T5929] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=95.91 [ 144.033487][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.033506][ T5929] usb 5-1: Product: syz [ 144.033519][ T5929] usb 5-1: Manufacturer: syz [ 144.033532][ T5929] usb 5-1: SerialNumber: syz [ 144.122284][ T5929] usb 5-1: config 0 descriptor?? [ 144.242744][ T5929] radio-si470x 5-1:0.128: could not find interrupt in endpoint [ 144.242819][ T5929] radio-si470x 5-1:0.128: probe with driver radio-si470x failed with error -5 [ 144.243360][ T5929] usbhid 5-1:0.128: couldn't find an input interrupt endpoint [ 144.363712][ T5924] usb 5-1: USB disconnect, device number 6 [ 144.594520][ T6028] DVB: Unable to find symbol cx22700_attach() [ 144.778301][ T6028] DVB: Unable to find symbol tda10046_attach() [ 144.778318][ T6028] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 144.919306][ T44] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 144.929382][ T6028] usb 2-1: USB disconnect, device number 7 [ 145.163397][ T6777] netlink: 277 bytes leftover after parsing attributes in process `syz.1.369'. [ 145.183210][ T44] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 145.183243][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 145.183266][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 145.183288][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 65535, setting to 64 [ 145.186535][ T44] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 145.186563][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.186582][ T44] usb 4-1: Product: syz [ 145.186596][ T44] usb 4-1: Manufacturer: syz [ 145.186609][ T44] usb 4-1: SerialNumber: syz [ 145.203612][ T44] usb 4-1: config 0 descriptor?? [ 145.619538][ T44] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 145.619600][ T44] input input8: Device does not respond to id packet M [ 145.620056][ T44] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 145.620101][ T44] input input8: Device does not respond to id packet P [ 145.620560][ T44] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 145.620601][ T44] input input8: Device does not respond to id packet B [ 145.621046][ T44] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 145.621090][ T44] input input8: Device does not respond to id packet N [ 145.621509][ T44] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 145.635007][ T44] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 145.646376][ T44] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 145.646878][ T44] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 145.663527][ T44] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input8 [ 145.761769][ T44] usb 4-1: USB disconnect, device number 5 [ 146.040849][ T6803] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.375964][ T6811] netlink: 8 bytes leftover after parsing attributes in process `syz.4.386'. [ 146.646476][ T6816] Driver unsupported XDP return value 0 on prog (id 31) dev N/A, expect packet loss! [ 148.387624][ T5848] kernel write not supported for file /sg0 (pid: 5848 comm: kworker/0:3) [ 148.914195][ T6885] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 149.086625][ T6028] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 149.153854][ T6889] netlink: 'syz.3.423': attribute type 8 has an invalid length. [ 149.256654][ T6028] usb 3-1: Using ep0 maxpacket: 8 [ 149.261360][ T6028] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 149.261410][ T6028] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 149.261433][ T6028] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.295125][ T6028] usb 3-1: config 0 descriptor?? [ 149.486427][ T5848] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 149.639810][ T5848] usb 2-1: Using ep0 maxpacket: 16 [ 149.643657][ T5848] usb 2-1: config 0 has an invalid interface number: 224 but max is 0 [ 149.643683][ T5848] usb 2-1: config 0 has no interface number 0 [ 149.643787][ T5848] usb 2-1: config 0 interface 224 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.643815][ T5848] usb 2-1: config 0 interface 224 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 149.643843][ T5848] usb 2-1: config 0 interface 224 has no altsetting 0 [ 149.643967][ T5848] usb 2-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 149.643992][ T5848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.732840][ T5848] usb 2-1: config 0 descriptor?? [ 149.831948][ T6898] vlan2: entered allmulticast mode [ 149.884833][ T6028] corsair 0003:1B1C:1B09.0007: unknown main item tag 0x0 [ 149.884873][ T6028] corsair 0003:1B1C:1B09.0007: unknown main item tag 0x0 [ 149.885455][ T6028] corsair 0003:1B1C:1B09.0007: unknown main item tag 0x0 [ 149.885484][ T6028] corsair 0003:1B1C:1B09.0007: unknown main item tag 0x0 [ 149.885510][ T6028] corsair 0003:1B1C:1B09.0007: unknown main item tag 0x0 [ 149.885778][ T6028] corsair 0003:1B1C:1B09.0007: unknown main item tag 0x0 [ 149.885807][ T6028] corsair 0003:1B1C:1B09.0007: unknown main item tag 0x0 [ 149.885834][ T6028] corsair 0003:1B1C:1B09.0007: unknown main item tag 0x0 [ 149.885861][ T6028] corsair 0003:1B1C:1B09.0007: unknown main item tag 0x0 [ 149.889032][ T6028] corsair 0003:1B1C:1B09.0007: unknown main item tag 0x0 [ 150.002478][ T6028] corsair 0003:1B1C:1B09.0007: hidraw0: USB HID v0.00 Device [HID 1b1c:1b09] on usb-dummy_hcd.2-1/input0 [ 150.127441][ T6028] usb 3-1: USB disconnect, device number 3 [ 150.467443][ T6902] fido_id[6902]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 150.475560][ T44] usb 2-1: USB disconnect, device number 8 [ 150.686455][ T5929] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 150.847508][ T5929] usb 5-1: Using ep0 maxpacket: 16 [ 150.850745][ T5929] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.850776][ T5929] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.850797][ T5929] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 150.850837][ T5929] usb 5-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.00 [ 150.850859][ T5929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.910018][ T5929] usb 5-1: config 0 descriptor?? [ 151.063859][ T6914] vivid-000: disconnect [ 151.076115][ T6913] vivid-000: reconnect [ 151.298087][ T5924] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 151.333753][ T6920] xt_l2tp: missing protocol rule (udp|l2tpip) [ 151.377912][ T37] audit: type=1326 audit(1759086746.242:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6923 comm="syz.0.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99b93deec9 code=0x7ffc0000 [ 151.386475][ T37] audit: type=1326 audit(1759086746.242:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6923 comm="syz.0.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99b93deec9 code=0x7ffc0000 [ 151.386519][ T37] audit: type=1326 audit(1759086746.242:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6923 comm="syz.0.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f99b93deec9 code=0x7ffc0000 [ 151.386550][ T37] audit: type=1326 audit(1759086746.242:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6923 comm="syz.0.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99b93deec9 code=0x7ffc0000 [ 151.386586][ T37] audit: type=1326 audit(1759086746.242:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6923 comm="syz.0.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99b93deec9 code=0x7ffc0000 [ 151.386622][ T37] audit: type=1326 audit(1759086746.242:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6923 comm="syz.0.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7f99b93deec9 code=0x7ffc0000 [ 151.386658][ T37] audit: type=1326 audit(1759086746.242:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6923 comm="syz.0.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99b93deec9 code=0x7ffc0000 [ 151.386693][ T37] audit: type=1326 audit(1759086746.242:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6923 comm="syz.0.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99b93deec9 code=0x7ffc0000 [ 151.390508][ T5929] lg-g15 0003:046D:C227.0009: hidraw0: USB HID v0.00 Device [HID 046d:c227] on usb-dummy_hcd.4-1/input0 [ 151.486566][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.486599][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.486638][ T5924] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 151.486660][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.560324][ T5929] usb 5-1: USB disconnect, device number 7 [ 151.622323][ T5924] usb 3-1: config 0 descriptor?? [ 151.874104][ T6925] fido_id[6925]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 152.091736][ T5924] kone 0003:1E7D:2CED.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.2-1/input0 [ 152.292883][ T44] usb 3-1: USB disconnect, device number 4 [ 152.893413][ T6955] vivid-003: disconnect [ 152.915380][ T6954] vivid-003: reconnect [ 153.776422][ T10] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 153.928900][ T10] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 153.928934][ T10] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 153.928961][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 153.928993][ T10] usb 5-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 153.929015][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.018473][ T10] usb 5-1: config 0 descriptor?? [ 154.036764][ T6975] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 154.360530][ T6987] bridge0: entered promiscuous mode [ 154.373103][ T6987] macsec1: entered promiscuous mode [ 154.519807][ T10] hid-u2fzero 0003:10C4:8ACF.000B: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.4-1/input0 [ 154.522212][ T10] hid-u2fzero 0003:10C4:8ACF.000B: U2F Zero LED initialised [ 154.522450][ T10] hid-u2fzero 0003:10C4:8ACF.000B: U2F Zero RNG initialised [ 154.696069][ T5923] usb 5-1: USB disconnect, device number 8 [ 154.804789][ T6997] fido_id[6997]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 155.127889][ T5916] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 155.289209][ T5916] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.289244][ T5916] usb 4-1: config 0 interface 0 has no altsetting 0 [ 155.289279][ T5916] usb 4-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 155.289301][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.341808][ T5916] usb 4-1: config 0 descriptor?? [ 155.791879][ T5916] lenovo 0003:17EF:6067.000C: item fetching failed at offset 0/2 [ 155.792739][ T5916] lenovo 0003:17EF:6067.000C: hid_parse failed [ 155.792810][ T5916] lenovo 0003:17EF:6067.000C: probe with driver lenovo failed with error -22 [ 155.977010][ T44] usb 4-1: USB disconnect, device number 6 [ 156.521134][ T7036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.489'. [ 156.532525][ T7036] ip6gretap0: entered promiscuous mode [ 156.626688][ T7036] ip6gretap0: left promiscuous mode [ 157.477149][ T7067] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 157.836576][ T1238] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 157.988940][ T1238] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 157.988974][ T1238] usb 2-1: config 0 interface 0 has no altsetting 0 [ 157.989008][ T1238] usb 2-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 157.989030][ T1238] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.001628][ T1238] usb 2-1: config 0 descriptor?? [ 158.002760][ T7073] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 158.525072][ T1238] uclogic 0003:28BD:0078.000D: interface is invalid, ignoring [ 158.645996][ T44] usb 2-1: USB disconnect, device number 9 [ 158.763203][ T37] audit: type=1800 audit(1759086753.592:12): pid=7092 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.514" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 158.825915][ T7090] syz.0.513 (7090) used greatest stack depth: 17144 bytes left [ 159.702957][ T7124] binder_alloc: binder_alloc_mmap_handler: 7123 200000ffc000-200001000000 already mapped failed -16 [ 159.988558][ T7132] netlink: 4 bytes leftover after parsing attributes in process `syz.3.535'. [ 160.834858][ T7164] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.894046][ T7166] netlink: 12 bytes leftover after parsing attributes in process `syz.2.550'. [ 160.894088][ T7166] netlink: 76 bytes leftover after parsing attributes in process `syz.2.550'. [ 161.041641][ T7169] netlink: 'syz.1.551': attribute type 11 has an invalid length. [ 161.041664][ T7169] netlink: 212 bytes leftover after parsing attributes in process `syz.1.551'. [ 161.918804][ T7203] netlink: 'syz.4.568': attribute type 6 has an invalid length. [ 162.234884][ T7213] program syz.0.573 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 162.245671][ T7211] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.497724][ T7221] netlink: 8 bytes leftover after parsing attributes in process `syz.3.576'. [ 164.980644][ T7290] netlink: 'syz.4.608': attribute type 3 has an invalid length. [ 165.606371][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 165.759274][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.759307][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.759369][ T10] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 165.759395][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.817540][ T10] usb 5-1: config 0 descriptor?? [ 166.261177][ T10] hid_parser_main: 2 callbacks suppressed [ 166.261200][ T10] arvo 0003:1E7D:30D4.000E: unknown main item tag 0x0 [ 166.261232][ T10] arvo 0003:1E7D:30D4.000E: unknown main item tag 0x0 [ 166.261260][ T10] arvo 0003:1E7D:30D4.000E: unknown main item tag 0x0 [ 166.261288][ T10] arvo 0003:1E7D:30D4.000E: unknown main item tag 0x0 [ 166.261314][ T10] arvo 0003:1E7D:30D4.000E: unknown main item tag 0x0 [ 166.261341][ T10] arvo 0003:1E7D:30D4.000E: unknown main item tag 0x0 [ 166.261367][ T10] arvo 0003:1E7D:30D4.000E: unknown main item tag 0x0 [ 166.331848][ T10] arvo 0003:1E7D:30D4.000E: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.4-1/input0 [ 166.454492][ T10] arvo 0003:1E7D:30D4.000E: couldn't init struct arvo_device [ 166.454547][ T10] arvo 0003:1E7D:30D4.000E: couldn't install keyboard [ 166.473658][ T10] arvo 0003:1E7D:30D4.000E: probe with driver arvo failed with error -71 [ 166.504583][ T10] usb 5-1: USB disconnect, device number 9 [ 166.671694][ T7336] gretap0: entered promiscuous mode [ 166.684490][ T7336] vlan2: entered promiscuous mode [ 166.741855][ T7329] fido_id[7329]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 166.925811][ T7339] bridge0: port 3(syz_tun) entered blocking state [ 166.930852][ T7339] bridge0: port 3(syz_tun) entered disabled state [ 166.933380][ T7339] syz_tun: entered allmulticast mode [ 166.959075][ T7339] syz_tun: entered promiscuous mode [ 166.967329][ T7339] bridge0: port 3(syz_tun) entered blocking state [ 166.967513][ T7339] bridge0: port 3(syz_tun) entered forwarding state [ 167.906464][ T10] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 168.060888][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 168.060913][ T10] usb 3-1: config 0 has no interface number 0 [ 168.060958][ T10] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 168.060980][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.099210][ T10] usb 3-1: config 0 descriptor?? [ 168.115338][ T10] usb 3-1: selecting invalid altsetting 1 [ 168.115492][ T10] dvb_ttusb_budget: ttusb_init_controller: error [ 168.115505][ T10] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 168.447200][ T10] DVB: Unable to find symbol cx22700_attach() [ 168.538294][ T10] DVB: Unable to find symbol tda10046_attach() [ 168.538308][ T10] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 168.565101][ T10] usb 3-1: USB disconnect, device number 5 [ 169.128471][ T7402] futex_wake_op: syz.0.658 tries to shift op by -1; fix this program [ 169.154985][ T7403] Bluetooth: MGMT ver 1.23 [ 169.449160][ T7415] netlink: 'syz.0.665': attribute type 10 has an invalid length. [ 169.546691][ T7417] netlink: 'syz.0.665': attribute type 10 has an invalid length. [ 169.554225][ T7415] team0: Port device dummy0 added [ 169.632980][ T7417] team0: Port device dummy0 removed [ 169.672658][ T7417] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 169.857857][ T7421] sp0: Synchronizing with TNC [ 171.136448][ T5924] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 171.288734][ T5924] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 171.288767][ T5924] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.288789][ T5924] usb 4-1: config 0 interface 0 has no altsetting 0 [ 171.288822][ T5924] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 171.288843][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.326437][ T44] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 171.359167][ T5924] usb 4-1: config 0 descriptor?? [ 171.487151][ T44] usb 2-1: Using ep0 maxpacket: 16 [ 171.493265][ T44] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.493381][ T44] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.493407][ T44] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.493429][ T44] usb 2-1: config 0 interface 0 has no altsetting 0 [ 171.493463][ T44] usb 2-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 171.493539][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.498917][ T5916] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 171.579476][ T7464] netlink: 'syz.4.688': attribute type 322 has an invalid length. [ 171.596589][ T44] usb 2-1: config 0 descriptor?? [ 171.648361][ T5916] usb 3-1: Using ep0 maxpacket: 8 [ 171.658240][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.658271][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.658310][ T5916] usb 3-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 171.658332][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.672808][ T5916] usb 3-1: config 0 descriptor?? [ 171.921928][ T5924] kovaplus 0003:1E7D:2D50.000F: unknown main item tag 0x0 [ 171.922033][ T5924] kovaplus 0003:1E7D:2D50.000F: unknown main item tag 0x0 [ 171.922063][ T5924] kovaplus 0003:1E7D:2D50.000F: unknown main item tag 0x0 [ 171.989017][ T5924] kovaplus 0003:1E7D:2D50.000F: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.3-1/input0 [ 172.046087][ T5924] usb 4-1: USB disconnect, device number 7 [ 172.091242][ T44] kye 0003:0458:0153.0010: unknown main item tag 0x0 [ 172.091281][ T44] kye 0003:0458:0153.0010: unknown main item tag 0x0 [ 172.091309][ T44] kye 0003:0458:0153.0010: unknown main item tag 0x0 [ 172.091334][ T44] kye 0003:0458:0153.0010: unknown main item tag 0x0 [ 172.091359][ T44] kye 0003:0458:0153.0010: unknown main item tag 0x0 [ 172.091385][ T44] kye 0003:0458:0153.0010: unknown main item tag 0x0 [ 172.091416][ T44] kye 0003:0458:0153.0010: unknown main item tag 0x0 [ 172.157865][ T5916] logitech 0003:046D:C20E.0011: rdesc size test failed for formula gp [ 172.159359][ T5916] logitech 0003:046D:C20E.0011: unbalanced collection at end of report description [ 172.160201][ T5916] logitech 0003:046D:C20E.0011: parse failed [ 172.160298][ T5916] logitech 0003:046D:C20E.0011: probe with driver logitech failed with error -22 [ 172.247445][ T44] kye 0003:0458:0153.0010: hidraw0: USB HID v0.00 Device [HID 0458:0153] on usb-dummy_hcd.1-1/input0 [ 172.295196][ T7471] fido_id[7471]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 172.356354][ T44] usb 2-1: USB disconnect, device number 10 [ 172.385923][ T5916] usb 3-1: USB disconnect, device number 6 [ 172.641074][ T7476] fido_id[7476]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 173.041487][ T7489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.700'. [ 173.041526][ T7489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.700'. [ 173.127270][ T7492] netlink: 'syz.3.701': attribute type 6 has an invalid length. [ 173.189903][ T7495] Bluetooth: MGMT ver 1.23 [ 173.818711][ T7518] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 173.926363][ T5923] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 174.081348][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.081378][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.081414][ T5923] usb 3-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 174.081433][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.138177][ T44] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 174.182102][ T5923] usb 3-1: config 0 descriptor?? [ 174.299951][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 174.299987][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.300075][ T44] usb 4-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 174.300097][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.365151][ T44] usb 4-1: config 0 descriptor?? [ 174.695046][ T5923] cypress 0003:04B4:DE61.0012: hidraw0: USB HID v0.00 Device [HID 04b4:de61] on usb-dummy_hcd.2-1/input0 [ 174.842882][ T44] usb 3-1: USB disconnect, device number 7 [ 174.878396][ T7531] fido_id[7531]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 175.021121][ T5923] usb 4-1: USB disconnect, device number 8 [ 176.287169][ T7562] netlink: 536 bytes leftover after parsing attributes in process `syz.1.733'. [ 178.218995][ T7634] netlink: 'syz.2.765': attribute type 2 has an invalid length. [ 178.428418][ T7643] netlink: 'syz.4.770': attribute type 4 has an invalid length. [ 178.428438][ T7643] netlink: 17 bytes leftover after parsing attributes in process `syz.4.770'. [ 178.492332][ T7641] hsr0: entered promiscuous mode [ 178.492759][ T7641] macsec1: entered promiscuous mode [ 179.086369][ T5916] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 179.239388][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.239435][ T5916] usb 5-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00 [ 179.239458][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.281765][ T5916] usb 5-1: config 0 descriptor?? [ 179.648540][ T7673] overlayfs: missing 'workdir' [ 179.738221][ T5916] kye 0003:0458:501B.0014: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 179.763364][ T5916] kye 0003:0458:501B.0014: hidraw0: USB HID v0.00 Device [HID 0458:501b] on usb-dummy_hcd.4-1/input0 [ 179.763396][ T5916] kye 0003:0458:501B.0014: tablet-enabling feature report not found [ 179.763411][ T5916] kye 0003:0458:501B.0014: tablet enabling failed [ 179.972600][ T5916] usb 5-1: USB disconnect, device number 10 [ 180.160276][ T7681] fido_id[7681]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 180.601159][ T7690] use of bytesused == 0 is deprecated and will be removed in the future, [ 180.601174][ T7690] use the actual size instead. [ 180.878651][ T7671] syz.0.783 (7671): drop_caches: 2 [ 181.180369][ T7706] netlink: 12 bytes leftover after parsing attributes in process `syz.3.798'. [ 181.286426][ T10] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 181.442359][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 181.442711][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 181.442754][ T10] usb 1-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 181.442775][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.444138][ T7716] gtp0: entered promiscuous mode [ 181.516201][ T10] usb 1-1: config 0 descriptor?? [ 181.522326][ T7699] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 181.989628][ T10] hid_parser_main: 1240 callbacks suppressed [ 181.989654][ T10] waltop 0003:172F:0500.0015: unknown main item tag 0x0 [ 181.989686][ T10] waltop 0003:172F:0500.0015: unknown main item tag 0x0 [ 181.989713][ T10] waltop 0003:172F:0500.0015: unknown main item tag 0x0 [ 181.989739][ T10] waltop 0003:172F:0500.0015: unknown main item tag 0x0 [ 181.989765][ T10] waltop 0003:172F:0500.0015: unknown main item tag 0x0 [ 182.005389][ T10] waltop 0003:172F:0500.0015: unknown main item tag 0x0 [ 182.005424][ T10] waltop 0003:172F:0500.0015: unknown main item tag 0x0 [ 182.054583][ T10] waltop 0003:172F:0500.0015: hidraw0: USB HID vff.fa Device [HID 172f:0500] on usb-dummy_hcd.0-1/input0 [ 182.196972][ T44] usb 1-1: USB disconnect, device number 2 [ 182.406511][ T7725] fido_id[7725]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 183.202816][ T37] audit: type=1326 audit(1759086778.052:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7765 comm="syz.0.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99b93deec9 code=0x7ffc0000 [ 183.202865][ T37] audit: type=1326 audit(1759086778.062:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7765 comm="syz.0.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99b93deec9 code=0x7ffc0000 [ 183.226438][ T37] audit: type=1326 audit(1759086778.082:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7765 comm="syz.0.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f99b93deec9 code=0x7ffc0000 [ 183.226656][ T37] audit: type=1326 audit(1759086778.082:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7765 comm="syz.0.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99b93deec9 code=0x7ffc0000 [ 183.227293][ T37] audit: type=1326 audit(1759086778.092:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7765 comm="syz.0.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f99b93deec9 code=0x7ffc0000 [ 183.228937][ T37] audit: type=1326 audit(1759086778.092:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7765 comm="syz.0.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99b93deec9 code=0x7ffc0000 [ 183.832871][ T7789] netlink: 8 bytes leftover after parsing attributes in process `syz.4.837'. [ 184.190553][ T37] audit: type=1326 audit(1759086779.032:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7802 comm="syz.0.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99b93deec9 code=0x7ffc0000 [ 184.190935][ T37] audit: type=1326 audit(1759086779.052:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7802 comm="syz.0.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f99b93deec9 code=0x7ffc0000 [ 184.192077][ T37] audit: type=1326 audit(1759086779.052:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7802 comm="syz.0.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99b93deec9 code=0x7ffc0000 [ 184.192121][ T37] audit: type=1326 audit(1759086779.052:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7802 comm="syz.0.844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99b93deec9 code=0x7ffc0000 [ 184.297929][ T31] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 184.323969][ T7803] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 184.325406][ T7803] team0: Device ipvlan2 is already an upper device of the team interface [ 184.457068][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 184.465107][ T31] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 184.465136][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.465155][ T31] usb 2-1: Product: syz [ 184.465168][ T31] usb 2-1: Manufacturer: syz [ 184.465182][ T31] usb 2-1: SerialNumber: syz [ 184.509708][ T31] usb 2-1: config 0 descriptor?? [ 184.570986][ T7807] netlink: 4 bytes leftover after parsing attributes in process `syz.4.846'. [ 184.585841][ T7808] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.589085][ T7808] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.725965][ T31] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 185.130828][ T31] usb write operation failed. (-71) [ 185.161672][ T31] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 185.163401][ T31] dvbdev: DVB: registering new adapter (Terratec H7) [ 185.163456][ T31] usb 2-1: media controller created [ 185.190642][ T31] usb read operation failed. (-71) [ 185.193594][ T31] usb write operation failed. (-71) [ 185.210547][ T31] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 185.250823][ T31] usb 2-1: USB disconnect, device number 11 [ 185.322945][ T7829] netlink: 19 bytes leftover after parsing attributes in process `syz.0.857'. [ 185.426933][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 185.585822][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.585848][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 185.589637][ T10] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 185.589665][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 185.589682][ T10] usb 4-1: SerialNumber: syz [ 185.850826][ T10] usb 4-1: 0:2 : does not exist [ 185.945770][ T10] usb 4-1: USB disconnect, device number 9 [ 186.113741][ T5896] udevd[5896]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 187.216383][ T7890] tmpfs: Bad value for 'mpol' [ 187.494701][ T7902] netlink: 12 bytes leftover after parsing attributes in process `syz.2.887'. [ 187.690039][ T5923] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 187.870709][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.870762][ T5923] usb 2-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 187.870785][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.936467][ T5923] usb 2-1: config 0 descriptor?? [ 188.362715][ T5923] zeroplus 0003:0C12:0005.0016: report_id 0 is invalid [ 188.362738][ T5923] zeroplus 0003:0C12:0005.0016: item 0 0 1 8 parsing failed [ 188.363525][ T5923] zeroplus 0003:0C12:0005.0016: parse failed [ 188.363593][ T5923] zeroplus 0003:0C12:0005.0016: probe with driver zeroplus failed with error -22 [ 188.569451][ T5923] usb 2-1: USB disconnect, device number 12 [ 189.313770][ T7958] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 189.344850][ T7962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.916'. [ 189.974792][ T7985] ALSA: mixer_oss: invalid OSS volume 'ިc">#a6\9/[\' [ 189.974900][ T7985] ALSA: mixer_oss: invalid OSS volume 'F4|׃|t@' [ 189.974951][ T7985] ALSA: mixer_oss: invalid OSS volume 'GJJ³ 1 [ 224.514860][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 224.524763][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 224.527536][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 224.545856][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 228.294927][ T8523] chnl_net:caif_netlink_parms(): no params data found [ 233.456447][ T44] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 233.646513][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 233.646544][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.646580][ T44] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 233.646601][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.714850][ T44] usb 4-1: config 0 descriptor?? [ 234.197952][ T44] isku 0003:1E7D:319C.001B: unknown main item tag 0x0 [ 234.197993][ T44] isku 0003:1E7D:319C.001B: unknown main item tag 0x0 [ 234.228816][ T44] isku 0003:1E7D:319C.001B: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.3-1/input0 [ 234.381516][ T44] isku 0003:1E7D:319C.001B: couldn't init struct isku_device [ 234.381572][ T44] isku 0003:1E7D:319C.001B: couldn't install keyboard [ 234.408063][ T44] isku 0003:1E7D:319C.001B: probe with driver isku failed with error -71 [ 234.459616][ T44] usb 4-1: USB disconnect, device number 12 [ 234.628711][ T8588] fido_id[8588]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 241.044387][ T59] Bluetooth: hci5: command tx timeout [ 241.836487][ T44] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 241.990101][ T44] usb 4-1: Using ep0 maxpacket: 8 [ 242.007214][ T44] usb 4-1: unable to get BOS descriptor or descriptor too short [ 242.009185][ T44] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 242.009214][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 242.009238][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 242.009259][ T44] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 242.009281][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 242.009301][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 242.009415][ T44] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 242.138196][ T44] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 242.138227][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.138246][ T44] usb 4-1: Product: syz [ 242.138260][ T44] usb 4-1: Manufacturer: syz [ 242.138273][ T44] usb 4-1: SerialNumber: syz [ 242.196384][ T44] usb 4-1: config 0 descriptor?? [ 242.197936][ T8608] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 242.255065][ T44] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 242.738835][ T44] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 242.826695][ T44] usb 4-1: USB disconnect, device number 13 [ 243.085126][ T8611] udevd[8611]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 243.107262][ T5844] Bluetooth: hci5: command tx timeout [ 243.171987][ T59] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 243.215458][ T59] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 243.230714][ T59] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 243.232972][ T59] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 243.246668][ T59] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 245.176672][ T5844] Bluetooth: hci5: command tx timeout [ 245.337388][ T5844] Bluetooth: hci6: command tx timeout [ 247.259974][ T5851] Bluetooth: hci5: command tx timeout [ 247.416496][ T5851] Bluetooth: hci6: command tx timeout [ 247.456403][ T5923] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 247.654791][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.654841][ T5923] usb 5-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 247.654863][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.693897][ T5923] usb 5-1: config 0 descriptor?? [ 248.195192][ T5923] hid_mf 0003:0079:1846.001C: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.4-1/input0 [ 248.195225][ T5923] hid_mf 0003:0079:1846.001C: Invalid report, this should never happen! [ 248.195239][ T5923] hid_mf 0003:0079:1846.001C: Force feedback init failed. [ 248.408563][ T31] usb 5-1: USB disconnect, device number 13 [ 248.612205][ T8630] fido_id[8630]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 248.676477][ T8632] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1217'. [ 249.506613][ T5851] Bluetooth: hci6: command tx timeout [ 249.620002][ T8644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1223'. [ 251.576823][ T5851] Bluetooth: hci6: command tx timeout [ 256.025072][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.025150][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.247850][ T5844] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 260.280373][ T5844] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 260.281582][ T5844] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 260.282819][ T5844] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 260.283684][ T5844] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 261.680334][ T8523] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.697161][ T8523] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.697411][ T8523] bridge_slave_0: entered allmulticast mode [ 261.740531][ T8523] bridge_slave_0: entered promiscuous mode [ 261.796439][ T8523] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.796590][ T8523] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.797161][ T8523] bridge_slave_1: entered allmulticast mode [ 261.843888][ T8523] bridge_slave_1: entered promiscuous mode [ 262.379180][ T5844] Bluetooth: hci7: command tx timeout [ 264.456479][ T5844] Bluetooth: hci7: command tx timeout [ 266.536705][ T5844] Bluetooth: hci7: command tx timeout [ 268.616749][ T5844] Bluetooth: hci7: command tx timeout [ 281.949272][ T5851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 281.971946][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 281.975969][ T5851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 281.993030][ T5851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 281.994140][ T5851] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 284.136704][ T5851] Bluetooth: hci4: command tx timeout [ 284.193361][ T5844] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 284.212621][ T5844] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 284.223356][ T5844] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 284.260087][ T5844] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 284.260964][ T5844] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 285.714058][ T5844] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 285.737753][ T5844] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 285.742878][ T5844] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 285.744125][ T5844] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 285.744904][ T5844] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 286.216591][ T5844] Bluetooth: hci4: command tx timeout [ 286.376617][ T5844] Bluetooth: hci8: command tx timeout [ 287.896579][ T5844] Bluetooth: hci9: command tx timeout [ 288.296482][ T5844] Bluetooth: hci4: command tx timeout [ 288.466608][ T5844] Bluetooth: hci8: command tx timeout [ 289.976491][ T5844] Bluetooth: hci9: command tx timeout [ 290.386572][ T5844] Bluetooth: hci4: command tx timeout [ 290.536735][ T5844] Bluetooth: hci8: command tx timeout [ 292.056625][ T5844] Bluetooth: hci9: command tx timeout [ 292.616539][ T5844] Bluetooth: hci8: command tx timeout [ 294.136969][ T5844] Bluetooth: hci9: command tx timeout [ 302.779115][ T5851] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 302.800737][ T5851] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 302.801935][ T5851] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 302.803153][ T5851] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 302.803939][ T5851] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 304.178847][ T8668] wireguard0: entered promiscuous mode [ 304.214476][ T8668] wireguard0: entered allmulticast mode [ 304.936976][ T5851] Bluetooth: hci10: command tx timeout [ 307.016560][ T5851] Bluetooth: hci10: command tx timeout [ 309.096532][ T5851] Bluetooth: hci10: command tx timeout [ 311.188198][ T5851] Bluetooth: hci10: command tx timeout [ 317.651445][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.651522][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.675948][ T5844] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 320.702268][ T5844] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 320.703580][ T5844] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 320.705227][ T5844] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 320.736697][ T5844] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 322.856414][ T5844] Bluetooth: hci11: command tx timeout [ 324.936484][ T5844] Bluetooth: hci11: command tx timeout [ 327.016642][ T5844] Bluetooth: hci11: command tx timeout [ 329.098087][ T5844] Bluetooth: hci11: command tx timeout [ 343.057912][ T5851] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 343.077614][ T5851] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 343.078863][ T5851] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 343.080028][ T5851] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 343.088577][ T5851] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 345.578548][ T59] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 345.607330][ T59] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 345.612087][ T59] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 345.688028][ T59] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 345.689331][ T59] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 346.323868][ T5844] Bluetooth: hci12: command tx timeout [ 346.668529][ T59] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 346.686219][ T59] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 346.689646][ T59] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 346.690969][ T59] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 346.726455][ T59] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 347.582919][ T8706] chnl_net:caif_netlink_parms(): no params data found [ 347.739299][ T8698] chnl_net:caif_netlink_parms(): no params data found [ 347.765297][ T8688] chnl_net:caif_netlink_parms(): no params data found [ 348.378161][ T59] Bluetooth: hci12: command tx timeout [ 348.378604][ T59] Bluetooth: hci13: command tx timeout [ 350.456897][ T5851] Bluetooth: hci13: command tx timeout [ 350.456930][ T5851] Bluetooth: hci12: command tx timeout [ 352.536537][ T59] Bluetooth: hci12: command tx timeout [ 352.536569][ T59] Bluetooth: hci13: command tx timeout [ 354.616891][ T5851] Bluetooth: hci13: command tx timeout [ 360.219786][ T5844] Bluetooth: hci14: command tx timeout [ 360.525440][ T8674] bridge0: port 3(syz_tun) entered disabled state [ 362.296591][ T5844] Bluetooth: hci14: command tx timeout [ 363.515941][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 363.535279][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 363.543777][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 363.545075][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 363.573962][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 364.386709][ T59] Bluetooth: hci14: command tx timeout [ 365.576472][ T59] Bluetooth: hci6: command 0x0406 tx timeout [ 366.466647][ T59] Bluetooth: hci14: command tx timeout [ 369.895570][ T8674] syz_tun (unregistering): left allmulticast mode [ 369.895604][ T8674] syz_tun (unregistering): left promiscuous mode [ 369.897969][ T8674] bridge0: port 3(syz_tun) entered disabled state [ 370.062663][ T5844] Bluetooth: hci0: command tx timeout [ 372.136662][ T5851] Bluetooth: hci0: command tx timeout [ 374.226689][ T5851] Bluetooth: hci0: command tx timeout [ 375.656787][ T38] INFO: task syz.0.1146:8452 blocked for more than 143 seconds. [ 375.656824][ T38] Not tainted syzkaller #0 [ 375.656834][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 375.656842][ T38] task:syz.0.1146 state:D stack:25128 pid:8452 tgid:8452 ppid:5839 task_flags:0x400040 flags:0x00004006 [ 375.656912][ T38] Call Trace: [ 375.656918][ T38] [ 375.656933][ T38] __schedule+0x16f3/0x4c20 [ 375.656990][ T38] ? __lock_acquire+0xab9/0xd20 [ 375.657014][ T38] ? __pfx___schedule+0x10/0x10 [ 375.657054][ T38] ? schedule+0x91/0x360 [ 375.657081][ T38] schedule+0x165/0x360 [ 375.657106][ T38] schedule_timeout+0x9a/0x270 [ 375.657129][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 375.657164][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 375.657187][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 375.657209][ T38] ? wait_for_completion+0x267/0x5d0 [ 375.657235][ T38] wait_for_completion+0x2bf/0x5d0 [ 375.657273][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 375.657303][ T38] ? __init_swait_queue_head+0xa9/0x150 [ 375.657329][ T38] rcu_barrier+0x463/0x570 [ 375.657355][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 375.657381][ T38] netdev_run_todo+0x327/0xea0 [ 375.657404][ T38] ? __pfx_netif_state_change+0x10/0x10 [ 375.657427][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 375.657443][ T38] ? kasan_quarantine_put+0xdd/0x220 [ 375.657463][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 375.657496][ T38] ? netdev_state_change+0x1ca/0x220 [ 375.657520][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 375.657543][ T38] tun_chr_close+0x13f/0x1c0 [ 375.657569][ T38] __fput+0x45b/0xa80 [ 375.657599][ T38] task_work_run+0x1d1/0x260 [ 375.657621][ T38] ? __pfx_task_work_run+0x10/0x10 [ 375.657641][ T38] ? exit_to_user_mode_loop+0x40/0x110 [ 375.657664][ T38] exit_to_user_mode_loop+0xec/0x110 [ 375.657685][ T38] do_syscall_64+0x2bd/0x3b0 [ 375.657700][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 375.657723][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.657740][ T38] ? clear_bhb_loop+0x60/0xb0 [ 375.657760][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.657784][ T38] RIP: 0033:0x7f99b93deec9 [ 375.657803][ T38] RSP: 002b:00007fff53eb6878 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 375.657822][ T38] RAX: 0000000000000000 RBX: 00000000000329f8 RCX: 00007f99b93deec9 [ 375.657834][ T38] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 375.657845][ T38] RBP: 00007f99b9637da0 R08: 0000000000000001 R09: 0000000353eb6b6f [ 375.657857][ T38] R10: 0000001b30520000 R11: 0000000000000246 R12: 00007f99b9635fac [ 375.657870][ T38] R13: 00007f99b9635fa0 R14: ffffffffffffffff R15: 00007fff53eb6990 [ 375.657907][ T38] [ 375.657917][ T38] INFO: task syz.2.1181:8535 blocked for more than 143 seconds. [ 375.657929][ T38] Not tainted syzkaller #0 [ 375.657939][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 375.657947][ T38] task:syz.2.1181 state:D stack:25128 pid:8535 tgid:8535 ppid:5840 task_flags:0x400040 flags:0x00004006 [ 375.657988][ T38] Call Trace: [ 375.657994][ T38] [ 375.658006][ T38] __schedule+0x16f3/0x4c20 [ 375.658037][ T38] ? sched_clock+0x3f/0x60 [ 375.658058][ T38] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 375.658090][ T38] ? __pfx___schedule+0x10/0x10 [ 375.658137][ T38] rt_mutex_schedule+0x77/0xf0 [ 375.658155][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 375.658191][ T38] ? rt_mutex_slowlock_block+0x351/0x6d0 [ 375.658216][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 375.658240][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 375.658262][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 375.658294][ T38] ? rcu_barrier+0x4c/0x570 [ 375.658320][ T38] ? rt_mutex_slowunlock+0x493/0x8a0 [ 375.658345][ T38] ? rcu_barrier+0x4c/0x570 [ 375.658361][ T38] mutex_lock_nested+0x16a/0x1d0 [ 375.658381][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 375.658406][ T38] rcu_barrier+0x4c/0x570 [ 375.658435][ T38] kvm_mmu_uninit_vm+0x53/0x90 [ 375.658455][ T38] kvm_arch_destroy_vm+0x23d/0x280 [ 375.658480][ T38] kvm_put_kvm+0xf8e/0x1670 [ 375.658510][ T38] ? __pfx_kvm_vm_release+0x10/0x10 [ 375.658532][ T38] kvm_vm_release+0x46/0x50 [ 375.658552][ T38] __fput+0x45b/0xa80 [ 375.658582][ T38] task_work_run+0x1d1/0x260 [ 375.658604][ T38] ? __pfx_task_work_run+0x10/0x10 [ 375.658628][ T38] ? exit_to_user_mode_loop+0x40/0x110 [ 375.658654][ T38] exit_to_user_mode_loop+0xec/0x110 [ 375.658681][ T38] do_syscall_64+0x2bd/0x3b0 [ 375.658698][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 375.658721][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.658738][ T38] ? clear_bhb_loop+0x60/0xb0 [ 375.658760][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.658777][ T38] RIP: 0033:0x7f9068a0eec9 [ 375.658792][ T38] RSP: 002b:00007ffd842f5838 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 375.658809][ T38] RAX: 0000000000000000 RBX: 00007f9068c67da0 RCX: 00007f9068a0eec9 [ 375.658822][ T38] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 375.658832][ T38] RBP: 00007f9068c67da0 R08: 00000000000013c4 R09: 00000003842f5b2f [ 375.658845][ T38] R10: 00000000005fbeb4 R11: 0000000000000246 R12: 00000000000376b5 [ 375.658856][ T38] R13: 00007f9068c66090 R14: ffffffffffffffff R15: 00007ffd842f5950 [ 375.658893][ T38] [ 375.658922][ T38] [ 375.658922][ T38] Showing all locks held in the system: [ 375.658931][ T38] 7 locks held by ktimers/0/16: [ 375.658944][ T38] 1 lock held by khungtaskd/38: [ 375.658954][ T38] #0: ffffffff8d9a8dc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 375.658997][ T38] 3 locks held by kworker/u8:2/43: [ 375.659007][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 375.659053][ T38] #1: ffffc90000b47bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 375.659097][ T38] #2: ffffffff8ecd38b8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 375.659139][ T38] 3 locks held by kworker/1:1/44: [ 375.659148][ T38] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 375.659192][ T38] #1: ffffc90000b57bc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 375.659235][ T38] #2: ffffffff8ecd38b8 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 375.659301][ T38] 3 locks held by kworker/u8:11/3603: [ 375.659311][ T38] #0: ffff88814d0eb938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 375.659355][ T38] #1: ffffc9000db5fbc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 375.659400][ T38] #2: ffffffff8ecd38b8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 375.659446][ T38] 2 locks held by getty/5593: [ 375.659455][ T38] #0: ffff88823bf7a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 375.659496][ T38] #1: ffffc90003e7e2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 375.659545][ T38] 3 locks held by kworker/1:3/5923: [ 375.659554][ T38] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 375.659598][ T38] #1: ffffc900050efbc0 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 375.659641][ T38] #2: ffffffff8d9ae770 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 375.659684][ T38] 1 lock held by syz.0.1146/8452: [ 375.659693][ T38] #0: ffffffff8d9ae770 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 375.659734][ T38] 1 lock held by syz-executor/8523: [ 375.659744][ T38] #0: ffffffff8ecd38b8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 375.659790][ T38] 1 lock held by syz.2.1181/8535: [ 375.659800][ T38] #0: ffffffff8d9ae770 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 375.659842][ T38] 2 locks held by syz-executor/8613: [ 375.659852][ T38] #0: ffffffff8ecc69a0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 375.659902][ T38] #1: ffffffff8ecd38b8 (rtnl_mutex){+.+.}-{4:4}, at: fib_net_exit_batch+0x22/0xf0 [ 375.659946][ T38] 1 lock held by syz.3.1212/8646: [ 375.659956][ T38] #0: ffffffff8d9ae770 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 375.659995][ T38] 2 locks held by syz-executor/8655: [ 375.660004][ T38] #0: ffffffff8ecc69a0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 375.660048][ T38] #1: ffffffff8ecd38b8 (rtnl_mutex){+.+.}-{4:4}, at: fib_net_exit_batch+0x22/0xf0 [ 375.660090][ T38] 2 locks held by syz.4.1229/8668: [ 375.660100][ T38] #0: ffffffff8f1d7be8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 375.660150][ T38] #1: ffffffff8d9ae770 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 375.660191][ T38] 1 lock held by syz.1.1231/8674: [ 375.660201][ T38] #0: ffffffff8ecd38b8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 375.660246][ T38] 2 locks held by syz-executor/8681: [ 375.660256][ T38] #0: ffffffff8ecc69a0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 375.660298][ T38] #1: ffffffff8ecd38b8 (rtnl_mutex){+.+.}-{4:4}, at: mpls_net_exit+0x79/0x270 [ 375.660339][ T38] 1 lock held by syz-executor/8684: [ 375.660349][ T38] #0: ffffffff8ecd38b8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 375.660394][ T38] 2 locks held by syz-executor/8688: [ 375.660404][ T38] #0: ffffffff8e43b960 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 375.660459][ T38] #1: ffffffff8ecd38b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 375.660507][ T38] 2 locks held by syz-executor/8698: [ 375.660517][ T38] #0: ffffffff8e43b960 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 375.660567][ T38] #1: ffffffff8ecd38b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 375.660609][ T38] 2 locks held by syz-executor/8706: [ 375.660619][ T38] #0: ffffffff8f1d7be8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 375.660668][ T38] #1: ffffffff8ecd38b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 375.660713][ T38] 1 lock held by syz-executor/8716: [ 375.660723][ T38] #0: ffffffff8ecd38b8 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_newaddr+0x5b7/0xd20 [ 375.660768][ T38] 2 locks held by syz-executor/8720: [ 375.660778][ T38] #0: ffffffff8ecc69a0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 375.660821][ T38] #1: ffffffff8ecd38b8 (rtnl_mutex){+.+.}-{4:4}, at: register_netdev+0x18/0x60 [ 375.660862][ T38] 1 lock held by syz-executor/8729: [ 375.660872][ T38] #0: ffffffff8ecd38b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 375.660923][ T38] [ 375.660928][ T38] ============================================= [ 375.660928][ T38] [ 375.660945][ T38] NMI backtrace for cpu 1 [ 375.660974][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 375.661021][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 375.661045][ T38] Call Trace: [ 375.661061][ T38] [ 375.661077][ T38] dump_stack_lvl+0x189/0x250 [ 375.661141][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 375.661163][ T38] ? __pfx__printk+0x10/0x10 [ 375.661194][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 375.661219][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 375.661242][ T38] ? __pfx__printk+0x10/0x10 [ 375.661264][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 375.661288][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 375.661311][ T38] watchdog+0xf93/0xfe0 [ 375.661337][ T38] ? watchdog+0x1de/0xfe0 [ 375.661363][ T38] kthread+0x711/0x8a0 [ 375.661389][ T38] ? __pfx_watchdog+0x10/0x10 [ 375.661409][ T38] ? __pfx_kthread+0x10/0x10 [ 375.661436][ T38] ? __pfx_kthread+0x10/0x10 [ 375.661460][ T38] ret_from_fork+0x436/0x7d0 [ 375.661483][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 375.661510][ T38] ? __switch_to_asm+0x39/0x70 [ 375.661525][ T38] ? __switch_to_asm+0x33/0x70 [ 375.661540][ T38] ? __pfx_kthread+0x10/0x10 [ 375.661564][ T38] ret_from_fork_asm+0x1a/0x30 [ 375.661595][ T38] [ 375.661601][ T38] Sending NMI from CPU 1 to CPUs 0: [ 375.661627][ C0] NMI backtrace for cpu 0 [ 375.661640][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 375.661657][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 375.661666][ C0] RIP: 0010:unwind_next_frame+0xb4c/0x2390 [ 375.661688][ C0] Code: 66 10 48 b8 00 00 00 00 00 fc ff df 48 8b 4c 24 20 0f b6 04 01 84 c0 0f 85 85 13 00 00 41 83 3e 00 0f 95 c0 49 39 df 0f 96 c1 <20> c1 49 39 dc 0f 97 c0 20 c8 3c 01 75 18 48 8d 43 08 4c 39 f8 0f [ 375.661699][ C0] RSP: 0018:ffffc90000156678 EFLAGS: 00000293 [ 375.661713][ C0] RAX: 0000000000000001 RBX: ffffc900001573f8 RCX: 1ffff9200002ac01 [ 375.661724][ C0] RDX: ffffffff902a825c RSI: 0000000000000002 RDI: ffffffff8b621620 [ 375.661734][ C0] RBP: 1ffff9200002acea R08: 0000000000000001 R09: ffffffff8172c165 [ 375.661745][ C0] R10: ffffc90000156798 R11: ffffffff81aaf080 R12: ffffc90000158000 [ 375.661756][ C0] R13: 1ffff9200002aceb R14: ffffc90000156748 R15: ffffc90000150000 [ 375.661767][ C0] FS: 0000000000000000(0000) GS:ffff8881268bc000(0000) knlGS:0000000000000000 [ 375.661780][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 375.661790][ C0] CR2: 00007f0f1d3effd1 CR3: 000000003cd62000 CR4: 00000000003526f0 [ 375.661804][ C0] Call Trace: [ 375.661810][ C0] [ 375.661819][ C0] ? unwind_next_frame+0xa5/0x2390 [ 375.661838][ C0] ? nft_do_chain+0x40c/0x1920 [ 375.661854][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 375.661870][ C0] arch_stack_walk+0x11c/0x150 [ 375.661891][ C0] ? nft_do_chain+0x40c/0x1920 [ 375.661908][ C0] stack_trace_save+0x9c/0xe0 [ 375.661923][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 375.661943][ C0] ref_tracker_alloc+0x195/0x450 [ 375.661964][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 375.661982][ C0] ? dst_init+0xd9/0x450 [ 375.661996][ C0] ? dst_alloc+0x12a/0x170 [ 375.662090][ C0] ? ip_route_output_key_hash_rcu+0x1560/0x23e0 [ 375.662115][ C0] ? ip_route_output_key_hash+0x1b9/0x2e0 [ 375.662130][ C0] ? ip_route_output_flow+0x2a/0x150 [ 375.662143][ C0] ? ip_route_me_harder+0x6d2/0x1030 [ 375.662170][ C0] ? synproxy_send_tcp+0x359/0x6c0 [ 375.662188][ C0] ? synproxy_send_client_synack+0x8bb/0xe20 [ 375.662206][ C0] ? nft_synproxy_eval_v4+0x36e/0x560 [ 375.662221][ C0] ? nft_synproxy_do_eval+0x345/0x570 [ 375.662235][ C0] ? nft_do_chain+0x40c/0x1920 [ 375.662255][ C0] ? dst_alloc+0x105/0x170 [ 375.662270][ C0] ? dst_alloc+0x105/0x170 [ 375.662285][ C0] dst_init+0xd9/0x450 [ 375.662303][ C0] dst_alloc+0x12a/0x170 [ 375.662318][ C0] ip_route_output_key_hash_rcu+0x1560/0x23e0 [ 375.662339][ C0] ? ip_route_output_key_hash+0xde/0x2e0 [ 375.662355][ C0] ip_route_output_key_hash+0x1b9/0x2e0 [ 375.662371][ C0] ? __lock_acquire+0xab9/0xd20 [ 375.662389][ C0] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 375.662409][ C0] ? ip_route_me_harder+0x4ad/0x1030 [ 375.662428][ C0] ip_route_output_flow+0x2a/0x150 [ 375.662442][ C0] ? ip_route_me_harder+0x6c0/0x1030 [ 375.662460][ C0] ip_route_me_harder+0x6d2/0x1030 [ 375.662482][ C0] ? __pfx_ip_route_me_harder+0x10/0x10 [ 375.662513][ C0] synproxy_send_tcp+0x359/0x6c0 [ 375.662536][ C0] synproxy_send_client_synack+0x8bb/0xe20 [ 375.662562][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 375.662581][ C0] ? nft_synproxy_do_eval+0x218/0x570 [ 375.662596][ C0] ? synproxy_pernet+0x45/0x270 [ 375.662614][ C0] nft_synproxy_eval_v4+0x36e/0x560 [ 375.662633][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 375.662649][ C0] ? nf_ip_checksum+0x13c/0x510 [ 375.662667][ C0] nft_synproxy_do_eval+0x345/0x570 [ 375.662685][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 375.662700][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 375.662725][ C0] nft_do_chain+0x40c/0x1920 [ 375.662747][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 375.662776][ C0] ? try_to_take_rt_mutex+0x840/0xb00 [ 375.662798][ C0] nft_do_chain_inet+0x25d/0x340 [ 375.662814][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 375.662829][ C0] ? __lock_acquire+0xab9/0xd20 [ 375.662851][ C0] ? NF_HOOK+0x9a/0x3a0 [ 375.662869][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 375.662884][ C0] nf_hook_slow+0xc2/0x220 [ 375.662905][ C0] NF_HOOK+0x206/0x3a0 [ 375.662925][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 375.662943][ C0] ? NF_HOOK+0x9a/0x3a0 [ 375.662960][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 375.662975][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 375.662995][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 375.663014][ C0] ? skb_dst+0x4f/0xd0 [ 375.663031][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 375.663051][ C0] NF_HOOK+0x30c/0x3a0 [ 375.663069][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 375.663087][ C0] ? NF_HOOK+0x9a/0x3a0 [ 375.663104][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 375.663123][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 375.663145][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 375.663167][ C0] __netif_receive_skb+0x143/0x380 [ 375.663184][ C0] ? rt_spin_unlock+0x65/0x80 [ 375.663203][ C0] ? process_backlog+0x27b/0x900 [ 375.663220][ C0] process_backlog+0x31e/0x900 [ 375.663244][ C0] __napi_poll+0xb3/0x540 [ 375.663263][ C0] net_rx_action+0x707/0xe00 [ 375.663280][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 375.663307][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 375.663342][ C0] handle_softirqs+0x22c/0x710 [ 375.663363][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 375.663384][ C0] run_ktimerd+0xcf/0x190 [ 375.663402][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 375.663419][ C0] ? schedule+0x91/0x360 [ 375.663441][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 375.663457][ C0] smpboot_thread_fn+0x542/0xa60 [ 375.663474][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 375.663496][ C0] kthread+0x711/0x8a0 [ 375.663520][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 375.663537][ C0] ? __pfx_kthread+0x10/0x10 [ 375.663559][ C0] ? __pfx_kthread+0x10/0x10 [ 375.663578][ C0] ret_from_fork+0x436/0x7d0 [ 375.663597][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 375.663617][ C0] ? __switch_to_asm+0x39/0x70 [ 375.663631][ C0] ? __switch_to_asm+0x33/0x70 [ 375.663644][ C0] ? __pfx_kthread+0x10/0x10 [ 375.663663][ C0] ret_from_fork_asm+0x1a/0x30 [ 375.663685][ C0] [ 375.664636][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 375.664654][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 375.664675][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 375.664686][ T38] Call Trace: [ 375.664694][ T38] [ 375.664702][ T38] dump_stack_lvl+0x99/0x250 [ 375.664728][ T38] ? __asan_memcpy+0x40/0x70 [ 375.664747][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 375.664770][ T38] ? __pfx__printk+0x10/0x10 [ 375.664807][ T38] vpanic+0x281/0x750 [ 375.664834][ T38] ? __pfx_vpanic+0x10/0x10 [ 375.664854][ T38] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 375.664872][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 375.664913][ T38] panic+0xb9/0xc0 [ 375.664936][ T38] ? __pfx_panic+0x10/0x10 [ 375.664961][ T38] ? irq_work_queue+0xc3/0x140 [ 375.664986][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 375.665010][ T38] watchdog+0xfd2/0xfe0 [ 375.665037][ T38] ? watchdog+0x1de/0xfe0 [ 375.665063][ T38] kthread+0x711/0x8a0 [ 375.665090][ T38] ? __pfx_watchdog+0x10/0x10 [ 375.665110][ T38] ? __pfx_kthread+0x10/0x10 [ 375.665138][ T38] ? __pfx_kthread+0x10/0x10 [ 375.665161][ T38] ret_from_fork+0x436/0x7d0 [ 375.665185][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 375.665210][ T38] ? __switch_to_asm+0x39/0x70 [ 375.665225][ T38] ? __switch_to_asm+0x33/0x70 [ 375.665240][ T38] ? __pfx_kthread+0x10/0x10 [ 375.665264][ T38] ret_from_fork_asm+0x1a/0x30 [ 375.665296][ T38] [ 375.665447][ T38] Kernel Offset: disabled