last executing test programs: 28.800099386s ago: executing program 2 (id=1289): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000100)={@private=0xa010102, @local, 0x1, "3f15ecb61ff260b321276a88e02eaca3d9e3519db6fd0c59d5a7ca984412a6c0", 0x3, 0x1, 0x8001, 0x7}, 0x3c) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 28.248016897s ago: executing program 2 (id=1292): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0xfffffffffffffd8a, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="38000000180001000000000000000000020000000000000900000000060015000400000014001680100008800c0001800800"], 0x38}}, 0x0) 27.994469877s ago: executing program 1 (id=1294): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0x0, 0x0, 0xfe}}, 0x1c}}, 0x0) 27.884667263s ago: executing program 2 (id=1295): r0 = syz_open_dev$media(&(0x7f0000000000), 0x1005, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc01c7c02, &(0x7f0000000540)={0x80000000, 0x0, &(0x7f00000004c0)=[{}, {{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000140)={{r1, 0x0, 0x0, [0x403, 0xffffffff]}, {0x80000000, 0x0, 0x6, [0x10]}, 0x4, [0xfffffffc, 0x40000000]}) 27.611252191s ago: executing program 1 (id=1297): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000100)={0xe66, 0x4, 0xffffffff, 0xfffffffffffffffd, 0x3}) 27.403895954s ago: executing program 2 (id=1300): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x70}, [@ldst={0x4}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2a) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0) 26.932129048s ago: executing program 2 (id=1303): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000340)={0x9, 0xffffffff, 0x0, 0x1}, 0x58) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001a00ffffffff0000000000000220"], 0x1c}}, 0x0) 26.488112028s ago: executing program 2 (id=1306): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xb40, 0x870, 0x1, 0x1, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x440, 0xd1, 0xc, 0x30, {0x8, 0xffffffff}, 0xd0, 0x9}}) 25.57599864s ago: executing program 1 (id=1311): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) munmap(&(0x7f00001a2000/0x1000)=nil, 0x1000) migrate_pages(0x0, 0x3, 0x0, &(0x7f0000000300)=0xa) 25.232576201s ago: executing program 1 (id=1314): r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x639) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000200)=""/147, 0x47}, {0x0, 0x2}], 0x2) 24.850371317s ago: executing program 1 (id=1316): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) fsetxattr$security_capability(r0, &(0x7f00000001c0), 0x0, 0xd7, 0x1) 24.420099732s ago: executing program 1 (id=1319): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xa8c, 0x870, 0x1, 0x1, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xd1, 0xc, 0x30, {0x8, 0xffffffff}, 0xd0, 0x9}}) 10.035753869s ago: executing program 0 (id=1378): ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x2f, 0x9, 0x8, 0x24000, 0x20, @ipv4={'\x00', '\xff\xff', @loopback}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10, 0x7800, 0x1b, 0x65ec}}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300000000000000f400010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000240000000001800038014000100626f6e64300000000000000000000000080001400000000048000000180a01010000000000000000010000000900020073797a30000000000900010073797a30000000001c000380140001"], 0xe8}}, 0x0) 8.912416707s ago: executing program 0 (id=1381): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) 8.086856618s ago: executing program 0 (id=1385): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private}, {0x2001, 0x0, 0x8}}}}}, 0x0) 7.568292794s ago: executing program 0 (id=1389): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_open_dev$swradio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/4084, 0xff4}], 0xd) 6.987521082s ago: executing program 0 (id=1391): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4397a5c0115f3542, 0x4008032, 0xffffffffffffffff, 0x3ae84000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) 5.785905631s ago: executing program 4 (id=1396): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x3, 0x0, &(0x7f0000fd7ff0)={0x77359400}, 0x0, 0xfffffffd) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 5.178513988s ago: executing program 4 (id=1399): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) recvmmsg(r0, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000005c0)=""/81, 0xa}, {0x0}], 0x2}}], 0x1, 0x0, 0x0) 4.454735638s ago: executing program 4 (id=1401): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000001200070200"/56, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000e2ffffffff0b00010009"], 0x58}}, 0x0) 4.111170102s ago: executing program 4 (id=1403): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b040000000000000000020000002800048024000180090001006d6574610000000014000280080002400000001308000140000000000900010073797a30000000000900020073797a32"], 0x7c}}, 0x0) 3.90488541s ago: executing program 3 (id=1404): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000022c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797ad00000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_COUNTERS={0x4}]}], {0x14}}, 0x58}}, 0x4000) 3.766165514s ago: executing program 0 (id=1405): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="74010000", @ANYRES16=r1, @ANYBLOB="11060000000000000000010000000800050001000000200108803c0000801400040002000000ac1e00010000000000000000240001000000000000000000000000000000000000000000000000000000000000000000e0000080a400098028000080060001000a0000001400020020010000000000000000000000000001050003000100000028000080060001000a00000014000200ff010000000000000000000000000001050003000100000028000200060001000a00000014000200ff010000000000000000000000000001050003000300000028000080060001000a00000014000200ff0100000000000000000000000000010500030000000000240001000000000000000000000000000000000000000000000000000000000000000000140004000200000000000000000000000000000024000300000000000000000000000000000000000000000000000000000000000000000014000200776731"], 0x174}}, 0x0) 3.711570562s ago: executing program 4 (id=1406): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e37024801", 0x27}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90324fc60100c034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 3.434374112s ago: executing program 3 (id=1407): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900020073797a32000000000900010073797a300000000070000000080a01010000000000000000020000000900010073797a30000000000900020073797a32000000002c00058008000140000000000800024000000000080001400000000608000140000000f9080001400000005c080009"], 0xc4}}, 0x0) 3.19854119s ago: executing program 4 (id=1408): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000012000102000000000001040000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0003"], 0x2c}}, 0x0) 3.059906856s ago: executing program 3 (id=1409): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0xb05, 0x18c6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x18, &(0x7f0000000000)={0x0, 0x0, 0x8, {0x8, 0x0, "16427259b0cc"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 746.028985ms ago: executing program 3 (id=1410): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @dev}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}}}}, 0x0) 296.842957ms ago: executing program 3 (id=1411): r0 = socket(0x15, 0x5, 0x0) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x20) getpeername$l2tp6(r0, 0x0, &(0x7f00000000c0)) 0s ago: executing program 3 (id=1412): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd1, &(0x7f0000000080)=0x6, 0x4) kernel console output (not intermixed with test programs): r hid-thrustmaster failed with error -22 [ 102.091395][ T9] usb 2-1: config 0 descriptor?? [ 102.280069][ T29] audit: type=1326 audit(1729123133.528:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6140 comm="syz.3.393" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f64579 code=0x0 [ 102.300671][ T937] usb 3-1: USB disconnect, device number 6 [ 102.555308][ T9] wacom 0003:056A:0300.0010: Unknown device_type for 'HID 056a:0300'. Assuming pen. [ 102.585097][ T9] wacom 0003:056A:0300.0010: hidraw0: USB HID v0.00 Device [HID 056a:0300] on usb-dummy_hcd.1-1/input0 [ 102.624282][ T9] input: Wacom Bamboo One S Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0300.0010/input/input7 [ 102.732282][ T5289] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 102.773942][ T1850] usb 2-1: USB disconnect, device number 7 [ 102.890021][ T5289] usb 5-1: Using ep0 maxpacket: 16 [ 102.915743][ T5289] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.927107][ T5289] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.937012][ T5289] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 102.950197][ T5289] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 102.959586][ T5289] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.971999][ T5289] usb 5-1: config 0 descriptor?? [ 103.039747][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 103.200107][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 103.210749][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.222009][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 103.251312][ T9] usb 1-1: New USB device found, idVendor=1ea7, idProduct=0907, bcdDevice= 0.00 [ 103.269677][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.323822][ T9] usb 1-1: config 0 descriptor?? [ 103.415183][ T5289] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 103.428538][ T5289] microsoft 0003:045E:07DA.0011: item 0 0 0 11 parsing failed [ 103.437430][ T5289] microsoft 0003:045E:07DA.0011: parse failed [ 103.456795][ T5289] microsoft 0003:045E:07DA.0011: probe with driver microsoft failed with error -22 [ 103.641441][ T6176] netlink: 'syz.1.409': attribute type 3 has an invalid length. [ 103.659015][ T5293] usb 5-1: USB disconnect, device number 6 [ 103.794665][ T9] hid (null): unknown global tag 0xe [ 103.804921][ T9] semitek 0003:1EA7:0907.0012: unknown global tag 0xe [ 103.818997][ T9] semitek 0003:1EA7:0907.0012: item 0 1 1 14 parsing failed [ 103.837713][ T9] semitek 0003:1EA7:0907.0012: probe with driver semitek failed with error -22 [ 103.950444][ T25] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 104.045351][ T5293] usb 1-1: USB disconnect, device number 6 [ 104.166946][ T6197] netlink: 10 bytes leftover after parsing attributes in process `syz.1.420'. [ 104.179597][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 104.255149][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.266362][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.276362][ T25] usb 3-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00 [ 104.285695][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.296276][ T25] usb 3-1: config 0 descriptor?? [ 104.721159][ T25] razer 0003:1532:010D.0013: unknown main item tag 0x0 [ 104.728318][ T25] razer 0003:1532:010D.0013: unknown main item tag 0x0 [ 104.750817][ T25] razer 0003:1532:010D.0013: unknown main item tag 0x0 [ 104.778201][ T25] razer 0003:1532:010D.0013: unknown main item tag 0x0 [ 104.786124][ T25] razer 0003:1532:010D.0013: unknown main item tag 0x0 [ 104.793441][ T25] razer 0003:1532:010D.0013: unknown main item tag 0x0 [ 104.813739][ T25] razer 0003:1532:010D.0013: hidraw0: USB HID v0.00 Device [HID 1532:010d] on usb-dummy_hcd.2-1/input0 [ 104.978866][ T25] usb 3-1: USB disconnect, device number 7 [ 105.615611][ T29] audit: type=1326 audit(1729123136.868:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6262 comm="syz.2.444" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 105.673615][ T6265] netlink: 'syz.4.443': attribute type 3 has an invalid length. [ 105.682187][ T29] audit: type=1326 audit(1729123136.868:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6262 comm="syz.2.444" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 105.682239][ T29] audit: type=1326 audit(1729123136.878:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6262 comm="syz.2.444" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 105.733793][ T6265] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.443'. [ 105.748356][ T29] audit: type=1326 audit(1729123136.878:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6262 comm="syz.2.444" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 105.829615][ T29] audit: type=1326 audit(1729123136.878:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6262 comm="syz.2.444" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 105.915324][ T29] audit: type=1326 audit(1729123136.878:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6262 comm="syz.2.444" exe="/root/syz-executor" sig=0 arch=40000003 syscall=314 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 105.967469][ T6271] netlink: 148 bytes leftover after parsing attributes in process `syz.4.448'. [ 105.973607][ T29] audit: type=1326 audit(1729123136.878:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6262 comm="syz.2.444" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 106.010982][ T29] audit: type=1326 audit(1729123136.878:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6262 comm="syz.2.444" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 106.046649][ T29] audit: type=1400 audit(1729123137.258:28): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A2F2F26BB pid=6272 comm="syz.2.449" [ 106.291932][ T25] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 106.399640][ T1850] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 106.449666][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 106.464643][ T25] usb 4-1: unable to get BOS descriptor or descriptor too short [ 106.477179][ T25] usb 4-1: config 9 has an invalid interface number: 218 but max is 0 [ 106.494615][ T25] usb 4-1: config 9 has no interface number 0 [ 106.509818][ T25] usb 4-1: config 9 interface 218 has no altsetting 0 [ 106.524809][ T25] usb 4-1: string descriptor 0 read error: -22 [ 106.536617][ T25] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=d7.19 [ 106.549560][ T1850] usb 1-1: Using ep0 maxpacket: 32 [ 106.576898][ T1850] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.595552][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.610942][ T1850] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.630609][ T1850] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 106.653568][ T1850] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.682864][ T1850] usb 1-1: config 0 descriptor?? [ 106.874150][ T25] peak_usb 4-1:9.218: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 106.891602][ T6310] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 107.084071][ T25] peak_usb 4-1:9.218 can0: sending command failure: -22 [ 107.110242][ T25] peak_usb 4-1:9.218 can0: sending command failure: -22 [ 107.124114][ T1850] ft260 0003:0403:6030.0014: unknown main item tag 0x0 [ 107.139535][ T25] peak_usb 4-1:9.218 can0: sending command failure: -22 [ 107.292276][ T25] peak_usb 4-1:9.218: probe with driver peak_usb failed with error -22 [ 107.329880][ T25] usb 4-1: USB disconnect, device number 5 [ 107.337547][ T1850] ft260 0003:0403:6030.0014: failed to retrieve chip version [ 107.361351][ T1850] ft260 0003:0403:6030.0014: probe with driver ft260 failed with error -71 [ 107.387984][ T1850] usb 1-1: USB disconnect, device number 7 [ 107.752597][ T6346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.475'. [ 108.032193][ T6357] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 108.109621][ T25] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 108.300437][ T25] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=9f.d4 [ 108.319558][ T25] usb 2-1: New USB device strings: Mfr=188, Product=0, SerialNumber=0 [ 108.346025][ T25] usb 2-1: Manufacturer: syz [ 108.372333][ T25] usb 2-1: config 0 descriptor?? [ 108.831505][ T25] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 109.039658][ T1850] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 109.048879][ T25] gs_usb 2-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 109.069935][ T25] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71 [ 109.119225][ T25] usb 2-1: USB disconnect, device number 8 [ 109.271117][ T1850] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.283260][ T1850] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.293682][ T1850] usb 5-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 109.305687][ T1850] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.336394][ T1850] usb 5-1: config 0 descriptor?? [ 109.624945][ T6423] netlink: 4 bytes leftover after parsing attributes in process `syz.3.507'. [ 109.765012][ T1850] vrc2 0003:07C0:1125.0015: fixing up VRC-2 report descriptor [ 109.814319][ T1850] input: HID 07c0:1125 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:07C0:1125.0015/input/input10 [ 109.900977][ T1850] vrc2 0003:07C0:1125.0015: input,hidraw0: USB HID v0.00 Joystick [HID 07c0:1125] on usb-dummy_hcd.4-1/input0 [ 110.038547][ T5293] usb 5-1: USB disconnect, device number 7 [ 110.122756][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 110.289728][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 110.301637][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 110.315125][ T9] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 110.325839][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.335303][ T9] usb 1-1: Product: syz [ 110.340029][ T9] usb 1-1: Manufacturer: syz [ 110.344744][ T9] usb 1-1: SerialNumber: syz [ 110.363817][ T9] usb 1-1: config 0 descriptor?? [ 110.439613][ T937] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 110.465527][ T25] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 110.592496][ T937] usb 4-1: Using ep0 maxpacket: 16 [ 110.604000][ T9] usb 1-1: Unknown endpoint type found, address 0x06 [ 110.611254][ T9] usb 1-1: Not enough endpoints found in device, aborting! [ 110.620164][ T937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.624315][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.654204][ T937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.682551][ T937] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 110.687436][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.696624][ T937] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 110.736958][ T937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.747696][ T25] usb 3-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.00 [ 110.751278][ T937] usb 4-1: config 0 descriptor?? [ 110.771866][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.800576][ T25] usb 3-1: config 0 descriptor?? [ 110.849393][ T9] usb 1-1: USB disconnect, device number 8 [ 111.183819][ T937] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 111.200888][ T937] microsoft 0003:045E:07DA.0016: No inputs registered, leaving [ 111.229598][ T937] microsoft 0003:045E:07DA.0016: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 111.253001][ T937] microsoft 0003:045E:07DA.0016: no inputs found [ 111.269572][ T937] microsoft 0003:045E:07DA.0016: could not initialize ff, continuing anyway [ 111.281088][ T25] wacom 0003:056A:0003.0017: Unknown device_type for 'HID 056a:0003'. Assuming pen. [ 111.309671][ T25] wacom 0003:056A:0003.0017: hidraw1: USB HID v0.00 Device [HID 056a:0003] on usb-dummy_hcd.2-1/input0 [ 111.338466][ T25] input: Wacom Cintiq Partner Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0003.0017/input/input11 [ 111.488695][ T937] usb 4-1: USB disconnect, device number 6 [ 111.619381][ T5290] usb 3-1: USB disconnect, device number 8 [ 112.670083][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 112.839678][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 112.854773][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.866785][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.889576][ T9] usb 4-1: New USB device found, idVendor=1e71, idProduct=200f, bcdDevice= 0.00 [ 112.898771][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.990687][ T9] usb 4-1: config 0 descriptor?? [ 113.421420][ T9] nzxt-smart2 0003:1E71:200F.0018: item fetching failed at offset 3/5 [ 113.431678][ T9] nzxt-smart2 0003:1E71:200F.0018: probe with driver nzxt-smart2 failed with error -22 [ 113.680131][ T25] usb 4-1: USB disconnect, device number 7 [ 113.709685][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 113.889508][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 113.906072][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.926164][ T6544] openvswitch: netlink: Actions may not be safe on all matching packets [ 113.939633][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 113.967243][ T9] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1d00, bcdDevice= 0.00 [ 113.995257][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.022305][ T9] usb 5-1: config 0 descriptor?? [ 114.104256][ T6546] netlink: 209676 bytes leftover after parsing attributes in process `syz.2.565'. [ 114.408915][ T6558] No buffer was provided with the request [ 114.493699][ T9] corsair-cpro 0003:1B1C:1D00.0019: unknown main item tag 0x0 [ 114.501674][ T9] corsair-cpro 0003:1B1C:1D00.0019: unknown main item tag 0x0 [ 114.509215][ T9] corsair-cpro 0003:1B1C:1D00.0019: unknown main item tag 0x0 [ 114.520525][ T5290] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 114.537972][ T9] corsair-cpro 0003:1B1C:1D00.0019: unknown main item tag 0x0 [ 114.545995][ T9] corsair-cpro 0003:1B1C:1D00.0019: unknown main item tag 0x0 [ 114.555888][ T9] corsair-cpro 0003:1B1C:1D00.0019: hidraw0: USB HID v0.00 Device [HID 1b1c:1d00] on usb-dummy_hcd.4-1/input0 [ 114.648100][ T9] corsair-cpro 0003:1B1C:1D00.0019: probe with driver corsair-cpro failed with error -38 [ 114.699589][ T5290] usb 3-1: Using ep0 maxpacket: 16 [ 114.711937][ T5290] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.733478][ T5290] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.735039][ T5293] usb 5-1: USB disconnect, device number 8 [ 114.753861][ T5290] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 114.797307][ T5290] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 114.817235][ T5290] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.840903][ T5290] usb 3-1: config 0 descriptor?? [ 114.939560][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 114.960372][ T6578] bridge1: entered promiscuous mode [ 114.965669][ T6578] bridge1: entered allmulticast mode [ 114.975529][ T6578] team0: Port device bridge1 added [ 115.103022][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 115.117328][ T9] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 115.127427][ T9] usb 1-1: config 0 has no interface number 0 [ 115.147323][ T9] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 115.182654][ T9] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 115.202744][ T9] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 115.218867][ T9] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 115.234296][ T9] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 115.244453][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.259943][ T9] usb 1-1: config 0 descriptor?? [ 115.281329][ T5290] microsoft 0003:045E:07DA.001A: ignoring exceeding usage max [ 115.293192][ T9] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 115.319259][ T5290] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.001A/input/input14 [ 115.360974][ T5290] microsoft 0003:045E:07DA.001A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 115.662347][ T1850] usb 3-1: USB disconnect, device number 9 [ 116.440553][ T6619] team_slave_0: entered promiscuous mode [ 116.446600][ T6619] team_slave_1: entered promiscuous mode [ 116.583032][ T6624] netlink: 12 bytes leftover after parsing attributes in process `syz.2.602'. [ 116.749613][ T5293] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 116.912098][ T5293] usb 4-1: config 0 interface 0 altsetting 12 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 116.936264][ T5293] usb 4-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid wMaxPacketSize 0 [ 116.975179][ T5293] usb 4-1: config 0 interface 0 has no altsetting 0 [ 117.005271][ T5293] usb 4-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 117.023892][ T5293] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.039817][ T5293] usb 4-1: Product: syz [ 117.044384][ T5293] usb 4-1: Manufacturer: syz [ 117.049143][ T5293] usb 4-1: SerialNumber: syz [ 117.103434][ T5293] usb 4-1: config 0 descriptor?? [ 117.142496][ T5293] keyspan 4-1:0.0: Keyspan 2 port adapter converter detected [ 117.171023][ T5293] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 7 [ 117.204848][ T5293] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 117.229170][ T5293] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 117.258749][ T5293] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 117.270727][ T6648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.290116][ T5293] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 85 [ 117.293358][ T6648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.298174][ T5293] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 5 [ 117.323208][ T6648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.348128][ T6648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.386154][ T5293] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 117.390388][ T6648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.424305][ T6648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.425754][ T5293] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 83 [ 117.446854][ T5293] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 3 [ 117.452965][ T6648] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.455745][ T5293] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 4 [ 117.474054][ T5293] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 86 [ 117.482663][ T6648] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.493494][ T5293] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 6 [ 117.507078][ T5293] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 117.606698][ T5293] usb 4-1: USB disconnect, device number 8 [ 117.618999][ T5293] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 117.634766][ T5293] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 117.645822][ T5293] keyspan 4-1:0.0: device disconnected [ 117.662563][ T937] usb 1-1: USB disconnect, device number 9 [ 117.670329][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 117.689594][ T937] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 117.830895][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 117.851022][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 117.881286][ T9] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 117.890898][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.898985][ T9] usb 2-1: Product: syz [ 117.933329][ T9] usb 2-1: Manufacturer: syz [ 117.947975][ T9] usb 2-1: SerialNumber: syz [ 117.975072][ T9] usb 2-1: config 0 descriptor?? [ 118.280168][ T9] usb 2-1: Unknown endpoint type found, address 0x06 [ 118.287026][ T9] usb 2-1: Not enough endpoints found in device, aborting! [ 118.342723][ T6671] bridge1: entered promiscuous mode [ 118.348069][ T6671] bridge1: entered allmulticast mode [ 118.367808][ T6671] team0: Port device bridge1 added [ 118.471034][ T5290] usb 2-1: USB disconnect, device number 9 [ 118.477431][ T5293] IPVS: starting estimator thread 0... [ 118.600502][ T6678] IPVS: using max 16 ests per chain, 38400 per kthread [ 118.858072][ T6695] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 118.889952][ T6698] syz.0.638 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 118.966235][ T6700] usb usb8: usbfs: process 6700 (syz.0.641) did not claim interface 0 before use [ 119.017452][ T5293] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 119.229598][ T5293] usb 4-1: Using ep0 maxpacket: 8 [ 119.332278][ T6716] netlink: 'syz.2.647': attribute type 1 has an invalid length. [ 119.478460][ T5293] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 119.488384][ T5293] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.496845][ T5293] usb 4-1: Product: syz [ 119.501230][ T5293] usb 4-1: Manufacturer: syz [ 119.505867][ T5293] usb 4-1: SerialNumber: syz [ 119.527743][ T5293] usb 4-1: config 0 descriptor?? [ 119.536028][ T5293] gspca_main: se401-2.14.0 probing 047d:5003 [ 120.163466][ T6751] pim6reg527: entered allmulticast mode [ 120.172257][ T5293] input: se401 as /devices/platform/dummy_hcd.3/usb4/4-1/input/input15 [ 120.221725][ T5293] usb 4-1: USB disconnect, device number 9 [ 120.639695][ T5290] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 120.835556][ T5290] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.852014][ T6779] UHID_CREATE from different security context by process 320 (syz.1.677), this is not allowed. [ 120.854911][ T5290] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.879872][ T5290] usb 1-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 120.889044][ T5290] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.911494][ T5290] usb 1-1: config 0 descriptor?? [ 121.251942][ T9] IPVS: starting estimator thread 0... [ 121.296380][ T6804] sctp: [Deprecated]: syz.2.691 (pid 6804) Use of int in max_burst socket option. [ 121.296380][ T6804] Use struct sctp_assoc_value instead [ 121.349853][ T6798] IPVS: using max 16 ests per chain, 38400 per kthread [ 121.369200][ T5290] stadia 0003:18D1:9400.001B: hidraw0: USB HID v0.00 Device [HID 18d1:9400] on usb-dummy_hcd.0-1/input0 [ 121.392945][ T5290] stadia 0003:18D1:9400.001B: no inputs found [ 121.399115][ T5290] stadia 0003:18D1:9400.001B: force feedback init failed [ 121.676794][ T5290] usb 1-1: USB disconnect, device number 10 [ 121.839718][ T1850] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 121.999881][ T1850] usb 4-1: Using ep0 maxpacket: 32 [ 122.023890][ T1850] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.066681][ T1850] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.082743][ T1850] usb 4-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 122.092474][ T1850] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.121255][ T1850] usb 4-1: config 0 descriptor?? [ 122.377262][ T6850] delete_channel: no stack [ 122.519687][ T46] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 122.529790][ T5293] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 122.595166][ T1850] waltop 0003:172F:0501.001C: item fetching failed at offset 2/5 [ 122.604116][ T1850] waltop 0003:172F:0501.001C: probe with driver waltop failed with error -22 [ 122.703516][ T5293] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.709542][ T46] usb 2-1: Using ep0 maxpacket: 16 [ 122.725335][ T5293] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.731392][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.742656][ T5293] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 122.747088][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.763519][ T5293] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.789568][ T46] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 122.790203][ T5293] usb 5-1: config 0 descriptor?? [ 122.802613][ T46] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 122.802648][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.818491][ T46] usb 2-1: config 0 descriptor?? [ 122.926325][ T1850] usb 4-1: USB disconnect, device number 10 [ 123.246105][ T5293] steelseries 0003:1038:1410.001D: not enough values in HID_OUTPUT_REPORT 0 field 0 [ 123.261347][ T46] microsoft 0003:045E:07DA.001E: ignoring exceeding usage max [ 123.285240][ T46] microsoft 0003:045E:07DA.001E: No inputs registered, leaving [ 123.325027][ T46] microsoft 0003:045E:07DA.001E: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 123.357234][ T46] microsoft 0003:045E:07DA.001E: no inputs found [ 123.364293][ T46] microsoft 0003:045E:07DA.001E: could not initialize ff, continuing anyway [ 123.448574][ T6872] CUSE: zero length info key specified [ 123.500395][ T5293] usb 5-1: USB disconnect, device number 9 [ 123.658378][ T46] usb 2-1: USB disconnect, device number 10 [ 124.299901][ T25] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 124.449670][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 124.458160][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.479552][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.508659][ T25] usb 4-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 124.533115][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.554757][ T25] usb 4-1: config 0 descriptor?? [ 124.654547][ T1850] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 124.834890][ T1850] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.846954][ T1850] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.859757][ T1850] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 124.879354][ T1850] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.900925][ T1850] usb 5-1: config 0 descriptor?? [ 124.937729][ T5247] Bluetooth: hci1: Malformed LE Event: 0x0d [ 124.996935][ T25] saitek 0003:06A3:0621.001F: collection stack underflow [ 125.004896][ T25] saitek 0003:06A3:0621.001F: item 0 0 0 12 parsing failed [ 125.016378][ T25] saitek 0003:06A3:0621.001F: parse failed [ 125.022996][ T25] saitek 0003:06A3:0621.001F: probe with driver saitek failed with error -22 [ 125.212666][ T5293] usb 4-1: USB disconnect, device number 11 [ 125.337228][ T1850] mcp2221 0003:04D8:00DD.0020: item fetching failed at offset 3/5 [ 125.352415][ T1850] mcp2221 0003:04D8:00DD.0020: can't parse reports [ 125.359075][ T1850] mcp2221 0003:04D8:00DD.0020: probe with driver mcp2221 failed with error -22 [ 125.371261][ T25] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 125.425554][ T6945] netlink: 3 bytes leftover after parsing attributes in process `syz.2.758'. [ 125.529509][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 125.538570][ T25] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 125.554068][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 125.566686][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 125.578561][ T25] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 125.582342][ T5293] usb 5-1: USB disconnect, device number 10 [ 125.622266][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.653585][ T25] usb 2-1: config 0 descriptor?? [ 125.688131][ T6941] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 125.718707][ T25] hub 2-1:0.0: USB hub found [ 125.941904][ T5290] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 125.962455][ T25] hub 2-1:0.0: 4 ports detected [ 125.968155][ T25] hub 2-1:0.0: insufficient power available to use all downstream ports [ 126.143534][ T5290] usb 1-1: config 0 has an invalid interface number: 101 but max is 0 [ 126.163942][ T5290] usb 1-1: config 0 has no interface number 0 [ 126.172464][ T5290] usb 1-1: config 0 interface 101 has no altsetting 0 [ 126.188745][ T25] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 126.196429][ T5290] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 126.217546][ T25] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 126.253393][ T5290] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.271586][ T25] usbhid 2-1:0.0: can't add hid device: -71 [ 126.277750][ T25] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 126.301714][ T5290] usb 1-1: config 0 descriptor?? [ 126.311866][ T5290] cp210x 1-1:0.101: cp210x converter detected [ 126.351954][ T25] usb 2-1: USB disconnect, device number 11 [ 126.635870][ T5241] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 126.645773][ T5241] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 126.656769][ T5241] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 126.666177][ T5241] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 126.675062][ T5241] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 126.682930][ T5241] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 126.731559][ T5290] cp210x 1-1:0.101: failed to get vendor val 0x000e size 3: -71 [ 126.743725][ T5290] usb 1-1: cp210x converter now attached to ttyUSB0 [ 126.769214][ T5290] usb 1-1: USB disconnect, device number 11 [ 126.778952][ T5290] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 126.787610][ T5290] cp210x 1-1:0.101: device disconnected [ 127.182970][ T6978] chnl_net:caif_netlink_parms(): no params data found [ 127.298908][ T7002] netlink: 'syz.1.783': attribute type 16 has an invalid length. [ 127.445401][ T7010] usb usb5: usbfs: process 7010 (syz.3.786) did not claim interface 0 before use [ 127.529338][ T6978] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.573469][ T6978] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.597059][ T6978] bridge_slave_0: entered allmulticast mode [ 127.616889][ T6978] bridge_slave_0: entered promiscuous mode [ 127.662228][ T6978] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.670848][ T6978] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.689921][ T6978] bridge_slave_1: entered allmulticast mode [ 127.697214][ T6978] bridge_slave_1: entered promiscuous mode [ 127.826997][ T6978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.838120][ T7022] CUSE: DEVNAME unspecified [ 127.877184][ T29] audit: type=1326 audit(1729123159.128:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7025 comm="syz.0.794" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 127.885553][ T6978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.977201][ T29] audit: type=1326 audit(1729123159.128:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7025 comm="syz.0.794" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 128.039908][ T29] audit: type=1326 audit(1729123159.168:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7025 comm="syz.0.794" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 128.113809][ T6978] team0: Port device team_slave_0 added [ 128.129663][ T29] audit: type=1326 audit(1729123159.168:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7025 comm="syz.0.794" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 128.176856][ T29] audit: type=1326 audit(1729123159.168:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7025 comm="syz.0.794" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 128.243198][ T6978] team0: Port device team_slave_1 added [ 128.264659][ T29] audit: type=1326 audit(1729123159.168:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7025 comm="syz.0.794" exe="/root/syz-executor" sig=0 arch=40000003 syscall=347 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 128.330700][ T6978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.357632][ T29] audit: type=1326 audit(1729123159.168:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7025 comm="syz.0.794" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5579 code=0x7ffc0000 [ 128.380501][ T6978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.409088][ T29] audit: type=1326 audit(1729123159.568:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7035 comm="syz.3.798" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64579 code=0x7ffc0000 [ 128.433297][ T6978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.486991][ T6978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.488965][ T7044] netlink: 88 bytes leftover after parsing attributes in process `syz.3.801'. [ 128.494159][ T29] audit: type=1326 audit(1729123159.568:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7035 comm="syz.3.798" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64579 code=0x7ffc0000 [ 128.527389][ T6978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.564832][ T6978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.576879][ T29] audit: type=1326 audit(1729123159.578:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7035 comm="syz.3.798" exe="/root/syz-executor" sig=0 arch=40000003 syscall=132 compat=1 ip=0xf7f64579 code=0x7ffc0000 [ 128.658866][ T6978] hsr_slave_0: entered promiscuous mode [ 128.672015][ T6978] hsr_slave_1: entered promiscuous mode [ 128.686218][ T6978] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 128.700017][ T5290] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 128.714267][ T6978] Cannot create hsr debugfs directory [ 128.759941][ T5241] Bluetooth: hci3: command tx timeout [ 128.870092][ T5290] usb 1-1: Using ep0 maxpacket: 8 [ 128.884459][ T5290] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 128.903799][ T5290] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.927076][ T5290] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 128.944630][ T6978] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.950085][ T5290] usb 1-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 128.989777][ T5290] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.007024][ T5290] usb 1-1: config 0 descriptor?? [ 129.071340][ T6978] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.198037][ T6978] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.380418][ T6978] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.453332][ T5290] ortek 0003:1223:3F07.0021: report_id 0 is invalid [ 129.460191][ T5290] ortek 0003:1223:3F07.0021: item 0 1 1 8 parsing failed [ 129.467840][ T5290] ortek 0003:1223:3F07.0021: probe with driver ortek failed with error -22 [ 129.681947][ T6978] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 129.703523][ T6978] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 129.719006][ T9] usb 1-1: USB disconnect, device number 12 [ 129.748555][ T6978] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 129.790803][ T6978] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 129.859654][ T5293] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 129.976938][ T6978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.999033][ T6978] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.035495][ T741] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.042691][ T741] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.059603][ T5293] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 130.088627][ T5293] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0093, bcdDevice=23.5a [ 130.102187][ T5293] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.115732][ T5293] usb 2-1: Product: syz [ 130.122896][ T2972] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.134330][ T2972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.154290][ T5293] usb 2-1: Manufacturer: syz [ 130.159106][ T5293] usb 2-1: SerialNumber: syz [ 130.169001][ T5293] usb 2-1: config 0 descriptor?? [ 130.352399][ T6978] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 130.392717][ T5293] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-8 [ 130.419325][ T5293] dvb_usb_af9035 2-1:0.0: probe with driver dvb_usb_af9035 failed with error -8 [ 130.425496][ T6978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.443585][ T5293] usb 2-1: USB disconnect, device number 12 [ 130.569051][ T6978] veth0_vlan: entered promiscuous mode [ 130.611175][ T6978] veth1_vlan: entered promiscuous mode [ 130.678999][ T6978] veth0_macvtap: entered promiscuous mode [ 130.708320][ T6978] veth1_macvtap: entered promiscuous mode [ 130.741586][ T6978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.754334][ T6978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.775681][ T6978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.787334][ T6978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.798161][ T6978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.817337][ T6978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.827812][ T6978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.839684][ T5241] Bluetooth: hci3: command tx timeout [ 130.849035][ T6978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.869707][ T6978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.889356][ T6978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.901400][ T6978] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.974599][ T6978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.007107][ T6978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.037687][ T6978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.066974][ T6978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.087140][ T6978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.097833][ T6978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.119715][ T6978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.143584][ T6978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.154086][ T6978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.166699][ T6978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.179868][ T6978] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.214137][ T6978] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.242557][ T6978] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.286399][ T6978] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.329569][ T6978] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.654427][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.689989][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.779505][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 131.801804][ T741] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.809983][ T741] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.941178][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.963971][ T9] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 131.984149][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.996804][ T9] usb 2-1: Product: syz [ 132.005016][ T9] usb 2-1: Manufacturer: syz [ 132.013730][ T9] usb 2-1: SerialNumber: syz [ 132.019641][ T937] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 132.031489][ T9] usb 2-1: config 0 descriptor?? [ 132.051592][ T9] usb 2-1: Found UVC 0.00 device syz (18ec:3288) [ 132.058180][ T9] usb 2-1: No valid video chain found. [ 132.154394][ T7151] ALSA: mixer_oss: invalid OSS volume '' [ 132.189606][ T937] usb 4-1: Using ep0 maxpacket: 16 [ 132.209942][ T937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.228421][ T5293] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 132.230010][ T1850] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 132.236516][ T937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.275905][ T937] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 132.291815][ T9] usb 2-1: USB disconnect, device number 13 [ 132.302609][ T937] usb 4-1: New USB device found, idVendor=056a, idProduct=0022, bcdDevice= 0.00 [ 132.315982][ T937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.326966][ T937] usb 4-1: config 0 descriptor?? [ 132.399915][ T1850] usb 3-1: Using ep0 maxpacket: 8 [ 132.406978][ T1850] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 132.418751][ T1850] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 132.428250][ T1850] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 132.433924][ T5293] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.438168][ T1850] usb 3-1: Product: syz [ 132.449943][ T5293] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.463163][ T1850] usb 3-1: Manufacturer: syz [ 132.467820][ T1850] usb 3-1: SerialNumber: syz [ 132.470895][ T5293] usb 1-1: config 0 interface 0 has no altsetting 0 [ 132.509588][ T5293] usb 1-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 132.549679][ T5293] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.571640][ T5293] usb 1-1: config 0 descriptor?? [ 132.703585][ T1850] usb 3-1: Handspring Visor / Palm OS: No valid connect info available [ 132.712073][ T1850] usb 3-1: Handspring Visor / Palm OS: port 158, is for unknown use [ 132.719750][ T5291] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 132.721179][ T1850] usb 3-1: Handspring Visor / Palm OS: port 15, is for unknown use [ 132.736735][ T1850] usb 3-1: Handspring Visor / Palm OS: Number of ports: 2 [ 132.753309][ T937] wacom 0003:056A:0022.0022: Unknown device_type for 'HID 056a:0022'. Assuming pen. [ 132.774567][ T937] wacom 0003:056A:0022.0022: hidraw0: USB HID v0.00 Device [HID 056a:0022] on usb-dummy_hcd.3-1/input0 [ 132.808098][ T937] input: Wacom Intuos 9x12 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0022.0022/input/input17 [ 132.882758][ T5291] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.904722][ T1850] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 132.919655][ T5241] Bluetooth: hci3: command tx timeout [ 132.920226][ T5291] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.952273][ T1850] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 132.963240][ T1850] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 132.967326][ T5291] usb 5-1: New USB device found, idVendor=056a, idProduct=00bc, bcdDevice= 0.00 [ 132.992917][ T5293] pantherlord 0003:0810:0002.0023: item fetching failed at offset 5/7 [ 133.018035][ T46] usb 4-1: USB disconnect, device number 12 [ 133.024682][ T5293] pantherlord 0003:0810:0002.0023: parse failed [ 133.024746][ T5293] pantherlord 0003:0810:0002.0023: probe with driver pantherlord failed with error -22 [ 133.042286][ T5291] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.094452][ T5291] usb 5-1: config 0 descriptor?? [ 133.176088][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.185078][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.192161][ T937] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 133.200265][ T1850] usb 1-1: USB disconnect, device number 13 [ 133.227928][ T9] usb 3-1: USB disconnect, device number 10 [ 133.250291][ T9] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 133.272010][ T9] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 133.282216][ T9] visor 3-1:1.0: device disconnected [ 133.379515][ T937] usb 2-1: Using ep0 maxpacket: 16 [ 133.386773][ T937] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.398195][ T937] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.419041][ T937] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 133.432521][ T937] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 133.441700][ T937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.454222][ T937] usb 2-1: config 0 descriptor?? [ 133.535212][ T5291] wacom 0003:056A:00BC.0024: unknown main item tag 0x0 [ 133.542536][ T5291] wacom 0003:056A:00BC.0024: unknown main item tag 0x0 [ 133.550567][ T5291] wacom 0003:056A:00BC.0024: Unknown device_type for 'HID 056a:00bc'. Assuming pen. [ 133.574943][ T5291] wacom 0003:056A:00BC.0024: hidraw0: USB HID v0.00 Device [HID 056a:00bc] on usb-dummy_hcd.4-1/input0 [ 133.619999][ T5291] input: Wacom Intuos4 WL Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:00BC.0024/input/input20 [ 133.731897][ T5291] usb 5-1: USB disconnect, device number 11 [ 133.892047][ T937] microsoft 0003:045E:07DA.0025: ignoring exceeding usage max [ 133.937202][ T937] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0025/input/input23 [ 134.350375][ T937] microsoft 0003:045E:07DA.0025: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 134.405899][ T937] usb 2-1: USB disconnect, device number 14 [ 134.767301][ T7199] netlink: 8 bytes leftover after parsing attributes in process `syz.3.870'. [ 135.000052][ T5241] Bluetooth: hci3: command tx timeout [ 135.297391][ T5291] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 135.311284][ T7225] netlink: 8 bytes leftover after parsing attributes in process `syz.1.881'. [ 135.488237][ T5291] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.546440][ T5291] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.590667][ T5291] usb 5-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00 [ 135.646775][ T5291] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.687177][ T5291] usb 5-1: config 0 descriptor?? [ 136.138928][ T5291] monterey 0003:0566:3004.0026: item fetching failed at offset 0/8 [ 136.162808][ T1850] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 136.170064][ T5291] monterey 0003:0566:3004.0026: probe with driver monterey failed with error -22 [ 136.199921][ T46] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 136.217086][ T7272] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_macvtap, syncid = 0, id = 0 [ 136.221240][ T7271] IPVS: stopping backup sync thread 7272 ... [ 136.345976][ T1850] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 136.355927][ T46] usb 4-1: Using ep0 maxpacket: 32 [ 136.378543][ T1850] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.393401][ T46] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 136.409298][ T5290] usb 5-1: USB disconnect, device number 12 [ 136.426800][ T1850] usb 3-1: config 0 descriptor?? [ 136.437848][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.449983][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.463807][ T1850] cp210x 3-1:0.0: cp210x converter detected [ 136.476348][ T46] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 136.505248][ T46] usb 4-1: New USB device found, idVendor=056a, idProduct=00b3, bcdDevice= 0.00 [ 136.525593][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.542107][ T46] usb 4-1: config 0 descriptor?? [ 136.877735][ T7286] netlink: 20 bytes leftover after parsing attributes in process `syz.0.911'. [ 136.932686][ T7288] netlink: 16 bytes leftover after parsing attributes in process `syz.1.912'. [ 136.976993][ T46] wacom 0003:056A:00B3.0027: unknown main item tag 0x0 [ 136.992021][ T46] wacom 0003:056A:00B3.0027: Unknown device_type for 'HID 056a:00b3'. Assuming pen. [ 137.024560][ T937] hid-generic 0000:0000:0000.0028: item fetching failed at offset 0/1 [ 137.045670][ T937] hid-generic 0000:0000:0000.0028: probe with driver hid-generic failed with error -22 [ 137.069080][ T46] wacom 0003:056A:00B3.0027: hidraw0: USB HID v0.00 Device [HID 056a:00b3] on usb-dummy_hcd.3-1/input0 [ 137.093712][ T1850] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 137.110398][ T1850] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 137.119342][ T46] input: Wacom Intuos3 12x12 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00B3.0027/input/input24 [ 137.144879][ T1850] usb 3-1: cp210x converter now attached to ttyUSB0 [ 137.173044][ T1850] usb 3-1: USB disconnect, device number 11 [ 137.222789][ T1850] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 137.252848][ T46] usb 4-1: USB disconnect, device number 13 [ 137.286085][ T1850] cp210x 3-1:0.0: device disconnected [ 137.649704][ T5290] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 137.659553][ T937] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 137.809765][ T5290] usb 2-1: Using ep0 maxpacket: 16 [ 137.821719][ T5290] usb 2-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=f8.a6 [ 137.831514][ T5290] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.842185][ T937] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 137.842741][ T5290] usb 2-1: Product: syz [ 137.856581][ T5290] usb 2-1: Manufacturer: syz [ 137.861758][ T5290] usb 2-1: SerialNumber: syz [ 137.868883][ T5290] usb 2-1: config 0 descriptor?? [ 137.869506][ T937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.910889][ T937] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 137.931715][ T937] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 137.948212][ T937] usb 5-1: Manufacturer: syz [ 137.958484][ T937] usb 5-1: config 0 descriptor?? [ 138.030062][ T46] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 138.046254][ T937] rc_core: IR keymap rc-hauppauge not found [ 138.046280][ T937] Registered IR keymap rc-empty [ 138.048867][ T937] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 138.050358][ T937] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input27 [ 138.097487][ T5290] usb 2-1: USB disconnect, device number 15 [ 138.190298][ T46] usb 3-1: too many configurations: 201, using maximum allowed: 8 [ 138.218409][ T46] usb 3-1: config index 0 descriptor too short (expected 64945, got 72) [ 138.233228][ T46] usb 3-1: config index 1 descriptor too short (expected 64945, got 72) [ 138.245245][ T46] usb 3-1: config index 2 descriptor too short (expected 64945, got 72) [ 138.255691][ T46] usb 3-1: config index 3 descriptor too short (expected 64945, got 72) [ 138.266477][ T46] usb 3-1: config index 4 descriptor too short (expected 64945, got 72) [ 138.277049][ T46] usb 3-1: config index 5 descriptor too short (expected 64945, got 72) [ 138.311462][ T46] usb 3-1: config index 6 descriptor too short (expected 64945, got 72) [ 138.329879][ T46] usb 3-1: config index 7 descriptor too short (expected 64945, got 72) [ 138.344697][ T46] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 138.355001][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.363535][ T46] usb 3-1: Product: syz [ 138.367975][ T46] usb 3-1: Manufacturer: syz [ 138.372778][ T46] usb 3-1: SerialNumber: syz [ 138.386778][ T46] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 138.433900][ C0] igorplugusb 5-1:0.0: receive overflow invalid: 33 [ 138.434341][ T5290] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 138.552077][ T7327] netlink: 'syz.3.929': attribute type 25 has an invalid length. [ 138.645506][ T46] usb 5-1: USB disconnect, device number 13 [ 138.792740][ T7331] mmap: syz.1.932 (7331) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 139.131973][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 139.131994][ T29] audit: type=1326 audit(1729123170.388:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7344 comm="syz.1.938" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 139.169196][ T29] audit: type=1326 audit(1729123170.388:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7344 comm="syz.1.938" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 139.198858][ T5291] usb 3-1: USB disconnect, device number 12 [ 139.208957][ T29] audit: type=1326 audit(1729123170.388:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7344 comm="syz.1.938" exe="/root/syz-executor" sig=0 arch=40000003 syscall=337 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 139.250341][ T29] audit: type=1326 audit(1729123170.388:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7344 comm="syz.1.938" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 139.321330][ T29] audit: type=1326 audit(1729123170.388:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7344 comm="syz.1.938" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf749d579 code=0x7ffc0000 [ 139.337933][ T7350] netlink: 'syz.1.940': attribute type 3 has an invalid length. [ 139.366202][ T7350] netlink: 'syz.1.940': attribute type 1 has an invalid length. [ 139.374228][ T29] audit: type=1326 audit(1729123170.618:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7349 comm="syz.3.941" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64579 code=0x7ffc0000 [ 139.374273][ T29] audit: type=1326 audit(1729123170.618:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7349 comm="syz.3.941" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64579 code=0x7ffc0000 [ 139.374322][ T29] audit: type=1326 audit(1729123170.618:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7349 comm="syz.3.941" exe="/root/syz-executor" sig=0 arch=40000003 syscall=322 compat=1 ip=0xf7f64579 code=0x7ffc0000 [ 139.374358][ T29] audit: type=1326 audit(1729123170.618:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7349 comm="syz.3.941" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64579 code=0x7ffc0000 [ 139.374395][ T29] audit: type=1326 audit(1729123170.618:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7349 comm="syz.3.941" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64579 code=0x7ffc0000 [ 139.378443][ T7350] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.940'. [ 139.396642][ T937] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 139.666137][ T937] usb 1-1: Using ep0 maxpacket: 16 [ 139.678022][ T937] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.698670][ T937] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.731443][ T937] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 139.759596][ T937] usb 1-1: New USB device found, idVendor=046d, idProduct=c211, bcdDevice= 0.00 [ 139.779051][ T937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.799623][ T5290] usb 3-1: Service connection timeout for: 256 [ 139.806040][ T5290] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 139.821900][ T937] usb 1-1: config 0 descriptor?? [ 139.831042][ T5290] ath9k_htc: Failed to initialize the device [ 139.864794][ T5291] usb 3-1: ath9k_htc: USB layer deinitialized [ 140.015152][ T7373] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 140.259827][ T5293] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 140.276044][ T937] logitech 0003:046D:C211.0029: hidraw0: USB HID v0.00 Device [HID 046d:c211] on usb-dummy_hcd.0-1/input0 [ 140.288044][ T937] logitech 0003:046D:C211.0029: no inputs found [ 140.423921][ T5293] usb 4-1: Using ep0 maxpacket: 8 [ 140.450883][ T5293] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 140.569656][ T5293] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 140.578864][ T5293] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 140.587685][ T5293] usb 4-1: Product: syz [ 140.592534][ T5293] usb 4-1: Manufacturer: syz [ 140.597208][ T5293] usb 4-1: SerialNumber: syz [ 140.663935][ T5290] usb 1-1: USB disconnect, device number 14 [ 140.846766][ T5293] usb 4-1: Handspring Visor / Palm OS: No valid connect info available [ 140.855393][ T5293] usb 4-1: Handspring Visor / Palm OS: port 158, is for unknown use [ 140.864687][ T5293] usb 4-1: Handspring Visor / Palm OS: port 15, is for unknown use [ 140.874378][ T5293] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2 [ 141.047907][ T5293] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 141.060301][ T5293] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 141.087614][ T5293] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 141.304324][ T46] usb 4-1: USB disconnect, device number 14 [ 141.348864][ T46] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 141.389294][ T46] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 141.459651][ T46] visor 4-1:1.0: device disconnected [ 141.468906][ T7412] process 'syz.4.969' launched './file1' with NULL argv: empty string added [ 142.105778][ T46] hid-generic 0000:0000:0000.002A: item fetching failed at offset 0/1 [ 142.156263][ T46] hid-generic 0000:0000:0000.002A: probe with driver hid-generic failed with error -22 [ 142.557161][ T5293] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 142.601015][ T46] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 142.772155][ T5293] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.783746][ T5293] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.804076][ T5293] usb 5-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 142.882203][ T5293] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.977266][ T5293] usb 5-1: config 0 descriptor?? [ 142.991080][ T46] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 143.000316][ T46] usb 3-1: config 0 has no interface number 0 [ 143.106824][ T46] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 143.116144][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.124348][ T46] usb 3-1: Product: syz [ 143.128566][ T46] usb 3-1: Manufacturer: syz [ 143.133351][ T46] usb 3-1: SerialNumber: syz [ 143.143060][ T46] usb 3-1: config 0 descriptor?? [ 143.187213][ T7488] tipc: Started in network mode [ 143.195363][ T7488] tipc: Node identity c6f47bf6cfa4, cluster identity 4711 [ 143.204301][ T7488] tipc: Enabled bearer , priority 10 [ 143.436201][ T46] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 143.471154][ T46] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 143.498823][ T5293] elo 0003:04E7:0030.002B: unknown main item tag 0xd [ 143.519800][ T5293] elo 0003:04E7:0030.002B: hidraw0: USB HID v0.00 Device [HID 04e7:0030] on usb-dummy_hcd.4-1/input0 [ 143.537862][ T46] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 143.590668][ T46] usb 3-1: media controller created [ 143.644800][ T46] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 143.777411][ T5292] usb 5-1: USB disconnect, device number 14 [ 144.060188][ T1850] usb 3-1: USB disconnect, device number 13 [ 144.067148][ T7508] CUSE: zero length info key specified [ 144.329572][ T5292] tipc: Node number set to 156269558 [ 144.817170][ T7533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1025'. [ 144.974343][ T7541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1028'. [ 145.339194][ T7557] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1038'. [ 145.411069][ T7563] netlink: 'syz.2.1040': attribute type 1 has an invalid length. [ 145.433850][ T7563] netlink: 67 bytes leftover after parsing attributes in process `syz.2.1040'. [ 145.630870][ T1850] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 145.791573][ T1850] usb 1-1: config 0 has an invalid interface number: 32 but max is 0 [ 145.801239][ T1850] usb 1-1: config 0 has no interface number 0 [ 145.846205][ T1850] usb 1-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.871292][ T1850] usb 1-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.896016][ T7585] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1050'. [ 145.929742][ T1850] usb 1-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 145.955677][ T1850] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.983278][ T1850] usb 1-1: config 0 descriptor?? [ 146.199756][ T46] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 146.354345][ T46] usb 3-1: Using ep0 maxpacket: 8 [ 146.373929][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.375922][ T7598] tipc: Enabling of bearer rejected, failed to enable media [ 146.385343][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.426066][ T46] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 146.452631][ T1850] logitech-djreceiver 0003:046D:C71B.002C: unknown main item tag 0x0 [ 146.460971][ T1850] logitech-djreceiver 0003:046D:C71B.002C: unknown main item tag 0x0 [ 146.469117][ T1850] logitech-djreceiver 0003:046D:C71B.002C: unknown main item tag 0x0 [ 146.489600][ T46] usb 3-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 146.514637][ T1850] logitech-djreceiver 0003:046D:C71B.002C: unknown main item tag 0x0 [ 146.531466][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.550372][ T1850] logitech-djreceiver 0003:046D:C71B.002C: unknown main item tag 0x0 [ 146.558561][ T1850] logitech-djreceiver 0003:046D:C71B.002C: unknown main item tag 0x0 [ 146.572890][ T46] usb 3-1: config 0 descriptor?? [ 146.602970][ T1850] logitech-djreceiver 0003:046D:C71B.002C: unknown main item tag 0x0 [ 146.619301][ T1850] logitech-djreceiver 0003:046D:C71B.002C: hidraw0: USB HID v0.00 Device [HID 046d:c71b] on usb-dummy_hcd.0-1/input32 [ 146.687076][ T1850] usb 1-1: USB disconnect, device number 15 [ 146.879290][ T7613] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1064'. [ 147.024717][ T46] uclogic 0003:5543:0064.002D: item fetching failed at offset 5/7 [ 147.050046][ T46] uclogic 0003:5543:0064.002D: parse failed [ 147.063394][ T46] uclogic 0003:5543:0064.002D: probe with driver uclogic failed with error -22 [ 147.099569][ T5292] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 147.290169][ T5292] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 147.308979][ T937] usb 3-1: USB disconnect, device number 14 [ 147.323323][ T5292] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.351368][ T5292] usb 2-1: config 0 descriptor?? [ 148.104595][ T7647] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 148.141555][ T5292] ath6kl: Failed to read usb control message: -71 [ 148.148092][ T5292] ath6kl: Unable to read the bmi data from the device: -71 [ 148.573459][ T7658] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1085'. [ 148.970834][ T7666] sg_write: data in/out 655484/1 bytes for SCSI command 0xf2-- guessing data in; [ 148.970834][ T7666] program syz.1.1088 not setting count and/or reply_len properly [ 149.949576][ T937] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 150.151124][ T937] usb 1-1: Using ep0 maxpacket: 16 [ 150.199737][ T937] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.232561][ T937] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.299481][ T937] usb 1-1: New USB device found, idVendor=28bd, idProduct=0934, bcdDevice= 0.00 [ 150.357631][ T937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.444542][ T937] usb 1-1: config 0 descriptor?? [ 150.629574][ T5293] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 150.648247][ T5292] ath6kl: unable to read target info byte count: -71 [ 150.693375][ T5292] ath6kl: Failed to init ath6kl core: -71 [ 150.802202][ T5293] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.825983][ T5293] usb 4-1: config 0 interface 0 has no altsetting 0 [ 150.843804][ T5293] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 150.863776][ T5293] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.880133][ T5293] usb 4-1: Product: syz [ 150.884974][ T5293] usb 4-1: Manufacturer: syz [ 150.924643][ T937] input: HID 28bd:0934 Mouse as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28BD:0934.002E/input/input28 [ 150.939651][ T5293] usb 4-1: SerialNumber: syz [ 150.952657][ T5292] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 150.974207][ T5293] usb 4-1: config 0 descriptor?? [ 151.017878][ T5293] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 151.054669][ T937] uclogic 0003:28BD:0934.002E: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0934] on usb-dummy_hcd.0-1/input0 [ 151.071620][ T5293] usb 4-1: selecting invalid altsetting 0 [ 151.096783][ T7193] sched: DL replenish lagged too much [ 151.193019][ T937] usb 1-1: USB disconnect, device number 16 [ 151.397726][ T5293] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 151.479664][ T5293] usb 4-1: USB disconnect, device number 15 [ 151.580000][ T5787] udevd[5787]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 152.435263][ T7719] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1112'. [ 152.499852][ T7719] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1112'. [ 154.182587][ T5292] usb 2-1: USB disconnect, device number 16 [ 155.734059][ T7786] netlink: 'syz.3.1144': attribute type 29 has an invalid length. [ 155.811060][ T7788] netlink: 'syz.3.1144': attribute type 29 has an invalid length. [ 155.980086][ T7791] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 159.189625][ T937] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 159.352028][ T937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.382103][ T937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.434046][ T937] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 159.489509][ T937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.553049][ T937] usb 4-1: config 0 descriptor?? [ 159.691704][ T7867] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1182'. [ 159.724452][ T7867] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1182'. [ 160.013132][ T937] holtek_kbd 0003:04D9:A055.002F: unknown main item tag 0x0 [ 160.077991][ T937] holtek_kbd 0003:04D9:A055.002F: item fetching failed at offset 3/5 [ 160.130156][ T937] holtek_kbd 0003:04D9:A055.002F: probe with driver holtek_kbd failed with error -22 [ 160.235102][ T937] usb 4-1: USB disconnect, device number 16 [ 161.159704][ T5293] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 161.221720][ T7892] netlink: 'syz.3.1194': attribute type 29 has an invalid length. [ 161.244223][ T7892] netlink: 'syz.3.1194': attribute type 29 has an invalid length. [ 161.352506][ T5293] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 161.379524][ T5293] usb 5-1: config 246 descriptor has 1 excess byte, ignoring [ 161.417915][ T5293] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 161.455058][ T5293] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 161.505627][ T5293] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 77, setting to 8 [ 161.528682][ T7896] openvswitch: netlink: Actions may not be safe on all matching packets [ 161.549227][ T5293] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 161.600810][ T5293] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 161.661774][ T5293] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 161.711717][ T5293] usb 5-1: config 246 descriptor has 1 excess byte, ignoring [ 161.719240][ T5293] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 161.836099][ T5293] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 161.898036][ T5293] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 77, setting to 8 [ 161.917088][ T7900] sg_write: data in/out 588840944/1 bytes for SCSI command 0x94-- guessing data in; [ 161.917088][ T7900] program syz.3.1198 not setting count and/or reply_len properly [ 161.959040][ T5293] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 162.007214][ T5293] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 162.051142][ T5293] usb 5-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 162.084417][ T5293] usb 5-1: config 246 descriptor has 1 excess byte, ignoring [ 162.112875][ T5293] usb 5-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 162.173831][ T5293] usb 5-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 162.259643][ T5293] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 77, setting to 8 [ 162.349617][ T5293] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 162.409447][ T5293] usb 5-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 162.473942][ T5293] usb 5-1: string descriptor 0 read error: -22 [ 162.510221][ T5293] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 162.547432][ T5293] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.634349][ T5293] adutux 5-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 163.188356][ T7922] macvlan2: entered promiscuous mode [ 163.208482][ T7922] macvlan2: entered allmulticast mode [ 163.215382][ T937] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 163.389657][ T937] usb 1-1: Using ep0 maxpacket: 8 [ 163.403633][ T937] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.439445][ T937] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.492283][ T937] usb 1-1: config 0 interface 0 has no altsetting 0 [ 163.498990][ T937] usb 1-1: New USB device found, idVendor=056a, idProduct=4004, bcdDevice= 0.00 [ 163.562548][ T937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.607731][ T937] usb 1-1: config 0 descriptor?? [ 164.129921][ T937] wacom 0003:056A:4004.0030: hidraw0: USB HID v0.00 Device [HID 056a:4004] on usb-dummy_hcd.0-1/input0 [ 164.318118][ T937] usb 1-1: USB disconnect, device number 17 [ 165.116441][ T5293] usb 5-1: USB disconnect, device number 15 [ 165.809943][ T5293] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 166.011507][ T5293] usb 5-1: Using ep0 maxpacket: 32 [ 166.023904][ T5293] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 166.075890][ T5293] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.150916][ T5293] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.179771][ T7965] netlink: 'syz.1.1229': attribute type 8 has an invalid length. [ 166.219549][ T5293] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 166.294414][ T5293] usb 5-1: New USB device found, idVendor=056a, idProduct=0315, bcdDevice= 0.00 [ 166.363109][ T5293] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.420493][ T5293] usb 5-1: config 0 descriptor?? [ 166.925478][ T5293] wacom 0003:056A:0315.0031: unknown main item tag 0x0 [ 166.970240][ T5293] wacom 0003:056A:0315.0031: Unknown device_type for 'HID 056a:0315'. Assuming pen. [ 167.051657][ T5293] wacom 0003:056A:0315.0031: hidraw0: USB HID v0.00 Device [HID 056a:0315] on usb-dummy_hcd.4-1/input0 [ 167.189725][ T5293] input: Wacom Intuos Pro M Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0315.0031/input/input32 [ 167.395338][ T5293] usb 5-1: USB disconnect, device number 16 [ 167.405913][ T7980] tipc: Enabling of bearer rejected, failed to enable media [ 167.557997][ T7984] netlink: 'syz.1.1238': attribute type 1 has an invalid length. [ 169.599238][ T8028] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 170.347127][ T8045] netlink: 'syz.1.1266': attribute type 4 has an invalid length. [ 170.347159][ T8045] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1266'. [ 170.425273][ T8046] netlink: zone id is out of range [ 170.474255][ T8046] netlink: set zone limit has 4 unknown bytes [ 171.129742][ T5293] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 171.332376][ T5293] usb 2-1: config 4 has an invalid interface number: 231 but max is 0 [ 171.358037][ T5293] usb 2-1: config 4 has no interface number 0 [ 171.382075][ T5293] usb 2-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 171.419592][ T5293] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.457020][ T5293] usb 2-1: Product: syz [ 171.480164][ T5293] usb 2-1: Manufacturer: syz [ 171.488925][ T5293] usb 2-1: SerialNumber: syz [ 171.543802][ T5293] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 171.975117][ T5293] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 172.045103][ T5293] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 172.196671][ T5293] usb 2-1: USB disconnect, device number 17 [ 172.689545][ T937] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 172.919977][ T937] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 172.962662][ T937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.013238][ T937] usb 5-1: config 0 descriptor?? [ 173.074524][ T937] cp210x 5-1:0.0: cp210x converter detected [ 173.543785][ T937] usb 5-1: cp210x converter now attached to ttyUSB0 [ 173.781558][ T937] usb 5-1: USB disconnect, device number 17 [ 173.860161][ T937] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 173.975726][ T937] cp210x 5-1:0.0: device disconnected [ 174.529563][ T937] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 174.750652][ T937] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 174.758830][ T937] usb 4-1: config 0 has no interface number 0 [ 174.828361][ T937] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.888735][ T8125] fuse: Unexpected value for 'default_permissions' [ 174.925379][ T937] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.981431][ T937] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice=ee.00 [ 175.053317][ T937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.136748][ T937] usb 4-1: config 0 descriptor?? [ 175.671046][ T937] uclogic 0003:256C:006D.0032: No inputs registered, leaving [ 175.734392][ T937] uclogic 0003:256C:006D.0032: hidraw0: USB HID v0.40 Device [HID 256c:006d] on usb-dummy_hcd.3-1/input1 [ 175.770990][ T8137] tipc: Enabling of bearer rejected, failed to enable media [ 175.977539][ T937] usb 4-1: USB disconnect, device number 17 [ 176.184655][ T8145] netlink: 191416 bytes leftover after parsing attributes in process `syz.0.1308'. [ 176.873156][ T937] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 177.099742][ T937] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.150203][ T937] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.217192][ T937] usb 1-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00 [ 177.289545][ T937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.353824][ T937] usb 1-1: config 0 descriptor?? [ 177.657342][ T8165] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 177.815303][ T937] uclogic 0003:28BD:0074.0033: interface is invalid, ignoring [ 178.023995][ T9] usb 1-1: USB disconnect, device number 18 [ 178.902417][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 178.902437][ T29] audit: type=1326 audit(1729123210.158:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8175 comm="syz.4.1323" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6f579 code=0x7ffc0000 [ 179.059528][ T29] audit: type=1326 audit(1729123210.188:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8175 comm="syz.4.1323" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6f579 code=0x7ffc0000 [ 179.282964][ T29] audit: type=1326 audit(1729123210.218:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8175 comm="syz.4.1323" exe="/root/syz-executor" sig=0 arch=40000003 syscall=277 compat=1 ip=0xf7f6f579 code=0x7ffc0000 [ 179.304823][ C0] vkms_vblank_simulate: vblank timer overrun [ 179.485812][ T29] audit: type=1326 audit(1729123210.218:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8175 comm="syz.4.1323" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6f579 code=0x7ffc0000 [ 179.608083][ T29] audit: type=1326 audit(1729123210.218:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8175 comm="syz.4.1323" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6f579 code=0x7ffc0000 [ 179.694067][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 179.749106][ T29] audit: type=1326 audit(1729123210.218:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8175 comm="syz.4.1323" exe="/root/syz-executor" sig=0 arch=40000003 syscall=282 compat=1 ip=0xf7f6f579 code=0x7ffc0000 [ 179.771101][ C0] vkms_vblank_simulate: vblank timer overrun [ 179.902126][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 179.909715][ T29] audit: type=1326 audit(1729123210.218:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8175 comm="syz.4.1323" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6f579 code=0x7ffc0000 [ 179.965195][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.017783][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 180.069117][ T29] audit: type=1326 audit(1729123210.218:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8175 comm="syz.4.1323" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f6f579 code=0x7ffc0000 [ 180.134377][ T9] usb 5-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 180.213806][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.301740][ T9] usb 5-1: config 0 descriptor?? [ 180.761183][ T9] wacom 0003:056A:0045.0034: unbalanced collection at end of report description [ 180.849267][ T9] wacom 0003:056A:0045.0034: parse failed [ 180.896909][ T9] wacom 0003:056A:0045.0034: probe with driver wacom failed with error -22 [ 180.992405][ T9] usb 5-1: USB disconnect, device number 18 [ 181.382781][ T8200] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1335'. [ 181.441317][ T8200] tipc: Enabled bearer , priority 0 [ 181.505146][ T8141] syz.2.1306: vmalloc error: size 2990080, failed to allocated page array size 5840, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 181.635129][ T8141] CPU: 0 UID: 0 PID: 8141 Comm: syz.2.1306 Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 181.645911][ T8141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 181.656040][ T8141] Call Trace: [ 181.659353][ T8141] [ 181.662323][ T8141] dump_stack_lvl+0x241/0x360 [ 181.667143][ T8141] ? __pfx_dump_stack_lvl+0x10/0x10 [ 181.672491][ T8141] ? __pfx__printk+0x10/0x10 [ 181.677294][ T8141] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 181.683761][ T8141] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 181.690320][ T8141] warn_alloc+0x278/0x410 [ 181.694707][ T8141] ? __pfx_warn_alloc+0x10/0x10 [ 181.699614][ T8141] ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 181.705997][ T8141] ? __get_vm_area_node+0x23d/0x270 [ 181.711275][ T8141] __vmalloc_node_range_noprof+0x691/0x13f0 [ 181.717258][ T8141] ? __kmalloc_cache_node_noprof+0x1d3/0x300 [ 181.723386][ T8141] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 181.729774][ T8141] ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 181.736000][ T8141] ? __get_vm_area_node+0x23d/0x270 [ 181.741275][ T8141] __vmalloc_node_range_noprof+0x59c/0x13f0 [ 181.747221][ T8141] ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 181.753453][ T8141] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 181.759263][ T8141] ? rcu_is_watching+0x15/0xb0 [ 181.764088][ T8141] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 181.770581][ T8141] ? rcu_is_watching+0x15/0xb0 [ 181.775397][ T8141] ? trace_kmalloc+0x1f/0xd0 [ 181.780088][ T8141] ? __kmalloc_node_noprof+0x247/0x440 [ 181.785610][ T8141] ? __kvmalloc_node_noprof+0x72/0x190 [ 181.791131][ T8141] __kvmalloc_node_noprof+0x142/0x190 [ 181.796558][ T8141] ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 181.802790][ T8141] __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 181.808837][ T8141] ? tpg_update_mv_step+0x361/0x4f0 [ 181.814102][ T8141] vivid_update_format_cap+0x133c/0x2090 [ 181.819817][ T8141] ? __pfx_vivid_update_format_cap+0x10/0x10 [ 181.825867][ T8141] vivid_vid_cap_s_dv_timings+0x535/0x1230 [ 181.831754][ T8141] __video_do_ioctl+0xc23/0xdd0 [ 181.836689][ T8141] ? __pfx___video_do_ioctl+0x10/0x10 [ 181.842124][ T8141] ? __might_fault+0xc6/0x120 [ 181.846856][ T8141] video_usercopy+0x89b/0x1180 [ 181.851698][ T8141] ? __pfx___video_do_ioctl+0x10/0x10 [ 181.857131][ T8141] ? __pfx_video_usercopy+0x10/0x10 [ 181.862468][ T8141] ? __fget_files+0x29/0x470 [ 181.867117][ T8141] v4l2_ioctl+0x189/0x1e0 [ 181.871547][ T8141] v4l2_compat_ioctl32+0x1d7/0x260 [ 181.876735][ T8141] __se_compat_sys_ioctl+0x510/0xc90 [ 181.882069][ T8141] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 181.887945][ T8141] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 181.894002][ T8141] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 181.900394][ T8141] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 181.907031][ T8141] ? lockdep_hardirqs_on+0x99/0x150 [ 181.912287][ T8141] __do_fast_syscall_32+0xb4/0x110 [ 181.917447][ T8141] ? exc_page_fault+0x590/0x8c0 [ 181.922359][ T8141] do_fast_syscall_32+0x34/0x80 [ 181.927253][ T8141] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 181.933639][ T8141] RIP: 0023:0xf7f24579 [ 181.937779][ T8141] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 181.957447][ T8141] RSP: 002b:00000000f56a656c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 181.965918][ T8141] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0845657 [ 181.974029][ T8141] RDX: 0000000020000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 181.982047][ T8141] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 181.990065][ T8141] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 181.998083][ T8141] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 182.006119][ T8141] [ 182.009301][ C0] vkms_vblank_simulate: vblank timer overrun [ 182.921101][ T937] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 183.201019][ T937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.261916][ T937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.313343][ T937] usb 4-1: New USB device found, idVendor=0543, idProduct=e621, bcdDevice= 0.00 [ 183.345418][ T8219] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1343'. [ 183.364878][ T937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.400726][ T8220] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1343'. [ 183.431422][ T937] usb 4-1: config 0 descriptor?? [ 183.449744][ T8220] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1343'. [ 183.479364][ T8141] Mem-Info: [ 183.483756][ T8141] active_anon:4718 inactive_anon:0 isolated_anon:0 [ 183.483756][ T8141] active_file:1358 inactive_file:38221 isolated_file:0 [ 183.483756][ T8141] unevictable:768 dirty:118 writeback:0 [ 183.483756][ T8141] slab_reclaimable:8721 slab_unreclaimable:99035 [ 183.483756][ T8141] mapped:21701 shmem:1236 pagetables:866 [ 183.483756][ T8141] sec_pagetables:0 bounce:0 [ 183.483756][ T8141] kernel_misc_reclaimable:0 [ 183.483756][ T8141] free:1203651 free_pcp:753 free_cma:0 [ 183.679548][ T5293] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 183.779287][ T8141] Node 0 active_anon:18872kB inactive_anon:0kB active_file:5400kB inactive_file:152812kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:86804kB dirty:472kB writeback:0kB shmem:3408kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10672kB pagetables:3464kB sec_pagetables:0kB all_unreclaimable? no [ 183.913855][ T5293] usb 5-1: config index 0 descriptor too short (expected 3133, got 61) [ 183.922572][ T5293] usb 5-1: config 0 has an invalid interface number: 156 but max is 1 [ 183.931801][ T937] viewsonic 0003:0543:E621.0035: hidraw0: USB HID v0.00 Device [HID 0543:e621] on usb-dummy_hcd.3-1/input0 [ 183.973436][ T5293] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.007581][ T8141] Node 1 active_anon:0kB inactive_anon:0kB active_file:32kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 184.089575][ T5293] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 184.098519][ T5293] usb 5-1: config 0 has no interface number 0 [ 184.175275][ T9] usb 4-1: USB disconnect, device number 18 [ 184.195745][ T5293] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 184.289773][ T8141] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 184.321657][ T5293] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 184.374835][ T5293] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 184.423515][ T5293] usb 5-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 184.459624][ T8141] lowmem_reserve[]: 0 2465 2466 0 0 [ 184.489783][ T8141] Node 0 DMA32 free:870816kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:18832kB inactive_anon:0kB active_file:5400kB inactive_file:151988kB unevictable:1536kB writepending:512kB present:3129332kB managed:2552504kB mlocked:0kB bounce:0kB free_pcp:1396kB local_pcp:188kB free_cma:0kB [ 184.548298][ T5293] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 184.588304][ T5293] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.630583][ T5293] usb 5-1: config 0 descriptor?? [ 184.666378][ T5293] gspca_main: spca561-2.14.0 probing abcd:cdee [ 184.691941][ T8141] lowmem_reserve[]: 0 0 0 0 0 [ 184.715327][ T8141] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 184.877950][ T5293] spca561 5-1:0.156: probe with driver spca561 failed with error -22 [ 184.935876][ T8141] lowmem_reserve[]: 0 0 0 0 0 [ 184.942277][ T5293] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 184.982528][ T8141] Node 1 Normal free:3928296kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:32kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:2092kB local_pcp:2092kB free_cma:0kB [ 185.029478][ T5293] usb 5-1: MIDIStreaming interface descriptor not found [ 185.217226][ T8141] lowmem_reserve[]: 0 0 0 0 0 [ 185.270778][ T5293] usb 5-1: USB disconnect, device number 19 [ 185.289565][ T8141] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 185.414217][ T8141] Node 0 DMA32: 407*4kB (UME) 50*8kB (UME) 32*16kB (UME) 41*32kB (UME) 14*64kB (ME) 8*128kB (M) 8*256kB (ME) 7*512kB (UME) 3*1024kB (ME) 5*2048kB (UME) 206*4096kB (M) = 868492kB [ 185.550643][ T8141] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 185.637477][ T8141] Node 1 Normal: 164*4kB (UME) 41*8kB (UME) 37*16kB (UME) 192*32kB (UME) 83*64kB (UME) 22*128kB (UME) 15*256kB (UM) 4*512kB (UM) 3*1024kB (UM) 4*2048kB (UM) 951*4096kB (M) = 3928296kB [ 185.859501][ T5293] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 185.899744][ T8141] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 186.036718][ T8141] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 186.109637][ T5293] usb 1-1: Using ep0 maxpacket: 16 [ 186.119894][ T8141] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 186.179804][ T5293] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.217211][ T8141] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 186.249561][ T5293] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.293129][ T8141] 40819 total pagecache pages [ 186.329150][ T5293] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 186.353482][ T8141] 0 pages in swap cache [ 186.357713][ T8141] Free swap = 124468kB [ 186.411064][ T5293] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.440301][ T8141] Total swap = 124996kB [ 186.444532][ T8141] 2097051 pages RAM [ 186.448372][ T8141] 0 pages HighMem/MovableOnly [ 186.515202][ T5293] usb 1-1: config 0 descriptor?? [ 186.554878][ T8141] 427075 pages reserved [ 186.599484][ T8141] 0 pages cma reserved [ 187.060874][ T5293] hid-multitouch 0003:1FD2:6007.0036: unknown main item tag 0x0 [ 187.148833][ T5293] hid-multitouch 0003:1FD2:6007.0036: unknown main item tag 0x0 [ 187.228788][ T5293] hid-multitouch 0003:1FD2:6007.0036: unknown main item tag 0x0 [ 187.309791][ T937] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 187.329467][ T5293] hid-multitouch 0003:1FD2:6007.0036: unknown main item tag 0x0 [ 187.389583][ T5293] hid-multitouch 0003:1FD2:6007.0036: unknown main item tag 0x0 [ 187.471045][ T5293] hid-multitouch 0003:1FD2:6007.0036: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.0-1/input0 [ 187.541784][ T937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.616245][ T5293] usb 1-1: USB disconnect, device number 19 [ 187.636090][ T937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.725585][ T5247] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 187.752658][ T937] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 187.775973][ T5247] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 187.790400][ T5247] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 187.832225][ T5247] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 187.849072][ T937] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1d00, bcdDevice= 0.00 [ 187.899495][ T937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.000584][ T937] usb 4-1: config 0 descriptor?? [ 188.321827][ T5247] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 188.332659][ T5247] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 188.597141][ T937] corsair-cpro 0003:1B1C:1D00.0037: unbalanced collection at end of report description [ 188.750110][ T937] corsair-cpro 0003:1B1C:1D00.0037: probe with driver corsair-cpro failed with error -22 [ 188.879857][ T937] usb 4-1: USB disconnect, device number 19 [ 189.973922][ T8250] chnl_net:caif_netlink_parms(): no params data found [ 190.228308][ T5247] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 190.266683][ T5247] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 190.277641][ T5247] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 190.287812][ T5247] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 190.295953][ T5247] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 190.303819][ T5247] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 190.359632][ T5247] Bluetooth: hci5: command tx timeout [ 190.909017][ T8250] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.987544][ T8250] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.057851][ T8250] bridge_slave_0: entered allmulticast mode [ 191.110780][ T8250] bridge_slave_0: entered promiscuous mode [ 191.204649][ T8250] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.259315][ T8250] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.329699][ T8250] bridge_slave_1: entered allmulticast mode [ 191.337001][ T8250] bridge_slave_1: entered promiscuous mode [ 191.874020][ T8250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.042524][ T8250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.205772][ T8168] warn_alloc: 3 callbacks suppressed [ 192.205797][ T8168] syz.1.1319: vmalloc error: size 2555904, failed to allocated page array size 4992, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null) [ 192.258957][ T8300] hub 6-0:1.0: USB hub found [ 192.285749][ T8299] netlink: 'syz.0.1378': attribute type 1 has an invalid length. [ 192.308446][ T8168] ,cpuset=/,mems_allowed=0-1 [ 192.348666][ T8168] CPU: 0 UID: 0 PID: 8168 Comm: syz.1.1319 Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 192.359448][ T8168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 192.369555][ T8168] Call Trace: [ 192.372878][ T8168] [ 192.375845][ T8168] dump_stack_lvl+0x241/0x360 [ 192.380596][ T8168] ? __pfx_dump_stack_lvl+0x10/0x10 [ 192.385854][ T8168] ? __pfx__printk+0x10/0x10 [ 192.390510][ T8168] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 192.397158][ T8168] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 192.403721][ T8168] warn_alloc+0x278/0x410 [ 192.408111][ T8168] ? __pfx_warn_alloc+0x10/0x10 [ 192.413021][ T8168] ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 192.419291][ T8168] ? __get_vm_area_node+0x23d/0x270 [ 192.424570][ T8168] __vmalloc_node_range_noprof+0x691/0x13f0 [ 192.430541][ T8168] ? __kmalloc_cache_node_noprof+0x1d3/0x300 [ 192.436586][ T8168] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 192.442965][ T8168] ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 192.449176][ T8168] ? __get_vm_area_node+0x23d/0x270 [ 192.454440][ T8168] __vmalloc_node_range_noprof+0x59c/0x13f0 [ 192.460389][ T8168] ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 192.466598][ T8168] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 192.472404][ T8168] ? rcu_is_watching+0x15/0xb0 [ 192.477221][ T8168] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 192.483601][ T8168] ? rcu_is_watching+0x15/0xb0 [ 192.488422][ T8168] ? trace_kmalloc+0x1f/0xd0 [ 192.493063][ T8168] ? __kmalloc_node_noprof+0x247/0x440 [ 192.498576][ T8168] ? __kvmalloc_node_noprof+0x72/0x190 [ 192.504086][ T8168] __kvmalloc_node_noprof+0x142/0x190 [ 192.509510][ T8168] ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 192.515725][ T8168] __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 192.521768][ T8168] ? tpg_update_mv_step+0x361/0x4f0 [ 192.527032][ T8168] vivid_update_format_cap+0x133c/0x2090 [ 192.532734][ T8168] ? __pfx_vivid_update_format_cap+0x10/0x10 [ 192.538829][ T8168] vivid_vid_cap_s_dv_timings+0x535/0x1230 [ 192.544718][ T8168] __video_do_ioctl+0xc23/0xdd0 [ 192.549643][ T8168] ? __pfx___video_do_ioctl+0x10/0x10 [ 192.555165][ T8168] ? __might_fault+0xc6/0x120 [ 192.559897][ T8168] video_usercopy+0x89b/0x1180 [ 192.564737][ T8168] ? __pfx___video_do_ioctl+0x10/0x10 [ 192.570171][ T8168] ? __pfx_video_usercopy+0x10/0x10 [ 192.575445][ T8168] ? __fget_files+0x29/0x470 [ 192.580104][ T8168] v4l2_ioctl+0x189/0x1e0 [ 192.584514][ T8168] v4l2_compat_ioctl32+0x1d7/0x260 [ 192.589693][ T8168] __se_compat_sys_ioctl+0x510/0xc90 [ 192.595131][ T8168] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 192.601005][ T8168] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 192.607068][ T8168] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 192.613473][ T8168] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 192.620117][ T8168] ? lockdep_hardirqs_on+0x99/0x150 [ 192.625370][ T8168] __do_fast_syscall_32+0xb4/0x110 [ 192.630549][ T8168] ? exc_page_fault+0x590/0x8c0 [ 192.635507][ T8168] do_fast_syscall_32+0x34/0x80 [ 192.640403][ T8168] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 192.646808][ T8168] RIP: 0023:0xf749d579 [ 192.650941][ T8168] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 192.670607][ T8168] RSP: 002b:00000000f578656c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 192.679088][ T8168] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0845657 [ 192.687110][ T8168] RDX: 0000000020000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 192.695135][ T8168] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 192.703158][ T8168] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 192.711184][ T8168] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 192.719225][ T8168] [ 192.722432][ C0] vkms_vblank_simulate: vblank timer overrun [ 192.732490][ T8299] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1378'. [ 192.829717][ T8300] hub 6-0:1.0: 1 port detected [ 192.873348][ T5247] Bluetooth: hci6: command tx timeout [ 192.890062][ T5247] Bluetooth: hci5: command tx timeout [ 192.916162][ T8250] team0: Port device team_slave_0 added [ 193.265274][ T8250] team0: Port device team_slave_1 added [ 193.710906][ T937] IPVS: starting estimator thread 0... [ 194.089535][ T8312] IPVS: using max 16 ests per chain, 38400 per kthread [ 194.453927][ T8250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.539650][ T8250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.694848][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.704534][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.780476][ T8250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.939454][ T5246] Bluetooth: hci5: command tx timeout [ 194.945039][ T5246] Bluetooth: hci6: command tx timeout [ 195.160278][ T8250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.167565][ T8250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.296655][ T8168] Mem-Info: [ 195.309516][ T8168] active_anon:4914 inactive_anon:0 isolated_anon:0 [ 195.309516][ T8168] active_file:1358 inactive_file:38223 isolated_file:0 [ 195.309516][ T8168] unevictable:768 dirty:202 writeback:0 [ 195.309516][ T8168] slab_reclaimable:8718 slab_unreclaimable:100340 [ 195.309516][ T8168] mapped:28842 shmem:1243 pagetables:815 [ 195.309516][ T8168] sec_pagetables:0 bounce:0 [ 195.309516][ T8168] kernel_misc_reclaimable:0 [ 195.309516][ T8168] free:1187506 free_pcp:1953 free_cma:0 [ 195.460062][ T8250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.708896][ T8168] Node 0 active_anon:23456kB inactive_anon:0kB active_file:5400kB inactive_file:152820kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115468kB dirty:808kB writeback:0kB shmem:3436kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10976kB pagetables:3460kB sec_pagetables:0kB all_unreclaimable? no [ 195.991509][ T8339] syz.4.1394 uses obsolete (PF_INET,SOCK_PACKET) [ 196.003428][ T8274] chnl_net:caif_netlink_parms(): no params data found [ 196.018353][ T8168] Node 1 active_anon:0kB inactive_anon:0kB active_file:32kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 196.276126][ T8168] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 196.532403][ T8168] lowmem_reserve[]: 0 2465 2466 0 0 [ 196.537777][ T8168] Node 0 DMA32 free:804920kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:30904kB inactive_anon:0kB active_file:5400kB inactive_file:151996kB unevictable:1536kB writepending:812kB present:3129332kB managed:2552504kB mlocked:0kB bounce:0kB free_pcp:1860kB local_pcp:1108kB free_cma:0kB [ 196.840541][ T5246] Bluetooth: hci2: command 0x0406 tx timeout [ 196.846650][ T5246] Bluetooth: hci0: command 0x0406 tx timeout [ 196.853613][ T4626] Bluetooth: hci4: command 0x0406 tx timeout [ 196.860051][ T4626] Bluetooth: hci1: command 0x0406 tx timeout [ 196.911176][ T8168] lowmem_reserve[]: 0 0 0 0 0 [ 196.916021][ T8168] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 197.013862][ T5244] Bluetooth: hci6: command tx timeout [ 197.021429][ T5244] Bluetooth: hci5: command tx timeout [ 197.191362][ T8168] lowmem_reserve[]: 0 0 0 0 0 [ 197.241136][ T8168] Node 1 Normal free:3928296kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:32kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:2092kB local_pcp:2092kB free_cma:0kB [ 197.404143][ T8168] lowmem_reserve[]: 0 0 0 0 0 [ 197.430854][ T8168] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 197.531329][ T8168] Node 0 DMA32: 11*4kB (UME) 53*8kB (UME) 43*16kB (ME) 24*32kB (ME) 18*64kB (ME) 13*128kB (M) 65*256kB (UME) 41*512kB (UME) 5*1024kB (UE) 2*2048kB (ME) 185*4096kB (M) = 809348kB [ 197.675450][ T8168] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 197.754272][ T8168] Node 1 Normal: 164*4kB (UME) 41*8kB (UME) 37*16kB (UME) 192*32kB (UME) 83*64kB (UME) 22*128kB (UME) 15*256kB (UM) 4*512kB (UM) 3*1024kB (UM) 4*2048kB (UM) 951*4096kB (M) = 3928296kB [ 197.892340][ T8168] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 197.939845][ T8168] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 198.020023][ T8168] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 198.089486][ T8168] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 198.154609][ T8168] 40830 total pagecache pages [ 198.192466][ T8168] 1 pages in swap cache [ 198.196711][ T8168] Free swap = 124324kB [ 198.239521][ T8168] Total swap = 124996kB [ 198.269624][ T8168] 2097051 pages RAM [ 198.292563][ T8168] 0 pages HighMem/MovableOnly [ 198.297317][ T8168] 427075 pages reserved [ 198.364822][ T8168] 0 pages cma reserved [ 198.565253][ T8369] netlink: 'syz.4.1406': attribute type 3 has an invalid length. [ 198.614581][ T8369] netlink: 'syz.4.1406': attribute type 1 has an invalid length. [ 198.658062][ T8369] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.1406'. [ 198.797975][ T8371] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1407'. [ 199.079917][ T5238] Bluetooth: hci6: command tx timeout [ 199.419743][ T5293] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 199.639861][ T5293] usb 4-1: Using ep0 maxpacket: 8 [ 199.648017][ T5293] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.693944][ T5293] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.742095][ T5293] usb 4-1: New USB device found, idVendor=0b05, idProduct=18c6, bcdDevice= 0.00 [ 199.785529][ T5293] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.833722][ T5293] usb 4-1: config 0 descriptor?? [ 200.388973][ T5293] asus 0003:0B05:18C6.0038: unknown main item tag 0x0 [ 200.447462][ T5293] asus 0003:0B05:18C6.0038: hidraw0: USB HID v0.04 Device [HID 0b05:18c6] on usb-dummy_hcd.3-1/input0 [ 200.500009][ T5293] asus 0003:0B05:18C6.0038: Asus input not registered [ 200.546649][ T5293] asus 0003:0B05:18C6.0038: probe with driver asus failed with error -12 [ 200.614185][ T5293] usb 4-1: USB disconnect, device number 20 [ 210.215127][ T5244] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 210.228915][ T5247] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 210.237885][ T5247] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 210.246176][ T5247] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 210.266850][ T5247] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 210.275477][ T5247] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 210.286438][ T5247] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 210.299087][ T5247] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 210.319235][ T5247] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 210.327295][ T5247] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 210.335144][ T5247] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 210.345284][ T5247] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 212.441208][ T5247] Bluetooth: hci2: command tx timeout [ 212.449709][ T5244] Bluetooth: hci3: command tx timeout [ 213.250673][ T5244] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 213.260097][ T5244] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 213.269277][ T5244] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 213.277912][ T5244] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 213.287943][ T5244] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 213.298191][ T5244] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 214.519553][ T5247] Bluetooth: hci2: command tx timeout [ 214.525057][ T5247] Bluetooth: hci3: command tx timeout [ 215.399796][ T5247] Bluetooth: hci7: command tx timeout [ 216.599789][ T5244] Bluetooth: hci2: command tx timeout [ 216.607240][ T5247] Bluetooth: hci3: command tx timeout [ 217.479696][ T5247] Bluetooth: hci7: command tx timeout [ 218.679738][ T5244] Bluetooth: hci2: command tx timeout [ 218.685285][ T5247] Bluetooth: hci3: command tx timeout [ 219.559730][ T5247] Bluetooth: hci7: command tx timeout [ 221.639797][ T5247] Bluetooth: hci7: command tx timeout [ 247.766497][ T8274] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.788050][ T8274] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.830528][ T8274] bridge_slave_0: entered allmulticast mode [ 247.869789][ T8274] bridge_slave_0: entered promiscuous mode [ 247.897684][ T8274] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.943032][ T8274] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.972538][ T8274] bridge_slave_1: entered allmulticast mode [ 248.019648][ T8274] bridge_slave_1: entered promiscuous mode [ 248.740040][ T5244] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 248.761662][ T5244] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 248.775304][ T5244] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 248.783566][ T5244] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 248.800196][ T5244] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 248.807728][ T5244] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 249.358108][ T5244] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 249.368292][ T5244] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 249.381355][ T5244] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 249.389886][ T5244] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 249.397942][ T5244] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 249.409696][ T5244] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 250.922477][ T5247] Bluetooth: hci5: command tx timeout [ 251.479732][ T5247] Bluetooth: hci0: command tx timeout [ 252.999863][ T5247] Bluetooth: hci5: command tx timeout [ 253.559625][ T5247] Bluetooth: hci0: command tx timeout [ 255.079910][ T5247] Bluetooth: hci5: command tx timeout [ 255.643170][ T5247] Bluetooth: hci0: command tx timeout [ 256.045269][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.059601][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.159933][ T5247] Bluetooth: hci5: command tx timeout [ 257.719591][ T5247] Bluetooth: hci0: command tx timeout [ 271.998535][ T5244] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 272.014098][ T5244] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 272.022803][ T5244] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 272.032342][ T5244] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 272.041152][ T5244] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 272.048569][ T5244] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 272.067981][ T5247] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 272.077491][ T5247] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 272.086368][ T5247] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 272.104274][ T5247] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 272.114576][ T5247] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 272.122058][ T5247] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 274.201290][ T5247] Bluetooth: hci1: command tx timeout [ 274.207165][ T5244] Bluetooth: hci8: command tx timeout [ 274.355245][ T5244] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 274.365094][ T5244] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 274.374069][ T5244] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 274.382662][ T5244] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 274.399673][ T5244] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 274.408534][ T5244] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 276.279462][ T5247] Bluetooth: hci1: command tx timeout [ 276.284957][ T5247] Bluetooth: hci8: command tx timeout [ 276.439664][ T5247] Bluetooth: hci9: command tx timeout [ 278.359735][ T5244] Bluetooth: hci1: command tx timeout [ 278.367352][ T5247] Bluetooth: hci8: command tx timeout [ 278.523782][ T5247] Bluetooth: hci9: command tx timeout [ 280.439557][ T5244] Bluetooth: hci1: command tx timeout [ 280.445072][ T5247] Bluetooth: hci8: command tx timeout [ 280.599685][ T5247] Bluetooth: hci9: command tx timeout [ 282.679705][ T5247] Bluetooth: hci9: command tx timeout [ 308.496883][ T5244] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 308.509306][ T5244] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 308.520533][ T5244] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 308.528621][ T5244] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 308.536938][ T5244] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 308.544860][ T5244] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 309.597467][ T5244] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 309.609740][ T5244] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 309.619114][ T5244] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 309.627715][ T5244] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 309.635647][ T5244] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 309.646674][ T5244] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 310.600798][ T5244] Bluetooth: hci4: command tx timeout [ 311.719727][ T5244] Bluetooth: hci6: command tx timeout [ 312.679627][ T5244] Bluetooth: hci4: command tx timeout [ 313.799806][ T5244] Bluetooth: hci6: command tx timeout [ 314.759484][ T5244] Bluetooth: hci4: command tx timeout [ 315.879557][ T5244] Bluetooth: hci6: command tx timeout [ 316.839622][ T5244] Bluetooth: hci4: command tx timeout [ 317.488706][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.499524][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.959578][ T5244] Bluetooth: hci6: command tx timeout [ 332.530266][ T5247] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 332.542660][ T5247] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 332.551339][ T5247] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 332.569670][ T5247] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 332.577580][ T5247] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 332.589899][ T5247] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 332.802865][ T5244] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 332.813546][ T5244] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 332.824857][ T5244] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 332.833226][ T5244] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 332.851267][ T5244] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 332.859951][ T5244] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 334.679783][ T5244] Bluetooth: hci10: command tx timeout [ 334.921948][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 334.928047][ T54] Bluetooth: hci3: command 0x0406 tx timeout [ 334.935244][ T5247] Bluetooth: hci11: command tx timeout [ 334.950174][ T5247] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 334.964642][ T5247] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 334.978442][ T5247] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 334.991025][ T5247] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 334.998901][ T5247] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 335.010225][ T5247] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 336.759562][ T5244] Bluetooth: hci10: command tx timeout [ 336.999578][ T5244] Bluetooth: hci11: command tx timeout [ 337.080760][ T5244] Bluetooth: hci12: command tx timeout [ 338.839602][ T5244] Bluetooth: hci10: command tx timeout [ 339.088738][ T5244] Bluetooth: hci11: command tx timeout [ 339.159551][ T5244] Bluetooth: hci12: command tx timeout [ 340.045459][ T5244] Bluetooth: hci7: command 0x0406 tx timeout [ 340.919677][ T5241] Bluetooth: hci10: command tx timeout [ 341.159543][ T5241] Bluetooth: hci11: command tx timeout [ 341.239860][ T5241] Bluetooth: hci12: command tx timeout [ 343.319628][ T5241] Bluetooth: hci12: command tx timeout [ 369.266827][ T5244] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 369.276405][ T5244] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 369.285129][ T5244] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 369.294877][ T5244] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 369.304936][ T5244] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 369.312602][ T5244] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 369.816139][ T5241] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 369.826382][ T5241] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 369.835631][ T5241] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 369.852588][ T5241] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 369.862321][ T5241] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 369.871545][ T5241] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 371.399469][ T5241] Bluetooth: hci13: command tx timeout [ 371.959634][ T5241] Bluetooth: hci14: command tx timeout [ 373.481814][ T5241] Bluetooth: hci13: command tx timeout [ 374.039693][ T5244] Bluetooth: hci14: command tx timeout [ 375.559523][ T5244] Bluetooth: hci13: command tx timeout [ 375.886067][ T5238] Bluetooth: hci0: command 0x0406 tx timeout [ 375.898922][ T5244] Bluetooth: hci5: command 0x0406 tx timeout [ 376.119465][ T5247] Bluetooth: hci14: command tx timeout [ 377.639575][ T5247] Bluetooth: hci13: command tx timeout [ 378.199862][ T5247] Bluetooth: hci14: command tx timeout [ 378.923331][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.939401][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 392.896960][ T5241] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 392.907241][ T5241] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 392.916067][ T5241] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 392.940903][ T5241] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 392.949822][ T5241] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 392.957344][ T5241] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 393.215759][ T5247] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 393.225888][ T5247] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 393.235453][ T5247] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 393.244817][ T5247] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 393.252784][ T5247] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 393.260823][ T5247] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 394.919816][ T30] INFO: task syz.4.1408:8373 blocked for more than 143 seconds. [ 394.927556][ T30] Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 395.003233][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 395.012289][ T5244] Bluetooth: hci15: command tx timeout [ 395.031926][ T30] task:syz.4.1408 state:D stack:25696 pid:8373 tgid:8372 ppid:5256 flags:0x20004002 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 395.089919][ T30] Call Trace: [ 395.093470][ T30] [ 395.096450][ T30] __schedule+0x1895/0x4b30 [ 395.202213][ T30] ? __pfx___schedule+0x10/0x10 [ 395.207313][ T30] ? __pfx_lock_release+0x10/0x10 [ 395.250122][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 395.255720][ T30] ? schedule+0x90/0x320 [ 395.273119][ T30] schedule+0x14b/0x320 [ 395.277399][ T30] schedule_preempt_disabled+0x13/0x30 [ 395.288091][ T30] __mutex_lock+0x6a7/0xd70 [ 395.297714][ T30] ? __mutex_lock+0x52a/0xd70 [ 395.308928][ T30] ? tun_chr_close+0x3b/0x1b0 [ 395.318695][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 395.324122][ T5244] Bluetooth: hci16: command tx timeout [ 395.339527][ T30] ? __pfx_call_rcu+0x10/0x10 [ 395.344576][ T30] tun_chr_close+0x3b/0x1b0 [ 395.349134][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 395.367193][ T30] __fput+0x23f/0x880 [ 395.374470][ T30] task_work_run+0x24f/0x310 [ 395.387809][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 395.396306][ T30] ? __pfx_task_work_run+0x10/0x10 [ 395.409394][ T30] ? do_exit+0xa2a/0x28e0 [ 395.413823][ T30] ? kmem_cache_free+0x1a2/0x420 [ 395.419011][ T30] ? do_exit+0xa2a/0x28e0 [ 395.435600][ T30] do_exit+0xa2f/0x28e0 [ 395.445038][ T30] ? __pfx_do_exit+0x10/0x10 [ 395.454335][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 395.467280][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 395.477290][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 395.497466][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 395.505567][ T30] do_group_exit+0x207/0x2c0 [ 395.517552][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 395.525700][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 395.538422][ T30] get_signal+0x16a3/0x1740 [ 395.543639][ T30] ? __pfx_get_signal+0x10/0x10 [ 395.548590][ T30] arch_do_signal_or_restart+0x96/0x860 [ 395.576718][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 395.589907][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 395.595740][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 395.613706][ T30] __do_fast_syscall_32+0xc4/0x110 [ 395.619074][ T30] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 395.633168][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 395.638483][ T30] do_fast_syscall_32+0x34/0x80 [ 395.659270][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 395.665981][ T30] RIP: 0023:0xf7f6f579 [ 395.679562][ T30] RSP: 002b:00000000f56f656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 395.688958][ T30] RAX: 000000000000002c RBX: 0000000000000003 RCX: 0000000020000480 [ 395.706916][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 395.719070][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 395.740409][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 395.748565][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 395.769253][ T30] [ 395.775625][ T30] INFO: task syz-executor:8409 blocked for more than 144 seconds. [ 395.789533][ T30] Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 395.797511][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 395.826893][ T30] task:syz-executor state:D stack:26592 pid:8409 tgid:8409 ppid:1 flags:0x20004004 [ 395.849348][ T30] Call Trace: [ 395.852713][ T30] [ 395.855693][ T30] __schedule+0x1895/0x4b30 [ 395.873783][ T30] ? __pfx___schedule+0x10/0x10 [ 395.878806][ T30] ? __pfx_lock_release+0x10/0x10 [ 395.889529][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 395.904902][ T30] ? schedule+0x90/0x320 [ 395.909252][ T30] schedule+0x14b/0x320 [ 395.917658][ T30] schedule_preempt_disabled+0x13/0x30 [ 395.929939][ T30] __mutex_lock+0x6a7/0xd70 [ 395.934572][ T30] ? __mutex_lock+0x52a/0xd70 [ 395.949219][ T30] ? register_nexthop_notifier+0x84/0x290 [ 395.955382][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 395.966337][ T30] ? __asan_memset+0x23/0x50 [ 395.978270][ T30] register_nexthop_notifier+0x84/0x290 [ 395.988101][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 396.004766][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 396.015450][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 396.028271][ T30] ? __asan_memset+0x23/0x50 [ 396.036969][ T30] ops_init+0x31e/0x590 [ 396.049916][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 396.055411][ T30] setup_net+0x287/0x9e0 [ 396.068818][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 396.077492][ T30] ? __pfx_setup_net+0x10/0x10 [ 396.088601][ T30] copy_net_ns+0x33f/0x570 [ 396.096295][ T30] create_new_namespaces+0x425/0x7b0 [ 396.110928][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 396.116761][ T30] ksys_unshare+0x57d/0xa70 [ 396.132009][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 396.137133][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 396.149869][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 396.156566][ T30] __ia32_sys_unshare+0x37/0x40 [ 396.174226][ T30] __do_fast_syscall_32+0xb4/0x110 [ 396.187164][ T30] ? exc_page_fault+0x590/0x8c0 [ 396.195826][ T30] do_fast_syscall_32+0x34/0x80 [ 396.212663][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 396.219104][ T30] RIP: 0023:0xf73ad579 [ 396.233164][ T30] RSP: 002b:00000000f74fff7c EFLAGS: 00000206 ORIG_RAX: 0000000000000136 [ 396.248424][ T30] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 396.260159][ T30] RDX: 00000000f739bff4 RSI: 00000000f727224b RDI: 0000000030000000 [ 396.268211][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 396.302349][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 396.317298][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 396.329442][ T30] [ 396.338600][ T30] [ 396.338600][ T30] Showing all locks held in the system: [ 396.349487][ T30] 3 locks held by kworker/1:0/25: [ 396.354640][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 396.375462][ T5244] Bluetooth: hci8: command 0x0406 tx timeout [ 396.382469][ T5244] Bluetooth: hci1: command 0x0406 tx timeout [ 396.436165][ T30] #1: ffffc900001f7d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 396.456202][ T30] #2: ffffffff8fcd2c08 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 396.470945][ T30] 1 lock held by khungtaskd/30: [ 396.475963][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 396.499812][ T30] 3 locks held by kworker/u8:2/35: [ 396.506092][ T30] #0: ffff88802dd97948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 396.527841][ T30] #1: ffffc90000ab7d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 396.549361][ T30] #2: ffffffff8fcd2c08 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 396.559229][ T30] 4 locks held by kworker/u8:3/52: [ 396.575619][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 396.593575][ T30] #1: ffffc90000bd7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 396.615395][ T30] #2: ffffffff8fcc6110 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 396.636218][ T30] #3: ffffffff8fcd2c08 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 396.648685][ T30] 3 locks held by kworker/u8:4/80: [ 396.659339][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 396.683081][ T30] #1: ffffc900022dfd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 396.704413][ T30] #2: ffffffff8fcd2c08 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 396.720393][ T30] 2 locks held by getty/4997: [ 396.725147][ T30] #0: ffff888032d380a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 396.745694][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 396.759597][ T30] 5 locks held by kworker/u9:4/5241: [ 396.765066][ T30] #0: ffff888085c37148 ((wq_completion)hci8){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 396.788706][ T30] #1: ffffc9000393fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 396.811533][ T30] #2: ffff888029d2cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 396.829806][ T30] #3: ffff888029d2c078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 396.854395][ T30] #4: ffffffff8fe3f528 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 396.868308][ T30] 6 locks held by kworker/u9:7/5247: [ 396.879505][ T30] #0: ffff888085c35948 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 396.900717][ T30] #1: ffffc9000399fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 396.929413][ T30] #2: ffff888029458d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 396.950955][ T30] #3: ffff888029458078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 396.969638][ T30] #4: ffffffff8fe3f528 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 396.991679][ T30] #5: ffffffff8e93d378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 397.008742][ T30] 3 locks held by kworker/1:3/5290: [ 397.019550][ T30] 1 lock held by syz-executor/8274: [ 397.024996][ T30] #0: ffffffff8fcd2c08 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 397.045616][ T30] 2 locks held by syz.0.1405/8368: [ 397.056389][ T30] #0: ffffffff8fcd2c08 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 397.070711][ T30] #1: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 397.082791][ T5238] Bluetooth: hci15: command tx timeout [ 397.101136][ T30] 1 lock held by syz.4.1408/8373: [ 397.106331][ T30] #0: ffffffff8fcd2c08 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 397.126368][ T30] 1 lock held by syz.3.1412/8382: [ 397.135483][ T30] #0: ffffffff8fcd2c08 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 397.155552][ T30] 2 locks held by syz-executor/8389: [ 397.166972][ T30] #0: ffffffff8fcc6110 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 397.187178][ T30] #1: ffffffff8fcd2c08 (rtnl_mutex){+.+.}-{3:3}, at: setup_net+0x602/0x9e0 [ 397.208026][ T30] 2 locks held by syz-executor/8390: [ 397.213939][ T30] #0: ffffffff8fcc6110 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 397.235476][ T30] #1: ffffffff8fcd2c08 (rtnl_mutex){+.+.}-{3:3}, at: setup_net+0x602/0x9e0 [ 397.248840][ T30] 2 locks held by syz-executor/8394: [ 397.259337][ T30] #0: ffffffff8fcc6110 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 397.268886][ T30] #1: ffffffff8fcd2c08 (rtnl_mutex){+.+.}-{3:3}, at: setup_net+0x602/0x9e0 [ 397.288731][ T30] 2 locks held by syz-executor/8407: [ 397.295780][ T30] #0: ffffffff8fcc6110 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 397.317401][ T30] #1: ffffffff8fcd2c08 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 397.348414][ T30] 2 locks held by syz-executor/8409: [ 397.355366][ T30] #0: ffffffff8fcc6110 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 397.369512][ T30] #1: ffffffff8fcd2c08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 397.389555][ T30] 2 locks held by syz-executor/8416: [ 397.394947][ T30] #0: ffffffff8fcc6110 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 397.405895][ T5238] Bluetooth: hci16: command tx timeout [ 397.427093][ T30] #1: ffffffff8fcd2c08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 397.441763][ T30] 2 locks held by syz-executor/8417: [ 397.447123][ T30] #0: ffffffff8fcc6110 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 397.467208][ T30] #1: ffffffff8fcd2c08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 397.480790][ T30] 2 locks held by syz-executor/8421: [ 397.486322][ T30] #0: ffffffff8fcc6110 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 397.509927][ T30] #1: ffffffff8fcd2c08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 397.529743][ T30] 2 locks held by syz-executor/8428: [ 397.535120][ T30] #0: ffffffff8fcc6110 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 397.556138][ T30] #1: ffffffff8fcd2c08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 397.576214][ T30] 2 locks held by syz-executor/8431: [ 397.584557][ T30] #0: ffffffff8fcc6110 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 397.599918][ T30] #1: ffffffff8fcd2c08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 397.622011][ T30] 2 locks held by syz-executor/8438: [ 397.627377][ T30] #0: ffffffff8fcc6110 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 397.649228][ T30] #1: ffffffff8fcd2c08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 397.671468][ T30] 2 locks held by syz-executor/8440: [ 397.676835][ T30] #0: ffffffff8fcc6110 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 397.696453][ T30] #1: ffffffff8fcd2c08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 397.710401][ T30] 2 locks held by syz-executor/8443: [ 397.715761][ T30] #0: ffffffff8fcc6110 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 397.736625][ T30] #1: ffffffff8fcd2c08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 397.758729][ T30] 2 locks held by syz-executor/8455: [ 397.766211][ T30] #0: ffffffff8fcc6110 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 397.784836][ T30] #1: ffffffff8fcd2c08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 397.809741][ T30] 2 locks held by syz-executor/8458: [ 397.815196][ T30] #0: ffffffff8fcc6110 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 397.837183][ T30] #1: ffffffff8fcd2c08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 397.854444][ T30] 2 locks held by syz-executor/8465: [ 397.867005][ T30] #0: ffffffff8fcc6110 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 397.882947][ T30] #1: ffffffff8fcd2c08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 397.899873][ T30] 2 locks held by syz-executor/8468: [ 397.905327][ T30] #0: ffffffff8fcc6110 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 397.929173][ T30] #1: ffffffff8fcd2c08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 397.957975][ T30] [ 397.969492][ T30] ============================================= [ 397.969492][ T30] [ 397.978027][ T30] NMI backtrace for cpu 0 [ 397.982489][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 397.994449][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 398.004995][ T30] Call Trace: [ 398.008373][ T30] [ 398.011344][ T30] dump_stack_lvl+0x241/0x360 [ 398.016082][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 398.021346][ T30] ? __pfx__printk+0x10/0x10 [ 398.026059][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 398.031179][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 398.036973][ T30] ? _printk+0xd5/0x120 [ 398.041192][ T30] ? __pfx__printk+0x10/0x10 [ 398.045902][ T30] ? __wake_up_klogd+0xcc/0x110 [ 398.050828][ T30] ? __pfx__printk+0x10/0x10 [ 398.055736][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 398.060825][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 398.066869][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 398.072913][ T30] watchdog+0xff4/0x1040 [ 398.077254][ T30] ? watchdog+0x1ea/0x1040 [ 398.081761][ T30] ? __pfx_watchdog+0x10/0x10 [ 398.086593][ T30] kthread+0x2f0/0x390 [ 398.090820][ T30] ? __pfx_watchdog+0x10/0x10 [ 398.095563][ T30] ? __pfx_kthread+0x10/0x10 [ 398.100207][ T30] ret_from_fork+0x4b/0x80 [ 398.104770][ T30] ? __pfx_kthread+0x10/0x10 [ 398.109411][ T30] ret_from_fork_asm+0x1a/0x30 [ 398.114245][ T30] [ 398.117998][ T30] Sending NMI from CPU 0 to CPUs 1: [ 398.124011][ C1] NMI backtrace for cpu 1 [ 398.124029][ C1] CPU: 1 UID: 0 PID: 5290 Comm: kworker/1:3 Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 398.124051][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 398.124063][ C1] Workqueue: events nsim_dev_trap_report_work [ 398.124095][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x8/0x90 [ 398.124125][ C1] Code: 44 0a 20 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 4c 8b 04 24 <65> 48 8b 14 25 c0 d7 03 00 65 8b 05 20 ec 6e 7e 25 00 01 ff 00 74 [ 398.124142][ C1] RSP: 0018:ffffc90000a17bb0 EFLAGS: 00000246 [ 398.124158][ C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffff88802e1b5a00 [ 398.124171][ C1] RDX: 0000000000000100 RSI: 0000000000000001 RDI: 0000000000000001 [ 398.124183][ C1] RBP: ffff888061a80028 R08: ffffffff8992e06c R09: 1ffffffff285930d [ 398.124197][ C1] R10: dffffc0000000000 R11: fffffbfff285930e R12: dffffc0000000000 [ 398.124211][ C1] R13: ffff888061a80000 R14: ffff8880904b9140 R15: 1ffff1100c350005 [ 398.124225][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 398.124241][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 398.124254][ C1] CR2: 00000000f73fdc2c CR3: 000000000e734000 CR4: 00000000003526f0 [ 398.124271][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 398.124282][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 398.124294][ C1] Call Trace: [ 398.124300][ C1] [ 398.124308][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 398.124332][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 398.124370][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 398.124392][ C1] ? nmi_handle+0x2a/0x5a0 [ 398.124419][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 398.124444][ C1] ? nmi_handle+0x14f/0x5a0 [ 398.124462][ C1] ? nmi_handle+0x2a/0x5a0 [ 398.124481][ C1] ? __sanitizer_cov_trace_const_cmp4+0x8/0x90 [ 398.124506][ C1] ? default_do_nmi+0x63/0x160 [ 398.124530][ C1] ? exc_nmi+0x123/0x1f0 [ 398.124553][ C1] ? end_repeat_nmi+0xf/0x53 [ 398.124575][ C1] ? netdev_core_pick_tx+0xac/0x320 [ 398.124597][ C1] ? __sanitizer_cov_trace_const_cmp4+0x8/0x90 [ 398.124622][ C1] ? __sanitizer_cov_trace_const_cmp4+0x8/0x90 [ 398.124648][ C1] ? __sanitizer_cov_trace_const_cmp4+0x8/0x90 [ 398.124672][ C1] [ 398.124678][ C1] [ 398.124684][ C1] netdev_core_pick_tx+0xac/0x320 [ 398.124704][ C1] ? skb_dst_force+0x52/0x370 [ 398.124725][ C1] __dev_queue_xmit+0x8bc/0x3ed0 [ 398.124753][ C1] ? __dev_queue_xmit+0x2da/0x3ed0 [ 398.124772][ C1] ? __lock_acquire+0x1384/0x2050 [ 398.124807][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 398.124838][ C1] ? mark_lock+0x9a/0x360 [ 398.124858][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 398.124889][ C1] ? ip_finish_output2+0xa14/0x1390 [ 398.124909][ C1] ? ip_finish_output2+0x45f/0x1390 [ 398.124926][ C1] ip_finish_output2+0xd41/0x1390 [ 398.124944][ C1] ? ip_finish_output2+0x45f/0x1390 [ 398.124965][ C1] ? __pfx_ip_finish_output2+0x10/0x10 [ 398.124984][ C1] ? ip_skb_dst_mtu+0x6ba/0x9b0 [ 398.125011][ C1] ? __ip_finish_output+0x349/0x400 [ 398.125031][ C1] synproxy_send_client_synack+0x8b8/0xf30 [ 398.125064][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 398.125091][ C1] ? synproxy_pernet+0x45/0x270 [ 398.125121][ C1] nft_synproxy_eval_v4+0x3ca/0x610 [ 398.125150][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 398.125180][ C1] ? nf_ip_checksum+0x13a/0x500 [ 398.125199][ C1] nft_synproxy_do_eval+0x362/0xa60 [ 398.125229][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 398.125256][ C1] ? ip_vs_conn_hashkey_param+0x3ad/0x6b0 [ 398.125287][ C1] ? ip_vs_conn_out_get+0xba6/0xc00 [ 398.125308][ C1] nft_do_chain+0x4ad/0x1da0 [ 398.125329][ C1] ? tcp_conn_schedule+0x45e/0x880 [ 398.125357][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 398.125387][ C1] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 398.125406][ C1] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 398.125428][ C1] nft_do_chain_inet+0x418/0x6b0 [ 398.125457][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 398.125493][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 398.125519][ C1] nf_hook_slow+0xc3/0x220 [ 398.125545][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 398.125567][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 398.125589][ C1] NF_HOOK+0x29e/0x450 [ 398.125611][ C1] ? NF_HOOK+0x9a/0x450 [ 398.125630][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 398.125652][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 398.125677][ C1] ? ip_rcv_finish+0x406/0x560 [ 398.125699][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 398.125720][ C1] NF_HOOK+0x3a4/0x450 [ 398.125740][ C1] ? __lock_acquire+0x1384/0x2050 [ 398.125768][ C1] ? NF_HOOK+0x9a/0x450 [ 398.125792][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 398.125812][ C1] ? ip_rcv_core+0x801/0xd10 [ 398.125834][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 398.125859][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 398.125880][ C1] __netif_receive_skb+0x2bf/0x650 [ 398.125905][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 398.125931][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 398.125954][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 398.125981][ C1] ? __pfx_lock_release+0x10/0x10 [ 398.126009][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 398.126041][ C1] process_backlog+0x662/0x15b0 [ 398.126067][ C1] ? process_backlog+0x33b/0x15b0 [ 398.126096][ C1] ? __pfx_process_backlog+0x10/0x10 [ 398.126119][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 398.126147][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 398.126176][ C1] __napi_poll+0xcb/0x490 [ 398.126200][ C1] net_rx_action+0x89b/0x1240 [ 398.126235][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 398.126260][ C1] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 398.126302][ C1] handle_softirqs+0x2c5/0x980 [ 398.126329][ C1] ? do_softirq+0x11b/0x1e0 [ 398.126353][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 398.126378][ C1] ? rcu_is_watching+0x15/0xb0 [ 398.126400][ C1] do_softirq+0x11b/0x1e0 [ 398.126422][ C1] [ 398.126428][ C1] [ 398.126435][ C1] ? __pfx_do_softirq+0x10/0x10 [ 398.126458][ C1] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 398.126487][ C1] ? rcu_is_watching+0x15/0xb0 [ 398.126508][ C1] __local_bh_enable_ip+0x1bb/0x200 [ 398.126532][ C1] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 398.126555][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 398.126580][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 398.126604][ C1] ? nsim_dev_trap_report_work+0x6a7/0xaa0 [ 398.126629][ C1] nsim_dev_trap_report_work+0x75d/0xaa0 [ 398.126658][ C1] ? process_scheduled_works+0x976/0x1850 [ 398.126683][ C1] process_scheduled_works+0xa63/0x1850 [ 398.126721][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 398.126751][ C1] ? assign_work+0x364/0x3d0 [ 398.126777][ C1] worker_thread+0x870/0xd30 [ 398.126812][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 398.126841][ C1] ? __kthread_parkme+0x169/0x1d0 [ 398.126870][ C1] ? __pfx_worker_thread+0x10/0x10 [ 398.126894][ C1] kthread+0x2f0/0x390 [ 398.126911][ C1] ? __pfx_worker_thread+0x10/0x10 [ 398.126936][ C1] ? __pfx_kthread+0x10/0x10 [ 398.126954][ C1] ret_from_fork+0x4b/0x80 [ 398.126979][ C1] ? __pfx_kthread+0x10/0x10 [ 398.126996][ C1] ret_from_fork_asm+0x1a/0x30 [ 398.127028][ C1] [ 398.910389][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 398.917753][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc3-syzkaller-00087-gc964ced77262 #0 [ 398.928304][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 398.938403][ T30] Call Trace: [ 398.941722][ T30] [ 398.944865][ T30] dump_stack_lvl+0x241/0x360 [ 398.949682][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 398.954933][ T30] ? __pfx__printk+0x10/0x10 [ 398.959565][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 398.965712][ T30] ? vscnprintf+0x5d/0x90 [ 398.970188][ T30] panic+0x349/0x880 [ 398.974134][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 398.980606][ T30] ? __pfx_panic+0x10/0x10 [ 398.985072][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 398.990490][ T30] ? __irq_work_queue_local+0x137/0x410 [ 398.996099][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 399.001525][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 399.007732][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 399.013945][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 399.020158][ T30] watchdog+0x1033/0x1040 [ 399.024554][ T30] ? watchdog+0x1ea/0x1040 [ 399.029115][ T30] ? __pfx_watchdog+0x10/0x10 [ 399.033848][ T30] kthread+0x2f0/0x390 [ 399.037966][ T30] ? __pfx_watchdog+0x10/0x10 [ 399.042695][ T30] ? __pfx_kthread+0x10/0x10 [ 399.047324][ T30] ret_from_fork+0x4b/0x80 [ 399.051796][ T30] ? __pfx_kthread+0x10/0x10 [ 399.056429][ T30] ret_from_fork_asm+0x1a/0x30 [ 399.061268][ T30] [ 399.064635][ T30] Kernel Offset: disabled [ 399.068986][ T30] Rebooting in 86400 seconds..