last executing test programs: 38.206721559s ago: executing program 4 (id=1075): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) 37.645691595s ago: executing program 4 (id=1082): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x24, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x24}}, 0x0) 37.320175916s ago: executing program 4 (id=1086): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="000000001c0002"], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0xc0) 37.059652063s ago: executing program 4 (id=1089): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 36.848179082s ago: executing program 1 (id=1092): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 36.460381298s ago: executing program 4 (id=1096): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x54, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1ba00, 0x40a38}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0xfffffffb}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x54}}, 0x8000002) 36.42930168s ago: executing program 1 (id=1097): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000640)=[@cswp={0x57, 0x114, 0x7, {{}, &(0x7f0000000100), 0x0}}], 0x58}, 0x0) 35.956823635s ago: executing program 1 (id=1098): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0xffff0018) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, 0x0) 35.765380178s ago: executing program 4 (id=1100): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x5) ioctl$TCFLSH(r0, 0x8910, 0x40000020001100) 35.162937962s ago: executing program 1 (id=1104): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x80, &(0x7f00000002c0)={[{@noswap}]}) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x4002a, &(0x7f0000000000)={[{@noswap}, {@inode32}]}) 34.671141626s ago: executing program 1 (id=1106): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000340)={0x2, 0x4e20, 0x0, @dev}, 0x1c) sendmmsg$inet(r0, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@ip_ttl={{0x14, 0x0, 0x34, 0xfffffffc}}], 0x18}}], 0x1, 0x0) 31.143254723s ago: executing program 1 (id=1114): io_setup(0x7, &(0x7f0000000600)=0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0xe7, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000000)="ff07000000000000", 0x400049}]) 28.117941647s ago: executing program 3 (id=1118): r0 = open(&(0x7f00000002c0)='./file0\x00', 0x1491ff, 0x22) fcntl$setlease(r0, 0x400, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)=@random={'os2.', '#[:{\x00'}, 0x0, 0x0, 0x3) 27.780209872s ago: executing program 3 (id=1121): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 26.846680531s ago: executing program 0 (id=1124): pipe2$9p(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r1 = syz_open_procfs$userns(0x0, &(0x7f0000000b80)) splice(r1, &(0x7f0000000bc0)=0x10000, r0, 0x0, 0x3, 0x4) 26.064830578s ago: executing program 0 (id=1125): r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) 25.885205271s ago: executing program 0 (id=1127): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TIOCSSOFTCAR(r0, 0x5432, 0x0) 25.693283017s ago: executing program 3 (id=1128): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f0000000080)=0x101, 0x4) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) 25.39953323s ago: executing program 0 (id=1129): syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000040)={&(0x7f0000000100)=[{0x63, 0x6011, 0x0, 0x0}], 0x1}) 25.209840065s ago: executing program 3 (id=1130): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000080)=0x7) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000040)=0x7) 24.13244419s ago: executing program 2 (id=1132): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r0, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0xfd, @tick, {0x5}, {0xe}, @connect={{}, {0x1, 0x7}}}], 0xfdc1) 24.130314991s ago: executing program 2 (id=1133): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0xffffff1f}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x2}}, [@alu={0x4, 0x1, 0x1, 0x8, 0x9}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 23.822906229s ago: executing program 0 (id=1134): mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002f00)='fdinfo\x00') 23.798397478s ago: executing program 2 (id=1135): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, r1}}, 0x48) 23.569464171s ago: executing program 2 (id=1136): r0 = shmget(0x2, 0x3000, 0x200, &(0x7f0000ffd000/0x3000)=nil) setuid(0xee01) shmctl$IPC_RMID(r0, 0x0) 23.565675029s ago: executing program 0 (id=1137): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="2e000300010001", 0x7) 23.326813267s ago: executing program 2 (id=1138): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0xa0042, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f00000003c0)={0x8005, r0, 0x1}) 23.10885916s ago: executing program 2 (id=1139): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c40)={0x468, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x41c, 0x8, 0x0, 0x1, [{0x9c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x50, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{}, {0x0, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x0, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "effb3d58460ea431f2cb4a6894ddb283035bf5afdd0619ce173f1d7c1700"}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x330, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0xa, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x2e8, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0xfffffd46, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{}, {0x0, 0x2, @empty}, {0x0, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3e}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x468}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 20.505195277s ago: executing program 32 (id=1100): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x5) ioctl$TCFLSH(r0, 0x8910, 0x40000020001100) 15.887334679s ago: executing program 33 (id=1114): io_setup(0x7, &(0x7f0000000600)=0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0xe7, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000000)="ff07000000000000", 0x400049}]) 15.860678316s ago: executing program 3 (id=1142): r0 = socket$unix(0x1, 0x5, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0) 15.546890742s ago: executing program 3 (id=1143): io_setup(0x4082, &(0x7f0000000380)=0x0) syz_io_uring_setup(0x100293f, &(0x7f0000001400)={0x0, 0x2000004, 0x10, 0xfffffffc}, &(0x7f0000000080), &(0x7f00000014c0)) io_pgetevents(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 7.283915128s ago: executing program 34 (id=1137): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="2e000300010001", 0x7) 6.986554024s ago: executing program 35 (id=1139): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c40)={0x468, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x41c, 0x8, 0x0, 0x1, [{0x9c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x50, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{}, {0x0, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x0, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "effb3d58460ea431f2cb4a6894ddb283035bf5afdd0619ce173f1d7c1700"}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x330, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0xa, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x2e8, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0xfffffd46, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{}, {0x0, 0x2, @empty}, {0x0, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3e}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}]}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x468}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 0s ago: executing program 36 (id=1143): io_setup(0x4082, &(0x7f0000000380)=0x0) syz_io_uring_setup(0x100293f, &(0x7f0000001400)={0x0, 0x2000004, 0x10, 0xfffffffc}, &(0x7f0000000080), &(0x7f00000014c0)) io_pgetevents(r0, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.132' (ED25519) to the list of known hosts. [ 87.846480][ T5824] cgroup: Unknown subsys name 'net' [ 88.043337][ T5824] cgroup: Unknown subsys name 'cpuset' [ 88.117926][ T5824] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 90.035141][ T5824] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.142479][ T44] cfg80211: failed to load regulatory.db [ 94.582081][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.585984][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.608053][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.620149][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.620981][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.745119][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 94.754888][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 94.755675][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 94.756787][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 94.773876][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 94.797552][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 94.798980][ T5155] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 94.808425][ T5155] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 94.812302][ T5155] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 94.813357][ T5155] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 94.843953][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 94.846160][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 94.849099][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 94.858035][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 94.859543][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 94.902354][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 94.907946][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 94.921857][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 94.931394][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 94.932346][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 95.689068][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 96.080475][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 96.093667][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 96.112461][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 96.188113][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 96.648314][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.649574][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.650492][ T5838] bridge_slave_0: entered allmulticast mode [ 96.653599][ T5838] bridge_slave_0: entered promiscuous mode [ 96.698561][ T5840] Bluetooth: hci0: command tx timeout [ 96.815273][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.815432][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.815800][ T5838] bridge_slave_1: entered allmulticast mode [ 96.834746][ T5838] bridge_slave_1: entered promiscuous mode [ 96.857199][ T5840] Bluetooth: hci2: command tx timeout [ 96.857352][ T5840] Bluetooth: hci1: command tx timeout [ 96.937264][ T5155] Bluetooth: hci3: command tx timeout [ 97.017249][ T5155] Bluetooth: hci4: command tx timeout [ 97.529325][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.610605][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.610747][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.610943][ T5843] bridge_slave_0: entered allmulticast mode [ 97.613824][ T5843] bridge_slave_0: entered promiscuous mode [ 97.618957][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.619207][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.619418][ T5842] bridge_slave_0: entered allmulticast mode [ 97.622495][ T5842] bridge_slave_0: entered promiscuous mode [ 97.745543][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.745794][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.745917][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.746047][ T5845] bridge_slave_0: entered allmulticast mode [ 97.779184][ T5845] bridge_slave_0: entered promiscuous mode [ 97.784122][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.784292][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.784481][ T5843] bridge_slave_1: entered allmulticast mode [ 97.788354][ T5843] bridge_slave_1: entered promiscuous mode [ 97.790136][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.790286][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.790463][ T5842] bridge_slave_1: entered allmulticast mode [ 97.793425][ T5842] bridge_slave_1: entered promiscuous mode [ 98.048000][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.048113][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.048310][ T5845] bridge_slave_1: entered allmulticast mode [ 98.050415][ T5845] bridge_slave_1: entered promiscuous mode [ 98.219856][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.219951][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.220344][ T5850] bridge_slave_0: entered allmulticast mode [ 98.222151][ T5850] bridge_slave_0: entered promiscuous mode [ 98.554906][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.555074][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.555266][ T5850] bridge_slave_1: entered allmulticast mode [ 98.558238][ T5850] bridge_slave_1: entered promiscuous mode [ 98.563564][ T5838] team0: Port device team_slave_0 added [ 98.662847][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.666319][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.771061][ T5838] team0: Port device team_slave_1 added [ 98.775354][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.777222][ T5155] Bluetooth: hci0: command tx timeout [ 98.781404][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.799000][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.937363][ T5155] Bluetooth: hci1: command tx timeout [ 98.937398][ T5155] Bluetooth: hci2: command tx timeout [ 99.017282][ T5840] Bluetooth: hci3: command tx timeout [ 99.097203][ T5840] Bluetooth: hci4: command tx timeout [ 99.116493][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.323572][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.620496][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.621579][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.621591][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.621610][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.625334][ T5842] team0: Port device team_slave_0 added [ 99.629743][ T5843] team0: Port device team_slave_0 added [ 99.782052][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.782066][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.782085][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.784345][ T5842] team0: Port device team_slave_1 added [ 99.786433][ T5843] team0: Port device team_slave_1 added [ 99.791686][ T5845] team0: Port device team_slave_0 added [ 100.060107][ T5845] team0: Port device team_slave_1 added [ 100.062281][ T5850] team0: Port device team_slave_0 added [ 100.281274][ T5850] team0: Port device team_slave_1 added [ 100.284243][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.284258][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.284287][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.499311][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.499328][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.499347][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.739342][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.739360][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.739389][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.741193][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.741207][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.741235][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.742942][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.742955][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.742983][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.867100][ T5840] Bluetooth: hci0: command tx timeout [ 101.012484][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.012501][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.012524][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.013618][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.013634][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.013660][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.026251][ T5838] hsr_slave_0: entered promiscuous mode [ 101.027290][ T5840] Bluetooth: hci2: command tx timeout [ 101.027319][ T5840] Bluetooth: hci1: command tx timeout [ 101.028188][ T5838] hsr_slave_1: entered promiscuous mode [ 101.052269][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.052289][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.052319][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.097108][ T5155] Bluetooth: hci3: command tx timeout [ 101.187184][ T5155] Bluetooth: hci4: command tx timeout [ 101.684799][ T5842] hsr_slave_0: entered promiscuous mode [ 101.685753][ T5842] hsr_slave_1: entered promiscuous mode [ 101.686481][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 101.686618][ T5842] Cannot create hsr debugfs directory [ 101.715821][ T5843] hsr_slave_0: entered promiscuous mode [ 101.716819][ T5843] hsr_slave_1: entered promiscuous mode [ 101.718038][ T5843] debugfs: 'hsr0' already exists in 'hsr' [ 101.718066][ T5843] Cannot create hsr debugfs directory [ 101.978459][ T5845] hsr_slave_0: entered promiscuous mode [ 101.979880][ T5845] hsr_slave_1: entered promiscuous mode [ 101.980787][ T5845] debugfs: 'hsr0' already exists in 'hsr' [ 101.980812][ T5845] Cannot create hsr debugfs directory [ 102.237742][ T5850] hsr_slave_0: entered promiscuous mode [ 102.239021][ T5850] hsr_slave_1: entered promiscuous mode [ 102.239995][ T5850] debugfs: 'hsr0' already exists in 'hsr' [ 102.240019][ T5850] Cannot create hsr debugfs directory [ 102.937249][ T5155] Bluetooth: hci0: command tx timeout [ 103.097714][ T5155] Bluetooth: hci1: command tx timeout [ 103.097725][ T5840] Bluetooth: hci2: command tx timeout [ 103.177390][ T5840] Bluetooth: hci3: command tx timeout [ 103.257428][ T5840] Bluetooth: hci4: command tx timeout [ 103.850253][ T5838] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 103.905659][ T5838] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 103.927809][ T5838] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 103.982048][ T5838] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 104.124719][ T5843] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 104.152991][ T5843] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 104.222079][ T5843] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 104.245809][ T5843] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 104.369176][ T5842] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 104.418167][ T5842] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 104.466848][ T5842] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 104.531835][ T5842] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 104.710437][ T5845] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 104.771880][ T5845] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 104.812539][ T5845] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 104.874653][ T5845] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 105.026324][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.091516][ T5850] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.136013][ T5850] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.193175][ T5850] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.231778][ T5850] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.299503][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.348608][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.349221][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.418026][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.418714][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.473139][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.596690][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.634594][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.691032][ T1440] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.691303][ T1440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.740901][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.756697][ T1440] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.756895][ T1440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.818332][ T3021] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.818554][ T3021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.850987][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.910828][ T3021] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.912653][ T3021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.032751][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.126691][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.126842][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.181846][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.212018][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.212245][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.354128][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.436166][ T1440] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.436420][ T1440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.453014][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.511749][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.517197][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.934262][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.293858][ T5843] veth0_vlan: entered promiscuous mode [ 107.384312][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.425989][ T5843] veth1_vlan: entered promiscuous mode [ 107.561641][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.583458][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.644487][ T5838] veth0_vlan: entered promiscuous mode [ 107.661969][ T5843] veth0_macvtap: entered promiscuous mode [ 107.706749][ T5843] veth1_macvtap: entered promiscuous mode [ 107.723858][ T5838] veth1_vlan: entered promiscuous mode [ 107.733631][ T5842] veth0_vlan: entered promiscuous mode [ 107.817900][ T5842] veth1_vlan: entered promiscuous mode [ 107.854774][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.894827][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.936613][ T5845] veth0_vlan: entered promiscuous mode [ 107.940974][ T5850] veth0_vlan: entered promiscuous mode [ 107.961850][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.981027][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.001375][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.008546][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.035471][ T5838] veth0_macvtap: entered promiscuous mode [ 108.046283][ T5850] veth1_vlan: entered promiscuous mode [ 108.051446][ T5845] veth1_vlan: entered promiscuous mode [ 108.107851][ T5838] veth1_macvtap: entered promiscuous mode [ 108.194049][ T5842] veth0_macvtap: entered promiscuous mode [ 108.250370][ T5842] veth1_macvtap: entered promiscuous mode [ 108.314108][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.384200][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.435138][ T3525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.435166][ T3525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.460194][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.480099][ T5850] veth0_macvtap: entered promiscuous mode [ 108.495572][ T5845] veth0_macvtap: entered promiscuous mode [ 108.504574][ T1440] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.532068][ T1440] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.536715][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.566810][ T1440] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.596112][ T5850] veth1_macvtap: entered promiscuous mode [ 108.604709][ T1440] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.605236][ T5845] veth1_macvtap: entered promiscuous mode [ 108.652765][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.652788][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.706372][ T1440] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.735620][ T3021] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.762799][ T3021] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.779597][ T3021] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.973906][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.982707][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.094592][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.100653][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.282405][ T3525] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.304313][ T3525] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.329000][ T3525] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.330921][ T3587] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.330939][ T3587] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.373850][ T3525] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.405290][ T3525] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.435134][ T3525] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.495780][ T3525] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.562723][ T1440] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.562746][ T1440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.565070][ T3525] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.763413][ T1440] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.763434][ T1440] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.990099][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.990120][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.171990][ T3021] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.172011][ T3021] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.271473][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.271495][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.409999][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.410021][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.664250][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.664271][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.751265][ T5969] mmap: syz.1.10 (5969) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 111.898844][ T5916] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 112.141477][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.141513][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.141556][ T5916] usb 4-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 112.141579][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.263648][ T5916] usb 4-1: config 0 descriptor?? [ 112.855849][ T5916] hid_mf 0003:0079:1846.0001: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.3-1/input0 [ 112.855884][ T5916] hid_mf 0003:0079:1846.0001: Invalid report, this should never happen! [ 112.855900][ T5916] hid_mf 0003:0079:1846.0001: Force feedback init failed. [ 112.983909][ T5916] usb 4-1: USB disconnect, device number 2 [ 113.509101][ T6013] fido_id[6013]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 113.857326][ T44] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 114.007107][ T44] usb 3-1: Using ep0 maxpacket: 8 [ 114.017651][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.017690][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.017717][ T44] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 114.017767][ T44] usb 3-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 114.017794][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.040141][ T44] usb 3-1: config 0 descriptor?? [ 114.295017][ T5975] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 114.462152][ T5975] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 114.462182][ T5975] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 114.462201][ T5975] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 114.462222][ T5975] usb 1-1: config 220 has no interface number 2 [ 114.462357][ T5975] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 114.462387][ T5975] usb 1-1: config 220 interface 0 has no altsetting 0 [ 114.462464][ T5975] usb 1-1: config 220 interface 76 has no altsetting 0 [ 114.462484][ T5975] usb 1-1: config 220 interface 1 has no altsetting 0 [ 114.483370][ T5975] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 114.483405][ T5975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.483427][ T5975] usb 1-1: Product: syz [ 114.483443][ T5975] usb 1-1: Manufacturer: syz [ 114.483525][ T5975] usb 1-1: SerialNumber: syz [ 114.574948][ T44] elecom 0003:056E:00FE.0002: item fetching failed at offset 6/70 [ 114.576799][ T44] elecom 0003:056E:00FE.0002: probe with driver elecom failed with error -22 [ 114.807510][ T44] usb 3-1: USB disconnect, device number 2 [ 115.070815][ T5975] usb 1-1: selecting invalid altsetting 0 [ 115.082140][ T5975] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 115.082178][ T5975] usb 1-1: No valid video chain found. [ 115.105932][ T5975] usb 1-1: selecting invalid altsetting 0 [ 115.105973][ T5975] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 115.159161][ T5975] usb 1-1: USB disconnect, device number 2 [ 115.454832][ T5825] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 115.607098][ T5825] usb 5-1: Using ep0 maxpacket: 32 [ 115.609493][ T5825] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.609524][ T5825] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.609563][ T5825] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 115.609586][ T5825] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.616495][ T5825] usb 5-1: config 0 descriptor?? [ 115.727252][ T5975] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 115.889422][ T5975] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.889447][ T5975] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 115.907207][ T5975] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 115.907379][ T5975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.907474][ T5975] usb 2-1: Product: syz [ 115.907493][ T5975] usb 2-1: Manufacturer: syz [ 115.907510][ T5975] usb 2-1: SerialNumber: syz [ 116.183067][ T5825] ft260 0003:0403:6030.0003: unbalanced collection at end of report description [ 116.187964][ T5825] ft260 0003:0403:6030.0003: failed to parse HID [ 116.188639][ T5825] ft260 0003:0403:6030.0003: probe with driver ft260 failed with error -22 [ 116.401502][ T5994] usb 5-1: USB disconnect, device number 2 [ 116.512352][ T5975] usb 2-1: cannot find UAC_HEADER [ 116.794360][ T5975] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 116.830734][ T5975] usb 2-1: USB disconnect, device number 2 [ 116.965722][ T6078] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 117.036234][ T5990] udevd[5990]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 117.449164][ T6091] netlink: 56 bytes leftover after parsing attributes in process `syz.3.62'. [ 117.647225][ T5994] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 117.836931][ T5994] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 117.837026][ T5994] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.837069][ T5994] usb 5-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 117.837091][ T5994] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.958830][ T5994] usb 5-1: config 0 descriptor?? [ 118.446247][ T5994] bigben 0003:146B:0902.0004: unexpected rdesc, please submit for review [ 118.476364][ T5994] bigben 0003:146B:0902.0004: hidraw0: USB HID v0.01 Device [HID 146b:0902] on usb-dummy_hcd.4-1/input0 [ 118.476400][ T5994] bigben 0003:146B:0902.0004: not enough fields in HID_OUTPUT_REPORT 0 [ 118.476419][ T5994] bigben 0003:146B:0902.0004: no output report found [ 118.659391][ T5994] usb 5-1: USB disconnect, device number 3 [ 119.027414][ T6124] fido_id[6124]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 119.417623][ T6143] netlink: 104 bytes leftover after parsing attributes in process `syz.4.86'. [ 120.083993][ T6161] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 120.532738][ T6178] netlink: 104 bytes leftover after parsing attributes in process `syz.2.98'. [ 120.875491][ T6184] ALSA: mixer_oss: invalid OSS volume '' [ 122.187127][ T5975] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 122.355752][ T5975] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.355801][ T5975] usb 5-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 122.355826][ T5975] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.402340][ T5975] usb 5-1: config 0 descriptor?? [ 122.461769][ T6223] netlink: 79 bytes leftover after parsing attributes in process `syz.3.115'. [ 122.462020][ T6223] netlink: 79 bytes leftover after parsing attributes in process `syz.3.115'. [ 122.981956][ T5975] itetech 0003:258A:6A88.0005: hidraw0: USB HID v0.00 Device [HID 258a:6a88] on usb-dummy_hcd.4-1/input0 [ 123.147992][ T44] usb 5-1: USB disconnect, device number 4 [ 123.207211][ T5825] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 123.286024][ T6245] fido_id[6245]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 123.369920][ T5825] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 123.369956][ T5825] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 123.369976][ T5825] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 123.369996][ T5825] usb 1-1: config 220 has no interface number 2 [ 123.370069][ T5825] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 123.370097][ T5825] usb 1-1: config 220 interface 0 has no altsetting 0 [ 123.370116][ T5825] usb 1-1: config 220 interface 76 has no altsetting 0 [ 123.370135][ T5825] usb 1-1: config 220 interface 1 has no altsetting 0 [ 123.373766][ T5825] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 123.373794][ T5825] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.373814][ T5825] usb 1-1: Product: syz [ 123.373829][ T5825] usb 1-1: Manufacturer: syz [ 123.373843][ T5825] usb 1-1: SerialNumber: syz [ 123.690372][ T5825] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 123.690407][ T5825] usb 1-1: No valid video chain found. [ 123.690467][ T5825] usb 1-1: selecting invalid altsetting 0 [ 123.780254][ T5825] usb 1-1: selecting invalid altsetting 0 [ 123.780292][ T5825] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 123.817717][ T5825] usb 1-1: USB disconnect, device number 3 [ 124.934535][ T6290] xt_l2tp: invalid flags combination: 8 [ 125.487322][ T5825] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 125.647520][ T5825] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 125.647572][ T5825] usb 2-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 125.647596][ T5825] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.653211][ T5825] usb 2-1: config 0 descriptor?? [ 125.655044][ T6298] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 125.701755][ T5923] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 125.847193][ T5923] usb 1-1: Using ep0 maxpacket: 16 [ 125.852469][ T5923] usb 1-1: too many endpoints for config 0 interface 0 altsetting 255: 254, using maximum allowed: 30 [ 125.852576][ T5923] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 197, changing to 11 [ 125.852606][ T5923] usb 1-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 125.852634][ T5923] usb 1-1: config 0 interface 0 has no altsetting 0 [ 125.852671][ T5923] usb 1-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.00 [ 125.852753][ T5923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.945938][ T5923] usb 1-1: config 0 descriptor?? [ 126.157837][ T5825] belkin 0003:050D:3201.0006: unknown main item tag 0x2 [ 126.157881][ T5825] belkin 0003:050D:3201.0006: unknown main item tag 0x0 [ 126.256594][ T6313] capability: warning: `syz.2.148' uses deprecated v2 capabilities in a way that may be insecure [ 126.292383][ T5825] belkin 0003:050D:3201.0006: hiddev0,hidraw0: USB HID v1.01 Device [HID 050d:3201] on usb-dummy_hcd.1-1/input0 [ 126.347963][ T5825] usb 2-1: USB disconnect, device number 3 [ 126.484472][ T5923] topre 0003:0853:0148.0007: hidraw0: USB HID vc9.b6 Device [HID 0853:0148] on usb-dummy_hcd.0-1/input0 [ 126.558391][ T6318] fido_id[6318]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 126.661152][ T5994] usb 1-1: USB disconnect, device number 4 [ 127.094344][ T6326] fido_id[6326]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 127.253688][ T6334] sp0: Synchronizing with TNC [ 127.267146][ T5916] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 127.270149][ T6333] [U] ` [ 127.431222][ T5916] usb 2-1: config 0 has an invalid interface number: 217 but max is 0 [ 127.431251][ T5916] usb 2-1: config 0 has no interface number 0 [ 127.448068][ T5916] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 127.448102][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.448126][ T5916] usb 2-1: Product: syz [ 127.448142][ T5916] usb 2-1: Manufacturer: syz [ 127.448159][ T5916] usb 2-1: SerialNumber: syz [ 127.475181][ T5916] usb 2-1: config 0 descriptor?? [ 127.483342][ T5916] hub 2-1:0.217: bad descriptor, ignoring hub [ 127.483386][ T5916] hub 2-1:0.217: probe with driver hub failed with error -5 [ 127.515760][ T6341] warning: `syz.3.160' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 127.724094][ T5916] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 127.760641][ T5916] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 127.770144][ T5916] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 127.770242][ T5916] usb 2-1: media controller created [ 127.952939][ T5916] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 128.044543][ T38] audit: type=1326 audit(1758186736.948:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6348 comm="syz.0.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36826eeba9 code=0x7ffc0000 [ 128.084672][ T38] audit: type=1326 audit(1758186736.958:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6348 comm="syz.0.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36826eeba9 code=0x7ffc0000 [ 128.109085][ T38] audit: type=1326 audit(1758186736.988:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6348 comm="syz.0.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f36826eeba9 code=0x7ffc0000 [ 128.132091][ T38] audit: type=1326 audit(1758186737.038:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6348 comm="syz.0.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36826eeba9 code=0x7ffc0000 [ 128.132273][ T38] audit: type=1326 audit(1758186737.038:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6348 comm="syz.0.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36826eeba9 code=0x7ffc0000 [ 128.133410][ T38] audit: type=1326 audit(1758186737.038:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6348 comm="syz.0.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f36826eeba9 code=0x7ffc0000 [ 128.133464][ T38] audit: type=1326 audit(1758186737.038:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6348 comm="syz.0.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36826eeba9 code=0x7ffc0000 [ 128.133514][ T38] audit: type=1326 audit(1758186737.038:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6348 comm="syz.0.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36826eeba9 code=0x7ffc0000 [ 128.237158][ T5994] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 128.309183][ T5916] DVB: Unable to find symbol dib7000p_attach() [ 128.309199][ T5916] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 128.419280][ T5994] usb 3-1: Using ep0 maxpacket: 16 [ 128.421853][ T5994] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.421883][ T5994] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.421904][ T5994] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 128.421945][ T5994] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 128.421968][ T5994] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.495765][ T5994] usb 3-1: config 0 descriptor?? [ 128.541179][ T5916] rc_core: IR keymap rc-dib0700-rc5 not found [ 128.541201][ T5916] Registered IR keymap rc-empty [ 128.543183][ T5916] dvb-usb: could not initialize remote control. [ 128.543195][ T5916] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 128.654512][ T5916] usb 2-1: USB disconnect, device number 4 [ 129.002805][ T5916] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 129.079487][ T5994] microsoft 0003:045E:07DA.0008: report is too long [ 129.079522][ T5994] microsoft 0003:045E:07DA.0008: item 0 4 0 8 parsing failed [ 129.080358][ T5994] microsoft 0003:045E:07DA.0008: parse failed [ 129.080506][ T5994] microsoft 0003:045E:07DA.0008: probe with driver microsoft failed with error -22 [ 129.207042][ T5903] usb 3-1: USB disconnect, device number 3 [ 129.237175][ T990] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 129.387421][ T990] usb 1-1: Using ep0 maxpacket: 32 [ 129.393412][ T990] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 129.393439][ T990] usb 1-1: config 0 has no interface number 0 [ 129.402823][ T990] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 129.402853][ T990] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.402874][ T990] usb 1-1: Product: syz [ 129.402889][ T990] usb 1-1: Manufacturer: syz [ 129.402904][ T990] usb 1-1: SerialNumber: syz [ 129.442961][ T990] usb 1-1: config 0 descriptor?? [ 129.482295][ T990] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 129.482327][ T990] usb 1-1: selecting invalid altsetting 1 [ 129.482343][ T990] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 129.513971][ T990] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 129.514377][ T990] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 129.514429][ T990] usb 1-1: media controller created [ 129.663769][ T990] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 129.798969][ T990] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 129.799030][ T990] zl10353_read_register: readreg error (reg=127, ret==-71) [ 129.818902][ T990] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 130.115571][ T990] usb 1-1: USB disconnect, device number 5 [ 130.447607][ T5916] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 130.614073][ T5916] usb 3-1: string descriptor 0 read error: -22 [ 130.614218][ T5916] usb 3-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 130.614242][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.695523][ T5916] usb 3-1: config 0 descriptor?? [ 130.701651][ T5916] usbtest 3-1:0.0: FX2 device [ 130.701673][ T5916] usbtest 3-1:0.0: low-speed {control intr-in intr-out} tests (+alt) [ 130.753761][ T990] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 130.934969][ T990] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.935019][ T990] usb 5-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 130.935043][ T990] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.956408][ T990] usb 5-1: config 0 descriptor?? [ 130.977321][ T44] usb 3-1: USB disconnect, device number 4 [ 131.443591][ T990] lenovo 0003:17EF:6062.0009: unknown main item tag 0x1 [ 131.494956][ T990] lenovo 0003:17EF:6062.0009: hidraw0: USB HID v0.04 Device [HID 17ef:6062] on usb-dummy_hcd.4-1/input0 [ 131.639342][ T5923] usb 5-1: USB disconnect, device number 5 [ 131.852824][ T6418] fido_id[6418]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 132.628712][ T6442] gfs2: path_lookup on c:::!(>yo=O-FmSH_Y8yu [ 132.628712][ T6442] FãzR #xI6BYCg)'!A{g [ 132.628712][ T6442] }m]x%{qm*PN~%U5JhBoGhN].L.`$ returned error -2 [ 133.607386][ T990] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 133.787146][ T990] usb 3-1: Using ep0 maxpacket: 32 [ 133.796790][ T990] usb 3-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice=26.2f [ 133.796819][ T990] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.796839][ T990] usb 3-1: Product: syz [ 133.796854][ T990] usb 3-1: Manufacturer: syz [ 133.796869][ T990] usb 3-1: SerialNumber: syz [ 133.859531][ T990] usb 3-1: config 0 descriptor?? [ 133.875939][ T990] ums-onetouch 3-1:0.0: USB Mass Storage device detected [ 134.002641][ T990] usb 3-1: Found UVC 0.00 device syz (0d49:7000) [ 134.002678][ T990] usb 3-1: No valid video chain found. [ 134.106625][ T31] usb 3-1: USB disconnect, device number 5 [ 134.158694][ T6487] netlink: 'syz.4.226': attribute type 3 has an invalid length. [ 135.380106][ T6515] usb usb8: usbfs: process 6515 (syz.3.239) did not claim interface 0 before use [ 135.660002][ T5840] Bluetooth: hci1: command tx timeout [ 135.772231][ T6530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.246'. [ 136.281686][ T38] audit: type=1326 audit(1758186745.188:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6542 comm="syz.4.253" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f694228eba9 code=0x0 [ 136.883448][ T38] audit: type=1326 audit(1758186745.788:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6559 comm="syz.3.262" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f194651eba9 code=0x0 [ 137.414381][ T38] audit: type=1326 audit(1758186746.318:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6573 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36826eeba9 code=0x7ffc0000 [ 137.414438][ T38] audit: type=1326 audit(1758186746.318:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6573 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f36826eeba9 code=0x7ffc0000 [ 137.414482][ T38] audit: type=1326 audit(1758186746.318:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6573 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36826eeba9 code=0x7ffc0000 [ 137.414526][ T38] audit: type=1326 audit(1758186746.318:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6573 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36826eeba9 code=0x7ffc0000 [ 137.813245][ T6587] comedi comedi3: 8255: I/O port conflict (0x40404f26,4) [ 137.813307][ T6587] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 137.813358][ T6587] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 137.813487][ T6587] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 137.813537][ T6587] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 137.813631][ T6587] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 137.813682][ T6587] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 137.813732][ T6587] comedi comedi3: 8255: I/O port conflict (0x3bf,4) [ 137.813872][ T6587] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 137.813921][ T6587] comedi comedi3: 8255: I/O port conflict (0x20000001,4) [ 137.813971][ T6587] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 137.814075][ T6587] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 138.237866][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.237949][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.267173][ T5916] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 138.424220][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.424252][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.424289][ T5916] usb 3-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 138.424310][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.434678][ T5916] usb 3-1: config 0 descriptor?? [ 138.640405][ T38] audit: type=1326 audit(1758186747.538:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6610 comm="syz.1.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf42eeba9 code=0x7ffc0000 [ 138.640463][ T38] audit: type=1326 audit(1758186747.548:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6610 comm="syz.1.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf42eeba9 code=0x7ffc0000 [ 138.697240][ T31] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 138.703156][ T38] audit: type=1326 audit(1758186747.608:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6610 comm="syz.1.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4cf42eeba9 code=0x7ffc0000 [ 138.703208][ T38] audit: type=1326 audit(1758186747.608:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6610 comm="syz.1.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf42eeba9 code=0x7ffc0000 [ 138.854370][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 138.860011][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.860055][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.860096][ T31] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 138.860122][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.872289][ T31] usb 5-1: config 0 descriptor?? [ 138.923396][ T5916] petalynx 0003:18B1:0037.000A: item fetching failed at offset 2/5 [ 138.924228][ T5916] petalynx 0003:18B1:0037.000A: parse failed [ 138.924299][ T5916] petalynx 0003:18B1:0037.000A: probe with driver petalynx failed with error -22 [ 139.132990][ T990] usb 3-1: USB disconnect, device number 6 [ 139.347168][ T5916] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 139.349878][ T31] corsair 0003:1B1C:1B02.000B: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.4-1/input0 [ 139.406341][ T6625] netlink: 56 bytes leftover after parsing attributes in process `syz.1.293'. [ 139.406496][ T6625] netlink: 16 bytes leftover after parsing attributes in process `syz.1.293'. [ 139.525403][ T31] corsair 0003:1B1C:1B02.000B: Failed to get K90 initial state (error -71). [ 139.540317][ T5916] usb 4-1: Using ep0 maxpacket: 8 [ 139.544211][ T5916] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 139.544244][ T5916] usb 4-1: config 0 interface 0 has no altsetting 0 [ 139.544280][ T5916] usb 4-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 139.544304][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.637663][ T31] usb 5-1: USB disconnect, device number 6 [ 139.639128][ T5916] usb 4-1: config 0 descriptor?? [ 139.671133][ T6630] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 140.112921][ T5916] uclogic 0003:5543:0042.000C: unbalanced delimiter at end of report description [ 140.113737][ T5916] uclogic 0003:5543:0042.000C: parse failed [ 140.113836][ T5916] uclogic 0003:5543:0042.000C: probe with driver uclogic failed with error -22 [ 140.310710][ T5916] usb 4-1: USB disconnect, device number 3 [ 140.639750][ T5994] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 140.799697][ T5994] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.799734][ T5994] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.799759][ T5994] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 140.799803][ T5994] usb 3-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00 [ 140.799833][ T5994] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.818740][ T5994] usb 3-1: config 0 descriptor?? [ 141.003724][ T6656] netlink: 16 bytes leftover after parsing attributes in process `syz.1.308'. [ 141.340815][ T5994] input: HID 28bd:1903 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28BD:1903.000D/input/input6 [ 141.547683][ T5994] uclogic 0003:28BD:1903.000D: input,hidraw0: USB HID v0.05 Mouse [HID 28bd:1903] on usb-dummy_hcd.2-1/input0 [ 141.577045][ T5994] usb 3-1: USB disconnect, device number 7 [ 141.840630][ T6666] fido_id[6666]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 142.315128][ T6674] netlink: 'syz.0.316': attribute type 3 has an invalid length. [ 142.547173][ T5994] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 142.701650][ T5994] usb 3-1: Using ep0 maxpacket: 8 [ 142.706597][ T5994] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 142.737059][ T5994] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 142.737087][ T5994] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.737106][ T5994] usb 3-1: Product: syz [ 142.737119][ T5994] usb 3-1: Manufacturer: syz [ 142.737132][ T5994] usb 3-1: SerialNumber: syz [ 142.811840][ T5994] usb 3-1: config 0 descriptor?? [ 142.834567][ T5994] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 142.834629][ T5994] usb 3-1: setting power ON [ 142.835145][ T5994] dvb-usb: bulk message failed: -22 (2/0) [ 142.896660][ T5994] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 142.917714][ T5994] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 142.917773][ T5994] usb 3-1: media controller created [ 143.048342][ T6680] dvb-usb: bulk message failed: -22 (3/0) [ 143.048365][ T6680] cxusb: i2c rd: len=194 is too big! [ 143.048365][ T6680] [ 143.105279][ T5994] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 143.250742][ T5994] usb 3-1: selecting invalid altsetting 6 [ 143.250765][ T5994] usb 3-1: digital interface selection failed (-22) [ 143.250780][ T5994] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 143.258807][ T5994] usb 3-1: setting power OFF [ 143.259789][ T5994] dvb-usb: bulk message failed: -22 (2/0) [ 143.259811][ T5994] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 143.259823][ T5994] (NULL device *): no alternate interface [ 143.538268][ T5994] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 143.553415][ T5994] usb 3-1: USB disconnect, device number 8 [ 143.562699][ T6711] usb usb8: usbfs: interface 0 claimed by hub while 'syz.0.335' resets device [ 144.917123][ T5903] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 144.957246][ T5994] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 145.052338][ T6756] program syz.4.354 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 145.077473][ T5903] usb 4-1: Using ep0 maxpacket: 16 [ 145.082367][ T5903] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.082402][ T5903] usb 4-1: config 0 interface 0 has no altsetting 0 [ 145.082437][ T5903] usb 4-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 145.082461][ T5903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.100397][ T5903] usb 4-1: config 0 descriptor?? [ 145.121453][ T5994] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.121483][ T5994] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 145.121570][ T5994] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 145.137170][ T5994] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 145.137203][ T5994] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.137226][ T5994] usb 2-1: Product: syz [ 145.137242][ T5994] usb 2-1: Manufacturer: syz [ 145.137258][ T5994] usb 2-1: SerialNumber: syz [ 145.331406][ T5994] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 145.333401][ T5994] cdc_ncm 2-1:1.0: bind() failure [ 145.466105][ T5923] usb 2-1: USB disconnect, device number 5 [ 145.596439][ T6765] netlink: 16 bytes leftover after parsing attributes in process `syz.0.357'. [ 145.596504][ T6765] netlink: 20 bytes leftover after parsing attributes in process `syz.0.357'. [ 145.824040][ T5903] usb 4-1: USB disconnect, device number 4 [ 146.665865][ T6791] netlink: 4 bytes leftover after parsing attributes in process `syz.1.370'. [ 148.349912][ T6842] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 148.455152][ T6842] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 149.037200][ T5994] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 149.103048][ T6857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.399'. [ 149.194884][ T5994] usb 2-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 149.194961][ T5994] usb 2-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=3f.e0 [ 149.194985][ T5994] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.250192][ T5994] usb 2-1: probing VID:PID(2201:012C) [ 149.273540][ T5994] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs [ 149.273646][ T5994] vub300 2-1:64.0: probe with driver vub300 failed with error -22 [ 149.448000][ T5994] usb 2-1: USB disconnect, device number 6 [ 149.805982][ T6872] netlink: 4 bytes leftover after parsing attributes in process `syz.4.405'. [ 149.951861][ T6876] netlink: 8 bytes leftover after parsing attributes in process `syz.3.406'. [ 150.229082][ T6884] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 150.547831][ T6889] sp0: Synchronizing with TNC [ 151.095035][ T6905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.421'. [ 151.095084][ T6905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.421'. [ 151.249042][ T6913] netlink: 'syz.1.425': attribute type 3 has an invalid length. [ 152.072738][ T5923] hid-generic 00A0:0008:0003.000F: unknown main item tag 0x0 [ 152.072783][ T5923] hid-generic 00A0:0008:0003.000F: unknown main item tag 0x0 [ 152.072811][ T5923] hid-generic 00A0:0008:0003.000F: unknown main item tag 0x0 [ 152.072838][ T5923] hid-generic 00A0:0008:0003.000F: unknown main item tag 0x0 [ 152.072865][ T5923] hid-generic 00A0:0008:0003.000F: unknown main item tag 0x0 [ 152.072892][ T5923] hid-generic 00A0:0008:0003.000F: unknown main item tag 0x0 [ 152.072919][ T5923] hid-generic 00A0:0008:0003.000F: unknown main item tag 0x0 [ 152.072946][ T5923] hid-generic 00A0:0008:0003.000F: unknown main item tag 0x0 [ 152.072972][ T5923] hid-generic 00A0:0008:0003.000F: unknown main item tag 0x0 [ 152.072997][ T5923] hid-generic 00A0:0008:0003.000F: unknown main item tag 0x0 [ 152.160887][ T5923] hid-generic 00A0:0008:0003.000F: hidraw0: HID v0.05 Device [syz1] on syz0 [ 152.608084][ T6950] fido_id[6950]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 152.657616][ T6959] netlink: 4 bytes leftover after parsing attributes in process `syz.4.447'. [ 152.657677][ T6959] netlink: 4 bytes leftover after parsing attributes in process `syz.4.447'. [ 152.657713][ T6959] netlink: 1 bytes leftover after parsing attributes in process `syz.4.447'. [ 152.905673][ T6964] netlink: 28 bytes leftover after parsing attributes in process `syz.2.449'. [ 152.905804][ T6964] netlink: 7 bytes leftover after parsing attributes in process `syz.2.449'. [ 153.847115][ T5903] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 153.852053][ T6996] netlink: 4 bytes leftover after parsing attributes in process `syz.3.464'. [ 153.891064][ T6999] netlink: 'syz.1.467': attribute type 1 has an invalid length. [ 154.001736][ T5903] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 154.001772][ T5903] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.001794][ T5903] usb 1-1: config 0 interface 0 has no altsetting 0 [ 154.001829][ T5903] usb 1-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 154.001862][ T5903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.069436][ T5903] usb 1-1: config 0 descriptor?? [ 154.542082][ T5903] lenovo 0003:17EF:60EE.0010: hidraw0: USB HID v0.01 Device [HID 17ef:60ee] on usb-dummy_hcd.0-1/input0 [ 154.704050][ T5903] lenovo 0003:17EF:60EE.0010: Failed to switch middle button: -71 [ 154.704610][ T5903] lenovo 0003:17EF:60EE.0010: Fn-lock setting failed: -71 [ 154.705141][ T5903] lenovo 0003:17EF:60EE.0010: Sensitivity setting failed: -71 [ 154.766143][ T5903] usb 1-1: USB disconnect, device number 6 [ 154.913133][ T7013] fido_id[7013]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 155.417425][ T5825] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 155.567459][ T5825] usb 3-1: Using ep0 maxpacket: 16 [ 155.569803][ T5825] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 245, changing to 11 [ 155.569849][ T5825] usb 3-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 155.569872][ T5825] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.606976][ T5825] usb 3-1: config 0 descriptor?? [ 156.068858][ T5825] hid-alps 0003:044E:120B.0011: hidraw0: USB HID v0.06 Device [HID 044e:120b] on usb-dummy_hcd.2-1/input0 [ 156.246124][ T5923] usb 3-1: USB disconnect, device number 9 [ 156.667159][ T5903] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 156.830097][ T5903] usb 4-1: Using ep0 maxpacket: 8 [ 156.837423][ T5903] usb 4-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 156.837451][ T5903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.856023][ T5903] usb 4-1: config 0 descriptor?? [ 157.315585][ T7072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.498'. [ 157.337814][ T5903] hid_parser_main: 5 callbacks suppressed [ 157.337837][ T5903] magicmouse 0003:05AC:0269.0012: unknown main item tag 0x0 [ 157.337870][ T5903] magicmouse 0003:05AC:0269.0012: unknown main item tag 0x0 [ 157.337896][ T5903] magicmouse 0003:05AC:0269.0012: unknown main item tag 0x0 [ 157.337921][ T5903] magicmouse 0003:05AC:0269.0012: unknown main item tag 0x0 [ 157.337947][ T5903] magicmouse 0003:05AC:0269.0012: unknown main item tag 0x0 [ 157.353602][ T5903] magicmouse 0003:05AC:0269.0012: hidraw0: USB HID v0.05 Device [HID 05ac:0269] on usb-dummy_hcd.3-1/input0 [ 157.435647][ T7077] netlink: 'syz.4.501': attribute type 2 has an invalid length. [ 157.435671][ T7077] netlink: 119 bytes leftover after parsing attributes in process `syz.4.501'. [ 157.518551][ T5903] usb 4-1: USB disconnect, device number 5 [ 157.650101][ T7083] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 157.879604][ T7084] fido_id[7084]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 158.427198][ T5903] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 158.593072][ T5903] usb 1-1: Using ep0 maxpacket: 16 [ 158.612994][ T5903] usb 1-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice=80.f2 [ 158.613023][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.613041][ T5903] usb 1-1: Product: syz [ 158.613054][ T5903] usb 1-1: Manufacturer: syz [ 158.613068][ T5903] usb 1-1: SerialNumber: syz [ 158.651762][ T5903] usb 1-1: config 0 descriptor?? [ 158.684789][ T5903] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 158.959359][ T5903] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 158.972164][ T5903] usb 1-1: USB disconnect, device number 7 [ 159.223319][ T5990] udevd[5990]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 160.087239][ T44] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 160.268110][ T44] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 160.268154][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.268176][ T44] usb 5-1: Product: syz [ 160.268191][ T44] usb 5-1: Manufacturer: syz [ 160.268205][ T44] usb 5-1: SerialNumber: syz [ 160.323074][ T44] usb 5-1: config 0 descriptor?? [ 160.348922][ T44] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 160.976227][ T990] usb 5-1: USB disconnect, device number 7 [ 161.351606][ T7178] fuse: Invalid rootmode [ 161.918186][ T38] kauditd_printk_skb: 4 callbacks suppressed [ 161.918223][ T38] audit: type=1326 audit(1758186770.788:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7197 comm="syz.2.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faed588eba9 code=0x7ffc0000 [ 161.918287][ T38] audit: type=1326 audit(1758186770.828:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7197 comm="syz.2.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7faed588eba9 code=0x7ffc0000 [ 161.918332][ T38] audit: type=1326 audit(1758186770.828:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7197 comm="syz.2.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faed588eba9 code=0x7ffc0000 [ 161.918377][ T38] audit: type=1326 audit(1758186770.828:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7197 comm="syz.2.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faed588eba9 code=0x7ffc0000 [ 161.947640][ T38] audit: type=1326 audit(1758186770.858:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7197 comm="syz.2.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7faed588eba9 code=0x7ffc0000 [ 161.949328][ T38] audit: type=1326 audit(1758186770.858:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7197 comm="syz.2.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faed588eba9 code=0x7ffc0000 [ 161.949391][ T38] audit: type=1326 audit(1758186770.858:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7197 comm="syz.2.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faed588eba9 code=0x7ffc0000 [ 162.148435][ T5825] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 162.254434][ T7208] netlink: 32 bytes leftover after parsing attributes in process `syz.2.562'. [ 162.254598][ T7208] Zero length message leads to an empty skb [ 162.297195][ T5825] usb 4-1: Using ep0 maxpacket: 32 [ 162.300530][ T5825] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 162.303424][ T5825] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 162.303454][ T5825] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 162.303474][ T5825] usb 4-1: Product: syz [ 162.303490][ T5825] usb 4-1: Manufacturer: syz [ 162.303505][ T5825] usb 4-1: SerialNumber: syz [ 162.319700][ T5825] usb 4-1: config 0 descriptor?? [ 162.324896][ T7198] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 162.514606][ T7214] netlink: 16 bytes leftover after parsing attributes in process `syz.1.564'. [ 162.583125][ T5825] usb 4-1: USB disconnect, device number 6 [ 164.707196][ T5923] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 164.817582][ T7279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.597'. [ 164.842820][ T7279] dummy0: entered promiscuous mode [ 164.857280][ T5923] usb 1-1: Using ep0 maxpacket: 8 [ 164.859595][ T5923] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.859634][ T5923] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 164.859655][ T5923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.864923][ T5923] usb 1-1: config 0 descriptor?? [ 164.908622][ T7279] dummy0: left promiscuous mode [ 165.328875][ T5923] arvo 0003:1E7D:30D4.0013: unknown main item tag 0x0 [ 165.328913][ T5923] arvo 0003:1E7D:30D4.0013: unknown main item tag 0x0 [ 165.328942][ T5923] arvo 0003:1E7D:30D4.0013: unknown main item tag 0x0 [ 165.328969][ T5923] arvo 0003:1E7D:30D4.0013: unknown main item tag 0x0 [ 165.328996][ T5923] arvo 0003:1E7D:30D4.0013: unknown main item tag 0x0 [ 165.378243][ T5923] arvo 0003:1E7D:30D4.0013: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.0-1/input0 [ 165.503979][ T5903] usb 1-1: USB disconnect, device number 8 [ 165.800341][ T7296] fido_id[7296]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 167.077366][ T990] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 167.237242][ T990] usb 1-1: Using ep0 maxpacket: 32 [ 167.239959][ T990] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 167.239984][ T990] usb 1-1: config 0 has no interface number 0 [ 167.278543][ T990] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 167.278573][ T990] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.278594][ T990] usb 1-1: Product: syz [ 167.278609][ T990] usb 1-1: Manufacturer: syz [ 167.278623][ T990] usb 1-1: SerialNumber: syz [ 167.357883][ T990] usb 1-1: config 0 descriptor?? [ 167.361936][ T990] smsc95xx v2.0.0 [ 167.361957][ T990] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 167.362226][ T990] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -22 [ 167.764944][ T5903] usb 1-1: USB disconnect, device number 9 [ 168.539440][ T5840] Bluetooth: hci4: command tx timeout [ 169.479425][ T7412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.659'. [ 170.607089][ T5903] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 170.767110][ T5903] usb 2-1: Using ep0 maxpacket: 8 [ 170.771297][ T5903] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 170.793066][ T5903] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 170.793096][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.793116][ T5903] usb 2-1: Product: syz [ 170.793130][ T5903] usb 2-1: Manufacturer: syz [ 170.793144][ T5903] usb 2-1: SerialNumber: syz [ 170.850858][ T5903] usb 2-1: config 0 descriptor?? [ 170.862919][ T5903] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 170.862974][ T5903] usb 2-1: setting power ON [ 170.862994][ T5903] dvb-usb: bulk message failed: -22 (2/0) [ 170.898619][ T5903] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 170.899380][ T5903] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 170.899434][ T5903] usb 2-1: media controller created [ 170.959092][ T5903] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 171.021694][ T5903] usb 2-1: selecting invalid altsetting 6 [ 171.021718][ T5903] usb 2-1: digital interface selection failed (-22) [ 171.021733][ T5903] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 171.022509][ T5903] usb 2-1: setting power OFF [ 171.022527][ T5903] dvb-usb: bulk message failed: -22 (2/0) [ 171.022549][ T5903] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 171.022560][ T5903] (NULL device *): no alternate interface [ 171.134559][ T7439] dvb-usb: bulk message failed: -22 (3/0) [ 171.169926][ T5903] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 171.226057][ T5903] usb 2-1: USB disconnect, device number 7 [ 171.717162][ T5923] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 171.908412][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.908448][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.908488][ T5923] usb 5-1: New USB device found, idVendor=06a3, idProduct=0cfa, bcdDevice= 0.00 [ 171.908518][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.920188][ T5923] usb 5-1: config 0 descriptor?? [ 171.927294][ T31] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 172.011313][ T7473] netlink: 'syz.3.688': attribute type 66 has an invalid length. [ 172.078145][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 172.102889][ T31] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 172.102982][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.103004][ T31] usb 1-1: Product: syz [ 172.103019][ T31] usb 1-1: Manufacturer: syz [ 172.103035][ T31] usb 1-1: SerialNumber: syz [ 172.322848][ T31] usb 1-1: config 0 descriptor?? [ 172.616932][ T5923] usbhid 5-1:0.0: can't add hid device: -71 [ 172.619300][ T5923] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 172.740463][ T5923] usb 5-1: USB disconnect, device number 8 [ 172.798586][ T31] airspy 1-1:0.0: usb_control_msg() failed -71 request 0a [ 172.798610][ T31] airspy 1-1:0.0: Could not detect board [ 172.798709][ T31] airspy 1-1:0.0: probe with driver airspy failed with error -71 [ 172.833144][ T31] usb 1-1: USB disconnect, device number 10 [ 172.838374][ T990] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 172.999888][ T990] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 172.999919][ T990] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.058741][ T990] usb 4-1: config 0 descriptor?? [ 173.081795][ T990] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 173.591938][ T7488] ipvlan2: entered promiscuous mode [ 173.675716][ T990] gspca_cpia1: usb_control_msg 01, error -71 [ 173.675736][ T990] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 173.711426][ T990] usb 4-1: USB disconnect, device number 7 [ 174.670400][ T7516] netlink: 'syz.4.709': attribute type 322 has an invalid length. [ 175.577632][ T5923] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 175.727509][ T5923] usb 3-1: Using ep0 maxpacket: 8 [ 175.730301][ T5923] usb 3-1: unable to get BOS descriptor or descriptor too short [ 175.732016][ T5923] usb 3-1: config 4 interface 0 has no altsetting 0 [ 175.736131][ T5923] usb 3-1: string descriptor 0 read error: -22 [ 175.736291][ T5923] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 175.736317][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.834798][ T5923] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 175.865033][ T5923] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 175.865478][ T5923] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 175.865528][ T5923] usb 3-1: media controller created [ 176.033490][ T5923] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 176.216332][ T5923] zl10353_read_register: readreg error (reg=127, ret==0) [ 176.407956][ T5923] usb 3-1: USB disconnect, device number 10 [ 176.637502][ T5994] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 176.830031][ T5994] usb 5-1: config 162 has an invalid interface number: 79 but max is 1 [ 176.830063][ T5994] usb 5-1: config 162 has an invalid interface number: 183 but max is 1 [ 176.830085][ T5994] usb 5-1: config 162 has no interface number 0 [ 176.830102][ T5994] usb 5-1: config 162 has no interface number 1 [ 176.830175][ T5994] usb 5-1: config 162 interface 79 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 176.830219][ T5994] usb 5-1: config 162 interface 183 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 176.830244][ T5994] usb 5-1: config 162 interface 183 altsetting 1 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 176.830272][ T5994] usb 5-1: config 162 interface 183 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 176.830297][ T5994] usb 5-1: config 162 interface 183 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 176.830324][ T5994] usb 5-1: config 162 interface 183 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 64 [ 176.830352][ T5994] usb 5-1: config 162 interface 183 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 176.830380][ T5994] usb 5-1: config 162 interface 79 has no altsetting 0 [ 176.830399][ T5994] usb 5-1: config 162 interface 183 has no altsetting 0 [ 176.845410][ T5994] usb 5-1: New USB device found, idVendor=056e, idProduct=5004, bcdDevice=db.d1 [ 176.845440][ T5994] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.845462][ T5994] usb 5-1: Product: syz [ 176.845477][ T5994] usb 5-1: Manufacturer: syz [ 176.845492][ T5994] usb 5-1: SerialNumber: syz [ 177.247267][ T5994] pl2303 5-1:162.79: required endpoints missing [ 177.270772][ T5994] pl2303 5-1:162.183: pl2303 converter detected [ 177.272273][ T5994] pl2303 5-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 177.272728][ T5994] pl2303 5-1:162.183: pl2303_vendor_write - failed to write [0404]: -71 [ 177.273148][ T5994] pl2303 5-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 177.273591][ T5994] pl2303 5-1:162.183: pl2303_vendor_read - failed to read [8383]: -71 [ 177.274004][ T5994] pl2303 5-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 177.274452][ T5994] pl2303 5-1:162.183: pl2303_vendor_write - failed to write [0404]: -71 [ 177.274874][ T5994] pl2303 5-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 177.275292][ T5994] pl2303 5-1:162.183: pl2303_vendor_read - failed to read [8383]: -71 [ 177.275732][ T5994] pl2303 5-1:162.183: pl2303_vendor_write - failed to write [0000]: -71 [ 177.276161][ T5994] pl2303 5-1:162.183: pl2303_vendor_write - failed to write [0001]: -71 [ 177.276706][ T5994] pl2303 5-1:162.183: pl2303_vendor_write - failed to write [0002]: -71 [ 177.389624][ T5994] usb 5-1: pl2303 converter now attached to ttyUSB0 [ 177.417486][ T5994] usb 5-1: USB disconnect, device number 9 [ 177.453887][ T5994] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 177.456035][ T5994] pl2303 5-1:162.183: device disconnected [ 177.688825][ T7588] openvswitch: netlink: nsh attribute has 65533 unknown bytes. [ 177.688863][ T7588] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.908429][ T5994] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 178.056912][ T7601] netlink: 8 bytes leftover after parsing attributes in process `syz.3.750'. [ 178.057641][ T5994] usb 1-1: Using ep0 maxpacket: 16 [ 178.080522][ T5994] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.080550][ T5994] usb 1-1: config 0 interface 0 has no altsetting 0 [ 178.080580][ T5994] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0a16, bcdDevice= 0.00 [ 178.080599][ T5994] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.129716][ T5994] usb 1-1: config 0 descriptor?? [ 178.297191][ T990] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 178.460569][ T990] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.460597][ T990] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.460671][ T990] usb 5-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 178.460689][ T990] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.557168][ T990] usb 5-1: config 0 descriptor?? [ 178.586663][ T5994] hid-corsair-void 0003:1B1C:0A16.0014: unknown main item tag 0x0 [ 178.586698][ T5994] hid-corsair-void 0003:1B1C:0A16.0014: unknown main item tag 0x0 [ 178.586725][ T5994] hid-corsair-void 0003:1B1C:0A16.0014: unknown main item tag 0x0 [ 178.586749][ T5994] hid-corsair-void 0003:1B1C:0A16.0014: unknown main item tag 0x0 [ 178.586774][ T5994] hid-corsair-void 0003:1B1C:0A16.0014: unknown main item tag 0x0 [ 178.586807][ T5994] hid-corsair-void 0003:1B1C:0A16.0014: unknown main item tag 0x0 [ 178.654695][ T5994] hid-corsair-void 0003:1B1C:0A16.0014: hidraw0: USB HID v0.05 Device [HID 1b1c:0a16] on usb-dummy_hcd.0-1/input0 [ 178.738800][ T31] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 178.773565][ T5994] hid-corsair-void 0003:1B1C:0A16.0014: failed to request firmware (reason: -71) [ 178.793416][ T44] usb 1-1: USB disconnect, device number 11 [ 178.803739][ T5951] hid-corsair-void 0003:1B1C:0A16.0014: failed to request battery (reason: -71) [ 178.899542][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 178.899593][ T31] usb 2-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 178.899617][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.951281][ T7614] tipc: Started in network mode [ 178.951316][ T7614] tipc: Node identity ac141413, cluster identity 4711 [ 178.965122][ T31] usb 2-1: config 0 descriptor?? [ 178.974525][ T7614] tipc: New replicast peer: 10.1.1.2 [ 179.039627][ T990] stadia 0003:18D1:9400.0015: hidraw0: USB HID v0.00 Device [HID 18d1:9400] on usb-dummy_hcd.4-1/input0 [ 179.039661][ T990] stadia 0003:18D1:9400.0015: no inputs found [ 179.039675][ T990] stadia 0003:18D1:9400.0015: force feedback init failed [ 179.043428][ T7614] tipc: Enabled bearer , priority 10 [ 179.289631][ T5951] usb 5-1: USB disconnect, device number 10 [ 179.318720][ T7617] hugetlbfs: Bad value 'g' for mount option 'nr_inodes' [ 179.318720][ T7617] [ 179.443518][ T7615] fido_id[7615]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 179.449790][ T31] elecom 0003:056E:00FC.0016: unknown main item tag 0x0 [ 179.449834][ T31] elecom 0003:056E:00FC.0016: unknown main item tag 0x0 [ 179.449867][ T31] elecom 0003:056E:00FC.0016: unknown main item tag 0x0 [ 179.449905][ T31] elecom 0003:056E:00FC.0016: unknown main item tag 0x0 [ 179.464202][ T31] elecom 0003:056E:00FC.0016: hidraw0: USB HID vff.fe Device [HID 056e:00fc] on usb-dummy_hcd.1-1/input0 [ 179.648264][ T7620] fido_id[7620]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 179.653252][ T44] usb 2-1: USB disconnect, device number 8 [ 180.003124][ T7625] fido_id[7625]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 180.092856][ T5825] tipc: Node number set to 2886997011 [ 180.345348][ T7642] process 'syz.0.768' launched '/dev/fd/3' with NULL argv: empty string added [ 180.423460][ T7644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.769'. [ 180.423485][ T7644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.769'. [ 180.852804][ T7651] syz.3.771 (7651) used greatest stack depth: 18968 bytes left [ 180.978568][ T990] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 181.086426][ T5825] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz0] on syz0 [ 181.128748][ T990] usb 1-1: Using ep0 maxpacket: 8 [ 181.148191][ T990] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 181.148242][ T990] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 181.148265][ T990] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.192027][ T990] usb 1-1: config 0 descriptor?? [ 181.516460][ T7667] fido_id[7667]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 181.704726][ T990] corsair 0003:1B1C:1B09.0018: hidraw0: USB HID v0.00 Device [HID 1b1c:1b09] on usb-dummy_hcd.0-1/input0 [ 181.739901][ T7675] netlink: 24 bytes leftover after parsing attributes in process `syz.2.784'. [ 181.742226][ T7675] IPVS: Error connecting to the multicast addr [ 181.868606][ T990] usb 1-1: USB disconnect, device number 12 [ 182.193949][ T7681] fido_id[7681]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 182.463471][ T7697] siw: device registration error -23 [ 183.487676][ T5825] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 183.538720][ T38] audit: type=1326 audit(1758186792.428:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7728 comm="syz.1.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf42eeba9 code=0x7ffc0000 [ 183.546398][ T38] audit: type=1326 audit(1758186792.448:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7728 comm="syz.1.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f4cf42eeba9 code=0x7ffc0000 [ 183.546449][ T38] audit: type=1326 audit(1758186792.448:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7728 comm="syz.1.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf42eeba9 code=0x7ffc0000 [ 183.546490][ T38] audit: type=1326 audit(1758186792.448:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7728 comm="syz.1.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf42eeba9 code=0x7ffc0000 [ 183.550148][ T38] audit: type=1326 audit(1758186792.458:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7728 comm="syz.1.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f4cf42eeba9 code=0x7ffc0000 [ 183.550210][ T38] audit: type=1326 audit(1758186792.458:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7728 comm="syz.1.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf42eeba9 code=0x7ffc0000 [ 183.550259][ T38] audit: type=1326 audit(1758186792.458:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7728 comm="syz.1.809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf42eeba9 code=0x7ffc0000 [ 183.659458][ T5825] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.659498][ T5825] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.659523][ T5825] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 183.659572][ T5825] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 183.659597][ T5825] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.670707][ T5825] usb 1-1: config 0 descriptor?? [ 184.161219][ T5825] hid_parser_main: 13 callbacks suppressed [ 184.161243][ T5825] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x2 [ 184.161277][ T5825] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x6 [ 184.199837][ T5825] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 184.325968][ T7744] ======================================================= [ 184.325968][ T7744] WARNING: The mand mount option has been deprecated and [ 184.325968][ T7744] and is ignored by this kernel. Remove the mand [ 184.325968][ T7744] option from the mount to silence this warning. [ 184.325968][ T7744] ======================================================= [ 184.358436][ T5825] usb 1-1: USB disconnect, device number 13 [ 184.549804][ T7746] fido_id[7746]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 184.994793][ T7763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.826'. [ 184.994816][ T7763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.826'. [ 184.994842][ T7763] netlink: 'syz.3.826': attribute type 7 has an invalid length. [ 185.521522][ T7780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.835'. [ 186.598469][ T7808] netlink: 100 bytes leftover after parsing attributes in process `syz.4.845'. [ 186.678533][ T7811] Bluetooth: MGMT ver 1.23 [ 188.956639][ T38] audit: type=1326 audit(1758186797.858:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7881 comm="syz.0.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36826eeba9 code=0x7ffc0000 [ 188.956715][ T38] audit: type=1326 audit(1758186797.858:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7881 comm="syz.0.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36826eeba9 code=0x7ffc0000 [ 188.987834][ T38] audit: type=1326 audit(1758186797.888:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7881 comm="syz.0.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f36826eeba9 code=0x7ffc0000 [ 188.987899][ T38] audit: type=1326 audit(1758186797.888:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7881 comm="syz.0.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36826eeba9 code=0x7ffc0000 [ 188.987961][ T38] audit: type=1326 audit(1758186797.888:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7881 comm="syz.0.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36826eeba9 code=0x7ffc0000 [ 189.000886][ T38] audit: type=1326 audit(1758186797.908:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7881 comm="syz.0.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7f36826eeba9 code=0x7ffc0000 [ 189.000957][ T38] audit: type=1326 audit(1758186797.908:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7881 comm="syz.0.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36826eeba9 code=0x7ffc0000 [ 189.001006][ T38] audit: type=1326 audit(1758186797.908:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7881 comm="syz.0.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36826eeba9 code=0x7ffc0000 [ 189.197187][ T5951] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 189.362673][ T5951] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 189.362723][ T5951] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.362743][ T5951] usb 5-1: Product: syz [ 189.362759][ T5951] usb 5-1: Manufacturer: syz [ 189.362783][ T5951] usb 5-1: SerialNumber: syz [ 189.453198][ T5951] usb 5-1: config 0 descriptor?? [ 189.465776][ T5951] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 189.493019][ T5951] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 189.493959][ T5951] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 189.494018][ T5951] usb 5-1: media controller created [ 189.546029][ T5951] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 189.678337][ T5951] DVB: Unable to find symbol mt352_attach() [ 189.929098][ T7904] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 189.933173][ T5951] DVB: Unable to find symbol nxt6000_attach() [ 189.933188][ T5951] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 189.937678][ T7904] team0: Device ipvlan3 is already an upper device of the team interface [ 189.983493][ T5951] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input7 [ 190.025935][ T5951] dvb-usb: schedule remote query interval to 1000 msecs. [ 190.025960][ T5951] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 190.025977][ T5951] dvb-usb: bulk message failed: -22 (7/0) [ 190.025995][ T5951] dvb-usb: bulk message failed: -22 (7/0) [ 190.081645][ T5951] usb 5-1: USB disconnect, device number 11 [ 190.370923][ T5951] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 191.630173][ T38] audit: type=1326 audit(1758186800.538:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7949 comm="syz.4.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694228eba9 code=0x7ffc0000 [ 191.630224][ T38] audit: type=1326 audit(1758186800.538:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7949 comm="syz.4.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694228eba9 code=0x7ffc0000 [ 191.847182][ T5951] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 192.019398][ T5951] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 192.019433][ T5951] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.019474][ T5951] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 192.019499][ T5951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.068260][ T5951] usb 3-1: config 0 descriptor?? [ 192.509961][ T5951] lenovo 0003:17EF:6047.001A: unknown main item tag 0x0 [ 192.542932][ T5951] lenovo 0003:17EF:6047.001A: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.2-1/input0 [ 192.679088][ T7979] netlink: 4 bytes leftover after parsing attributes in process `syz.1.926'. [ 192.713836][ T5951] usb 3-1: USB disconnect, device number 11 [ 192.880987][ T7983] fido_id[7983]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 194.110283][ T8022] IPVS: Error connecting to the multicast addr [ 194.263899][ T8032] netlink: 12 bytes leftover after parsing attributes in process `syz.4.951'. [ 194.263933][ T8032] netlink: 56 bytes leftover after parsing attributes in process `syz.4.951'. [ 194.263950][ T8032] netlink: 8 bytes leftover after parsing attributes in process `syz.4.951'. [ 194.454865][ T38] kauditd_printk_skb: 13 callbacks suppressed [ 194.454886][ T38] audit: type=1326 audit(1758186803.348:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8036 comm="syz.1.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf42eeba9 code=0x7ffc0000 [ 194.494993][ T38] audit: type=1326 audit(1758186803.358:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8036 comm="syz.1.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f4cf42eeba9 code=0x7ffc0000 [ 194.519805][ T38] audit: type=1326 audit(1758186803.398:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8036 comm="syz.1.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf42eeba9 code=0x7ffc0000 [ 194.519862][ T38] audit: type=1326 audit(1758186803.428:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8036 comm="syz.1.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f4cf42eeba9 code=0x7ffc0000 [ 194.519908][ T38] audit: type=1326 audit(1758186803.428:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8036 comm="syz.1.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf42eeba9 code=0x7ffc0000 [ 194.519955][ T38] audit: type=1326 audit(1758186803.428:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8036 comm="syz.1.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf42eeba9 code=0x7ffc0000 [ 194.809248][ T8045] batadv0: entered promiscuous mode [ 194.809793][ T8044] batadv0: left promiscuous mode [ 195.275874][ T8060] syz.1.964 (8060) used greatest stack depth: 18032 bytes left [ 195.832184][ T8079] QAT: Invalid ioctl 21531 [ 196.007343][ T5923] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 196.174300][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.174334][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.174373][ T5923] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 196.174405][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.191768][ T5923] usb 2-1: config 0 descriptor?? [ 196.681430][ T5923] cp2112 0003:10C4:EA90.001B: item fetching failed at offset 5/7 [ 196.682277][ T5923] cp2112 0003:10C4:EA90.001B: parse failed [ 196.683512][ T5923] cp2112 0003:10C4:EA90.001B: probe with driver cp2112 failed with error -22 [ 196.886414][ T5994] usb 2-1: USB disconnect, device number 9 [ 197.293809][ T8117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.991'. [ 197.322048][ T8114] macsec1: entered promiscuous mode [ 197.533106][ T8120] netlink: 24 bytes leftover after parsing attributes in process `syz.3.992'. [ 198.669266][ T5951] kernel write not supported for file /input/event0 (pid: 5951 comm: kworker/0:5) [ 198.685641][ T8158] program syz.2.1010 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 198.980453][ T8169] x_tables: ip6_tables: LOG.0 target: invalid size 32 (kernel) != (user) 40 [ 199.119868][ T8174] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 199.119896][ T8174] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 199.121717][ T8174] vhci_hcd vhci_hcd.0: Device attached [ 199.158599][ T8175] vhci_hcd: cannot find the pending unlink 2869 [ 199.159546][ T8175] vhci_hcd: connection closed [ 199.180989][ T57] vhci_hcd: stop threads [ 199.181688][ T57] vhci_hcd: release socket [ 199.181753][ T57] vhci_hcd: disconnect device [ 199.674886][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.674966][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.137287][ T5923] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 200.138690][ T38] audit: type=1800 audit(1758186809.018:67): pid=8207 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.1033" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 200.185460][ T8210] netlink: 'syz.1.1035': attribute type 9 has an invalid length. [ 200.299998][ T5923] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.300034][ T5923] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 200.300080][ T5923] usb 5-1: config 0 interface 0 has no altsetting 0 [ 200.300116][ T5923] usb 5-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00 [ 200.300140][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.343765][ T5923] usb 5-1: config 0 descriptor?? [ 200.503744][ T8216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1040'. [ 200.503768][ T8216] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1040'. [ 200.503795][ T8216] netlink: 'syz.2.1040': attribute type 14 has an invalid length. [ 200.503810][ T8216] netlink: 'syz.2.1040': attribute type 13 has an invalid length. [ 200.621926][ T5825] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 200.813000][ T5825] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 200.813072][ T5825] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.815498][ T5825] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 200.815526][ T5825] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 200.815548][ T5825] usb 4-1: Manufacturer: syz [ 200.826423][ T5825] usb 4-1: config 0 descriptor?? [ 200.849849][ T5923] itetech 0003:06CB:73F6.001C: hidraw0: USB HID v0.01 Device [HID 06cb:73f6] on usb-dummy_hcd.4-1/input0 [ 200.957109][ T5951] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 200.997777][ T990] usb 5-1: USB disconnect, device number 12 [ 201.117772][ T5951] usb 2-1: Using ep0 maxpacket: 32 [ 201.125850][ T5951] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.125886][ T5951] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.125927][ T5951] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 201.125952][ T5951] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.157217][ T5825] rc_core: IR keymap rc-hauppauge not found [ 201.157238][ T5825] Registered IR keymap rc-empty [ 201.186081][ T5825] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 201.223737][ T5951] usb 2-1: config 0 descriptor?? [ 201.224953][ T5825] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input8 [ 201.318737][ T8232] fido_id[8232]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 201.413635][ C1] igorplugusb 4-1:0.0: receive overflow, at least 9 lost [ 201.634931][ T44] usb 4-1: USB disconnect, device number 8 [ 201.699876][ T5951] koneplus 0003:1E7D:2D51.001D: item fetching failed at offset 1/5 [ 201.700676][ T5951] koneplus 0003:1E7D:2D51.001D: parse failed [ 201.700747][ T5951] koneplus 0003:1E7D:2D51.001D: probe with driver koneplus failed with error -22 [ 201.817194][ T990] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 201.906549][ T5825] usb 2-1: USB disconnect, device number 10 [ 201.980355][ T990] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.980406][ T990] usb 1-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00 [ 201.980430][ T990] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.042067][ T990] usb 1-1: config 0 descriptor?? [ 202.483582][ T990] kye 0003:0458:501B.001E: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 202.515714][ T990] kye 0003:0458:501B.001E: hidraw0: USB HID v0.00 Device [HID 0458:501b] on usb-dummy_hcd.0-1/input0 [ 202.515751][ T990] kye 0003:0458:501B.001E: tablet-enabling feature report not found [ 202.515766][ T990] kye 0003:0458:501B.001E: tablet enabling failed [ 202.704151][ T990] usb 1-1: USB disconnect, device number 14 [ 202.792924][ T8250] fido_id[8250]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 204.306212][ T8299] netlink: 'syz.1.1077': attribute type 1 has an invalid length. [ 205.475715][ T8335] hub 9-0:1.0: USB hub found [ 205.499740][ T8335] hub 9-0:1.0: 1 port detected [ 206.173342][ T8346] vlan2: entered allmulticast mode [ 206.173366][ T8346] bond0: entered allmulticast mode [ 206.173381][ T8346] bond_slave_0: entered allmulticast mode [ 206.173405][ T8346] bond_slave_1: entered allmulticast mode [ 207.039974][ T8354] mkiss: ax0: crc mode is auto. [ 211.897007][ C1] sched: DL replenish lagged too much [ 213.578418][ T8381] netlink: 766 bytes leftover after parsing attributes in process `syz.0.1113'. [ 213.882313][ T8389] autofs: Bad value for 'fd' [ 214.388537][ T8396] [U]  [ 214.597150][ T5951] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 214.749626][ T5951] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.749678][ T5951] usb 3-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 214.749702][ T5951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.799357][ T5951] usb 3-1: config 0 descriptor?? [ 214.837149][ T5994] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 214.987200][ T5994] usb 4-1: Using ep0 maxpacket: 32 [ 214.995428][ T5994] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.995462][ T5994] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.995565][ T5994] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 214.995589][ T5994] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.174159][ T5994] usb 4-1: config 0 descriptor?? [ 215.212294][ T5994] hub 4-1:0.0: USB hub found [ 215.469795][ T5951] cherry 0003:046A:0023.001F: bogus close delimiter [ 215.469817][ T5951] cherry 0003:046A:0023.001F: item 0 1 2 10 parsing failed [ 215.503413][ T5951] cherry 0003:046A:0023.001F: probe with driver cherry failed with error -22 [ 215.537430][ T5994] hub 4-1:0.0: 1 port detected [ 215.659669][ T5951] usb 3-1: USB disconnect, device number 12 [ 215.807495][ C0] raw-gadget.1 gadget.3: ignoring, device is not running [ 215.811962][ C0] raw-gadget.1 gadget.3: ignoring, device is not running [ 215.813905][ C0] raw-gadget.1 gadget.3: ignoring, device is not running [ 215.869327][ T5994] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 215.869354][ T5994] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 215.935032][ T5994] usbhid 4-1:0.0: can't add hid device: -71 [ 215.935176][ T5994] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 216.007422][ T5994] usb 4-1: USB disconnect, device number 9 [ 217.087179][ T5994] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 217.179888][ T8407] Bluetooth: hci0: command 0x0406 tx timeout [ 217.179926][ T8407] Bluetooth: hci2: command 0x0406 tx timeout [ 217.179953][ T8407] Bluetooth: hci1: command 0x0406 tx timeout [ 217.179979][ T8407] Bluetooth: hci3: command 0x0406 tx timeout [ 217.256816][ T5994] usb 1-1: Using ep0 maxpacket: 8 [ 217.265050][ T5994] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 217.285258][ T5994] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 217.285290][ T5994] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.285310][ T5994] usb 1-1: Product: syz [ 217.285327][ T5994] usb 1-1: Manufacturer: syz [ 217.285342][ T5994] usb 1-1: SerialNumber: syz [ 217.369495][ T5994] usb 1-1: config 0 descriptor?? [ 217.375279][ T5994] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 217.375335][ T5994] usb 1-1: setting power ON [ 217.375356][ T5994] dvb-usb: bulk message failed: -22 (2/0) [ 217.430093][ T5994] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 217.450206][ T5994] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 217.450264][ T5994] usb 1-1: media controller created [ 217.589776][ T5994] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 217.603032][ T8429] dvb-usb: bulk message failed: -22 (4/0) [ 217.603053][ T8429] cxusb: i2c read failed [ 217.713858][ T5994] usb 1-1: selecting invalid altsetting 6 [ 217.713882][ T5994] usb 1-1: digital interface selection failed (-22) [ 217.713898][ T5994] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 217.747581][ T5994] usb 1-1: setting power OFF [ 217.747604][ T5994] dvb-usb: bulk message failed: -22 (2/0) [ 217.747621][ T5994] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 217.747633][ T5994] (NULL device *): no alternate interface [ 217.967420][ T5994] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 218.017914][ T5994] usb 1-1: USB disconnect, device number 15 [ 218.838341][ T8446] Bluetooth: MGMT ver 1.23 [ 222.830214][ T8406] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 222.854508][ T8406] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 222.856315][ T8406] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 222.873752][ T8406] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 222.874727][ T8406] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 227.591694][ T8465] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 227.616093][ T8465] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 227.633340][ T8465] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 227.635785][ T8465] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 227.652994][ T8465] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 234.561993][ T8450] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1139'. [ 236.899898][ T8406] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 236.922382][ T8406] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 236.923626][ T8406] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 236.924976][ T8406] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 236.957430][ T8406] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 237.105146][ T8477] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 237.124669][ T8477] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 237.135446][ T8477] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 237.136890][ T8477] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 237.185761][ T8477] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 237.538235][ T8452] chnl_net:caif_netlink_parms(): no params data found [ 244.204077][ T8487] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 244.231243][ T8487] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 244.233302][ T8487] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 244.235108][ T8487] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 244.236400][ T8487] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 261.113430][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.113541][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.731853][ T8464] chnl_net:caif_netlink_parms(): no params data found [ 283.144334][ T8406] Bluetooth: hci7: command tx timeout [ 283.146096][ T5840] Bluetooth: hci8: command tx timeout [ 283.171931][ T8465] Bluetooth: hci6: command tx timeout [ 283.728531][ T8465] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 283.731596][ T8465] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 283.732733][ T8465] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 283.734311][ T8465] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 283.736800][ T8465] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 285.177988][ T5840] Bluetooth: hci6: command tx timeout [ 285.178433][ T5840] Bluetooth: hci8: command tx timeout [ 285.178577][ T5840] Bluetooth: hci9: command tx timeout [ 285.178771][ T5840] Bluetooth: hci7: command tx timeout [ 285.219078][ T8432] Bluetooth: hci5: command tx timeout [ 287.271805][ T5840] Bluetooth: hci9: command tx timeout [ 287.271843][ T5840] Bluetooth: hci5: command tx timeout [ 287.271867][ T5840] Bluetooth: hci7: command tx timeout [ 287.271890][ T5840] Bluetooth: hci8: command tx timeout [ 287.271912][ T5840] Bluetooth: hci6: command tx timeout [ 287.765436][ T5840] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 287.797331][ T5840] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 287.799977][ T5840] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 287.801734][ T5840] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 287.802625][ T5840] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 289.356982][ T8432] Bluetooth: hci6: command tx timeout [ 289.357019][ T8432] Bluetooth: hci8: command tx timeout [ 289.357041][ T8432] Bluetooth: hci7: command tx timeout [ 289.357064][ T8432] Bluetooth: hci5: command tx timeout [ 289.357085][ T8432] Bluetooth: hci9: command tx timeout [ 291.417116][ T59] Bluetooth: hci9: command tx timeout [ 291.417150][ T59] Bluetooth: hci5: command tx timeout [ 297.138441][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 297.160605][ T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 297.161799][ T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 297.163072][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 297.163923][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 297.358182][ T8487] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 297.366507][ T8487] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 297.382147][ T8487] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 297.384304][ T8487] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 297.410091][ T8487] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 303.766348][ T8406] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 303.782845][ T8406] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 303.785984][ T8406] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 303.802584][ T8406] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 303.824663][ T8406] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 305.897336][ T8406] Bluetooth: hci12: command tx timeout [ 307.417245][ T5840] Bluetooth: hci11: command tx timeout [ 307.417793][ T5840] Bluetooth: hci2: command tx timeout [ 307.418008][ T5840] Bluetooth: hci1: command tx timeout [ 307.447024][ T8406] Bluetooth: hci10: command tx timeout [ 307.978342][ T5840] Bluetooth: hci12: command tx timeout [ 309.507513][ T8487] Bluetooth: hci2: command tx timeout [ 309.507546][ T8487] Bluetooth: hci11: command tx timeout [ 309.513164][ T8406] Bluetooth: hci10: command tx timeout [ 309.515849][ T5840] Bluetooth: hci1: command tx timeout [ 310.057252][ T5840] Bluetooth: hci12: command tx timeout [ 311.577181][ T5840] Bluetooth: hci1: command tx timeout [ 311.577214][ T5840] Bluetooth: hci10: command tx timeout [ 311.577234][ T5840] Bluetooth: hci11: command tx timeout [ 311.577253][ T5840] Bluetooth: hci2: command tx timeout [ 312.137480][ T5840] Bluetooth: hci12: command tx timeout [ 313.667214][ T5840] Bluetooth: hci2: command tx timeout [ 313.667266][ T5840] Bluetooth: hci11: command tx timeout [ 313.667289][ T5840] Bluetooth: hci10: command tx timeout [ 313.667312][ T5840] Bluetooth: hci1: command tx timeout [ 322.691424][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.691504][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 345.306765][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 345.327848][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 345.329152][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 345.330588][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 345.335847][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 348.245744][ T8406] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 348.267389][ T8406] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 348.272440][ T8406] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 348.287591][ T8406] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 348.290715][ T8406] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 348.857306][ T5840] Bluetooth: hci3: command tx timeout [ 350.387334][ T5840] Bluetooth: hci4: command tx timeout [ 350.947349][ T5840] Bluetooth: hci3: command tx timeout [ 352.457087][ T5840] Bluetooth: hci4: command tx timeout [ 353.017334][ T5840] Bluetooth: hci3: command tx timeout [ 354.537536][ T5840] Bluetooth: hci4: command tx timeout [ 355.104301][ T5840] Bluetooth: hci3: command tx timeout [ 356.617134][ T5840] Bluetooth: hci4: command tx timeout [ 357.956253][ T8406] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 357.976714][ T8406] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 357.992535][ T8406] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 357.994364][ T8406] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 357.995595][ T8406] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 358.144645][ T5840] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 358.166110][ T5840] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 358.174570][ T5840] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 358.175987][ T5840] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 358.206113][ T5840] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 360.057194][ T8406] Bluetooth: hci13: command tx timeout [ 360.300623][ T8406] Bluetooth: hci14: command tx timeout [ 362.137361][ T8406] Bluetooth: hci13: command tx timeout [ 362.377564][ T8406] Bluetooth: hci14: command tx timeout [ 364.215465][ T5840] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 364.217787][ T8465] Bluetooth: hci13: command tx timeout [ 364.246365][ T5840] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 364.255383][ T5840] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 364.266610][ T5840] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 364.284244][ T5840] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 364.457618][ T5840] Bluetooth: hci14: command tx timeout [ 366.297324][ T5840] Bluetooth: hci13: command tx timeout [ 366.537622][ T5840] Bluetooth: hci14: command tx timeout [ 373.417188][ T8406] Bluetooth: hci15: command tx timeout [ 374.383543][ T39] INFO: task syz.4.1100:8353 blocked for more than 143 seconds. [ 374.383575][ T39] Not tainted syzkaller #0 [ 374.383585][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 374.383598][ T39] task:syz.4.1100 state:D stack:25128 pid:8353 tgid:8353 ppid:5838 task_flags:0x400040 flags:0x00004006 [ 374.383660][ T39] Call Trace: [ 374.383666][ T39] [ 374.383678][ T39] __schedule+0x16f3/0x4c20 [ 374.383719][ T39] ? validate_chain+0x897/0x2140 [ 374.383756][ T39] ? __lock_acquire+0xab9/0xd20 [ 374.383780][ T39] ? __pfx___schedule+0x10/0x10 [ 374.383819][ T39] ? schedule+0x91/0x360 [ 374.383844][ T39] schedule+0x165/0x360 [ 374.383878][ T39] schedule_timeout+0x9a/0x270 [ 374.383901][ T39] ? __pfx_schedule_timeout+0x10/0x10 [ 374.383937][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 374.383964][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 374.383990][ T39] ? wait_for_completion+0x267/0x5d0 [ 374.384039][ T39] wait_for_completion+0x2bf/0x5d0 [ 374.384079][ T39] ? __pfx_wait_for_completion+0x10/0x10 [ 374.384115][ T39] ? __init_swait_queue_head+0xa9/0x150 [ 374.384145][ T39] rcu_barrier+0x463/0x570 [ 374.384176][ T39] netdev_run_todo+0x327/0xea0 [ 374.384199][ T39] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 374.384235][ T39] ? __pfx_netdev_run_todo+0x10/0x10 [ 374.384253][ T39] ? unregister_netdevice_queue+0x33c/0x380 [ 374.384276][ T39] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 374.384302][ T39] ? rtnl_net_dev_lock+0x36/0x2f0 [ 374.384332][ T39] ? rtnl_net_dev_lock+0x2de/0x2f0 [ 374.384365][ T39] unregister_netdev+0x52/0x60 [ 374.384389][ T39] mkiss_close+0x1d8/0x2b0 [ 374.384418][ T39] tty_ldisc_kill+0xa3/0x1a0 [ 374.384442][ T39] tty_ldisc_release+0x1a4/0x200 [ 374.384461][ T39] tty_release_struct+0x2a/0xd0 [ 374.384480][ [ 374.384480][ T39] tty_release+0xcb6/0x1650 [ 374.384508][ T39] ? evm_file_release+0x10b/0x1e0 [ 374.384532][ T39] ? __pfx_tty_release+0x10/0x10 [ 374.384548][ T39] __fput+0x458/0xa80 [ 374.384577][ T39] task_work_run+0x1d4/0x260 [ 374.384599][ T39] ? __pfx_task_work_run+0x10/0x10 [ 374.384623][ T39] ? exit_to_user_mode_loop+0x40/0x110 [ 374.384651][ T39] exit_to_user_mode_loop+0xec/0x110 [ 374.384674][ T39] do_syscall_64+0x2bd/0x3b0 [ 374.384689][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 374.384714][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.384731][ T39] ? clear_bhb_loop+0x60/0xb0 [ 374.384753][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.384780][ T39] RIP: 0033:0x7f694228eba9 [ 374.384800][ T39] RSP: 002b:00007ffcc2537348 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 374.384820][ T39] RAX: 0000000000000000 RBX: 00007f69424d7da0 RCX: 00007f694228eba9 [ 374.384833][ T39] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 374.384845][ T39] RBP: 00007f69424d7da0 R08: 0000000000006e2c R09: 00000003c253763f [ 374.384865][ T39] R10: 00000000005f8600 R11: 0000000000000246 R12: 0000000000032972 [ 374.384877][ T39] R13: 00007ffcc2537440 R14: ffffffffffffffff R15: 00007ffcc2537460 [ 374.384909][ T39] [ 374.384942][ T39] [ 374.384942][ T39] Showing all locks held in the system: [ 374.384952][ T39] 3 locks held by kworker/u8:0/12: [ 374.384962][ T39] #0: ffff88814d075938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 374.385017][ T39] #1: ffffc90000117bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 374.385066][ T39] #2: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 374.385121][ T39] 2 locks held by rcuc/1/28: [ 374.385132][ T39] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 374.385185][ T39] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 374.385237][ T39] 8 locks held by ktimers/1/29: [ 374.385249][ T39] 2 locks held by ksoftirqd/1/30: [ 374.385260][ T39] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 374.385312][ T39] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 374.385365][ T39] 1 lock held by khungtaskd/39: [ 374.385376][ T39] #0: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 374.385428][ T39] 3 locks held by kworker/u8:4/67: [ 374.385440][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 374.385495][ T39] #1: ffffc9000152fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 374.385546][ T39] #2: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 374.385596][ T39] 4 locks held by kworker/u8:5/70: [ 374.385608][ T39] #0: ffff8880311c3138 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 374.385664][ T39] #1: ffffc9000155fbc0 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 374.385720][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 374.385776][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 374.385839][ T39] 6 locks held by kworker/u8:7/1181: [ 374.385871][ T39] 4 locks held by kworker/u8:9/3021: [ 374.385884][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 374.385941][ T39] #1: ffffc9000d327bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 374.385997][ T39] #2: ffff88805c5d0898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 374.386057][ T39] #3: ffff8880b8828b50 ((lock)#3){+.+.}-{3:3}, at: kcov_remote_start+0x92/0x460 [ 374.386119][ T39] 7 locks held by kworker/u8:11/3587: [ 374.386131][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 374.386187][ T39] #1: ffffc9000dc57bc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 374.386246][ T39] #2: ffff8880217da300 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 374.386314][ T39] #3: ffff88805b980d20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 374.386376][ T39] #4: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 374.386431][ T39] #5: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 374.386487][ T39] #6: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 374.386546][ T39] 2 locks held by getty/5592: [ 374.386558][ T39] #0: ffff88823bf728a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 374.386619][ T39] #1: ffffc90003e7e2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 374.386686][ T39] 4 locks held by kworker/1:3/5825: [ 374.386698][ T39] #0: ffff888019899938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 374.386753][ T39] #1: ffffc900049f7bc0 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 374.386808][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 374.606537][ T39] #3: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 374.606614][ T39] 1 lock held by syz-executor/5842: [ 374.606628][ T39] #0: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 374.606700][ T39] 1 lock held by syz-executor/5843: [ 374.606712][ T39] #0: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 374.606771][ T39] 1 lock held by syz-executor/5850: [ 374.606783][ T39] #0: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 374.606849][ T39] 3 locks held by kworker/0:6/5994: [ 374.606861][ T39] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 374.607088][ T39] #1: ffffc900052cfbc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 374.607150][ T39] #2: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 374.607203][ T39] 3 locks held by syz.4.1100/8353: [ 374.607215][ T39] #0: ffff88803b92a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_release+0xb7/0x200 [ 374.607264][ T39] #1: ffff8880605700a0 (&tty->ldisc_sem/1){+.+.}-{0:0}, at: tty_ldisc_release+0xdb/0x200 [ 374.607317][ T39] #2: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 374.607368][ T39] 4 locks held by kworker/1:9/8386: [ 374.607380][ T39] #0: ffff888019899138 ((wq_completion)events_long){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 374.607435][ T39] #1: ffffc90003ef7bc0 ((work_completion)(&(&ipvs->defense_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 374.607491][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 374.607545][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 374.607602][ T39] 4 locks held by kworker/1:15/8412: [ 374.607613][ T39] #0: ffff888059cc1938 ((wq_completion)wg-crypt-wg2#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 374.607673][ T39] #1: ffffc90003f87bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 374.607745][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 374.607801][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 374.607856][ T39] 2 locks held by syz-executor/8452: [ 374.607868][ T39] #0: ffff88805f190e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 374.607925][ T39] #1: ffff88805f1900a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 374.607986][ T39] 1 lock held by syz.3.1143/8462: [ 374.607998][ T39] #0: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 374.608057][ T39] 2 locks held by syz-executor/8464: [ 374.608069][ T39] #0: ffffffff8f1d7ae8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 374.608143][ T39] #1: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 374.608202][ T39] 2 locks held by syz-executor/8474: [ 374.608214][ T39] #0: ffffffff8ecc6840 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 374.608272][ T39] #1: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: wg_netns_pre_exit+0x1c/0x1d0 [ 374.608324][ T39] 2 locks held by syz-executor/8476: [ 374.608337][ T39] #0: ffffffff8ecc6840 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 374.608393][ T39] #1: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: wg_netns_pre_exit+0x1c/0x1d0 [ 374.608445][ T39] 2 locks held by syz-executor/8483: [ 374.608458][ T39] #0: ffffffff8ecc6840 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 374.608514][ T39] #1: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x990 [ 374.608575][ T39] 1 lock held by syz-executor/8507: [ 374.608586][ T39] #0: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 374.608639][ T39] 1 lock held by syz-executor/8510: [ 374.608650][ T39] #0: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 374.608702][ T39] 1 lock held by syz-executor/8517: [ 374.608714][ T39] #0: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 374.608764][ T39] 1 lock held by syz-executor/8521: [ 374.608776][ T39] #0: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 374.608837][ T39] 1 lock held by syz-executor/8524: [ 374.608848][ T39] #0: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 374.608895][ T39] 1 lock held by syz-executor/8538: [ 374.608906][ T39] #0: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 374.608954][ T39] 1 lock held by syz-executor/8543: [ 374.608965][ T39] #0: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 374.609014][ T39] 1 lock held by syz-executor/8547: [ 374.609025][ T39] #0: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 374.609072][ T39] 1 lock held by syz-executor/8549: [ 374.609083][ T39] #0: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 374.609137][ T39] 1 lock held by syz-executor/8556: [ 374.609148][ T39] #0: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 374.609196][ T39] 3 locks held by udevd/8561: [ 374.609209][ T39] [ 374.609215][ T39] ============================================= [ 374.609215][ T39] [ 374.609240][ T39] NMI backtrace for cpu 0 [ 374.609268][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 374.609310][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 374.609332][ T39] Call Trace: [ 374.609344][ T39] [ 374.609360][ T39] dump_stack_lvl+0x189/0x250 [ 374.609421][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 374.609474][ T39] ? __pfx__printk+0x10/0x10 [ 374.609542][ T39] nmi_cpu_backtrace+0x39e/0x3d0 [ 374.609594][ T39] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 374.609649][ T39] ? __pfx__printk+0x10/0x10 [ 374.609690][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 374.609717][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 374.609747][ T39] watchdog+0xf93/0xfe0 [ 374.609778][ T39] ? watchdog+0x1de/0xfe0 [ 374.609810][ T39] kthread+0x70e/0x8a0 [ 374.609843][ T39] ? __pfx_watchdog+0x10/0x10 [ 374.609867][ T39] ? __pfx_kthread+0x10/0x10 [ 374.609902][ T39] ? __pfx_kthread+0x10/0x10 [ 374.609934][ T39] ret_from_fork+0x439/0x7d0 [ 374.609962][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 374.609995][ T39] ? __switch_to_asm+0x39/0x70 [ 374.610012][ T39] ? __switch_to_asm+0x33/0x70 [ 374.610029][ T39] ? __pfx_kthread+0x10/0x10 [ 374.610061][ T39] ret_from_fork_asm+0x1a/0x30 [ 374.610096][ T39] [ 374.610103][ T39] Sending NMI from CPU 0 to CPUs 1: [ 374.610145][ C1] NMI backtrace for cpu 1 [ 374.610158][ C1] CPU: 1 UID: 0 PID: 5825 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 374.610178][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 374.610189][ C1] Workqueue: events_power_efficient neigh_periodic_work [ 374.610213][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x18/0x80 [ 374.610235][ C1] Code: cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 65 48 8b 0c 25 08 40 f6 91 65 8b 35 d8 d1 37 10 <81> e6 00 00 ff 00 ba 00 01 00 00 23 91 0c 0b 00 00 89 d7 09 f7 74 [ 374.610250][ C1] RSP: 0018:ffffc900049f6a60 EFLAGS: 00000283 [ 374.610263][ C1] RAX: ffffffff84ee1eb0 RBX: ffff88807a360154 RCX: ffff8880367d0000 [ 374.610276][ C1] RDX: 0000000000000100 RSI: 0000000080000000 RDI: 0000000000400000 [ 374.610288][ C1] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000100 [ 374.610298][ C1] R10: dffffc0000000000 R11: ffffed1006e9d871 R12: ffff88807a360144 [ 374.610311][ C1] R13: 0000000000000000 R14: ffff88807a360148 R15: 0000000028400045 [ 374.610323][ C1] FS: 0000000000000000(0000) GS:ffff8881269bc000(0000) knlGS:0000000000000000 [ 374.610336][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 374.610346][ C1] CR2: 0000001b31c1fff8 CR3: 0000000029e9a000 CR4: 00000000003526f0 [ 374.610361][ C1] Call Trace: [ 374.610367][ C1] [ 374.610372][ C1] ip_fast_csum+0x150/0x2b0 [ 374.610393][ C1] __ip_local_out+0x12c/0x600 [ 374.610412][ C1] ip_local_out+0x26/0x70 [ 374.610429][ C1] synproxy_send_client_synack+0x8bb/0xe20 [ 374.610463][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 374.610488][ C1] ? synproxy_pernet+0x258/0x270 [ 374.610506][ C1] ? synproxy_pernet+0x45/0x270 [ 374.610527][ C1] nft_synproxy_eval_v4+0x36e/0x560 [ 374.610548][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 374.610567][ C1] ? nf_ip_checksum+0x13c/0x510 [ 374.610587][ C1] nft_synproxy_do_eval+0x345/0x570 [ 374.610609][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 374.610636][ C1] nft_do_chain+0x409/0x1920 [ 374.610661][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 374.610698][ C1] nft_do_chain_inet+0x25d/0x340 [ 374.610716][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 374.610732][ C1] ? __lock_acquire+0xab9/0xd20 [ 374.610760][ C1] ? NF_HOOK+0x9a/0x3a0 [ 374.610783][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 374.610801][ C1] nf_hook_slow+0xc5/0x220 [ 374.610827][ C1] NF_HOOK+0x206/0x3a0 [ 374.610850][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 374.610879][ C1] ? NF_HOOK+0x9a/0x3a0 [ 374.610901][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 374.610922][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 374.610965][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 374.610992][ C1] ? skb_dst+0x4f/0xd0 [ 374.611016][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 374.611042][ C1] NF_HOOK+0x309/0x3a0 [ 374.611067][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 374.611090][ C1] ? NF_HOOK+0x9a/0x3a0 [ 374.611113][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 374.611139][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 374.611170][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 374.611192][ C1] __netif_receive_skb+0x143/0x380 [ 374.611214][ C1] ? rt_spin_unlock+0x65/0x80 [ 374.611237][ C1] ? process_backlog+0x27b/0x900 [ 374.611261][ C1] process_backlog+0x31e/0x900 [ 374.611291][ C1] __napi_poll+0xb3/0x540 [ 374.611315][ C1] net_rx_action+0x707/0xe00 [ 374.611349][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 374.611376][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 374.611406][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 374.611432][ C1] handle_softirqs+0x22f/0x710 [ 374.611460][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 374.611489][ C1] __local_bh_enable_ip+0x179/0x270 [ 374.611511][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 374.611533][ C1] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 374.611555][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 374.611588][ C1] ? neigh_periodic_work+0x57/0xe90 [ 374.611613][ C1] neigh_periodic_work+0xc37/0xe90 [ 374.611639][ C1] ? neigh_periodic_work+0x57/0xe90 [ 374.611663][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 374.611685][ C1] process_scheduled_works+0xade/0x17b0 [ 374.611724][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 374.611756][ C1] worker_thread+0x8a0/0xda0 [ 374.611780][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 374.611810][ C1] ? __kthread_parkme+0x7b/0x200 [ 374.611839][ C1] kthread+0x70e/0x8a0 [ 374.611871][ C1] ? __pfx_worker_thread+0x10/0x10 [ 374.611893][ C1] ? __pfx_kthread+0x10/0x10 [ 374.611922][ C1] ? __pfx_kthread+0x10/0x10 [ 374.611949][ C1] ret_from_fork+0x439/0x7d0 [ 374.611973][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 374.611999][ C1] ? __switch_to_asm+0x39/0x70 [ 374.612014][ C1] ? __switch_to_asm+0x33/0x70 [ 374.612030][ C1] ? __pfx_kthread+0x10/0x10 [ 374.612054][ C1] ret_from_fork_asm+0x1a/0x30 [ 374.612080][ C1] [ 374.612145][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 374.612160][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 374.612185][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 374.612197][ T39] Call Trace: [ 374.612205][ T39] [ 374.612214][ T39] dump_stack_lvl+0x99/0x250 [ 374.612256][ T39] ? __asan_memcpy+0x40/0x70 [ 374.612278][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 374.612308][ T39] ? __pfx__printk+0x10/0x10 [ 374.612343][ T39] vpanic+0x281/0x750 [ 374.612375][ T39] ? __pfx_vpanic+0x10/0x10 [ 374.612402][ T39] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 374.612423][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 374.612464][ T39] panic+0xb9/0xc0 [ 374.612492][ T39] ? __pfx_panic+0x10/0x10 [ 374.612524][ T39] ? irq_work_queue+0xc3/0x140 [ 374.612554][ T39] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 374.612583][ T39] watchdog+0xfd2/0xfe0 [ 374.612631][ T39] ? watchdog+0x1de/0xfe0 [ 374.612665][ T39] kthread+0x70e/0x8a0 [ 374.612701][ T39] ? __pfx_watchdog+0x10/0x10 [ 374.612727][ T39] ? __pfx_kthread+0x10/0x10 [ 374.612765][ T39] ? __pfx_kthread+0x10/0x10 [ 374.612799][ T39] ret_from_fork+0x439/0x7d0 [ 374.612830][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 374.612865][ T39] ? __switch_to_asm+0x39/0x70 [ 374.612884][ T39] ? __switch_to_asm+0x33/0x70 [ 374.612904][ T39] ? __pfx_kthread+0x10/0x10 [ 374.612936][ T39] ret_from_fork_asm+0x1a/0x30 [ 374.612975][ T39] [ 374.613312][ T39] Kernel Offset: disabled