last executing test programs: 13.608257307s ago: executing program 2 (id=890): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000240), 0xa0a00, 0x0) r1 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x4, 0x10100, 0x0, 0x1e}, &(0x7f0000000440)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/67, 0x43}], 0x1}) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x59) 13.156478994s ago: executing program 2 (id=893): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='environ\x00') pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x0) 12.824048695s ago: executing program 0 (id=895): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000380)=0xffff) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000200)=0xfa0b) 12.545064783s ago: executing program 3 (id=896): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000002c0), 0x4) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) 12.487565729s ago: executing program 0 (id=897): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x20, 0x19, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x4010010) 12.416186342s ago: executing program 4 (id=898): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.1GB.failcnt\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x9c) 12.21633251s ago: executing program 3 (id=899): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) syz_emit_ethernet(0x3e, &(0x7f0000000580)={@broadcast, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "e90e5b", 0x8, 0x11, 0x0, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], {0x0, 0x0, 0x8}}}}}}, 0x0) 12.110818332s ago: executing program 0 (id=901): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x40, 0x7a}, [@NDA_LLADDR={0xa, 0x2, @remote}]}, 0x28}}, 0x0) 11.997931308s ago: executing program 4 (id=902): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000014001a80100004800c"], 0x34}}, 0x0) 11.812219741s ago: executing program 3 (id=903): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_ATM={0x8}, @TCA_CAKE_FLOW_MODE={0x8}]}}]}, 0x44}}, 0x0) 11.764964885s ago: executing program 0 (id=904): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x924, 0x4) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{&(0x7f00000001c0)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, 0x0}}], 0x1, 0x4040000) 11.615417038s ago: executing program 4 (id=905): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x300f}]}, 0x38}}, 0x0) 11.366726241s ago: executing program 0 (id=906): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 11.366043096s ago: executing program 3 (id=907): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000003c0)={r2, 0x6, 0x1, 'L'}, 0x9) 11.228307274s ago: executing program 4 (id=908): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r0, &(0x7f0000003280)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="c3de6dbaac41894231251cfbadb1044a6bdb01f2d16b546fe420a316c846740344f06e31ea5a2646642370c788b66c8b838b643d907de059a9b23847a7fa92dcc4a2b97234af3be905e5e4b3e2df8c8b1a02cee5c34c73a64aa33e56430c63af367f563618686861f97ffc64059c0ad8430310262f5d765fe1c353a9b502da3db3e65d0e3ab745ce1ca7c056df5a65f33fe7da20e1eeda3239e485070d8c6035a4b0a19b7c610e10f3026fe3f1872aefed4829186658ab3b60853bce586ce31ca71dea92372e80153b3241231b47c68c1a0e4669945cf64882028248641dafbe949c5ee2bc7521295d8515b1f22b", 0xee}, {&(0x7f00000000c0)="e141bad32064a10738eda7", 0xb}], 0x2}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000005c0)="f007d8bf1dd8e63992843721f30a260c6c01f7adaabc4afad10792a9912e", 0x1e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000f80)="22b499482677800a8dc8e8d7657232ea0d42dd9948f0133ba95a4352a5fddc5b6b6eae4730e752db5040f57516f7cb438d6f2ee1d5a2b1e9d9921e74758895b53161db9e4170b0d9c6d228925056f57fc0456b9e36aaa0c3ed3499e700976db32218d9eb0287dac48cddcb1f17fe20fc2c43be4ef07587ef41f99c5c59a0206c43f9c4469475e39159d972705cf5a8bbee3da4e58795897327c650e0cd3905d66fb758d0ca5ec8092b7c4b4a8e6fd42ecb348eab990539cee450718888a19f0122b4368842c32ce7c529f1756f2bf630cdad46e360908acd5477df640a3766aafdd610fc30cb12c5230173252e0c49e20222601387f73ba1a8991fc6e81666bea4d47cfdbfca1c759c47a4b65babb627adca9434e9c8849ec88a610c64f96c17134024e74d13b832d631593c8dbdfcbd7847be5e16650db1930b91d7cd7902444f1cac4f5e7ff6dc30f68af96871b47a858323c90a60ecdf68770cc173098d32585e4a96f137d9585e2995ed1ba748643e0cc386feeeef23415ffd9ade2bb167ebdef21b50735227ca56eddfc22ad3f24f21fa690364b8f99e2c016092f51399c3c7fcc1bd6dce1bf85fe744eaf44572d76765028c15599911be26dd781b298647d3bb61e88bb4c47df72b071b74cae24291d48457ab2edf4d79a7440ac09026f85d935b2d5326421ad48e2b18a12d1328973a7e6428565b687dd9288f9e39c20a1b645b6f255d64ebd8d5bd6bab8f436df75cf0fb4878c02c2a30764d2d04a0d741cee64e48c8eb01370cccb6d6fb69d051074fc84a2f071ad2c578b0f02c77d8e3f675978e01be67591564482968dd812d8f5fe47032fd3ae84c005633e5d62e1ecc4a408b6a79a8514f7234a5f39b7536f79386047382b3a17c3beaf802b3d3ec54f36d50c9406436d41391aa6f3ed719c0c7be015d2cb9e9ca636857e004532bc03cdab43e7fcbc6be51b68875d3df2e65336c5e31bc509147e8db58a8688ab152678a66d9e577dddd3edb991755c90521abd76f7bf6be195385a83ce00ddb06d768f93a3d88b9c0ea0339b37c7f639c431af0b6c74e096bb55c641e789dcb806805dc2c3282d8b4c8679763cc04f799c6fd61a8f442b55d605d5e0aadb1f7a47f9fb4282f3eea1ea09fa2435dd14e1e252f76d9151d62e09b17031c81f840e04e381adb1053098df7f385fad32f9938f77e6dd230aa57861ffe7bafe80cb1fd2a4f2a01e6cf44de9ea8ab0d5b93a0c353b512c4293204095db36ba1bd07db9a1d45a73f3749b30cdd09f8e7b67bfa924b6a587b025d4cf50da28d94eebe5a84691f47b5dd8e2243e233d41dd1668877f4ca9cc693a6f6d788315b44bbcd312ac4576a45b78fe6e67f628f23bce6754e385155798a1a447577bc6a8d010334bb21711f2997454dabf915b07c2f302fd570dbccb234dbb4ba207cf94c4c3f46605e0087bfd2c0adf0afa051aa9050053083f41a36c64440ff914183c0ea13d8b3faae89166d7239e0657cd229ecef42cb28d74be3087db79162aa603269562fe17952839d1c30f2f10cb4b93130a9907b5eb261703678d0e2b68791bebcdd4afe9467a4cb371c822d438ba90af256040eee2698a2c213fa7555ebd5afad33d46f", 0x482}], 0x1}}], 0x3, 0x2406c380) 11.071271433s ago: executing program 3 (id=909): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000404c05d50310000200000109022400010000000009041200010300000009210000000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 11.050437357s ago: executing program 2 (id=910): r0 = syz_io_uring_setup(0x24fb, &(0x7f0000000000)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 10.878238688s ago: executing program 4 (id=911): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="780000001000150c00"/20, @ANYRES32=r2, @ANYBLOB="00000000000000005800128009000100626f6e640000000048000280080002"], 0x78}}, 0x0) 10.696262244s ago: executing program 0 (id=912): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x48, 0x0, 0x0, 0x5}, {0x6, 0x3}]}) write$ppp(r0, &(0x7f0000019640)="78260d9373", 0x5) 10.619010596s ago: executing program 2 (id=913): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff0000000069102200000000009500040000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) 10.469757101s ago: executing program 4 (id=914): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)={0x30, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}]}, 0x30}}, 0x0) 10.368884967s ago: executing program 2 (id=915): openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 9.833956302s ago: executing program 2 (id=916): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x2c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_SAE_PASSWORD={0x4}]]}, 0x2c}}, 0x0) 8.623764839s ago: executing program 3 (id=917): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d00)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8}, @TCA_FQ_ORPHAN_MASK={0x8}]}}]}, 0x40}}, 0x40000) 2.962684487s ago: executing program 1 (id=920): r0 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x27b8, 0x1ed, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000b00)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "efb9ce47"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 836.987864ms ago: executing program 1 (id=921): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r1, 0x4) sendfile(r0, r1, 0x0, 0x5) 729.629455ms ago: executing program 1 (id=922): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000011c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f00000000c0)={0x18, r1, 0x2, 0x0, &(0x7f0000000280)=[{0xffffffffffffffc1, 0xfffffffffffffffe}, {0x0, 0xdbd}]}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x2, r1, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x200000000000000}) 693.104117ms ago: executing program 1 (id=923): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) r2 = fcntl$dupfd(r0, 0x0, r1) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00'], 0x4c}, 0x1, 0x0, 0x0, 0x40800}, 0x40000) 512.940843ms ago: executing program 1 (id=925): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001480)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x4}}}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0) 0s ago: executing program 1 (id=927): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r0, @ANYBLOB="010025bd7000ffdbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="700084801000010072213a37314985f82566aa242400010034558714857ddf7d3c4dd20d8f31e83750813ddd36af1a3a79a093be591b5fba080002000000000008000200ff7f00000a00010002020202020200001c0006800800050000000000080003000000008008000100feffffff100084800b0001008c040c668f28620006009800010000000400ff000a00f500da8bd33bb3e700000a00060008021100000000000400ec000400ff0008009e"], 0xd4}}, 0x0) kernel console output (not intermixed with test programs): 68.881878][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.923131][ T47] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 68.967709][ T47] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 69.017382][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.048957][ T47] usb 3-1: config 0 descriptor?? [ 69.272614][ T5342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.374402][ T5342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.421045][ T47] usbhid 3-1:0.0: can't add hid device: -71 [ 69.427388][ T5231] Bluetooth: hci1: command tx timeout [ 69.432281][ T55] Bluetooth: hci3: command tx timeout [ 69.434120][ T5231] Bluetooth: hci2: command tx timeout [ 69.438327][ T5239] Bluetooth: hci0: command tx timeout [ 69.451838][ T47] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 69.466494][ T47] usb 3-1: USB disconnect, device number 2 [ 69.481827][ T55] Bluetooth: hci4: command tx timeout [ 69.593496][ T5372] raw_sendmsg: syz.0.34 forgot to set AF_INET. Fix it! [ 69.992581][ T5286] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 70.222128][ T5286] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 70.231491][ T5286] usb 3-1: config 0 has no interface number 0 [ 70.249684][ T5286] usb 3-1: config 0 interface 1 altsetting 1 has an endpoint descriptor with address 0xD6, changing to 0x86 [ 70.281611][ T5286] usb 3-1: config 0 interface 1 altsetting 1 endpoint 0x86 has invalid maxpacket 256, setting to 8 [ 70.321584][ T5286] usb 3-1: config 0 interface 1 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 70.357034][ T5286] usb 3-1: config 0 interface 1 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.409725][ T5286] usb 3-1: config 0 interface 1 has no altsetting 0 [ 70.428530][ T5286] usb 3-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 70.475680][ T5286] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.496608][ T5286] usb 3-1: config 0 descriptor?? [ 70.533157][ T5286] hso 3-1:0.1: Failed to find BULK IN ep [ 70.757849][ T5286] usb 3-1: USB disconnect, device number 3 [ 71.402076][ T5417] sctp: [Deprecated]: syz.1.51 (pid 5417) Use of int in maxseg socket option. [ 71.402076][ T5417] Use struct sctp_assoc_value instead [ 71.510964][ T29] audit: type=1326 audit(1728098947.473:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5420 comm="syz.0.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d28b7dff9 code=0x7ffc0000 [ 71.544203][ T29] audit: type=1326 audit(1728098947.483:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5420 comm="syz.0.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d28b7dff9 code=0x7ffc0000 [ 71.580540][ T29] audit: type=1326 audit(1728098947.483:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5420 comm="syz.0.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f2d28b7dff9 code=0x7ffc0000 [ 71.663721][ T5429] netlink: 191384 bytes leftover after parsing attributes in process `syz.3.59'. [ 71.674871][ T29] audit: type=1326 audit(1728098947.483:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5420 comm="syz.0.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d28b7dff9 code=0x7ffc0000 [ 71.752436][ T8] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 71.784139][ T29] audit: type=1326 audit(1728098947.483:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5420 comm="syz.0.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d28b7dff9 code=0x7ffc0000 [ 71.854905][ T29] audit: type=1326 audit(1728098947.483:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5420 comm="syz.0.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2d28b7dff9 code=0x7ffc0000 [ 71.882986][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.890296][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.931626][ T29] audit: type=1326 audit(1728098947.483:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5420 comm="syz.0.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d28b7dff9 code=0x7ffc0000 [ 71.982624][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 72.003753][ T8] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 72.022240][ T8] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 72.035323][ T29] audit: type=1326 audit(1728098947.483:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5420 comm="syz.0.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d28b7dff9 code=0x7ffc0000 [ 72.065347][ T8] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 72.076737][ T8] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 72.102554][ T29] audit: type=1326 audit(1728098947.483:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5420 comm="syz.0.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f2d28b7dff9 code=0x7ffc0000 [ 72.136355][ T8] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 72.152085][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.168368][ T29] audit: type=1326 audit(1728098947.483:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5420 comm="syz.0.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d28b7dff9 code=0x7ffc0000 [ 72.402349][ T8] usb 5-1: GET_CAPABILITIES returned 0 [ 72.408228][ T8] usbtmc 5-1:16.0: can't read capabilities [ 72.662338][ T5419] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -90 [ 72.715502][ T8] usb 5-1: USB disconnect, device number 3 [ 72.910218][ T5461] @: renamed from vlan0 (while UP) [ 72.921813][ T5229] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 73.104721][ T5229] usb 4-1: Using ep0 maxpacket: 16 [ 73.124063][ T5229] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 73.155406][ T5229] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x1D, changing to 0xD [ 73.178865][ T5469] tap0: tun_chr_ioctl cmd 1074025681 [ 73.185297][ T5229] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 19968, setting to 1024 [ 73.207424][ T5229] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1024 [ 73.220078][ T5229] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 73.237200][ T5229] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 73.247224][ T5229] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 73.255339][ T5229] usb 4-1: Manufacturer: syz [ 73.262364][ T5229] usb 4-1: config 0 descriptor?? [ 73.269135][ T5451] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 73.280654][ T5229] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 73.520790][ T5229] usb 4-1: USB disconnect, device number 2 [ 73.523866][ T5480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.83'. [ 73.621793][ T47] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 73.803537][ T47] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 73.834061][ T47] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 73.849708][ T47] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 73.859967][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.872204][ T5477] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 73.887500][ T47] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 74.031360][ T5494] netlink: 28 bytes leftover after parsing attributes in process `syz.0.90'. [ 74.087648][ T5494] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.096036][ T5494] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.175103][ T3312] usb 5-1: USB disconnect, device number 4 [ 74.330144][ T5502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.93'. [ 75.720221][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.811877][ T47] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 75.875220][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.967780][ T47] usb 3-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 75.987348][ T47] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 76.008734][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.022379][ T47] usb 3-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 76.044140][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.083650][ T47] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 76.092826][ T5244] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.107567][ T5244] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.134586][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.136382][ T5244] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.165261][ T5244] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.173625][ T5244] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 76.182494][ T5244] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.276603][ T47] gspca_sn9c2028: read1 error -32 [ 76.474759][ T12] bridge_slave_1: left allmulticast mode [ 76.541724][ T12] bridge_slave_1: left promiscuous mode [ 76.548410][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.620448][ T12] bridge_slave_0: left allmulticast mode [ 76.633884][ T12] bridge_slave_0: left promiscuous mode [ 76.639658][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.709333][ T3312] usb 3-1: USB disconnect, device number 4 [ 77.597303][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 77.634413][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.657574][ T12] bond0 (unregistering): Released all slaves [ 77.891078][ T5579] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.273325][ T5244] Bluetooth: hci4: command tx timeout [ 78.472709][ T5554] chnl_net:caif_netlink_parms(): no params data found [ 78.708843][ T12] hsr_slave_0: left promiscuous mode [ 78.745547][ T12] hsr_slave_1: left promiscuous mode [ 78.786889][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.811732][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.835735][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.860752][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.911373][ T12] veth1_macvtap: left promiscuous mode [ 78.930336][ T12] veth0_macvtap: left promiscuous mode [ 78.937054][ T12] veth1_vlan: left promiscuous mode [ 78.947768][ T12] veth0_vlan: left promiscuous mode [ 79.557167][ T5631] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 79.695613][ T12] team0 (unregistering): Port device team_slave_1 removed [ 79.735964][ T12] team0 (unregistering): Port device team_slave_0 removed [ 79.916247][ T8] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 80.077518][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 80.099229][ T8] usb 3-1: config 0 has no interfaces? [ 80.114339][ T8] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 80.128478][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.150040][ T8] usb 3-1: config 0 descriptor?? [ 80.235858][ T5638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.142'. [ 80.359930][ T5244] Bluetooth: hci4: command tx timeout [ 80.367495][ T5638] netlink: 4 bytes leftover after parsing attributes in process `syz.4.142'. [ 80.402415][ T5633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.451568][ T5554] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.460064][ T5554] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.487148][ T5633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.489180][ T5554] bridge_slave_0: entered allmulticast mode [ 80.512383][ T29] audit: type=1326 audit(1728098956.543:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5647 comm="syz.4.146" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe17197dff9 code=0x0 [ 80.543101][ T5554] bridge_slave_0: entered promiscuous mode [ 80.547403][ T5286] usb 3-1: USB disconnect, device number 5 [ 80.584823][ T5554] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.612341][ T5554] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.631202][ T5554] bridge_slave_1: entered allmulticast mode [ 80.639370][ T5554] bridge_slave_1: entered promiscuous mode [ 80.732506][ T29] audit: type=1326 audit(1728098956.753:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5654 comm="syz.1.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30fcd7dff9 code=0x7ffc0000 [ 80.817790][ T5554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.844157][ T29] audit: type=1326 audit(1728098956.753:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5654 comm="syz.1.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30fcd7dff9 code=0x7ffc0000 [ 80.873236][ T5554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.883823][ T29] audit: type=1326 audit(1728098956.763:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5654 comm="syz.1.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f30fcd7dff9 code=0x7ffc0000 [ 80.927688][ T29] audit: type=1326 audit(1728098956.763:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5654 comm="syz.1.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30fcd7dff9 code=0x7ffc0000 [ 81.022014][ T5286] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 81.024161][ T29] audit: type=1326 audit(1728098956.763:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5654 comm="syz.1.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f30fcd7dff9 code=0x7ffc0000 [ 81.079218][ T29] audit: type=1326 audit(1728098956.763:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5654 comm="syz.1.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30fcd7dff9 code=0x7ffc0000 [ 81.093637][ T5554] team0: Port device team_slave_0 added [ 81.135199][ T5554] team0: Port device team_slave_1 added [ 81.192273][ T29] audit: type=1326 audit(1728098956.763:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5654 comm="syz.1.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30fcd7dff9 code=0x7ffc0000 [ 81.226237][ T5286] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 81.240428][ T5286] usb 3-1: config 0 interface 0 has no altsetting 1 [ 81.273049][ T5286] usb 3-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=25.e8 [ 81.289864][ T29] audit: type=1326 audit(1728098956.763:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5654 comm="syz.1.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f30fcd7dff9 code=0x7ffc0000 [ 81.291403][ T5286] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.325471][ T5554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.329914][ T29] audit: type=1326 audit(1728098956.763:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5654 comm="syz.1.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30fcd7dff9 code=0x7ffc0000 [ 81.359858][ T5554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.420308][ T5286] usb 3-1: Product: syz [ 81.439769][ T5286] usb 3-1: Manufacturer: syz [ 81.452408][ T5286] usb 3-1: SerialNumber: syz [ 81.458288][ T5554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.476795][ T5286] usb 3-1: config 0 descriptor?? [ 81.515585][ T5675] netlink: 'syz.0.154': attribute type 1 has an invalid length. [ 81.524277][ T5675] netlink: 'syz.0.154': attribute type 2 has an invalid length. [ 81.533103][ T5675] netlink: 4 bytes leftover after parsing attributes in process `syz.0.154'. [ 81.552916][ T5286] ttusbir 3-1:0.0: cannot find expected altsetting [ 81.609376][ T5554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.624336][ T5554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.717395][ T5554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.878103][ T5229] usb 3-1: USB disconnect, device number 6 [ 81.916065][ T5554] hsr_slave_0: entered promiscuous mode [ 81.957566][ T5554] hsr_slave_1: entered promiscuous mode [ 82.001448][ T5554] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.020747][ T5554] Cannot create hsr debugfs directory [ 82.101023][ T5700] capability: warning: `syz.1.164' uses 32-bit capabilities (legacy support in use) [ 82.121342][ T25] cfg80211: failed to load regulatory.db [ 82.431751][ T5244] Bluetooth: hci4: command tx timeout [ 82.853168][ T25] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 82.891618][ T3312] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 83.011640][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 83.020450][ T25] usb 5-1: config 0 has no interfaces? [ 83.034549][ T25] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 83.043991][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.062603][ T3312] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 83.080860][ T25] usb 5-1: Product: syz [ 83.089676][ T3312] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 83.097818][ T5741] netlink: 'syz.1.176': attribute type 1 has an invalid length. [ 83.103134][ T25] usb 5-1: Manufacturer: syz [ 83.115343][ T5741] netlink: 71 bytes leftover after parsing attributes in process `syz.1.176'. [ 83.126342][ T3312] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 83.129852][ T5741] openvswitch: netlink: Actions may not be safe on all matching packets [ 83.141684][ T25] usb 5-1: SerialNumber: syz [ 83.153676][ T25] usb 5-1: config 0 descriptor?? [ 83.162075][ T3312] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.204346][ T5728] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 83.214595][ T3312] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 83.524336][ T25] usb 5-1: USB disconnect, device number 5 [ 83.552981][ T5286] usb 1-1: USB disconnect, device number 2 [ 83.722815][ T5554] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.772817][ T5554] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.806648][ T5554] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.856936][ T5554] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.945761][ T5760] tipc: Started in network mode [ 83.955097][ T5760] tipc: Node identity ac14140f, cluster identity 4711 [ 83.970100][ T5760] tipc: New replicast peer: 255.255.255.255 [ 83.979011][ T5760] tipc: Enabled bearer , priority 10 [ 84.350846][ T5554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.464629][ T5554] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.483425][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.491239][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.512075][ T5244] Bluetooth: hci4: command tx timeout [ 84.515944][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.525557][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.766043][ T5554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.801743][ T5554] veth0_vlan: entered promiscuous mode [ 84.814262][ T5554] veth1_vlan: entered promiscuous mode [ 84.836914][ T5554] veth0_macvtap: entered promiscuous mode [ 84.846465][ T5554] veth1_macvtap: entered promiscuous mode [ 84.865164][ T5554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.875832][ T5554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.885807][ T5554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.896475][ T5554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.906510][ T5554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.917376][ T5554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.927806][ T5554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.938545][ T5554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.950564][ T5554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.960430][ T5787] wireguard: wg0: Could not create IPv4 socket [ 85.000768][ T5554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.019982][ T5554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.039013][ T5554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.049888][ T5554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.070661][ T5554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.094328][ T25] tipc: Node number set to 2886997007 [ 85.123680][ T5554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.144435][ T5554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.178193][ T5554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.190446][ T5554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.261043][ T5797] netlink: 'syz.4.193': attribute type 1 has an invalid length. [ 85.362672][ T5554] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.373061][ T5554] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.387551][ T5554] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.396936][ T5554] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.682821][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.691082][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.715599][ T5821] netlink: 12 bytes leftover after parsing attributes in process `syz.0.201'. [ 85.850142][ T2916] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.889312][ T2916] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.202158][ T5839] bond0: Unable to set down delay as MII monitoring is disabled [ 86.481635][ T5229] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 86.695691][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.751144][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.760971][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.771359][ T5229] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 86.780793][ T5229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.790718][ T5229] usb 1-1: config 0 descriptor?? [ 86.793975][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.807471][ T5229] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 86.814133][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.844669][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.861965][ T55] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.871760][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.893590][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.901960][ T5860] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.083756][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.219591][ T5229] gspca_cpia1: usb_control_msg 03, error -32 [ 87.235104][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.249252][ T5229] gspca_cpia1: usb_control_msg 03, error -71 [ 87.281975][ T5229] gspca_cpia1: usb_control_msg 01, error -71 [ 87.297089][ T5872] netlink: 4 bytes leftover after parsing attributes in process `syz.1.216'. [ 87.302305][ T5229] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 87.327473][ T5229] usb 1-1: USB disconnect, device number 3 [ 87.406016][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.785485][ T3312] IPVS: starting estimator thread 0... [ 87.832970][ T11] bridge_slave_1: left allmulticast mode [ 87.838775][ T11] bridge_slave_1: left promiscuous mode [ 87.882484][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.935149][ T11] bridge_slave_0: left allmulticast mode [ 87.954328][ T5899] IPVS: using max 22 ests per chain, 52800 per kthread [ 87.971697][ T11] bridge_slave_0: left promiscuous mode [ 87.977748][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.993359][ T5244] Bluetooth: hci0: command tx timeout [ 89.003368][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.017849][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.029893][ T11] bond0 (unregistering): Released all slaves [ 89.045036][ T5867] chnl_net:caif_netlink_parms(): no params data found [ 89.183517][ T5945] netlink: 4 bytes leftover after parsing attributes in process `syz.3.237'. [ 89.386642][ T11] tipc: Disabling bearer [ 89.428188][ T11] tipc: Left network mode [ 89.752051][ T5968] vlan2: entered promiscuous mode [ 89.757507][ T5968] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 89.796241][ T5968] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 90.060205][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.068168][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.092750][ T5867] bridge_slave_0: entered allmulticast mode [ 90.113669][ T5867] bridge_slave_0: entered promiscuous mode [ 90.179791][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.225654][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.260328][ T5867] bridge_slave_1: entered allmulticast mode [ 90.280011][ T5867] bridge_slave_1: entered promiscuous mode [ 90.597680][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.664775][ T6008] process 'syz.0.251' launched './file2' with NULL argv: empty string added [ 90.771819][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.919139][ T11] hsr_slave_0: left promiscuous mode [ 90.930732][ T11] hsr_slave_1: left promiscuous mode [ 90.987259][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.012871][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.040181][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.050218][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.072772][ T5244] Bluetooth: hci0: command tx timeout [ 91.087441][ T11] veth1_macvtap: left promiscuous mode [ 91.093256][ T11] veth0_macvtap: left promiscuous mode [ 91.098872][ T11] veth1_vlan: left promiscuous mode [ 91.104849][ T11] veth0_vlan: left promiscuous mode [ 91.117084][ T3312] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 91.145470][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 91.145493][ T29] audit: type=1800 audit(1728098967.173:23): pid=6028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.259" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 91.352237][ T3312] usb 4-1: Using ep0 maxpacket: 16 [ 91.372286][ T3312] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 91.380629][ T3312] usb 4-1: config 0 has no interface number 0 [ 91.391999][ T3312] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 91.429359][ T3312] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 91.438874][ T3312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.449448][ T3312] usb 4-1: Product: syz [ 91.454851][ T3312] usb 4-1: Manufacturer: syz [ 91.459954][ T3312] usb 4-1: SerialNumber: syz [ 91.476706][ T3312] usb 4-1: config 0 descriptor?? [ 91.938444][ T11] team0 (unregistering): Port device team_slave_1 removed [ 92.001082][ T11] team0 (unregistering): Port device team_slave_0 removed [ 92.094312][ T3312] usbtouchscreen 4-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 92.118601][ T3312] usb 4-1: USB disconnect, device number 3 [ 92.423682][ T5867] team0: Port device team_slave_0 added [ 92.441282][ T5867] team0: Port device team_slave_1 added [ 92.472898][ T6036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.262'. [ 92.508253][ T6036] vlan2: entered allmulticast mode [ 92.524629][ T6036] bridge0: entered allmulticast mode [ 92.532243][ T6036] bridge0: port 3(vlan2) entered blocking state [ 92.538627][ T6036] bridge0: port 3(vlan2) entered disabled state [ 92.563167][ T6036] bridge0: left allmulticast mode [ 92.652148][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.665163][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.739155][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.781069][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.831866][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.900001][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.047206][ T5867] hsr_slave_0: entered promiscuous mode [ 93.082538][ T5867] hsr_slave_1: entered promiscuous mode [ 93.105596][ T5867] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.113730][ T5867] Cannot create hsr debugfs directory [ 93.136898][ T3312] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 93.151671][ T5244] Bluetooth: hci0: command tx timeout [ 93.342280][ T3312] usb 5-1: Using ep0 maxpacket: 16 [ 93.351673][ T3312] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 93.360867][ T3312] usb 5-1: config 0 has no interface number 0 [ 93.381236][ T3312] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 93.413872][ T3312] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 93.452737][ T3312] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 93.463283][ T3312] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.486509][ T3312] usb 5-1: Product: syz [ 93.507302][ T3312] usb 5-1: Manufacturer: syz [ 93.534116][ T3312] usb 5-1: SerialNumber: syz [ 93.567955][ T3312] usb 5-1: config 0 descriptor?? [ 93.579218][ T6055] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 93.587016][ T6055] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 93.825427][ T6055] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 93.834646][ T6055] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 94.138552][ T5867] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.181056][ T5867] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.213093][ T5867] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.259748][ T5867] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.487211][ T3312] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 94.507514][ T3312] asix 5-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 94.542078][ T3312] asix 5-1:0.251: probe with driver asix failed with error -71 [ 94.548829][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.577127][ T3312] usb 5-1: USB disconnect, device number 6 [ 94.639807][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.679309][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.686598][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.744069][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.751651][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.925356][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.059219][ T5867] veth0_vlan: entered promiscuous mode [ 95.107844][ T5867] veth1_vlan: entered promiscuous mode [ 95.215913][ T6118] netlink: 191384 bytes leftover after parsing attributes in process `syz.4.284'. [ 95.230288][ T5867] veth0_macvtap: entered promiscuous mode [ 95.251098][ T5867] veth1_macvtap: entered promiscuous mode [ 95.268085][ T5244] Bluetooth: hci0: command tx timeout [ 95.335702][ T5867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.346518][ T5867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.357079][ T5867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.367900][ T5867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.379607][ T5867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.390649][ T5867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.421573][ T5867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.437562][ T5867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.461915][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.505018][ T5867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.532434][ T5867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.579655][ T5867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.611761][ T5867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.641550][ T5867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.668209][ T5867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.681550][ T5867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.706519][ T5867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.733339][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.749465][ T5867] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.767337][ T5867] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.786871][ T5867] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.799110][ T5867] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.004145][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.013225][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.016875][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.029068][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.182269][ T5229] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 96.193425][ T25] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 96.252982][ T6134] capability: warning: `syz.3.291' uses deprecated v2 capabilities in a way that may be insecure [ 96.382467][ T25] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 96.391878][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.402128][ T5229] usb 5-1: config 0 has no interfaces? [ 96.410994][ T25] usb 2-1: config 0 descriptor?? [ 96.427319][ T5229] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 96.437151][ T5229] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 96.445569][ T5229] usb 5-1: Product: syz [ 96.449780][ T5229] usb 5-1: Manufacturer: syz [ 96.467943][ T5229] usb 5-1: config 0 descriptor?? [ 96.474167][ T25] cp210x 2-1:0.0: cp210x converter detected [ 96.646195][ T6163] netlink: 20 bytes leftover after parsing attributes in process `syz.2.301'. [ 96.658329][ T6163] veth1_macvtap: left promiscuous mode [ 96.671285][ T6163] netlink: 20 bytes leftover after parsing attributes in process `syz.2.301'. [ 96.712844][ T5283] usb 5-1: USB disconnect, device number 7 [ 96.822398][ T5229] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 96.845338][ T25] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 96.886177][ T25] usb 2-1: cp210x converter now attached to ttyUSB0 [ 96.973010][ T5229] usb 1-1: Using ep0 maxpacket: 8 [ 96.979783][ T5229] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.001943][ T5229] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 97.025065][ T5229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.059364][ T5229] usb 1-1: config 0 descriptor?? [ 97.069791][ T6175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.307'. [ 97.089023][ T5229] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 97.112976][ T8] usb 2-1: USB disconnect, device number 2 [ 97.129743][ T8] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 97.184816][ T8] cp210x 2-1:0.0: device disconnected [ 97.688389][ T6196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.314'. [ 97.802150][ T6200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.317'. [ 97.965946][ T5229] gspca_vc032x: reg_w err -71 [ 97.972397][ T5229] vc032x 1-1:0.0: probe with driver vc032x failed with error -71 [ 97.988430][ T5229] usb 1-1: USB disconnect, device number 4 [ 98.161639][ T5288] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 98.501940][ T5288] usb 4-1: Using ep0 maxpacket: 8 [ 98.557103][ T5288] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.587637][ T5288] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.636068][ T5288] usb 4-1: New USB device found, idVendor=0b05, idProduct=19b6, bcdDevice= 0.40 [ 98.667953][ T5288] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.697539][ T5288] usb 4-1: Product: syz [ 98.719869][ T5288] usb 4-1: Manufacturer: syz [ 98.731679][ T5288] usb 4-1: SerialNumber: syz [ 99.348111][ T5283] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 99.374871][ T5288] hid (null): report_id 2668810406 is invalid [ 99.388568][ T5288] asus 0003:0B05:19B6.0001: report_id 2668810406 is invalid [ 99.394419][ T5229] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 99.400746][ T5288] asus 0003:0B05:19B6.0001: item 0 4 1 8 parsing failed [ 99.412208][ T5288] asus 0003:0B05:19B6.0001: Asus hid parse failed: -22 [ 99.419190][ T5288] asus 0003:0B05:19B6.0001: probe with driver asus failed with error -22 [ 99.525306][ T5283] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.537732][ T5283] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.550691][ T5283] usb 5-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 99.560502][ T5283] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.563279][ T5229] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 99.572614][ T5283] usb 5-1: config 0 descriptor?? [ 99.601333][ T5229] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 99.623781][ T25] usb 4-1: USB disconnect, device number 4 [ 99.640150][ T5229] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 99.657440][ T5229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.680667][ T6255] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 99.701021][ T5229] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 100.007266][ T6271] ======================================================= [ 100.007266][ T6271] WARNING: The mand mount option has been deprecated and [ 100.007266][ T6271] and is ignored by this kernel. Remove the mand [ 100.007266][ T6271] option from the mount to silence this warning. [ 100.007266][ T6271] ======================================================= [ 100.056863][ T6250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.088082][ T25] usb 1-1: USB disconnect, device number 5 [ 100.104723][ T6250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.182891][ T5283] sony 0003:054C:024B.0002: unknown main item tag 0x0 [ 100.216498][ T5283] sony 0003:054C:024B.0002: unknown main item tag 0x0 [ 100.234899][ T5283] sony 0003:054C:024B.0002: unexpected long global item [ 100.264567][ T5283] sony 0003:054C:024B.0002: parse failed [ 100.270343][ T5283] sony 0003:054C:024B.0002: probe with driver sony failed with error -22 [ 100.461900][ T5288] usb 5-1: USB disconnect, device number 8 [ 100.641073][ T6288] netlink: 104 bytes leftover after parsing attributes in process `syz.3.358'. [ 100.787321][ T6295] tun0: tun_chr_ioctl cmd 1074025694 [ 101.159883][ T6307] netlink: 'syz.2.364': attribute type 4 has an invalid length. [ 101.681852][ T25] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 101.843689][ T25] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 101.877225][ T25] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 101.895116][ T25] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 101.918470][ T25] usb 3-1: config 0 interface 0 has no altsetting 0 [ 101.961302][ T25] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 101.992693][ T25] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 102.035448][ T25] usb 3-1: config 0 interface 0 has no altsetting 0 [ 102.050278][ T25] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 102.059887][ T25] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 102.113242][ T25] usb 3-1: config 0 interface 0 has no altsetting 0 [ 102.121229][ T25] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 102.149950][ T25] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 102.197540][ T25] usb 3-1: config 0 interface 0 has no altsetting 0 [ 102.235169][ T25] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 102.253918][ T25] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 102.284734][ T25] usb 3-1: config 0 interface 0 has no altsetting 0 [ 102.297815][ T25] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 102.308233][ T25] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 102.341606][ T25] usb 3-1: config 0 interface 0 has no altsetting 0 [ 102.355871][ T25] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 102.373880][ T25] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 102.418942][ T25] usb 3-1: config 0 interface 0 has no altsetting 0 [ 102.427305][ T25] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 102.443269][ T5244] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 102.444729][ T25] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 102.452637][ T5244] Bluetooth: hci3: Injecting HCI hardware error event [ 102.469159][ T25] usb 3-1: config 0 interface 0 has no altsetting 0 [ 102.473989][ T5244] Bluetooth: hci3: hardware error 0x00 [ 102.483068][ T5283] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 102.538609][ T25] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 102.574777][ T25] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 102.618327][ T25] usb 3-1: Product: syz [ 102.641684][ T25] usb 3-1: Manufacturer: syz [ 102.659639][ T25] usb 3-1: SerialNumber: syz [ 102.673021][ T25] usb 3-1: config 0 descriptor?? [ 102.679822][ T5283] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 102.698307][ T5283] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.723887][ T25] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 102.739671][ T5283] usb 1-1: config 0 descriptor?? [ 103.055141][ C1] usb 3-1: yurex_control_callback - control failed: -71 [ 103.056501][ T8] usb 3-1: USB disconnect, device number 7 [ 103.082719][ T8] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 103.161670][ T25] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 103.211235][ T5283] [drm:udl_init] *ERROR* Selecting channel failed [ 103.257560][ T5283] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 103.273090][ T5283] [drm] Initialized udl on minor 2 [ 103.286557][ T5283] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 103.312128][ T5283] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 103.333013][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.349385][ T8] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 103.354880][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.369021][ T5283] usb 1-1: USB disconnect, device number 6 [ 103.393000][ T8] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 103.408027][ T25] usb 5-1: New USB device found, idVendor=056a, idProduct=0065, bcdDevice= 0.00 [ 103.419728][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.449034][ T25] usb 5-1: config 0 descriptor?? [ 103.611734][ T5229] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 103.772177][ T5229] usb 4-1: Using ep0 maxpacket: 8 [ 103.783376][ T5229] usb 4-1: config 150 has an invalid interface number: 204 but max is 1 [ 103.802767][ T5229] usb 4-1: config 150 has no interface number 0 [ 103.809981][ T5229] usb 4-1: config 150 interface 204 has no altsetting 0 [ 103.859773][ T5229] usb 4-1: config 150 interface 1 has no altsetting 0 [ 103.879286][ T6363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.895628][ T6377] netlink: 104 bytes leftover after parsing attributes in process `syz.0.395'. [ 103.912119][ T5229] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 103.923438][ T6363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.926866][ T5229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.944410][ T5229] usb 4-1: Product: syz [ 103.960402][ T5229] usb 4-1: Manufacturer: syz [ 103.969683][ T25] wacom 0003:056A:0065.0003: unknown main item tag 0x7 [ 103.980825][ T5229] usb 4-1: SerialNumber: syz [ 103.990787][ T25] wacom 0003:056A:0065.0003: unknown main item tag 0x4 [ 104.023937][ T25] wacom 0003:056A:0065.0003: Unknown device_type for 'HID 056a:0065'. Assuming pen. [ 104.068186][ T25] wacom 0003:056A:0065.0003: hidraw0: USB HID v0.00 Device [HID 056a:0065] on usb-dummy_hcd.4-1/input0 [ 104.120127][ T25] input: Wacom Bamboo Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0065.0003/input/input7 [ 104.191700][ T3312] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 104.232787][ T25] usb 5-1: USB disconnect, device number 9 [ 104.258249][ T5229] xr_serial 4-1:150.204: xr_serial converter detected [ 104.409553][ T8] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 104.419525][ T3312] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 104.432142][ T3312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.440753][ T3312] usb 3-1: Product: syz [ 104.446497][ T3312] usb 3-1: Manufacturer: syz [ 104.451374][ T3312] usb 3-1: SerialNumber: syz [ 104.463011][ T3312] usb 3-1: config 0 descriptor?? [ 104.512220][ T5244] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 104.571631][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 104.586316][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 104.602120][ T8] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 104.621162][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.642921][ T8] usb 1-1: config 0 descriptor?? [ 104.654801][ T8] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input10 [ 104.726222][ T25] usb 3-1: USB disconnect, device number 8 [ 104.837706][ T5229] xr_serial ttyUSB0: Failed to set reg 0x0d: -71 [ 104.846522][ T5229] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 104.866868][ T5229] usb 4-1: USB disconnect, device number 5 [ 104.883134][ T5229] xr_serial 4-1:150.204: device disconnected [ 104.906060][ T4671] bcm5974 1-1:0.0: could not read from device [ 104.949726][ T6384] bcm5974 1-1:0.0: could not read from device [ 104.977984][ T8] usb 1-1: USB disconnect, device number 7 [ 104.985865][ T4671] bcm5974 1-1:0.0: could not read from device [ 105.031054][ T5249] bcm5974 1-1:0.0: could not read from device [ 105.044054][ T4671] bcm5974 1-1:0.0: could not read from device [ 105.059817][ T6400] netlink: 8 bytes leftover after parsing attributes in process `syz.4.404'. [ 105.901748][ T8] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 106.039896][ T25] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 106.059416][ T8] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=9f.d4 [ 106.069029][ T8] usb 3-1: New USB device strings: Mfr=188, Product=0, SerialNumber=0 [ 106.101780][ T5288] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 106.119729][ T8] usb 3-1: Manufacturer: syz [ 106.137323][ T8] usb 3-1: config 0 descriptor?? [ 106.226215][ T6427] tun0: tun_chr_ioctl cmd 1074025675 [ 106.240078][ T6427] tun0: persist disabled [ 106.241686][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 106.263070][ T25] usb 4-1: config 0 has an invalid interface number: 111 but max is 1 [ 106.271459][ T25] usb 4-1: config 0 has no interface number 1 [ 106.286519][ T5288] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.295484][ T25] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 106.305018][ T5288] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.316658][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.316687][ T25] usb 4-1: Product: syz [ 106.353049][ T25] usb 4-1: Manufacturer: syz [ 106.357712][ T25] usb 4-1: SerialNumber: syz [ 106.380491][ T25] usb 4-1: config 0 descriptor?? [ 106.403976][ T5288] usb 2-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 106.439868][ T5288] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.484445][ T5288] usb 2-1: config 0 descriptor?? [ 106.581363][ T8] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 106.596611][ T25] snd-usb-6fire 4-1:0.111: unable to receive device firmware state. [ 106.611992][ T25] snd-usb-6fire 4-1:0.111: probe with driver snd-usb-6fire failed with error -71 [ 106.675512][ T25] usb 4-1: USB disconnect, device number 6 [ 106.850404][ T5283] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 107.074721][ T8] gs_usb 3-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 107.084445][ T5283] usb 5-1: Using ep0 maxpacket: 16 [ 107.097628][ T5283] usb 5-1: config 0 has no interfaces? [ 107.103626][ T8] gs_usb 3-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 107.117060][ T5283] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 107.130094][ T5283] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.149303][ T8] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -22 [ 107.160559][ T5283] usb 5-1: Product: syz [ 107.176353][ T5288] uclogic 0003:2179:0053.0004: interface is invalid, ignoring [ 107.198616][ T5283] usb 5-1: Manufacturer: syz [ 107.203954][ T8] usb 3-1: USB disconnect, device number 9 [ 107.215315][ T5283] usb 5-1: SerialNumber: syz [ 107.241162][ T5283] usb 5-1: config 0 descriptor?? [ 107.418337][ T8] usb 2-1: USB disconnect, device number 3 [ 107.525612][ T5288] usb 5-1: USB disconnect, device number 10 [ 107.560457][ T6449] netlink: 8 bytes leftover after parsing attributes in process `syz.0.426'. [ 108.142714][ T5288] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 108.331789][ T5288] usb 3-1: Using ep0 maxpacket: 8 [ 108.349009][ T5288] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 108.364552][ T29] audit: type=1326 audit(1728098984.393:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6473 comm="syz.4.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe17197dff9 code=0x7ffc0000 [ 108.368776][ T5288] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 108.434033][ T5288] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 108.444393][ T5288] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 108.457832][ T5288] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 108.467139][ T5288] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.488385][ T29] audit: type=1326 audit(1728098984.423:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6473 comm="syz.4.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe17197dff9 code=0x7ffc0000 [ 108.510846][ T29] audit: type=1326 audit(1728098984.423:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6473 comm="syz.4.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fe17197dff9 code=0x7ffc0000 [ 108.622145][ T29] audit: type=1326 audit(1728098984.423:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6473 comm="syz.4.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe17197dff9 code=0x7ffc0000 [ 108.694223][ T5288] usb 3-1: GET_CAPABILITIES returned 0 [ 108.711717][ T5288] usbtmc 3-1:16.0: can't read capabilities [ 108.731756][ T29] audit: type=1326 audit(1728098984.423:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6473 comm="syz.4.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe17197dff9 code=0x7ffc0000 [ 108.819298][ T29] audit: type=1326 audit(1728098984.423:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6473 comm="syz.4.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fe17197dff9 code=0x7ffc0000 [ 108.923824][ T29] audit: type=1326 audit(1728098984.423:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6473 comm="syz.4.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe171974fa7 code=0x7ffc0000 [ 109.007348][ T29] audit: type=1326 audit(1728098984.423:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6473 comm="syz.4.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe171919959 code=0x7ffc0000 [ 109.050136][ T8] usb 3-1: USB disconnect, device number 10 [ 109.082984][ T29] audit: type=1326 audit(1728098984.423:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6473 comm="syz.4.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe171974fa7 code=0x7ffc0000 [ 109.148520][ T29] audit: type=1326 audit(1728098984.423:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6473 comm="syz.4.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe171919959 code=0x7ffc0000 [ 109.730972][ T6495] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 109.764916][ T6495] pim6reg0: linktype set to 65534 [ 110.124906][ T6501] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 112.041020][ T6543] netlink: 'syz.4.470': attribute type 21 has an invalid length. [ 112.088684][ T6543] netlink: 128 bytes leftover after parsing attributes in process `syz.4.470'. [ 112.152919][ T6543] netlink: 'syz.4.470': attribute type 5 has an invalid length. [ 112.221999][ T6543] netlink: 'syz.4.470': attribute type 6 has an invalid length. [ 112.261768][ T6543] netlink: 3 bytes leftover after parsing attributes in process `syz.4.470'. [ 112.296350][ T6548] bridge_slave_1: left allmulticast mode [ 112.304283][ T6548] bridge_slave_1: left promiscuous mode [ 112.314617][ T6548] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.347475][ T6548] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 112.433350][ T6550] netlink: 108 bytes leftover after parsing attributes in process `syz.0.473'. [ 112.492036][ T6550] netlink: 8 bytes leftover after parsing attributes in process `syz.0.473'. [ 112.510204][ T6552] binder: 6551:6552 ioctl c018620c 20000000 returned -22 [ 112.894284][ T5229] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 113.035743][ T3312] IPVS: starting estimator thread 0... [ 113.073623][ T5229] usb 1-1: config 0 interface 0 has no altsetting 0 [ 113.097652][ T5229] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 113.131740][ T6580] IPVS: using max 19 ests per chain, 45600 per kthread [ 113.135591][ T5229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.180956][ T5229] usb 1-1: config 0 descriptor?? [ 113.281806][ T5288] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 113.462156][ T5288] usb 2-1: Using ep0 maxpacket: 16 [ 113.481033][ T5288] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.509607][ T5288] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.540134][ T5288] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 113.577668][ T5288] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 113.600190][ T5288] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.620998][ T5288] usb 2-1: config 0 descriptor?? [ 114.032881][ T5229] video4linux radio32: keene_cmd_main failed (-71) [ 114.041660][ T5229] radio-keene 1-1:0.0: V4L2 device registered as radio32 [ 114.071088][ T5288] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 114.071850][ T5229] usb 1-1: USB disconnect, device number 8 [ 114.086695][ T5288] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 114.121388][ T5288] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 114.146890][ T5288] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 114.186049][ T5288] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 114.214331][ T5288] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 114.238898][ T5288] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 114.252488][ T5288] microsoft 0003:045E:07DA.0005: No inputs registered, leaving [ 114.263663][ T5288] microsoft 0003:045E:07DA.0005: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 114.265347][ T6619] CUSE: unknown device info "Ðju|:©¾iÎò|Êl [ 114.265347][ T6619] ‚ï›D Í^M¢`­ÒESæ«ÇšÇP²2EQ¬©xÉíÿy;óvØ£¹‚+½:‰yâðGYü™2z€&ü [ 114.265347][ T6619] Z9ü,v¢’Ïu3~ÚcÙYÓš rº(‹%ÝÀÔÀÓoÖ)j´†WœeÃ-¤ÂÈ7µ#"j-hÈò0u  Á} ß»’oœL¬ðxÏ-XzATÑ „" [ 114.283873][ T5288] microsoft 0003:045E:07DA.0005: no inputs found [ 114.300612][ T6619] CUSE: DEVNAME unspecified [ 114.349269][ T5288] microsoft 0003:045E:07DA.0005: could not initialize ff, continuing anyway [ 114.372086][ T6622] vlan2: entered allmulticast mode [ 114.377472][ T6622] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 114.390235][ T6622] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 114.424018][ T5288] usb 2-1: USB disconnect, device number 4 [ 114.525892][ T6626] sctp: [Deprecated]: syz.2.508 (pid 6626) Use of struct sctp_assoc_value in delayed_ack socket option. [ 114.525892][ T6626] Use struct sctp_sack_info instead [ 114.821716][ T8] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 114.982197][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 114.989278][ T8] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 115.013735][ T8] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 115.023687][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.041790][ T8] usb 5-1: Product: syz [ 115.047245][ T8] usb 5-1: Manufacturer: syz [ 115.056501][ T8] usb 5-1: SerialNumber: syz [ 115.072036][ T8] usb 5-1: config 0 descriptor?? [ 115.085929][ T6629] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 115.104222][ T8] hub 5-1:0.0: bad descriptor, ignoring hub [ 115.110640][ T8] hub 5-1:0.0: probe with driver hub failed with error -5 [ 115.134605][ T8] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input12 [ 115.207236][ T6649] team_slave_0: entered promiscuous mode [ 115.213226][ T6649] team_slave_1: entered promiscuous mode [ 115.226311][ T6649] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 115.248898][ T6649] team0: Device macvlan2 is already an upper device of the team interface [ 115.286891][ T6649] team_slave_0: left promiscuous mode [ 115.293447][ T6649] team_slave_1: left promiscuous mode [ 115.344889][ T8] usb 5-1: USB disconnect, device number 11 [ 115.344943][ C0] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 115.392105][ T5244] Bluetooth: hci0: command tx timeout [ 115.466624][ T6651] netlink: 312 bytes leftover after parsing attributes in process `syz.2.518'. [ 115.969612][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.090015][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.246353][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.408308][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.505440][ T6675] netlink: 20 bytes leftover after parsing attributes in process `syz.4.529'. [ 116.541738][ T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 116.561729][ T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 116.570704][ T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 116.582563][ T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 116.591126][ T55] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 116.599044][ T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 116.921744][ T25] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 117.051990][ T35] bridge_slave_1: left allmulticast mode [ 117.081860][ T35] bridge_slave_1: left promiscuous mode [ 117.087718][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.257203][ T35] bridge_slave_0: left allmulticast mode [ 117.271736][ T25] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 117.283803][ T35] bridge_slave_0: left promiscuous mode [ 117.289566][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.297133][ T25] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 117.321605][ T25] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 117.350834][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.415335][ T6681] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 117.445465][ T25] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 117.677600][ T25] usb 2-1: USB disconnect, device number 5 [ 118.464723][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.491914][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.538570][ T35] bond0 (unregistering): Released all slaves [ 118.648445][ T6728] netlink: 4 bytes leftover after parsing attributes in process `syz.3.544'. [ 118.664408][ T6728] netlink: 4 bytes leftover after parsing attributes in process `syz.3.544'. [ 118.676978][ T5244] Bluetooth: hci1: command tx timeout [ 118.782438][ T3312] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 118.966986][ T3312] usb 2-1: Using ep0 maxpacket: 32 [ 118.990610][ T3312] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 119.017721][ T3312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 119.080860][ T3312] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 119.113864][ T3312] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 119.146054][ T3312] usb 2-1: Product: syz [ 119.150259][ T3312] usb 2-1: Manufacturer: syz [ 119.177020][ T3312] usb 2-1: SerialNumber: syz [ 119.202933][ T3312] usb 2-1: config 0 descriptor?? [ 119.234343][ T3312] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 119.407990][ T3312] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 119.476590][ T6679] chnl_net:caif_netlink_parms(): no params data found [ 119.517008][ T25] usb 2-1: USB disconnect, device number 6 [ 119.523268][ C1] ldusb 2-1:0.0: usb_submit_urb failed (-19) [ 119.567764][ T25] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 119.771646][ T6725] ldusb: No device or device unplugged -19 [ 119.841703][ T35] hsr_slave_0: left promiscuous mode [ 119.873426][ T35] hsr_slave_1: left promiscuous mode [ 119.888264][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.930954][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.958344][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.981202][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.021310][ T35] veth1_macvtap: left promiscuous mode [ 120.039668][ T35] veth0_macvtap: left promiscuous mode [ 120.058236][ T35] veth1_vlan: left promiscuous mode [ 120.078586][ T35] veth0_vlan: left promiscuous mode [ 120.723508][ T25] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 120.754205][ T35] team0 (unregistering): Port device team_slave_1 removed [ 120.762640][ T5244] Bluetooth: hci1: command tx timeout [ 120.794877][ T35] team0 (unregistering): Port device team_slave_0 removed [ 120.893195][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 120.906585][ T25] usb 2-1: config 0 has no interfaces? [ 120.925716][ T25] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 120.935506][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.944171][ T25] usb 2-1: Product: syz [ 120.948678][ T25] usb 2-1: Manufacturer: syz [ 120.953957][ T25] usb 2-1: SerialNumber: syz [ 120.963709][ T25] usb 2-1: config 0 descriptor?? [ 121.146327][ T6772] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 121.300525][ T6679] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.307778][ T6679] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.317640][ T6679] bridge_slave_0: entered allmulticast mode [ 121.325013][ T6679] bridge_slave_0: entered promiscuous mode [ 121.365680][ T6679] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.374172][ T6679] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.381469][ T6679] bridge_slave_1: entered allmulticast mode [ 121.388641][ T6679] bridge_slave_1: entered promiscuous mode [ 121.488193][ T6679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.552280][ T6679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.625605][ T5288] usb 2-1: USB disconnect, device number 7 [ 121.694167][ T6679] team0: Port device team_slave_0 added [ 121.733810][ T6679] team0: Port device team_slave_1 added [ 121.820420][ T6802] netlink: 12 bytes leftover after parsing attributes in process `syz.2.566'. [ 121.837941][ T6802] netlink: 'syz.2.566': attribute type 1 has an invalid length. [ 121.851861][ T6679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.858855][ T6679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.893508][ T6679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.948712][ T6679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.011746][ T6679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.063062][ T6679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.246681][ T6822] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 122.324222][ T25] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 122.493371][ T25] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 122.514907][ T25] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 122.529201][ T25] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 122.592294][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.643498][ T6812] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 122.657442][ T25] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 122.703298][ T6831] io-wq is not configured for unbound workers [ 122.724321][ T6679] hsr_slave_0: entered promiscuous mode [ 122.812042][ T6679] hsr_slave_1: entered promiscuous mode [ 122.831997][ T5244] Bluetooth: hci1: command tx timeout [ 122.849960][ T6679] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 122.857801][ T5283] hid-generic 0000:04AD:0000.0006: unknown main item tag 0x0 [ 122.859566][ T5283] hid-generic 0000:04AD:0000.0006: unknown main item tag 0x0 [ 122.865399][ T6679] Cannot create hsr debugfs directory [ 122.873792][ T5283] hid-generic 0000:04AD:0000.0006: unknown main item tag 0x0 [ 122.885893][ T5283] hid-generic 0000:04AD:0000.0006: unknown main item tag 0x0 [ 122.918679][ T5283] hid-generic 0000:04AD:0000.0006: unknown main item tag 0x0 [ 122.926400][ T5283] hid-generic 0000:04AD:0000.0006: unknown main item tag 0x0 [ 122.933939][ T5283] hid-generic 0000:04AD:0000.0006: unknown main item tag 0x0 [ 122.941393][ T5283] hid-generic 0000:04AD:0000.0006: unknown main item tag 0x0 [ 122.949131][ T5283] hid-generic 0000:04AD:0000.0006: unknown main item tag 0x0 [ 122.957246][ T5283] hid-generic 0000:04AD:0000.0006: unknown main item tag 0x0 [ 122.965415][ T5283] hid-generic 0000:04AD:0000.0006: unknown main item tag 0x0 [ 122.973102][ T5283] hid-generic 0000:04AD:0000.0006: unknown main item tag 0x0 [ 122.981953][ T5283] hid-generic 0000:04AD:0000.0006: unknown main item tag 0x0 [ 122.989384][ T5283] hid-generic 0000:04AD:0000.0006: unknown main item tag 0x0 [ 122.997176][ T5283] hid-generic 0000:04AD:0000.0006: unknown main item tag 0x0 [ 123.004802][ T5283] hid-generic 0000:04AD:0000.0006: unknown main item tag 0x0 [ 123.012507][ T5283] hid-generic 0000:04AD:0000.0006: unknown main item tag 0x0 [ 123.019920][ T5283] hid-generic 0000:04AD:0000.0006: unknown main item tag 0x0 [ 123.027537][ T5283] hid-generic 0000:04AD:0000.0006: unknown main item tag 0x0 [ 123.033334][ T3312] usb 5-1: USB disconnect, device number 12 [ 123.035165][ T5283] hid-generic 0000:04AD:0000.0006: unknown main item tag 0x0 [ 123.048294][ T5283] hid-generic 0000:04AD:0000.0006: unknown main item tag 0x0 [ 123.056249][ T5283] hid-generic 0000:04AD:0000.0006: unknown main item tag 0x0 [ 123.065568][ T5283] hid-generic 0000:04AD:0000.0006: unknown main item tag 0x0 [ 123.073653][ T5283] hid-generic 0000:04AD:0000.0006: unknown main item tag 0x0 [ 123.081314][ T5283] hid-generic 0000:04AD:0000.0006: unknown main item tag 0x0 [ 123.088846][ T5283] hid-generic 0000:04AD:0000.0006: unknown main item tag 0x0 [ 123.096357][ T5283] hid-generic 0000:04AD:0000.0006: unknown main item tag 0x0 [ 123.103956][ T5283] hid-generic 0000:04AD:0000.0006: unknown main item tag 0x0 [ 123.111472][ T5283] hid-generic 0000:04AD:0000.0006: unknown main item tag 0x0 [ 123.119299][ T5283] hid-generic 0000:04AD:0000.0006: unknown main item tag 0x0 [ 123.126844][ T5283] hid-generic 0000:04AD:0000.0006: unknown main item tag 0x0 [ 123.132465][ T25] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 123.134327][ T5283] hid-generic 0000:04AD:0000.0006: unknown main item tag 0x0 [ 123.162532][ T5283] hid-generic 0000:04AD:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz0 [ 123.302123][ T5229] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 123.327958][ T25] usb 3-1: config 0 has no interfaces? [ 123.338074][ T25] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 123.358256][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.382147][ T25] usb 3-1: config 0 descriptor?? [ 123.501671][ T5229] usb 4-1: Using ep0 maxpacket: 8 [ 123.511314][ T5229] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.527591][ T5229] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.551133][ T5229] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 123.576633][ T5229] usb 4-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 123.588941][ T5229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.624411][ T5229] usb 4-1: config 0 descriptor?? [ 123.647269][ T3312] usb 3-1: USB disconnect, device number 11 [ 123.902144][ T5229] usbhid 4-1:0.0: can't add hid device: -71 [ 123.908189][ T5229] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 123.940387][ T5229] usb 4-1: USB disconnect, device number 7 [ 124.225050][ T6679] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 124.249476][ T6679] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 124.275322][ T6679] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 124.313894][ T6679] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 124.480058][ T6679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.510531][ T6679] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.523863][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.530962][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.664989][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.672156][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.771783][ T29] kauditd_printk_skb: 2071 callbacks suppressed [ 124.771803][ T29] audit: type=1326 audit(1728099000.773:2105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6896 comm="syz.4.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe17197dff9 code=0x7ffc0000 [ 124.854950][ T6679] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 124.883930][ T29] audit: type=1326 audit(1728099000.773:2106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6896 comm="syz.4.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe17197dff9 code=0x7ffc0000 [ 124.915104][ T6679] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 124.920453][ T5244] Bluetooth: hci1: command tx timeout [ 124.931076][ T29] audit: type=1326 audit(1728099000.803:2107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6896 comm="syz.4.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fe17197dff9 code=0x7ffc0000 [ 124.956070][ T29] audit: type=1326 audit(1728099000.803:2108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6896 comm="syz.4.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe17197dff9 code=0x7ffc0000 [ 124.978313][ C0] vkms_vblank_simulate: vblank timer overrun [ 124.999525][ T29] audit: type=1326 audit(1728099000.803:2109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6896 comm="syz.4.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe17197dff9 code=0x7ffc0000 [ 125.064120][ T6679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.072328][ T29] audit: type=1326 audit(1728099000.803:2110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6896 comm="syz.4.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe17197dff9 code=0x7ffc0000 [ 125.094599][ C0] vkms_vblank_simulate: vblank timer overrun [ 125.160329][ T29] audit: type=1326 audit(1728099000.803:2111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6896 comm="syz.4.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe17197dff9 code=0x7ffc0000 [ 125.214519][ T6679] veth0_vlan: entered promiscuous mode [ 125.241744][ T29] audit: type=1326 audit(1728099000.803:2112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6896 comm="syz.4.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7fe17197dff9 code=0x7ffc0000 [ 125.258743][ T6679] veth1_vlan: entered promiscuous mode [ 125.291643][ T29] audit: type=1326 audit(1728099000.803:2113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6896 comm="syz.4.593" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe17197dff9 code=0x7ffc0000 [ 125.366786][ T6914] syz.1.598 uses obsolete (PF_INET,SOCK_PACKET) [ 125.438467][ T6679] veth0_macvtap: entered promiscuous mode [ 125.506746][ T6679] veth1_macvtap: entered promiscuous mode [ 125.593249][ T6679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.632460][ T6679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.684901][ T6679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.748948][ T6679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.778416][ T6679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.811591][ T6679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.851274][ T6679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.903825][ T6679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.937946][ T6679] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.970950][ T6931] netlink: 'syz.4.604': attribute type 3 has an invalid length. [ 126.007838][ T6679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.057990][ T6944] netlink: 'syz.2.616': attribute type 11 has an invalid length. [ 126.058940][ T6679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.127290][ T6679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.171638][ T6679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.195653][ T6679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.213322][ T6679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.223701][ T6679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.255429][ T6679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.288134][ T6679] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.315079][ T6679] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.324058][ T6679] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.351355][ T6679] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.394054][ T6679] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.595700][ T2916] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.613700][ T2916] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.711202][ T2916] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.714234][ T3312] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 126.726514][ T2916] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.891700][ T3312] usb 2-1: Using ep0 maxpacket: 16 [ 126.923700][ T3312] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.958029][ T3312] usb 2-1: config 0 has no interfaces? [ 126.982364][ T3312] usb 2-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 127.025139][ T3312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.050196][ T3312] usb 2-1: config 0 descriptor?? [ 127.065987][ T2916] bond0: (slave bond_slave_0): interface is now down [ 127.085992][ T2916] bond0: (slave bond_slave_1): interface is now down [ 127.109137][ T2916] bond0: now running without any active interface! [ 127.452619][ T5229] usb 2-1: USB disconnect, device number 8 [ 127.474627][ T3312] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 127.642302][ T3312] usb 3-1: Using ep0 maxpacket: 8 [ 127.660091][ T3312] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 127.680725][ T3312] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 127.704865][ T3312] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 127.717369][ T3312] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 127.751654][ T3312] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 127.779134][ T3312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.891459][ T7016] netlink: 236 bytes leftover after parsing attributes in process `syz.0.627'. [ 127.891803][ T5229] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 127.984209][ T7020] netlink: 8 bytes leftover after parsing attributes in process `syz.4.628'. [ 128.013672][ T3312] usb 3-1: GET_CAPABILITIES returned 0 [ 128.032098][ T3312] usbtmc 3-1:16.0: can't read capabilities [ 128.063082][ T5229] usb 4-1: Using ep0 maxpacket: 16 [ 128.083169][ T5229] usb 4-1: config 0 has no interfaces? [ 128.114046][ T5229] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 128.145347][ T5229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.165396][ T5229] usb 4-1: Product: syz [ 128.169614][ T5229] usb 4-1: Manufacturer: syz [ 128.194958][ T5229] usb 4-1: SerialNumber: syz [ 128.314869][ T5229] usb 4-1: config 0 descriptor?? [ 128.341322][ T5229] usb 3-1: USB disconnect, device number 12 [ 128.640024][ T5229] usb 4-1: USB disconnect, device number 8 [ 128.923195][ T3312] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 129.101906][ T3312] usb 1-1: Using ep0 maxpacket: 8 [ 129.123333][ T3312] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 511, setting to 64 [ 129.151707][ T3312] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 129.191729][ T3312] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 129.276781][ T29] audit: type=1326 audit(1728099005.303:2114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7067 comm="syz.4.642" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe17197dff9 code=0x0 [ 129.290671][ T3312] usb 1-1: New USB device found, idVendor=0001, idProduct=8000, bcdDevice= 0.00 [ 129.339152][ T3312] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 129.347445][ T3312] usb 1-1: SerialNumber: syz [ 129.369311][ T7046] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 129.414701][ T3312] hub 1-1:1.0: bad descriptor, ignoring hub [ 129.420678][ T3312] hub 1-1:1.0: probe with driver hub failed with error -5 [ 129.623532][ T7046] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 130.111208][ T3312] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 130.372117][ T5288] usb 1-1: USB disconnect, device number 9 [ 130.379529][ T5288] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 131.193664][ T7154] unknown channel width for channel at 907000KHz? [ 131.313184][ T7159] tun0: tun_chr_ioctl cmd 1074025677 [ 131.321040][ T7159] tun0: linktype set to 823 [ 131.673249][ T5288] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 131.865556][ T5288] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 131.881731][ T5288] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 131.900215][ T5288] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 131.920498][ T5288] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 131.968747][ T5288] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x9B, changing to 0x8B [ 131.988380][ T5288] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B is Bulk; changing to Interrupt [ 132.004439][ T5288] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 132.028149][ T5288] usb 2-1: string descriptor 0 read error: -22 [ 132.053170][ T5288] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 132.073305][ T5288] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.108687][ T5288] usb 2-1: config 0 descriptor?? [ 132.142793][ T7165] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 132.151108][ T5288] hub 2-1:0.0: bad descriptor, ignoring hub [ 132.178885][ T5288] hub 2-1:0.0: probe with driver hub failed with error -5 [ 132.237292][ T5288] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input13 [ 132.351201][ C0] usb_acecad 2-1:0.0: can't resubmit intr, dummy_hcd.1-1/input0, status -1 [ 132.478048][ T5286] usb 2-1: USB disconnect, device number 9 [ 132.707505][ T29] audit: type=1326 audit(1728099008.733:2115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7208 comm="syz.2.685" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb1e1f7dff9 code=0x0 [ 133.155604][ T7220] netlink: 48 bytes leftover after parsing attributes in process `syz.4.690'. [ 133.216814][ T7222] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 133.351215][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.360872][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.528506][ T7235] netlink: 52 bytes leftover after parsing attributes in process `syz.0.696'. [ 133.551743][ T7235] netlink: 32 bytes leftover after parsing attributes in process `syz.0.696'. [ 133.564754][ T7234] netlink: 'syz.4.694': attribute type 1 has an invalid length. [ 134.969841][ T7289] netlink: 'syz.3.722': attribute type 2 has an invalid length. [ 134.978461][ T7289] netlink: 'syz.3.722': attribute type 1 has an invalid length. [ 136.959807][ T29] audit: type=1326 audit(1728099012.983:2116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7361 comm="syz.0.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f425337dff9 code=0x7ffc0000 [ 137.038281][ T29] audit: type=1326 audit(1728099012.993:2117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7361 comm="syz.0.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f425337dff9 code=0x7ffc0000 [ 137.116810][ T29] audit: type=1326 audit(1728099012.993:2118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7361 comm="syz.0.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f425337dff9 code=0x7ffc0000 [ 137.162434][ T29] audit: type=1326 audit(1728099012.993:2119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7361 comm="syz.0.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f425337dff9 code=0x7ffc0000 [ 137.351808][ T5286] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 137.513093][ T5286] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 137.532746][ T5286] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 137.550649][ T5286] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 137.579421][ T5286] usb 1-1: config 0 interface 0 has no altsetting 0 [ 137.581782][ T25] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 137.613961][ T5286] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 137.641807][ T5286] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 137.689930][ T5286] usb 1-1: config 0 interface 0 has no altsetting 0 [ 137.707939][ T5286] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 137.718199][ T5286] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 137.736029][ T5286] usb 1-1: config 0 interface 0 has no altsetting 0 [ 137.746399][ T5286] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 137.752202][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 137.759861][ T5286] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 137.785412][ T5286] usb 1-1: config 0 interface 0 has no altsetting 0 [ 137.786415][ T25] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 137.794795][ T5286] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 137.822174][ T25] usb 4-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=14.ec [ 137.833360][ T5286] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 137.847350][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.849937][ T5286] usb 1-1: config 0 interface 0 has no altsetting 0 [ 137.869762][ T5286] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 137.880103][ T25] usb 4-1: config 0 descriptor?? [ 137.880106][ T5286] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 137.880133][ T5286] usb 1-1: config 0 interface 0 has no altsetting 0 [ 137.885271][ T3312] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 137.904381][ T5286] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 137.930887][ T25] ttusb_dec_send_command: command bulk message failed: error -22 [ 137.961861][ T5286] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 137.972172][ T25] ttusb-dec 4-1:0.0: probe with driver ttusb-dec failed with error -22 [ 137.991449][ T5286] usb 1-1: config 0 interface 0 has no altsetting 0 [ 138.000147][ T5286] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 138.022483][ T5286] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 138.038237][ T5286] usb 1-1: config 0 interface 0 has no altsetting 0 [ 138.059652][ T5286] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 138.072442][ T5286] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 138.081025][ T5286] usb 1-1: Product: syz [ 138.097196][ T5286] usb 1-1: Manufacturer: syz [ 138.102986][ T3312] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 138.108148][ T5286] usb 1-1: SerialNumber: syz [ 138.116704][ T3312] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 138.130089][ T3312] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 138.148426][ T5286] usb 1-1: config 0 descriptor?? [ 138.160061][ T5286] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 138.165495][ T3312] usb 5-1: config 0 interface 0 has no altsetting 0 [ 138.197575][ T3312] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 138.221807][ T3312] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 138.231435][ T5286] usb 4-1: USB disconnect, device number 9 [ 138.283942][ T3312] usb 5-1: config 0 interface 0 has no altsetting 0 [ 138.312515][ T3312] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 138.328004][ T3312] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 138.344503][ T3312] usb 5-1: config 0 interface 0 has no altsetting 0 [ 138.357313][ T3312] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 138.366609][ T3312] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 138.387952][ T3312] usb 5-1: config 0 interface 0 has no altsetting 0 [ 138.409263][ T3312] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 138.452635][ T3312] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 138.494354][ T3312] usb 5-1: config 0 interface 0 has no altsetting 0 [ 138.532262][ T3312] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 138.566841][ T3312] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 138.588234][ T7396] netlink: 32 bytes leftover after parsing attributes in process `syz.2.771'. [ 138.607187][ T3312] usb 5-1: config 0 interface 0 has no altsetting 0 [ 138.623534][ T3312] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 138.632918][ T3312] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 138.645083][ C0] usb 1-1: yurex_control_callback - control failed: -71 [ 138.652038][ T5229] usb 1-1: USB disconnect, device number 10 [ 138.659085][ T5229] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 138.674147][ T3312] usb 5-1: config 0 interface 0 has no altsetting 0 [ 138.704378][ T3312] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 138.721835][ T3312] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 138.752510][ T3312] usb 5-1: config 0 interface 0 has no altsetting 0 [ 139.136545][ T3312] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 139.147980][ T3312] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 139.156492][ T3312] usb 5-1: Product: syz [ 139.160681][ T3312] usb 5-1: Manufacturer: syz [ 139.168470][ T3312] usb 5-1: SerialNumber: syz [ 139.178373][ T3312] usb 5-1: config 0 descriptor?? [ 139.202638][ T3312] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 139.734858][ T5229] usb 5-1: USB disconnect, device number 13 [ 139.756595][ T5229] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 140.376716][ T7442] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.790'. [ 140.422172][ T7442] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 140.438387][ T7444] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 140.701705][ T5286] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 140.851653][ T5286] usb 2-1: Using ep0 maxpacket: 8 [ 140.861393][ T5286] usb 2-1: config 0 interface 0 has no altsetting 0 [ 140.881904][ T5286] usb 2-1: New USB device found, idVendor=0baf, idProduct=00f5, bcdDevice=df.c2 [ 140.911901][ T5286] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.941719][ T5286] usb 2-1: Product: syz [ 140.951156][ T5286] usb 2-1: Manufacturer: syz [ 140.959840][ T5286] usb 2-1: SerialNumber: syz [ 140.980149][ T5286] usb 2-1: config 0 descriptor?? [ 140.998913][ T5286] usb 2-1: [ueagle-atm] ADSL device founded vid (0XBAF) pid (0XF5) Rev (0XDFC2): Eagle I [ 141.153581][ T5286] usb 2-1: reset high-speed USB device number 10 using dummy_hcd [ 141.861728][ T3312] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 141.951650][ T47] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 142.009347][ T7491] vxcan1: tx address claim with dest, not broadcast [ 142.021740][ T3312] usb 4-1: Using ep0 maxpacket: 32 [ 142.043341][ T3312] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.084613][ T3312] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.111858][ T47] usb 1-1: Using ep0 maxpacket: 8 [ 142.128135][ T47] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.153663][ T3312] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 142.188370][ T47] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.201667][ T3312] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 142.255083][ T3312] usb 4-1: Product: syz [ 142.261739][ T47] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 142.297489][ T3312] usb 4-1: Manufacturer: syz [ 142.323981][ T47] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 142.348675][ T3312] hub 4-1:4.0: USB hub found [ 142.370792][ T47] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 142.378606][ T5286] usb 2-1: device descriptor read/64, error -71 [ 142.431775][ T47] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 142.479597][ T47] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 142.510626][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.539847][ T47] usb 1-1: Product: syz [ 142.560206][ T3312] hub 4-1:4.0: 2 ports detected [ 142.567831][ T47] usb 1-1: Manufacturer: syz [ 142.598028][ T47] usb 1-1: SerialNumber: syz [ 142.779699][ T3312] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 142.808523][ T3312] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 142.881722][ T47] cdc_ncm 1-1:1.0: bind() failure [ 142.914853][ T3312] usb 4-1: USB disconnect, device number 10 [ 142.942327][ T47] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 142.973894][ T47] cdc_ncm 1-1:1.1: bind() failure [ 143.012772][ T47] usb 1-1: USB disconnect, device number 11 [ 145.048592][ T7525] block device autoloading is deprecated and will be removed. [ 145.143753][ T7525] syz.0.829: attempt to access beyond end of device [ 145.143753][ T7525] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 145.785248][ T5286] usb 2-1: [UEAGLE-ATM] interface 1 not found [ 145.805675][ T5286] ueagle-atm 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 146.364243][ T7554] lo: entered allmulticast mode [ 146.442749][ T7554] tunl0: entered allmulticast mode [ 146.461729][ T47] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 146.501751][ T5229] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 146.510286][ T7554] gre0: entered allmulticast mode [ 146.553809][ T7554] gretap0: entered allmulticast mode [ 146.627267][ T7554] erspan0: entered allmulticast mode [ 146.645640][ T47] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 146.682174][ T5229] usb 4-1: Using ep0 maxpacket: 8 [ 146.688552][ T47] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 146.710293][ T7554] ip_vti0: entered allmulticast mode [ 146.726846][ T5229] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 146.755266][ T47] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 146.774409][ T7554] ip6_vti0: entered allmulticast mode [ 146.780272][ T5229] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 146.807584][ T47] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 146.824174][ T5229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.836644][ T7554] sit0: entered allmulticast mode [ 146.844958][ T7561] netlink: 428 bytes leftover after parsing attributes in process `syz.1.845'. [ 146.871744][ T5229] usb 4-1: config 0 descriptor?? [ 146.876869][ T47] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 146.892856][ T7554] ip6tnl0: entered allmulticast mode [ 146.927003][ T7554] ip6gre0: entered allmulticast mode [ 146.933954][ T47] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 146.958846][ T47] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 146.984847][ T47] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 147.002760][ T7554] syz_tun: entered allmulticast mode [ 147.024479][ T47] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 147.071781][ T7554] ip6gretap0: entered allmulticast mode [ 147.088731][ T47] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 147.123344][ T7554] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.141463][ T5229] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 147.164250][ T7554] bridge0: entered allmulticast mode [ 147.172884][ T47] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 147.189228][ T47] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 147.196613][ T5286] usb 2-1: USB disconnect, device number 10 [ 147.238856][ T47] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 147.265236][ T47] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 147.285733][ T7554] vcan0: entered allmulticast mode [ 147.297605][ T47] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 147.318040][ T7554] bond0: entered allmulticast mode [ 147.326572][ T7554] bond_slave_0: entered allmulticast mode [ 147.358543][ T47] usb 5-1: string descriptor 0 read error: -22 [ 147.371145][ T7554] bond_slave_1: entered allmulticast mode [ 147.380606][ T5229] usb 4-1: USB disconnect, device number 11 [ 147.402843][ T47] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 147.415195][ T5229] iowarrior 4-1:0.0: I/O-Warror #0 now disconnected [ 147.448210][ T7554] team0: entered allmulticast mode [ 147.461902][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.479640][ T7554] team_slave_0: entered allmulticast mode [ 147.506875][ T7554] team_slave_1: entered allmulticast mode [ 147.525060][ T47] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 147.582566][ T7554] dummy0: entered allmulticast mode [ 147.612342][ T7554] nlmon0: entered allmulticast mode [ 147.627695][ T7554] caif0: entered allmulticast mode [ 147.669251][ T7554] batadv0: entered allmulticast mode [ 147.688562][ T7554] vxcan0: entered allmulticast mode [ 147.716707][ T7554] vxcan1: entered allmulticast mode [ 147.754531][ T7554] veth0: entered allmulticast mode [ 147.775937][ T7549] usb 5-1: Couldn't submit interrupt_out_urb -90 [ 147.793097][ T47] usb 5-1: USB disconnect, device number 14 [ 147.799926][ T7554] veth1: entered allmulticast mode [ 147.877731][ T7554] wg0: entered allmulticast mode [ 147.897438][ T7554] wg1: entered allmulticast mode [ 147.919499][ T7554] wg2: entered allmulticast mode [ 147.934883][ T7554] veth0_to_bridge: entered allmulticast mode [ 148.027255][ T7554] veth1_to_bridge: entered allmulticast mode [ 148.062489][ T7554] bridge_slave_1: entered allmulticast mode [ 148.097792][ T7554] veth0_to_bond: entered allmulticast mode [ 148.169652][ T7554] veth1_to_bond: entered allmulticast mode [ 148.213160][ T7554] veth0_to_team: entered allmulticast mode [ 148.266517][ T7554] veth1_to_team: entered allmulticast mode [ 148.329849][ T7554] veth0_to_batadv: entered allmulticast mode [ 148.352477][ T7554] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.380542][ T7567] input: syz0 as /devices/virtual/input/input14 [ 148.401801][ T7554] batadv_slave_0: entered allmulticast mode [ 148.437461][ T7554] veth1_to_batadv: entered allmulticast mode [ 148.495972][ T7554] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.557341][ T7554] batadv_slave_1: entered allmulticast mode [ 148.625008][ T7554] xfrm0: entered allmulticast mode [ 148.661867][ T7554] veth0_to_hsr: entered allmulticast mode [ 148.677538][ T7570] netlink: 40 bytes leftover after parsing attributes in process `syz.4.849'. [ 148.725066][ T7554] hsr_slave_0: entered allmulticast mode [ 148.754048][ T7554] veth1_to_hsr: entered allmulticast mode [ 148.783355][ T7554] hsr_slave_1: entered allmulticast mode [ 148.818879][ T7554] hsr0: entered allmulticast mode [ 148.870596][ T7554] veth1_virt_wifi: entered allmulticast mode [ 148.907713][ T7554] veth0_virt_wifi: entered allmulticast mode [ 148.940440][ T7554] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 148.992744][ T7554] veth1_vlan: entered allmulticast mode [ 149.062098][ T7554] veth0_vlan: entered allmulticast mode [ 149.128280][ T7554] vlan0: entered allmulticast mode [ 149.140185][ T7554] vlan1: entered allmulticast mode [ 149.180195][ T7554] macvlan0: entered allmulticast mode [ 149.224549][ T7554] macvlan1: entered allmulticast mode [ 149.239464][ T7554] ipvlan0: entered allmulticast mode [ 149.250257][ T7554] ipvlan1: entered allmulticast mode [ 149.266881][ T7554] veth1_macvtap: entered allmulticast mode [ 149.284472][ T7554] veth0_macvtap: entered allmulticast mode [ 149.302112][ T47] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 149.324026][ T7554] macvtap0: entered allmulticast mode [ 149.336652][ T7554] macsec0: entered allmulticast mode [ 149.352491][ T7554] geneve0: entered allmulticast mode [ 149.375623][ T7554] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.389463][ T7554] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.409368][ T7554] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.421381][ T7554] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.442139][ T7554] geneve1: entered allmulticast mode [ 149.459920][ T7554] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 149.471038][ T47] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.490631][ T47] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 149.509820][ T7554] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 149.528029][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.536568][ T7554] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 149.557729][ T47] usb 4-1: config 0 descriptor?? [ 149.584094][ T7554] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 149.594056][ T47] usb 4-1: Found UVC 0.00 device (046d:08c1) [ 149.600995][ T47] usb 4-1: No valid video chain found. [ 149.767968][ T7554] mac80211_hwsim hwsim14 wlan0: entered allmulticast mode [ 149.788225][ T47] usb 4-1: USB disconnect, device number 12 [ 149.860267][ T7554] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode [ 149.888259][ T7561] netlink: 56 bytes leftover after parsing attributes in process `syz.1.845'. [ 151.381819][ T47] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 151.551719][ T47] usb 3-1: Using ep0 maxpacket: 32 [ 151.585441][ T47] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 151.677363][ T47] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 151.721019][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.771329][ T47] usb 3-1: Product: syz [ 151.794374][ T47] usb 3-1: Manufacturer: syz [ 151.834925][ T47] usb 3-1: SerialNumber: syz [ 151.867415][ T47] usb 3-1: config 0 descriptor?? [ 151.911965][ T7603] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 151.939072][ T47] hub 3-1:0.0: bad descriptor, ignoring hub [ 151.976893][ T47] hub 3-1:0.0: probe with driver hub failed with error -5 [ 152.045138][ T47] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input15 [ 152.335393][ T47] usb 3-1: USB disconnect, device number 13 [ 152.341358][ C1] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 153.499143][ T7633] veth0_to_team: entered promiscuous mode [ 153.529697][ T7633] veth0_to_team: entered allmulticast mode [ 153.792786][ T5229] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 154.024001][ T5229] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 154.065002][ T5229] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=240 [ 154.126162][ T5229] usb 5-1: Product: syz [ 154.161029][ T5229] usb 5-1: Manufacturer: syz [ 154.204482][ T5229] usb 5-1: SerialNumber: syz [ 154.252497][ T5229] usb 5-1: config 0 descriptor?? [ 154.305455][ T5229] ch341 5-1:0.0: ch341-uart converter detected [ 155.187066][ T5229] usb 5-1: failed to send control message: -71 [ 155.229964][ T5229] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 155.323624][ T5229] usb 5-1: USB disconnect, device number 15 [ 155.376029][ T5229] ch341 5-1:0.0: device disconnected [ 157.561892][ T7705] netlink: 60 bytes leftover after parsing attributes in process `syz.4.911'. [ 157.623605][ T7705] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 157.711720][ T47] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 157.923272][ T47] usb 4-1: config 0 has an invalid interface number: 18 but max is 0 [ 157.960442][ T47] usb 4-1: config 0 has no interface number 0 [ 158.003002][ T47] usb 4-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.045028][ T47] usb 4-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.084797][ T47] usb 4-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 158.106556][ T47] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 158.131690][ T47] usb 4-1: Manufacturer: syz [ 158.160049][ T47] usb 4-1: config 0 descriptor?? [ 158.693703][ T47] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.18/0003:054C:03D5.0007/input/input16 [ 158.804169][ T47] sony 0003:054C:03D5.0007: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.3-1/input18 [ 158.931631][ T47] usb 4-1: USB disconnect, device number 13 [ 160.581494][ C0] sched: DL replenish lagged too much [ 165.611725][ T5229] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 165.775086][ T5229] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.790690][ T5229] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.804745][ T5229] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 165.819317][ T5229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.838546][ T5229] usb 2-1: config 0 descriptor?? [ 166.743769][ T5229] hid-led 0003:27B8:01ED.0008: probe with driver hid-led failed with error -71 [ 166.791766][ T5229] usb 2-1: USB disconnect, device number 11 [ 168.424715][ T7740] netlink: 4 bytes leftover after parsing attributes in process `syz.1.927'. [ 168.452252][ T55] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 168.471745][ T55] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 168.483752][ T55] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 168.492286][ T55] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 168.499918][ T55] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 168.508420][ T55] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 168.652971][ T5244] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 168.666809][ T5244] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 168.676641][ T5244] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 168.685355][ T5244] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 168.694845][ T5244] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 168.703856][ T5244] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 169.160867][ T55] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 169.171258][ T55] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 169.180361][ T55] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 169.192341][ T55] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 169.204344][ T55] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 169.211964][ T55] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 170.180780][ T55] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 170.191140][ T55] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 170.201425][ T55] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 170.211127][ T55] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 170.220206][ T55] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 170.228680][ T55] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 170.591647][ T55] Bluetooth: hci5: command tx timeout [ 170.751705][ T55] Bluetooth: hci6: command tx timeout [ 171.311862][ T55] Bluetooth: hci7: command tx timeout [ 172.272320][ T55] Bluetooth: hci8: command tx timeout [ 172.671683][ T55] Bluetooth: hci5: command tx timeout [ 172.831745][ T55] Bluetooth: hci6: command tx timeout [ 173.399031][ T55] Bluetooth: hci7: command tx timeout [ 174.351780][ T55] Bluetooth: hci8: command tx timeout [ 174.751728][ T55] Bluetooth: hci5: command tx timeout [ 174.911812][ T5244] Bluetooth: hci6: command tx timeout [ 175.471689][ T55] Bluetooth: hci7: command tx timeout [ 176.437188][ T55] Bluetooth: hci8: command tx timeout [ 176.831819][ T55] Bluetooth: hci5: command tx timeout [ 176.991827][ T5244] Bluetooth: hci6: command tx timeout [ 177.551792][ T5244] Bluetooth: hci7: command tx timeout [ 178.511640][ T5244] Bluetooth: hci8: command tx timeout [ 178.847352][ T55] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 178.858115][ T55] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 178.867102][ T55] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 178.891710][ T55] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 178.900576][ T55] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 178.908382][ T55] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 180.991681][ T5244] Bluetooth: hci9: command tx timeout [ 183.087221][ T5244] Bluetooth: hci9: command tx timeout [ 185.152402][ T5244] Bluetooth: hci9: command tx timeout [ 186.598092][ T5244] Bluetooth: hci2: command 0x0406 tx timeout [ 187.236026][ T55] Bluetooth: hci9: command tx timeout [ 194.768257][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.774661][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.957421][ T5244] Bluetooth: hci4: command 0x0406 tx timeout [ 212.197832][ T55] Bluetooth: hci0: command 0x0406 tx timeout [ 228.488904][ T55] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 228.511348][ T5239] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 228.522228][ T5239] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 228.530859][ T5239] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 228.542349][ T5239] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 228.551259][ T5239] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 228.562068][ T5239] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 228.570438][ T5239] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 228.580596][ T5239] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 228.588614][ T5239] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 228.606454][ T5239] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 228.614255][ T5239] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 229.224866][ T5239] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 229.242100][ T5239] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 229.250842][ T5239] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 229.259005][ T5239] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 229.267363][ T5239] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 229.276991][ T5239] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 230.682603][ T55] Bluetooth: hci10: command tx timeout [ 230.690561][ T5239] Bluetooth: hci11: command tx timeout [ 230.788066][ T55] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 230.797799][ T55] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 230.806687][ T55] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 230.815979][ T55] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 230.825691][ T55] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 230.833767][ T55] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 231.311990][ T5239] Bluetooth: hci12: command tx timeout [ 232.751808][ T5239] Bluetooth: hci11: command tx timeout [ 232.757362][ T5239] Bluetooth: hci10: command tx timeout [ 232.911873][ T5239] Bluetooth: hci13: command tx timeout [ 233.391617][ T5239] Bluetooth: hci12: command tx timeout [ 234.831865][ T55] Bluetooth: hci11: command tx timeout [ 234.838831][ T5239] Bluetooth: hci10: command tx timeout [ 234.991763][ T5239] Bluetooth: hci13: command tx timeout [ 235.471633][ T5239] Bluetooth: hci12: command tx timeout [ 236.911684][ T55] Bluetooth: hci11: command tx timeout [ 236.917275][ T5239] Bluetooth: hci10: command tx timeout [ 237.071783][ T5239] Bluetooth: hci13: command tx timeout [ 237.551678][ T5239] Bluetooth: hci12: command tx timeout [ 239.151757][ T5239] Bluetooth: hci13: command tx timeout [ 239.395076][ T55] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 239.405223][ T55] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 239.413810][ T55] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 239.423361][ T55] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 239.439964][ T55] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 239.448067][ T55] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 241.551814][ T5239] Bluetooth: hci14: command tx timeout [ 242.921916][ T5239] Bluetooth: hci1: command 0x0406 tx timeout [ 243.631775][ T55] Bluetooth: hci14: command tx timeout [ 245.711773][ T55] Bluetooth: hci14: command tx timeout [ 247.791727][ T55] Bluetooth: hci14: command tx timeout [ 256.201291][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.211619][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 289.055718][ T5239] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 289.072063][ T5239] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 289.080861][ T5239] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 289.090171][ T5239] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 289.098032][ T5239] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 289.105556][ T5239] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 289.297545][ T55] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 289.313716][ T55] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 289.322389][ T55] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 289.330436][ T55] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 289.338507][ T55] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 289.346413][ T55] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 289.599836][ T5239] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 289.611338][ T5239] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 289.625770][ T5239] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 289.655386][ T5239] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 289.665519][ T5239] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 289.677095][ T5239] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 290.806990][ T5239] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 290.821937][ T5239] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 290.830548][ T5239] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 290.842635][ T5239] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 290.850336][ T5239] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 290.860522][ T5239] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 291.151763][ T5239] Bluetooth: hci15: command tx timeout [ 291.391742][ T5239] Bluetooth: hci16: command tx timeout [ 291.711628][ T5239] Bluetooth: hci17: command tx timeout [ 292.911694][ T5239] Bluetooth: hci18: command tx timeout [ 293.237058][ T5239] Bluetooth: hci15: command tx timeout [ 293.471594][ T5239] Bluetooth: hci16: command tx timeout [ 293.791640][ T5239] Bluetooth: hci17: command tx timeout [ 294.128605][ T5231] Bluetooth: hci8: command 0x0406 tx timeout [ 294.137809][ T5242] Bluetooth: hci6: command 0x0406 tx timeout [ 294.143946][ T5239] Bluetooth: hci5: command 0x0406 tx timeout [ 294.149980][ T5239] Bluetooth: hci7: command 0x0406 tx timeout [ 294.991628][ T55] Bluetooth: hci18: command tx timeout [ 295.314411][ T55] Bluetooth: hci15: command tx timeout [ 295.551620][ T55] Bluetooth: hci16: command tx timeout [ 295.871582][ T55] Bluetooth: hci17: command tx timeout [ 297.071611][ T55] Bluetooth: hci18: command tx timeout [ 297.391603][ T55] Bluetooth: hci15: command tx timeout [ 297.631700][ T55] Bluetooth: hci16: command tx timeout [ 297.951647][ T55] Bluetooth: hci17: command tx timeout [ 299.151653][ T55] Bluetooth: hci18: command tx timeout [ 299.895181][ T4623] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 299.911891][ T4623] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 299.921560][ T4623] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 299.929938][ T4623] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 299.938745][ T4623] Bluetooth: hci19: unexpected cc 0x0c25 length: 249 > 3 [ 299.947685][ T4623] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 301.631963][ T30] INFO: task syz.0.912:7706 blocked for more than 143 seconds. [ 301.639575][ T30] Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 301.678061][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 301.729028][ T30] task:syz.0.912 state:D stack:25920 pid:7706 tgid:7706 ppid:6679 flags:0x00004004 [ 301.819750][ T30] Call Trace: [ 301.835981][ T30] [ 301.838972][ T30] __schedule+0x1895/0x4b30 [ 301.891589][ T30] ? __pfx___schedule+0x10/0x10 [ 301.896517][ T30] ? __pfx_lock_release+0x10/0x10 [ 301.930071][ T30] ? schedule+0x90/0x320 [ 301.937607][ T30] schedule+0x14b/0x320 [ 301.949690][ T30] schedule_timeout+0xb0/0x310 [ 301.956426][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 301.965791][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 301.974747][ T30] ? wait_for_completion+0x2fe/0x620 [ 301.980086][ T30] ? wait_for_completion+0x2fe/0x620 [ 301.990241][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 301.998065][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 302.008274][ T30] ? wait_for_completion+0x2fe/0x620 [ 302.016109][ T30] wait_for_completion+0x355/0x620 [ 302.021331][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 302.032071][ T30] ? __flush_work+0xe7/0xc50 [ 302.036719][ T30] __flush_work+0xa37/0xc50 [ 302.041251][ T30] ? __flush_work+0xe7/0xc50 [ 302.046232][ T4623] Bluetooth: hci19: command tx timeout [ 302.059058][ T30] ? __pfx___flush_work+0x10/0x10 [ 302.065541][ T30] ? __pfx_wq_barrier_func+0x10/0x10 [ 302.070887][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 302.083333][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 302.088495][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 302.098857][ T30] unregister_netdevice_many_notify+0x87b/0x1da0 [ 302.105636][ T30] ? __mutex_trylock_common+0x183/0x2e0 [ 302.111226][ T30] ? __pfx___might_resched+0x10/0x10 [ 302.123202][ T30] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 302.130010][ T30] ? __pfx___mutex_trylock_common+0x10/0x10 [ 302.141656][ T30] ? rcu_is_watching+0x15/0xb0 [ 302.146464][ T30] ? trace_contention_end+0x3c/0x120 [ 302.159029][ T30] ? __mutex_lock+0x2ef/0xd70 [ 302.164195][ T30] ? __asan_memset+0x23/0x50 [ 302.169223][ T30] unregister_netdevice_queue+0x303/0x370 [ 302.181639][ T30] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 302.187947][ T30] ppp_release+0xed/0x1f0 [ 302.200644][ T30] ? __pfx_ppp_release+0x10/0x10 [ 302.207704][ T30] __fput+0x23f/0x880 [ 302.217542][ T30] task_work_run+0x24f/0x310 [ 302.222569][ T30] ? __pfx_task_work_run+0x10/0x10 [ 302.227728][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 302.239425][ T30] syscall_exit_to_user_mode+0x168/0x370 [ 302.246738][ T30] do_syscall_64+0x100/0x230 [ 302.251379][ T30] ? clear_bhb_loop+0x35/0x90 [ 302.261613][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.267585][ T30] RIP: 0033:0x7f425337dff9 [ 302.285115][ T30] RSP: 002b:00007f425365fb88 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 302.299353][ T30] RAX: 0000000000000000 RBX: 00000000000267e0 RCX: 00007f425337dff9 [ 302.307850][ T30] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 302.321570][ T30] RBP: 00007f4253537a80 R08: 0000000000000001 R09: 00007f425365fe7f [ 302.329603][ T30] R10: 00007f4253200000 R11: 0000000000000246 R12: 0000000000026874 [ 302.343962][ T30] R13: 00007f425365fc90 R14: 0000000000000032 R15: ffffffffffffffff [ 302.357307][ T30] [ 302.360511][ T30] INFO: task syz.4.914:7711 blocked for more than 144 seconds. [ 302.376111][ T30] Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 302.385824][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 302.398561][ T30] task:syz.4.914 state:D stack:25984 pid:7711 tgid:7710 ppid:5245 flags:0x00000004 [ 302.412878][ T30] Call Trace: [ 302.416206][ T30] [ 302.419157][ T30] __schedule+0x1895/0x4b30 [ 302.429818][ T30] ? __pfx___schedule+0x10/0x10 [ 302.435313][ T30] ? __pfx_lock_release+0x10/0x10 [ 302.440387][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 302.453172][ T30] ? schedule+0x90/0x320 [ 302.457473][ T30] schedule+0x14b/0x320 [ 302.466998][ T30] schedule_preempt_disabled+0x13/0x30 [ 302.472829][ T30] __mutex_lock+0x6a7/0xd70 [ 302.477866][ T30] ? __mutex_lock+0x52a/0xd70 [ 302.489060][ T30] ? nl80211_pre_doit+0x5f/0x8b0 [ 302.494449][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 302.499531][ T30] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 302.519544][ T30] ? __nla_parse+0x40/0x60 [ 302.528975][ T30] nl80211_pre_doit+0x5f/0x8b0 [ 302.535395][ T30] genl_rcv_msg+0xaaa/0xec0 [ 302.539967][ T30] ? mark_lock+0x9a/0x360 [ 302.550491][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 302.557049][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 302.567102][ T30] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 302.573962][ T30] ? __pfx_nl80211_set_station+0x10/0x10 [ 302.580090][ T30] ? __pfx_nl80211_post_doit+0x10/0x10 [ 302.593248][ T30] ? __pfx___might_resched+0x10/0x10 [ 302.598612][ T30] netlink_rcv_skb+0x1e3/0x430 [ 302.608267][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 302.615255][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 302.620611][ T30] ? __netlink_deliver_tap+0x77e/0x7c0 [ 302.633436][ T30] genl_rcv+0x28/0x40 [ 302.637478][ T30] netlink_unicast+0x7f6/0x990 [ 302.645918][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 302.651256][ T30] ? __virt_addr_valid+0x183/0x530 [ 302.659045][ T30] ? __check_object_size+0x48e/0x900 [ 302.668174][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 302.677237][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 302.686633][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 302.694273][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 302.699595][ T30] __sock_sendmsg+0x221/0x270 [ 302.708277][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 302.716941][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 302.726398][ T30] __sys_sendmsg+0x292/0x380 [ 302.731037][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 302.738922][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 302.748684][ T30] ? call_rcu+0x731/0xa70 [ 302.758940][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 302.769084][ T30] ? do_syscall_64+0x100/0x230 [ 302.776458][ T30] ? do_syscall_64+0xb6/0x230 [ 302.781177][ T30] do_syscall_64+0xf3/0x230 [ 302.790452][ T30] ? clear_bhb_loop+0x35/0x90 [ 302.798893][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.808569][ T30] RIP: 0033:0x7fe17197dff9 [ 302.815489][ T30] RSP: 002b:00007fe172725038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 302.827591][ T30] RAX: ffffffffffffffda RBX: 00007fe171b35f80 RCX: 00007fe17197dff9 [ 302.840002][ T30] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000003 [ 302.853878][ T30] RBP: 00007fe1719f0296 R08: 0000000000000000 R09: 0000000000000000 [ 302.865533][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 302.876151][ T30] R13: 0000000000000000 R14: 00007fe171b35f80 R15: 00007fe171c5fa28 [ 302.889827][ T30] [ 302.895463][ T30] [ 302.895463][ T30] Showing all locks held in the system: [ 302.906969][ T30] 8 locks held by kworker/0:0/8: [ 302.916412][ T30] 1 lock held by khungtaskd/30: [ 302.921298][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 302.938695][ T30] 3 locks held by kworker/1:1/47: [ 302.944603][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 302.961705][ T30] #1: ffffc90000b77d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 302.979565][ T30] #2: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 302.990145][ T30] 3 locks held by kworker/u8:8/2916: [ 303.001527][ T30] #0: ffff88814b71e948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 303.019168][ T30] #1: ffffc90009a87d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 303.038988][ T30] #2: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 303.050089][ T30] 3 locks held by kworker/u9:1/4623: [ 303.087532][ T30] #0: ffff888045162948 ((wq_completion)hci9){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 303.110744][ T30] #1: ffffc9000d66fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 303.129312][ T30] #2: ffff88807b3ccd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 303.140922][ T30] 2 locks held by getty/4986: [ 303.151576][ T30] #0: ffff88802e82d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 303.166369][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 303.178632][ T30] 2 locks held by syz.0.912/7706: [ 303.189567][ T30] #0: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: ppp_release+0x87/0x1f0 [ 303.199234][ T30] #1: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 303.217902][ T30] 2 locks held by syz.4.914/7711: [ 303.223392][ T30] #0: ffffffff8fd377b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 303.234495][ T30] #1: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5f/0x8b0 [ 303.248364][ T30] 2 locks held by syz.2.916/7715: [ 303.254990][ T30] #0: ffffffff8fd377b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 303.269140][ T30] #1: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5f/0x8b0 [ 303.280033][ T30] 1 lock held by syz.3.917/7720: [ 303.290155][ T30] #0: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 303.303238][ T30] 2 locks held by syz.1.927/7740: [ 303.308290][ T30] #0: ffffffff8fd377b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 303.322888][ T30] #1: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5f/0x8b0 [ 303.336940][ T30] 2 locks held by syz-executor/7742: [ 303.344988][ T30] #0: ffffffff8fcc4f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 303.359348][ T30] #1: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 303.370965][ T30] 2 locks held by syz-executor/7745: [ 303.381238][ T30] #0: ffffffff8fcc4f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 303.393522][ T30] #1: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 303.409309][ T30] 2 locks held by syz-executor/7748: [ 303.416090][ T30] #0: ffffffff8fcc4f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 303.431776][ T30] #1: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 303.447940][ T30] 2 locks held by syz-executor/7751: [ 303.453587][ T30] #0: ffffffff8fcc4f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 303.468909][ T30] #1: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 303.481322][ T30] 2 locks held by syz-executor/7756: [ 303.491456][ T30] #0: ffffffff8fcc4f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 303.506576][ T30] #1: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 303.519767][ T30] 2 locks held by syz-executor/7773: [ 303.529823][ T30] #0: ffffffff8fcc4f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 303.540772][ T30] #1: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 303.555853][ T30] 2 locks held by syz-executor/7774: [ 303.561184][ T30] #0: ffffffff8fcc4f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 303.577987][ T30] #1: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 303.593210][ T30] 2 locks held by syz-executor/7779: [ 303.598544][ T30] #0: ffffffff8fcc4f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 303.619634][ T30] #1: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 303.630511][ T30] 2 locks held by syz-executor/7782: [ 303.643142][ T30] #0: ffffffff8fcc4f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 303.657297][ T30] #1: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 303.668917][ T30] 2 locks held by syz-executor/7788: [ 303.678893][ T30] #0: ffffffff8fcc4f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 303.691382][ T30] #1: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 303.708063][ T30] 2 locks held by syz-executor/7796: [ 303.718412][ T30] #0: ffffffff8fcc4f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 303.730504][ T30] #1: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 303.745812][ T30] 2 locks held by syz-executor/7799: [ 303.751133][ T30] #0: ffffffff8fcc4f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 303.763412][ T30] #1: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 303.778607][ T30] 2 locks held by syz-executor/7801: [ 303.785581][ T30] #0: ffffffff8fcc4f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 303.801562][ T30] #1: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 303.819201][ T30] 2 locks held by syz-executor/7804: [ 303.824940][ T30] #0: ffffffff8fcc4f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 303.840442][ T30] #1: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 303.852300][ T30] 2 locks held by syz-executor/7811: [ 303.857619][ T30] #0: ffffffff8fcc4f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 303.871769][ T30] #1: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 303.887822][ T30] [ 303.890186][ T30] ============================================= [ 303.890186][ T30] [ 303.900531][ T30] NMI backtrace for cpu 1 [ 303.904902][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 303.915477][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 303.925553][ T30] Call Trace: [ 303.928849][ T30] [ 303.931794][ T30] dump_stack_lvl+0x241/0x360 [ 303.936492][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 303.941709][ T30] ? __pfx__printk+0x10/0x10 [ 303.946331][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 303.951291][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 303.956768][ T30] ? _printk+0xd5/0x120 [ 303.960945][ T30] ? __pfx__printk+0x10/0x10 [ 303.965558][ T30] ? __wake_up_klogd+0xcc/0x110 [ 303.970433][ T30] ? __pfx__printk+0x10/0x10 [ 303.975050][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 303.980104][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 303.986106][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 303.992110][ T30] watchdog+0xff4/0x1040 [ 303.996377][ T30] ? watchdog+0x1ea/0x1040 [ 304.000824][ T30] ? __pfx_watchdog+0x10/0x10 [ 304.005525][ T30] kthread+0x2f0/0x390 [ 304.009611][ T30] ? __pfx_watchdog+0x10/0x10 [ 304.014309][ T30] ? __pfx_kthread+0x10/0x10 [ 304.018916][ T30] ret_from_fork+0x4b/0x80 [ 304.023354][ T30] ? __pfx_kthread+0x10/0x10 [ 304.027961][ T30] ret_from_fork_asm+0x1a/0x30 [ 304.032849][ T30] [ 304.036555][ T30] Sending NMI from CPU 1 to CPUs 0: [ 304.041967][ C0] NMI backtrace for cpu 0 [ 304.041980][ C0] CPU: 0 UID: 0 PID: 8 Comm: kworker/0:0 Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 304.042000][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 304.042011][ C0] Workqueue: events nsim_dev_trap_report_work [ 304.042034][ C0] RIP: 0010:unwind_next_frame+0x21b/0x22d0 [ 304.042053][ C0] Code: 84 c0 0f 85 97 1a 00 00 44 8b 03 41 ff c0 4b 8d 04 64 48 8d b4 00 94 d9 9d 90 48 c7 c0 2a 6b 4b 91 48 39 c6 0f 83 19 18 00 00 <4b> 8d 0c 40 48 8d 8c 09 94 d9 9d 90 48 39 c1 0f 87 04 18 00 00 45 [ 304.042067][ C0] RSP: 0018:ffffc90000006a70 EFLAGS: 00000287 [ 304.042081][ C0] RAX: ffffffff914b6b2a RBX: ffffffff914f3548 RCX: 00000000000b0001 [ 304.042093][ C0] RDX: 00000000000b0001 RSI: ffffffff90ae8efe RDI: 0000000000000001 [ 304.042105][ C0] RBP: dffffc0000000000 R08: 000000000002c8f0 R09: ffffc90000006c30 [ 304.042117][ C0] R10: ffffc90000006b90 R11: ffffffff81809000 R12: 000000000002c8e7 [ 304.042128][ C0] R13: ffffc90000006b40 R14: 000000000000f286 R15: ffffffff81f2862a [ 304.042141][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 304.042155][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 304.042167][ C0] CR2: 00007fe172724f98 CR3: 000000000e734000 CR4: 00000000003526f0 [ 304.042182][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 304.042191][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 304.042202][ C0] Call Trace: [ 304.042208][ C0] [ 304.042215][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 304.042233][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 304.042256][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 304.042273][ C0] ? nmi_handle+0x2a/0x5a0 [ 304.042296][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 304.042315][ C0] ? nmi_handle+0x14f/0x5a0 [ 304.042330][ C0] ? nmi_handle+0x2a/0x5a0 [ 304.042346][ C0] ? unwind_next_frame+0x21b/0x22d0 [ 304.042361][ C0] ? default_do_nmi+0x63/0x160 [ 304.042379][ C0] ? exc_nmi+0x123/0x1f0 [ 304.042396][ C0] ? end_repeat_nmi+0xf/0x53 [ 304.042411][ C0] ? kmem_cache_alloc_node_noprof+0x16a/0x320 [ 304.042432][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 304.042453][ C0] ? unwind_next_frame+0x21b/0x22d0 [ 304.042468][ C0] ? unwind_next_frame+0x21b/0x22d0 [ 304.042485][ C0] ? unwind_next_frame+0x21b/0x22d0 [ 304.042500][ C0] [ 304.042505][ C0] [ 304.042515][ C0] ? kmem_cache_alloc_node_noprof+0x16b/0x320 [ 304.042536][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 304.042554][ C0] arch_stack_walk+0x11c/0x150 [ 304.042573][ C0] ? kmem_cache_alloc_node_noprof+0x16b/0x320 [ 304.042594][ C0] stack_trace_save+0x118/0x1d0 [ 304.042611][ C0] ? stack_trace_save+0x118/0x1d0 [ 304.042628][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 304.042646][ C0] ? __asan_memset+0x23/0x50 [ 304.042667][ C0] ? unwind_next_frame+0x193b/0x22d0 [ 304.042685][ C0] kasan_save_track+0x3f/0x80 [ 304.042699][ C0] ? kasan_save_track+0x3f/0x80 [ 304.042714][ C0] ? __kasan_slab_alloc+0x66/0x80 [ 304.042730][ C0] ? kmem_cache_alloc_node_noprof+0x16b/0x320 [ 304.042771][ C0] __kasan_slab_alloc+0x66/0x80 [ 304.042787][ C0] ? __alloc_skb+0x1c3/0x440 [ 304.042801][ C0] kmem_cache_alloc_node_noprof+0x16b/0x320 [ 304.042823][ C0] __alloc_skb+0x1c3/0x440 [ 304.042840][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 304.042859][ C0] synproxy_send_client_synack+0x1ba/0xf30 [ 304.042881][ C0] ? kasan_quarantine_put+0xdc/0x230 [ 304.042896][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 304.042917][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 304.042944][ C0] ? synproxy_pernet+0x45/0x270 [ 304.042966][ C0] nft_synproxy_eval_v4+0x3ca/0x610 [ 304.042988][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 304.043010][ C0] ? nf_ip_checksum+0x13a/0x500 [ 304.043032][ C0] nft_synproxy_do_eval+0x362/0xa60 [ 304.043055][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 304.043074][ C0] ? validate_chain+0x11e/0x5920 [ 304.043093][ C0] ? __pfx_validate_chain+0x10/0x10 [ 304.043114][ C0] nft_do_chain+0x4ad/0x1da0 [ 304.043141][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 304.043160][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 304.043191][ C0] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 304.043209][ C0] nft_do_chain_inet+0x418/0x6b0 [ 304.043230][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 304.043249][ C0] ? ipt_do_table+0x312/0x1860 [ 304.043276][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 304.043295][ C0] nf_hook_slow+0xc3/0x220 [ 304.043313][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 304.043331][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 304.043347][ C0] NF_HOOK+0x29e/0x450 [ 304.043365][ C0] ? NF_HOOK+0x9a/0x450 [ 304.043380][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 304.043397][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 304.043417][ C0] ? ip_rcv_finish+0x406/0x560 [ 304.043434][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 304.043450][ C0] NF_HOOK+0x3a4/0x450 [ 304.043467][ C0] ? NF_HOOK+0x9a/0x450 [ 304.043483][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 304.043497][ C0] ? ip_rcv_core+0x801/0xd10 [ 304.043514][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 304.043534][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 304.043550][ C0] __netif_receive_skb+0x2bf/0x650 [ 304.043570][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 304.043590][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 304.043607][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 304.043627][ C0] ? __pfx_lock_release+0x10/0x10 [ 304.043648][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 304.043672][ C0] process_backlog+0x662/0x15b0 [ 304.043693][ C0] ? process_backlog+0x33b/0x15b0 [ 304.043715][ C0] ? __pfx_process_backlog+0x10/0x10 [ 304.043733][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 304.043754][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 304.043776][ C0] __napi_poll+0xcb/0x490 [ 304.043795][ C0] net_rx_action+0x89b/0x1240 [ 304.043823][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 304.043841][ C0] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 304.043876][ C0] handle_softirqs+0x2c5/0x980 [ 304.043898][ C0] ? do_softirq+0x11b/0x1e0 [ 304.043917][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 304.043944][ C0] do_softirq+0x11b/0x1e0 [ 304.043962][ C0] [ 304.043967][ C0] [ 304.043973][ C0] ? __pfx_do_softirq+0x10/0x10 [ 304.043991][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 304.044014][ C0] ? rcu_is_watching+0x15/0xb0 [ 304.044031][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 304.044051][ C0] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 304.044068][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 304.044087][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 304.044105][ C0] ? nsim_dev_trap_report_work+0x6a7/0xaa0 [ 304.044125][ C0] nsim_dev_trap_report_work+0x75d/0xaa0 [ 304.044148][ C0] ? process_scheduled_works+0x976/0x1850 [ 304.044169][ C0] process_scheduled_works+0xa63/0x1850 [ 304.044200][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 304.044222][ C0] ? assign_work+0x364/0x3d0 [ 304.044244][ C0] worker_thread+0x870/0xd30 [ 304.044269][ C0] ? __kthread_parkme+0x169/0x1d0 [ 304.044291][ C0] ? __pfx_worker_thread+0x10/0x10 [ 304.044310][ C0] kthread+0x2f0/0x390 [ 304.044325][ C0] ? __pfx_worker_thread+0x10/0x10 [ 304.044343][ C0] ? __pfx_kthread+0x10/0x10 [ 304.044358][ C0] ret_from_fork+0x4b/0x80 [ 304.044377][ C0] ? __pfx_kthread+0x10/0x10 [ 304.044392][ C0] ret_from_fork_asm+0x1a/0x30 [ 304.044418][ C0] [ 304.828927][ T55] Bluetooth: hci19: command tx timeout [ 304.834682][ T55] Bluetooth: hci9: command 0x0406 tx timeout [ 304.841379][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 304.848257][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc1-syzkaller-00306-g27cc6fdf7201 #0 [ 304.858781][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 304.868954][ T30] Call Trace: [ 304.872245][ T30] [ 304.875190][ T30] dump_stack_lvl+0x241/0x360 [ 304.879888][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 304.885103][ T30] ? __pfx__printk+0x10/0x10 [ 304.889714][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 304.895725][ T30] ? vscnprintf+0x5d/0x90 [ 304.900074][ T30] panic+0x349/0x880 [ 304.903992][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 304.910174][ T30] ? __pfx_panic+0x10/0x10 [ 304.914651][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 304.920043][ T30] ? __irq_work_queue_local+0x137/0x410 [ 304.925617][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 304.931014][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 304.937279][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 304.943458][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 304.949632][ T30] watchdog+0x1033/0x1040 [ 304.953981][ T30] ? watchdog+0x1ea/0x1040 [ 304.958423][ T30] ? __pfx_watchdog+0x10/0x10 [ 304.963120][ T30] kthread+0x2f0/0x390 [ 304.967211][ T30] ? __pfx_watchdog+0x10/0x10 [ 304.971904][ T30] ? __pfx_kthread+0x10/0x10 [ 304.976516][ T30] ret_from_fork+0x4b/0x80 [ 304.980955][ T30] ? __pfx_kthread+0x10/0x10 [ 304.985563][ T30] ret_from_fork_asm+0x1a/0x30 [ 304.990362][ T30] [ 304.993648][ T30] Kernel Offset: disabled [ 304.997968][ T30] Rebooting in 86400 seconds..