last executing test programs: 1m13.896595141s ago: executing program 2 (id=519): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000b80)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), r0) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)={0x2c, r3, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DEFAULT={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x44008) 1m13.739184214s ago: executing program 2 (id=521): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xfd}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, 0x0) 1m12.870322493s ago: executing program 2 (id=536): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000002280)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x4, 0x0, @rand_addr=0x64010120, @broadcast}, "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"}}, 0xfce) 1m12.704253413s ago: executing program 2 (id=537): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x2b93089, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) 1m12.499237452s ago: executing program 2 (id=538): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x0) close(r1) 1m12.147299194s ago: executing program 2 (id=543): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000000)={&(0x7f00001c4000/0x3000)=nil, &(0x7f0000000000/0xc00000)=nil, 0x3000, 0x0, 0x2}) 1m11.927690275s ago: executing program 32 (id=543): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000000)={&(0x7f00001c4000/0x3000)=nil, &(0x7f0000000000/0xc00000)=nil, 0x3000, 0x0, 0x2}) 48.6418802s ago: executing program 5 (id=836): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) 48.390862043s ago: executing program 5 (id=842): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0), 0x4) copy_file_range(r1, &(0x7f00000001c0), r0, 0x0, 0xfffffff7a003e45c, 0x10000000000000) 48.306751297s ago: executing program 5 (id=844): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000400)={0xb, {{0xa, 0x0, 0xffffffff, @mcast2, 0x3}}, 0x0, 0x1, [{{0xa, 0x4e26, 0x0, @private1}}]}, 0x110) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0x42, &(0x7f0000000640)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0xc, 0x11, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 48.185419494s ago: executing program 5 (id=846): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', &(0x7f00000002c0)={0x840, 0x25, 0xa}, 0x18) 48.098812527s ago: executing program 5 (id=849): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000080)={0x1, &(0x7f0000000180)=[{0x6}]}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) 47.893576579s ago: executing program 5 (id=853): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000180)=0xe3b) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) 47.631357607s ago: executing program 33 (id=853): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000180)=0xe3b) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) 26.118998222s ago: executing program 0 (id=1186): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x6, 0x5004, 0x7, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)='%-5lx \x00'}, 0x20) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000f40)={'ip_vti0\x00', &(0x7f0000000ec0)={'syztnl2\x00', 0x0, 0x1, 0x8000, 0x3, 0x7756, {{0xe, 0x4, 0x1, 0x7, 0x38, 0x65, 0x0, 0x8, 0x2f, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x2d}, {[@lsrr={0x83, 0x7, 0x8f, [@broadcast]}, @generic={0x89, 0x8, "63ced4574b95"}, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @lsrr={0x83, 0xb, 0xa3, [@loopback, @private=0xa010102]}]}}}}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 26.023173573s ago: executing program 0 (id=1188): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x7fff, 0x0) ioctl$TCSETSF(r0, 0x5404, 0x0) 25.86326421s ago: executing program 0 (id=1191): syz_io_uring_setup(0x4300, &(0x7f0000000380)={0x0, 0x0, 0x10100, 0x0, 0xd0}, &(0x7f0000000280), &(0x7f00000000c0)) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f024}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000100)={0x2, @win={{0x784, 0x10, 0x0, 0x7}, 0x1, 0x6, 0x0, 0x0, 0x0, 0x2}}) 25.786167424s ago: executing program 0 (id=1194): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x104000, 0x0) 25.678735439s ago: executing program 0 (id=1197): setreuid(0xffffffffffffffff, 0xee00) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000001c0)='}', 0x1}], 0x1}}], 0x2, 0x2400c042) 25.410986728s ago: executing program 0 (id=1201): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xd931d3864d39dcca) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) close(r0) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 25.238953163s ago: executing program 34 (id=1201): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xd931d3864d39dcca) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) close(r0) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 24.542923441s ago: executing program 4 (id=1213): munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) 24.159614187s ago: executing program 6 (id=1219): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, &(0x7f0000002680)) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002302230102090500000010000020d3"]) 23.981902929s ago: executing program 3 (id=1222): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty, 0x4}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xa4ffffff, @rand_addr=' \x01\x00'}}}, 0x15a) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) 23.875256899s ago: executing program 6 (id=1223): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000280000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2}, &(0x7f0000000240)=0x2, &(0x7f00000003c0)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r2, &(0x7f0000000240)}, 0x20) 23.874726476s ago: executing program 4 (id=1224): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x40d, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) 23.872803392s ago: executing program 3 (id=1225): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r1, r2}, 0x40) syz_emit_ethernet(0xfdef, &(0x7f0000000600)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53aff", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "508359", 0x0, 0x32, 0x0, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}}}, 0x0) 23.826782855s ago: executing program 6 (id=1226): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000180)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0002}}}, 0x14) r1 = dup(r0) connect$802154_dgram(r1, &(0x7f0000000000)={0x24, @short={0x2, 0x1, 0xae635364e0ef1d90}}, 0x14) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x400c048}, 0x20000000) 23.767248496s ago: executing program 6 (id=1227): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) 23.663165738s ago: executing program 6 (id=1228): pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xeaff, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 23.662680215s ago: executing program 3 (id=1229): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x400) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 23.662293132s ago: executing program 4 (id=1230): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e00010069703667726574617000000018000280140006002001000000000000000000000000000208000a00", @ANYRES32], 0x54}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 23.542964173s ago: executing program 4 (id=1231): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x54}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="38000000070a01040000000000000000020000000c00034000000000000000e50900020073797a32000000000900010073797a30"], 0x38}}, 0x0) 23.496714794s ago: executing program 6 (id=1232): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_BACKUP_PORT={0x8}]}}}]}, 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x44}}, 0x0) 23.451171135s ago: executing program 4 (id=1233): r0 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x3, 0x1, 0x0, 0x1000, &(0x7f0000014000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000730000400008000007"]) 23.388738821s ago: executing program 4 (id=1234): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) 23.229329621s ago: executing program 1 (id=1235): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x8000, 0x0, 0x1a, "7f129084d90a00000000022b00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000140)={0x7, 0x200, 0x2, 0x7, 0x8, "ccf8d292073b0077c35d837fdae25c4db891d6", 0x0, 0x81}) 23.151208626s ago: executing program 1 (id=1236): openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 23.150743136s ago: executing program 1 (id=1237): pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x1111, &(0x7f0000000300)={0x0, 0x82d2, 0x800, 0x0, 0x4}, &(0x7f0000000540)=0x0, &(0x7f0000000500)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000440)=@IORING_OP_ACCEPT={0xd, 0x40, 0x4, r0, 0x0}) io_uring_enter(r1, 0x47fa, 0x0, 0x0, 0x0, 0x0) 23.006684518s ago: executing program 1 (id=1238): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0xfffffffffffffe43}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000100)={0x0, 0x55}, &(0x7f0000000140)=0x8) 22.945647992s ago: executing program 1 (id=1239): r0 = syz_io_uring_setup(0x44f, &(0x7f0000000140)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000070000000000000000e300850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='io_uring_queue_async_work\x00', r3}, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_SHUTDOWN) io_uring_enter(r0, 0x2dbe, 0x0, 0x0, 0x0, 0x0) 22.855276064s ago: executing program 1 (id=1240): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0x930d, 0x4) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f00000008c0)="050800", 0x3, 0x20000004, &(0x7f0000002840)={0x11, 0x11, r2, 0x1, 0xae, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) 15.425036611s ago: executing program 3 (id=1241): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioprio_set$pid(0x2, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0), 0x282, 0x0) sendfile(r0, r0, 0x0, 0x40008) 15.389355856s ago: executing program 3 (id=1242): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1, 0x2, 0x8) 15.2752209s ago: executing program 3 (id=1243): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000040)={0x28, r2, 0x10d, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_SEQ={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000040) 8.01236576s ago: executing program 35 (id=1232): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_BACKUP_PORT={0x8}]}}}]}, 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x44}}, 0x0) 7.982783789s ago: executing program 36 (id=1234): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) 7.509325902s ago: executing program 37 (id=1240): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0x930d, 0x4) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f00000008c0)="050800", 0x3, 0x20000004, &(0x7f0000002840)={0x11, 0x11, r2, 0x1, 0xae, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) 0s ago: executing program 38 (id=1243): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000040)={0x28, r2, 0x10d, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_SEQ={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000040) kernel console output (not intermixed with test programs): 95 uid=0 gid=0 ses=4294967295 subj=_ pid=6014 comm="syz.1.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5938cd29 code=0x7ffc0000 [ 80.493838][ T5901] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 80.502942][ T29] audit: type=1326 audit(1737813848.705:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6014 comm="syz.1.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5938cd29 code=0x7ffc0000 [ 80.527585][ T29] audit: type=1326 audit(1737813848.705:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6014 comm="syz.1.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f7a5938cd29 code=0x7ffc0000 [ 80.549858][ T29] audit: type=1326 audit(1737813848.705:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6014 comm="syz.1.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5938cd29 code=0x7ffc0000 [ 80.572991][ T29] audit: type=1800 audit(1737813848.735:9): pid=6016 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.46" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 80.602598][ T5835] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 80.673837][ T5901] usb 4-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 80.683323][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.693322][ T5901] usb 4-1: config 0 descriptor?? [ 80.700396][ T5901] pwc: Creative Labs Webcam Pro Ex detected. [ 80.742467][ T5935] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 80.772206][ T5835] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 80.784534][ T5835] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 80.795541][ T5835] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 80.804911][ T5835] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.824652][ T6013] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 80.835840][ T5835] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 80.892406][ T5871] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 80.911807][ T5935] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.929688][ T5935] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 80.950365][ T5935] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 80.968694][ T5935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 80.977305][ T5935] usb 2-1: SerialNumber: syz [ 81.072396][ T5871] usb 3-1: Using ep0 maxpacket: 16 [ 81.088622][ T5871] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 81.131792][ T5871] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 81.166239][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 81.208529][ T5935] usb 2-1: 0:2 : does not exist [ 81.214760][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 81.235821][ T5868] usb 1-1: USB disconnect, device number 3 [ 81.246611][ T5871] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 81.248488][ T6031] smc: net device lo applied user defined pnetid SYZ2 [ 81.261688][ T5935] usb 2-1: 0:0: failed to get current value for ch 0 (-22) [ 81.282142][ T5871] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 81.291506][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.302564][ T5871] usb 3-1: Product: syz [ 81.306974][ T5871] usb 3-1: Manufacturer: syz [ 81.311796][ T5871] usb 3-1: SerialNumber: syz [ 81.327996][ T5901] pwc: recv_control_msg error -32 req 02 val 2b00 [ 81.338573][ T5901] pwc: recv_control_msg error -32 req 02 val 2700 [ 81.351156][ T5935] usb 2-1: USB disconnect, device number 3 [ 81.359645][ T5871] usb 3-1: config 0 descriptor?? [ 81.369400][ T5901] pwc: recv_control_msg error -71 req 04 val 1600 [ 81.398957][ T5901] pwc: recv_control_msg error -71 req 02 val 2c00 [ 81.439320][ T5901] pwc: recv_control_msg error -71 req 04 val 1000 [ 81.461156][ T5901] pwc: recv_control_msg error -71 req 04 val 1300 [ 81.472050][ T5901] pwc: recv_control_msg error -71 req 04 val 1400 [ 81.483548][ T5901] pwc: recv_control_msg error -71 req 02 val 2000 [ 81.490421][ T5901] pwc: recv_control_msg error -71 req 02 val 2100 [ 81.498551][ T5901] pwc: recv_control_msg error -71 req 06 val 0600 [ 81.506552][ T5901] pwc: recv_control_msg error -71 req 04 val 1500 [ 81.514158][ T5901] pwc: recv_control_msg error -71 req 02 val 2500 [ 81.520961][ T5901] pwc: recv_control_msg error -71 req 02 val 2400 [ 81.528604][ T5901] pwc: recv_control_msg error -71 req 02 val 2600 [ 81.536100][ T5901] pwc: recv_control_msg error -71 req 02 val 2900 [ 81.543845][ T5901] pwc: recv_control_msg error -71 req 02 val 2800 [ 81.550782][ T5901] pwc: recv_control_msg error -71 req 04 val 1100 [ 81.557759][ T5901] pwc: recv_control_msg error -71 req 04 val 1200 [ 81.563607][ T5954] udevd[5954]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 81.571613][ T5901] pwc: Registered as video103. [ 81.599661][ T5901] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6 [ 81.605906][ T5901] usb 4-1: USB disconnect, device number 4 [ 81.653003][ T5871] appledisplay 3-1:0.0: Error while getting initial brightness: -110 [ 81.654238][ T5871] appledisplay 3-1:0.0: probe with driver appledisplay failed with error -110 [ 81.707634][ T5871] usb 3-1: USB disconnect, device number 3 [ 81.867277][ T6042] syz.0.61 uses obsolete (PF_INET,SOCK_PACKET) [ 81.966386][ T6047] netlink: 28 bytes leftover after parsing attributes in process `syz.1.63'. [ 81.976175][ T6047] netlink: 28 bytes leftover after parsing attributes in process `syz.1.63'. [ 81.991982][ T6047] netlink: 28 bytes leftover after parsing attributes in process `syz.1.63'. [ 82.021175][ T6047] netlink: 28 bytes leftover after parsing attributes in process `syz.1.63'. [ 82.041197][ T6047] Zero length message leads to an empty skb [ 82.413121][ T5871] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 82.904588][ T6069] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 83.225292][ T6080] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.312892][ T5871] usb 4-1: Using ep0 maxpacket: 16 [ 83.319401][ T5871] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 83.332387][ T5871] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.365353][ T5871] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 83.376218][ T5871] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 83.387129][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.401520][ T5871] usb 4-1: Product: syz [ 83.406367][ T5871] usb 4-1: Manufacturer: syz [ 83.411270][ T5871] usb 4-1: SerialNumber: syz [ 83.556387][ T6098] netlink: 4 bytes leftover after parsing attributes in process `syz.4.87'. [ 83.834094][ T5871] usb 4-1: 0:2 : does not exist [ 83.913690][ T6119] bridge1: entered promiscuous mode [ 83.919010][ T6119] bridge1: entered allmulticast mode [ 84.102420][ T5901] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 84.245797][ T5871] usb 4-1: 1:0: cannot get min/max values for control 2 (id 1) [ 84.272176][ T5901] usb 2-1: config 0 has an invalid interface number: 104 but max is 0 [ 84.280653][ T5871] usb 4-1: USB disconnect, device number 5 [ 84.292187][ T5901] usb 2-1: config 0 has no interface number 0 [ 84.309581][ T5901] usb 2-1: config 0 interface 104 has no altsetting 0 [ 84.321945][ T5901] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=a1.c9 [ 84.334024][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.358343][ T5901] usb 2-1: Product: syz [ 84.367841][ T5901] usb 2-1: Manufacturer: syz [ 84.372553][ T5901] usb 2-1: SerialNumber: syz [ 84.381241][ T5901] usb 2-1: config 0 descriptor?? [ 84.388281][ T5901] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 84.474156][ T5822] udevd[5822]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 84.589045][ T5901] gspca_vc032x: reg_r err -71 [ 84.599379][ T5901] gspca_vc032x: I2c Bus Busy Wait 00 [ 84.605996][ T5901] gspca_vc032x: I2c Bus Busy Wait 00 [ 84.617065][ T5901] gspca_vc032x: I2c Bus Busy Wait 00 [ 84.622803][ T5901] gspca_vc032x: I2c Bus Busy Wait 00 [ 84.628270][ T5901] gspca_vc032x: I2c Bus Busy Wait 00 [ 84.634598][ T5901] gspca_vc032x: I2c Bus Busy Wait 00 [ 84.640642][ T5901] gspca_vc032x: I2c Bus Busy Wait 00 [ 84.646299][ T5901] gspca_vc032x: I2c Bus Busy Wait 00 [ 84.651786][ T5901] gspca_vc032x: I2c Bus Busy Wait 00 [ 84.659102][ T5901] gspca_vc032x: I2c Bus Busy Wait 00 [ 84.665337][ T5901] gspca_vc032x: I2c Bus Busy Wait 00 [ 84.670791][ T5901] gspca_vc032x: I2c Bus Busy Wait 00 [ 84.679274][ T5901] gspca_vc032x: I2c Bus Busy Wait 00 [ 84.685669][ T5901] gspca_vc032x: I2c Bus Busy Wait 00 [ 84.692589][ T5901] gspca_vc032x: I2c Bus Busy Wait 00 [ 84.700178][ T5901] gspca_vc032x: I2c Bus Busy Wait 00 [ 84.705970][ T5901] gspca_vc032x: I2c Bus Busy Wait 00 [ 84.711364][ T5901] gspca_vc032x: I2c Bus Busy Wait 00 [ 84.717111][ T5901] gspca_vc032x: Unknown sensor... [ 84.722479][ T5901] vc032x 2-1:0.104: probe with driver vc032x failed with error -22 [ 84.773814][ T5901] usb 2-1: USB disconnect, device number 4 [ 84.838960][ T6151] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 85.480691][ T6195] netlink: 12 bytes leftover after parsing attributes in process `syz.2.128'. [ 85.494736][ T6195] vlan2: entered promiscuous mode [ 85.500030][ T6195] hsr0: entered promiscuous mode [ 85.506716][ T6195] hsr0: left promiscuous mode [ 85.623118][ T6197] capability: warning: `syz.2.129' uses deprecated v2 capabilities in a way that may be insecure [ 85.634489][ T29] audit: type=1400 audit(1737813853.955:10): lsm=SMACK fn=smack_ipc_permission action=denied subject="w" object="_" requested=w pid=6196 comm="syz.2.129" ipc_key=0 [ 85.677125][ T25] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 85.863079][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 85.883498][ T25] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 85.894119][ T25] usb 2-1: config 0 has no interface number 0 [ 85.902164][ T25] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 85.912022][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.921769][ T25] usb 2-1: Product: syz [ 85.926263][ T25] usb 2-1: Manufacturer: syz [ 85.930902][ T25] usb 2-1: SerialNumber: syz [ 85.942760][ T25] usb 2-1: config 0 descriptor?? [ 86.150414][ T25] radio-si470x 2-1:0.35: this is not a si470x device. [ 86.357105][ T25] radio-raremono 2-1:0.35: this is not Thanko's Raremono. [ 86.368905][ T25] usb 2-1: USB disconnect, device number 5 [ 86.982344][ T5898] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 87.072353][ T5901] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 87.152399][ T5898] usb 5-1: Using ep0 maxpacket: 32 [ 87.172639][ T5898] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 74 [ 87.187560][ T5898] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 87.202434][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.210494][ T5898] usb 5-1: Product: syz [ 87.238400][ T5898] usb 5-1: Manufacturer: syz [ 87.262377][ T5898] usb 5-1: SerialNumber: syz [ 87.264690][ T5901] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 87.282428][ T5898] usb 5-1: config 0 descriptor?? [ 87.300286][ T5901] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 919, setting to 64 [ 87.302674][ T6238] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 87.347606][ T5901] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 87.358278][ T5898] hub 5-1:0.0: bad descriptor, ignoring hub [ 87.366228][ T5898] hub 5-1:0.0: probe with driver hub failed with error -5 [ 87.393129][ T5901] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 87.409085][ T5898] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input7 [ 87.430982][ T5901] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.00 [ 87.450016][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.487805][ T5901] usb 3-1: Product: syz [ 87.519148][ T5901] usb 3-1: Manufacturer: syz [ 87.538101][ T5901] usb 3-1: SerialNumber: syz [ 87.559766][ T6243] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 87.573959][ T5871] usb 5-1: USB disconnect, device number 3 [ 87.579881][ C0] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 87.682526][ T5868] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 87.844118][ T5868] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 87.861868][ T5868] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 87.896803][ T5868] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 87.906318][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.919683][ T6260] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 87.937191][ T5868] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 88.137012][ T5898] usb 2-1: USB disconnect, device number 6 [ 88.203994][ T5868] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 88.362474][ T5868] usb 1-1: Using ep0 maxpacket: 32 [ 88.371304][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.384527][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.397813][ T5868] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 88.407289][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.417063][ T5868] usb 1-1: config 0 descriptor?? [ 88.586961][ T5901] cdc_ncm 3-1:1.0: bind() failure [ 88.595991][ T5901] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 88.606545][ T5901] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 88.615682][ T5901] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 88.630154][ T5901] usb 3-1: USB disconnect, device number 4 [ 88.831741][ T5868] ft260 0003:0403:6030.0001: unknown main item tag 0x0 [ 88.972496][ T5935] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 89.031335][ T5868] ft260 0003:0403:6030.0001: chip code: 5e81 abf2 [ 89.082165][ T6303] input: syz0 as /devices/virtual/input/input8 [ 89.143282][ T5935] usb 4-1: Using ep0 maxpacket: 8 [ 89.156406][ T5935] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 89.184215][ T5935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.212366][ T5935] usb 4-1: Product: syz [ 89.216613][ T5935] usb 4-1: Manufacturer: syz [ 89.221246][ T5935] usb 4-1: SerialNumber: syz [ 89.243967][ T5935] usb 4-1: config 0 descriptor?? [ 89.471923][ T5935] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 89.480593][ T5901] usb 1-1: USB disconnect, device number 4 [ 89.783113][ T25] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 89.943906][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.954965][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.964976][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 89.978717][ T25] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 89.987843][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.997841][ T25] usb 5-1: config 0 descriptor?? [ 90.083961][ T5935] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 90.117566][ T5935] usb 4-1: USB disconnect, device number 6 [ 90.383268][ T6352] netlink: 'syz.2.197': attribute type 29 has an invalid length. [ 90.392741][ T6352] netlink: 'syz.2.197': attribute type 29 has an invalid length. [ 90.401208][ T6352] netlink: 500 bytes leftover after parsing attributes in process `syz.2.197'. [ 90.417902][ T25] acrux 0003:1A34:0802.0002: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.4-1/input0 [ 90.429139][ T25] acrux 0003:1A34:0802.0002: no inputs found [ 90.436799][ T25] acrux 0003:1A34:0802.0002: Failed to enable force feedback support, error: -19 [ 90.463084][ T5868] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 90.619043][ T5868] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.641554][ T5868] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 90.654247][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 90.696223][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 90.713491][ T5868] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 90.732843][ T5868] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 90.748341][ T5868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 90.768100][ T5868] usb 1-1: Product: syz [ 90.787786][ T5868] usb 1-1: Manufacturer: syz [ 90.799350][ T6364] netlink: 136 bytes leftover after parsing attributes in process `syz.2.201'. [ 90.805562][ T5868] usb 1-1: SerialNumber: syz [ 90.835861][ T5868] usb 1-1: config 0 descriptor?? [ 91.051489][ T5868] radio-si470x 1-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 91.073129][ T5868] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -5 [ 91.290319][ T5871] usb 1-1: USB disconnect, device number 5 [ 91.530500][ T6401] warning: `syz.3.219' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 91.627494][ T6407] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 91.639408][ T6407] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 91.957474][ T6427] loop8: detected capacity change from 0 to 7 [ 91.965101][ T6427] Dev loop8: unable to read RDB block 7 [ 91.971028][ T6427] loop8: AHDI p1 p3 p4 [ 91.978604][ T6427] loop8: partition table partially beyond EOD, truncated [ 91.986983][ T6427] loop8: p1 start 975770946 is beyond EOD, truncated [ 92.003129][ T6427] loop8: p3 start 6514546 is beyond EOD, truncated [ 92.012967][ T5827] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 92.196240][ T5827] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 92.223469][ T5827] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.233053][ T975] cfg80211: failed to load regulatory.db [ 92.253782][ T25] usb 5-1: USB disconnect, device number 4 [ 92.261171][ T5827] usb 4-1: config 0 descriptor?? [ 92.279332][ T5827] cp210x 4-1:0.0: cp210x converter detected [ 92.683153][ T5827] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 92.703234][ T5827] cp210x 4-1:0.0: GPIO initialisation failed: -524 [ 92.712702][ T6465] netlink: 20 bytes leftover after parsing attributes in process `syz.1.249'. [ 92.731091][ T5827] usb 4-1: cp210x converter now attached to ttyUSB0 [ 92.750610][ T6465] netlink: 28 bytes leftover after parsing attributes in process `syz.1.249'. [ 92.773811][ T6465] gretap0: entered promiscuous mode [ 92.798181][ T6465] batadv_slave_1: entered promiscuous mode [ 92.815432][ T6472] input: syz0 as /devices/virtual/input/input9 [ 92.906549][ T5827] usb 4-1: USB disconnect, device number 7 [ 92.929563][ T5827] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 92.933817][ T6476] netlink: 'syz.2.253': attribute type 11 has an invalid length. [ 92.958159][ T5827] cp210x 4-1:0.0: device disconnected [ 93.382752][ T5935] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 93.452048][ T6506] veth1_to_team: entered promiscuous mode [ 93.463989][ T6505] veth1_to_team: left promiscuous mode [ 93.555124][ T5935] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 93.583253][ T5935] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 93.592231][ T5935] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 93.630639][ T5935] usb 1-1: config 0 interface 0 has no altsetting 0 [ 93.647676][ T5935] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 93.660577][ T5935] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 93.674766][ T5935] usb 1-1: config 0 interface 0 has no altsetting 0 [ 93.689791][ T5935] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 93.719564][ T5935] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 93.758161][ T5935] usb 1-1: config 0 interface 0 has no altsetting 0 [ 93.769100][ T5935] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 93.782558][ T5935] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 93.798907][ T5935] usb 1-1: config 0 interface 0 has no altsetting 0 [ 93.817687][ T5935] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 93.830660][ T5935] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 93.845426][ T5935] usb 1-1: config 0 interface 0 has no altsetting 0 [ 93.854452][ T5935] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 93.878668][ T5935] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 93.897646][ T5935] usb 1-1: config 0 interface 0 has no altsetting 0 [ 93.911840][ T5935] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 93.927134][ T5935] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 93.939498][ T5935] usb 1-1: config 0 interface 0 has no altsetting 0 [ 93.951143][ T5935] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 93.957810][ T6528] input: syz1 as /devices/virtual/input/input10 [ 93.988339][ T5935] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 94.018596][ T5935] usb 1-1: config 0 interface 0 has no altsetting 0 [ 94.054932][ T5935] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 94.072861][ T5935] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 94.097667][ T5935] usb 1-1: Product: syz [ 94.101893][ T5935] usb 1-1: Manufacturer: syz [ 94.106892][ T5935] usb 1-1: SerialNumber: syz [ 94.115486][ T5935] usb 1-1: config 0 descriptor?? [ 94.124013][ T5935] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 94.338266][ T5935] usb 1-1: USB disconnect, device number 6 [ 94.349511][ T5935] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 94.502526][ T25] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 94.582375][ T5827] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 94.610844][ T6563] process 'syz.2.291' launched './file2' with NULL argv: empty string added [ 94.661885][ T6566] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 94.671004][ T6566] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 94.680055][ T6566] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 94.689088][ T6566] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 94.689283][ T25] usb 2-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 94.698139][ T6566] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 94.698171][ T6566] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 94.698194][ T6566] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 94.710304][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.716249][ T6566] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 94.729600][ T25] usb 2-1: config 0 descriptor?? [ 94.734150][ T6566] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 94.734181][ T6566] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 94.774778][ T5827] usb 5-1: Using ep0 maxpacket: 16 [ 94.785745][ T5827] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.799008][ T5827] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.825445][ T5827] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 94.839249][ T5827] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 94.849487][ T5827] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.923413][ T5827] usb 5-1: config 0 descriptor?? [ 94.970279][ T6576] netlink: 28 bytes leftover after parsing attributes in process `syz.2.296'. [ 94.979825][ T6576] netlink: 'syz.2.296': attribute type 7 has an invalid length. [ 94.988818][ T6576] netlink: 'syz.2.296': attribute type 8 has an invalid length. [ 94.999302][ T6576] netlink: 4 bytes leftover after parsing attributes in process `syz.2.296'. [ 95.323851][ T6598] program syz.2.307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.367581][ T5827] HID 045e:07da: Invalid code 65791 type 1 [ 95.414113][ T5827] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0003/input/input11 [ 95.479530][ T5827] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 95.590165][ T975] usb 5-1: USB disconnect, device number 5 [ 95.806112][ T25] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 95.821503][ T25] asix 2-1:0.0: probe with driver asix failed with error -71 [ 95.863682][ T25] usb 2-1: USB disconnect, device number 7 [ 96.015883][ T6636] loop2: detected capacity change from 0 to 7 [ 96.026085][ T6636] Dev loop2: unable to read RDB block 7 [ 96.031765][ T6636] loop2: unable to read partition table [ 96.038179][ T6636] loop2: partition table beyond EOD, truncated [ 96.046410][ T6636] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 96.145291][ T25] kernel write not supported for file /111/attr/exec (pid: 25 comm: kworker/1:0) [ 96.492536][ T5871] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 96.652363][ T5871] usb 4-1: Using ep0 maxpacket: 8 [ 96.659061][ T5871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 96.670190][ T5871] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 96.679656][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.694398][ T5871] usb 4-1: config 0 descriptor?? [ 96.923811][ T5871] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 96.947387][ T6674] loop2: detected capacity change from 0 to 7 [ 96.956417][ T6674] Dev loop2: unable to read RDB block 7 [ 96.969101][ T6674] loop2: unable to read partition table [ 96.976824][ T6674] loop2: partition table beyond EOD, truncated [ 96.986843][ T6674] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 97.392376][ T25] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 97.408873][ T975] usb 4-1: USB disconnect, device number 8 [ 97.565230][ T25] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 97.583153][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.608039][ T25] usb 3-1: config 0 descriptor?? [ 97.842058][ T5871] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 98.014601][ T5871] usb 1-1: Using ep0 maxpacket: 32 [ 98.021745][ T5871] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 98.031265][ T5871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.039889][ T25] [drm:udl_init] *ERROR* Selecting channel failed [ 98.058521][ T5871] usb 1-1: config 0 descriptor?? [ 98.071192][ T25] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 98.071894][ T5871] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 98.100233][ T25] [drm] Initialized udl on minor 2 [ 98.110398][ T25] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 98.119340][ T25] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 98.129182][ T5827] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 98.144482][ T25] usb 3-1: USB disconnect, device number 5 [ 98.159168][ T6723] netlink: 36 bytes leftover after parsing attributes in process `syz.3.361'. [ 98.165225][ T5827] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 98.320683][ T5196] udevd[5196]: worker [5954] terminated by signal 33 (Unknown signal 33) [ 98.347339][ T5196] udevd[5196]: worker [5954] failed while handling '/devices/virtual/block/loop1' [ 98.630192][ T6749] sctp: [Deprecated]: syz.1.370 (pid 6749) Use of int in max_burst socket option. [ 98.630192][ T6749] Use struct sctp_assoc_value instead [ 99.084345][ T5871] gspca_nw80x: reg_w err -71 [ 99.093336][ T5871] nw80x 1-1:0.0: probe with driver nw80x failed with error -71 [ 99.124292][ T5871] usb 1-1: USB disconnect, device number 7 [ 99.227044][ T6773] netlink: 16 bytes leftover after parsing attributes in process `syz.3.383'. [ 99.238549][ T6773] bond0: option all_slaves_active: invalid value (183) [ 99.329173][ T6777] bridge0: entered promiscuous mode [ 99.335365][ T6776] bridge0: left promiscuous mode [ 99.582662][ T25] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 99.664718][ T6798] loop2: detected capacity change from 0 to 7 [ 99.682063][ T6798] Dev loop2: unable to read RDB block 7 [ 99.698330][ T6798] loop2: unable to read partition table [ 99.712235][ T6798] loop2: partition table beyond EOD, truncated [ 99.718611][ T6798] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 99.757378][ T5196] Dev loop2: unable to read RDB block 7 [ 99.764561][ T5196] loop2: unable to read partition table [ 99.770349][ T5196] loop2: partition table beyond EOD, truncated [ 99.784182][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 99.784220][ T5871] IPVS: starting estimator thread 0... [ 99.790691][ T6804] net_ratelimit: 55 callbacks suppressed [ 99.802792][ T25] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 99.822354][ T6804] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 99.836693][ T25] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.870143][ T25] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 99.892091][ T25] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 99.905942][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.910263][ T6810] IPVS: using max 35 ests per chain, 84000 per kthread [ 99.935786][ T25] usb 4-1: Product: syz [ 99.940001][ T25] usb 4-1: Manufacturer: syz [ 99.968384][ T25] usb 4-1: SerialNumber: syz [ 100.062433][ T5868] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 100.225977][ T5868] usb 1-1: config 0 has no interfaces? [ 100.231553][ T5868] usb 1-1: New USB device found, idVendor=0ac8, idProduct=332d, bcdDevice=8a.82 [ 100.245177][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.265854][ T5868] usb 1-1: config 0 descriptor?? [ 100.390938][ T25] usb 4-1: 0:2 : does not exist [ 100.422320][ T5935] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 100.475445][ T5868] usb 1-1: USB disconnect, device number 8 [ 100.592366][ T5935] usb 5-1: Using ep0 maxpacket: 16 [ 100.605463][ T5935] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.622292][ T5935] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.642717][ T5935] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 100.662340][ T5935] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 100.671428][ T5935] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.703736][ T5935] usb 5-1: config 0 descriptor?? [ 101.020260][ T25] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 101.051542][ T25] usb 4-1: USB disconnect, device number 9 [ 101.117683][ T5935] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 101.132398][ T5935] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 101.142717][ T5935] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 101.152404][ T5935] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 101.159426][ T5935] shield 0003:0955:7214.0004: unknown main item tag 0x0 [ 101.184801][ T5935] input: HID 0955:7214 Haptics as /devices/virtual/input/input12 [ 101.233258][ T5935] shield 0003:0955:7214.0004: Registered Thunderstrike controller [ 101.242117][ T5935] shield 0003:0955:7214.0004: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 101.265113][ T5822] udevd[5822]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 101.317134][ T6826] random: crng reseeded on system resumption [ 101.469322][ T5868] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 101.470054][ T975] usb 5-1: USB disconnect, device number 6 [ 101.492646][ T5868] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 101.527769][ T5868] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 101.591078][ T5868] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 101.953184][ T6870] vivid-000: disconnect [ 101.960796][ T6868] vivid-000: reconnect [ 102.053456][ T25] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 102.223935][ T25] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 102.262091][ T25] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 102.301705][ T25] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 102.351000][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.395234][ T6864] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 102.416926][ T25] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 102.661922][ T5898] kernel write not supported for file bpf-prog (pid: 5898 comm: kworker/0:6) [ 102.821629][ T25] usb 2-1: USB disconnect, device number 8 [ 103.326257][ T6936] Bluetooth: MGMT ver 1.23 [ 103.511231][ T6949] input: syz0 as /devices/virtual/input/input13 [ 103.806393][ T29] audit: type=1400 audit(1737814385.104:11): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="_" object="N" requested=w pid=6963 comm="syz.2.465" saddr=fc01:: daddr=ff02::1 dest=3618 netif=wpan0 [ 104.173361][ T6993] geneve2: entered promiscuous mode [ 104.178638][ T6993] geneve2: entered allmulticast mode [ 104.222513][ T5898] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 104.391030][ T5898] usb 3-1: Using ep0 maxpacket: 16 [ 104.411040][ T5898] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.425530][ T5898] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.436521][ T5898] usb 3-1: config 0 interface 0 has no altsetting 0 [ 104.444563][ T5898] usb 3-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 104.455974][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.498188][ T5898] usb 3-1: config 0 descriptor?? [ 104.752337][ T5835] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 104.820591][ T29] audit: type=1326 audit(1737814386.134:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7033 comm="syz.1.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5938cd29 code=0x7ffc0000 [ 104.843893][ T25] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 104.855329][ T29] audit: type=1326 audit(1737814386.134:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7033 comm="syz.1.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5938cd29 code=0x7ffc0000 [ 104.886918][ T29] audit: type=1326 audit(1737814386.134:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7033 comm="syz.1.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f7a5938cd29 code=0x7ffc0000 [ 104.909278][ T29] audit: type=1326 audit(1737814386.154:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7035 comm="syz.1.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7a593bf5e5 code=0x7ffc0000 [ 104.931703][ T5835] usb 4-1: Using ep0 maxpacket: 32 [ 104.938975][ T29] audit: type=1326 audit(1737814386.154:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7033 comm="syz.1.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5938cd29 code=0x7ffc0000 [ 104.946427][ T5898] cougar 0003:060B:500A.0005: unexpected long global item [ 104.961106][ T5835] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.986728][ T5835] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.997157][ T5835] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 105.006991][ T29] audit: type=1326 audit(1737814386.154:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7033 comm="syz.1.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5938cd29 code=0x7ffc0000 [ 105.036238][ T5898] cougar 0003:060B:500A.0005: parse failed [ 105.039127][ T25] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.044392][ T5898] cougar 0003:060B:500A.0005: probe with driver cougar failed with error -22 [ 105.053585][ T5835] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.071790][ T25] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 105.079321][ T29] audit: type=1326 audit(1737814386.164:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7033 comm="syz.1.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f7a5938cd29 code=0x7ffc0000 [ 105.104470][ T25] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 105.108123][ T29] audit: type=1326 audit(1737814386.164:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7033 comm="syz.1.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5938cd29 code=0x7ffc0000 [ 105.115159][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.146662][ T5898] usb 3-1: USB disconnect, device number 6 [ 105.156742][ T29] audit: type=1326 audit(1737814386.164:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7033 comm="syz.1.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5938cd29 code=0x7ffc0000 [ 105.183841][ T25] usb 5-1: Product: syz [ 105.184513][ T5835] usb 4-1: config 0 descriptor?? [ 105.197746][ T25] usb 5-1: Manufacturer: syz [ 105.210665][ T25] usb 5-1: SerialNumber: syz [ 105.231038][ T7041] Bluetooth: MGMT ver 1.23 [ 105.586708][ T7048] IPVS: You probably need to specify IP address on multicast interface. [ 105.595301][ T7048] IPVS: Error connecting to the multicast addr [ 105.622693][ T5835] savu 0003:1E7D:2D5A.0006: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 105.713010][ T5935] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 105.893863][ T7064] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input14 [ 105.904118][ T5935] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 105.908723][ T5827] usb 4-1: USB disconnect, device number 10 [ 105.930508][ T5935] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.944946][ T5935] usb 1-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 105.971205][ T5935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.078324][ T5935] usb 1-1: config 0 descriptor?? [ 106.089062][ T7069] netlink: 'syz.2.511': attribute type 29 has an invalid length. [ 106.106745][ T7069] netlink: 'syz.2.511': attribute type 29 has an invalid length. [ 106.118189][ T7069] netlink: 508 bytes leftover after parsing attributes in process `syz.2.511'. [ 106.129485][ T7069] unsupported nla_type 58 [ 106.248050][ T25] cdc_ncm 5-1:1.0: bind() failure [ 106.264146][ T25] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 106.281164][ T25] cdc_ncm 5-1:1.1: bind() failure [ 106.289127][ T7073] syzkaller1: entered promiscuous mode [ 106.301758][ T25] usb 5-1: USB disconnect, device number 7 [ 106.318035][ T7073] syzkaller1: entered allmulticast mode [ 106.555039][ T5935] hid-steam 0003:28DE:1102.0007: unknown main item tag 0x0 [ 106.577234][ T5935] hid-steam 0003:28DE:1102.0007: : USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.0-1/input0 [ 106.653892][ T5935] hid-steam 0003:28DE:1102.0007: Steam Controller 'XXXXXXXXXX' connected [ 106.673796][ T5935] input: Steam Controller as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28DE:1102.0007/input/input15 [ 106.702568][ T5935] hid-steam 0003:28DE:1102.0008: unknown main item tag 0x0 [ 106.721693][ T5935] hid-steam 0003:28DE:1102.0008: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.0-1/input0 [ 106.772860][ T5935] usb 1-1: USB disconnect, device number 9 [ 106.836388][ T5935] hid-steam 0003:28DE:1102.0007: Steam Controller 'XXXXXXXXXX' disconnected [ 106.876505][ T7062] syz.1.509 (7062): drop_caches: 2 [ 107.155242][ T7102] cgroup: fork rejected by pids controller in /syz1 [ 107.610432][ T3519] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.734065][ T3519] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.825100][ T3519] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.864384][ T7126] syzkaller1: entered promiscuous mode [ 107.876552][ T7126] syzkaller1: entered allmulticast mode [ 107.909092][ T3519] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.022618][ T3519] bridge_slave_1: left allmulticast mode [ 108.040291][ T3519] bridge_slave_1: left promiscuous mode [ 108.055408][ T3519] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.078500][ T3519] bridge_slave_0: left allmulticast mode [ 108.086076][ T3519] bridge_slave_0: left promiscuous mode [ 108.093026][ T3519] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.100779][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 108.109996][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 108.122219][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 108.136469][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 108.146436][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 108.154483][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 108.397711][ T3519] gretap0 (unregistering): left promiscuous mode [ 108.518193][ T3519] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.546346][ T3519] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.575640][ T3519] bond0 (unregistering): Released all slaves [ 108.712469][ T975] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 108.866362][ T7129] chnl_net:caif_netlink_parms(): no params data found [ 108.903620][ T975] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.922984][ T975] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.933410][ T975] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 108.976183][ T975] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 109.009495][ T975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.010490][ T3519] batadv_slave_1: left promiscuous mode [ 109.044770][ T975] usb 1-1: config 0 descriptor?? [ 109.069169][ T3519] hsr_slave_0: left promiscuous mode [ 109.106908][ T3519] hsr_slave_1: left promiscuous mode [ 109.145253][ T3519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.186554][ T3519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.213026][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 109.220469][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 109.220865][ T3519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.228976][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 109.243306][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 109.250920][ T5832] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 109.258553][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 109.280026][ T3519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.300198][ T3519] veth1_macvtap: left promiscuous mode [ 109.319091][ T3519] veth0_macvtap: left promiscuous mode [ 109.331444][ T3519] veth1_vlan: left promiscuous mode [ 109.346585][ T3519] veth0_vlan: left promiscuous mode [ 109.473152][ T975] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 109.485964][ T975] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 109.678112][ T7174] input: syz0 as /devices/virtual/input/input16 [ 109.747290][ T975] usb 1-1: USB disconnect, device number 10 [ 109.807480][ T3519] team0 (unregistering): Port device team_slave_1 removed [ 109.839958][ T3519] team0 (unregistering): Port device team_slave_0 removed [ 109.998409][ T7129] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.007143][ T7129] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.015190][ T7129] bridge_slave_0: entered allmulticast mode [ 110.023924][ T7129] bridge_slave_0: entered promiscuous mode [ 110.036921][ T7129] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.045341][ T7129] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.053148][ T7129] bridge_slave_1: entered allmulticast mode [ 110.060141][ T7129] bridge_slave_1: entered promiscuous mode [ 110.133484][ T7129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.156125][ T7129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.232546][ T5832] Bluetooth: hci3: command tx timeout [ 110.262587][ T7129] team0: Port device team_slave_0 added [ 110.276489][ T7129] team0: Port device team_slave_1 added [ 110.373327][ T7129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.412182][ T7129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.486024][ T7129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.551535][ T7129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.567074][ T7129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.619803][ T7129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.836443][ T7129] hsr_slave_0: entered promiscuous mode [ 110.853291][ T7129] hsr_slave_1: entered promiscuous mode [ 110.859508][ T7129] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.882368][ T7129] Cannot create hsr debugfs directory [ 111.077209][ T7160] chnl_net:caif_netlink_parms(): no params data found [ 111.101539][ T3519] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.345364][ T3519] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.362361][ T5832] Bluetooth: hci4: command tx timeout [ 111.409788][ T7160] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.417877][ T7160] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.425316][ T7160] bridge_slave_0: entered allmulticast mode [ 111.432990][ T7160] bridge_slave_0: entered promiscuous mode [ 111.469697][ T7160] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.478850][ T7160] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.490919][ T7160] bridge_slave_1: entered allmulticast mode [ 111.521674][ T7160] bridge_slave_1: entered promiscuous mode [ 111.570863][ T3519] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.627275][ T7160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.638949][ T7160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.791354][ T7160] team0: Port device team_slave_0 added [ 111.823835][ T3519] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.887204][ T7160] team0: Port device team_slave_1 added [ 111.989606][ T7160] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.003608][ T7160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.040515][ T7160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.066190][ T7160] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.092332][ T7160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.157974][ T7160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.190877][ T7270] netlink: 4 bytes leftover after parsing attributes in process `syz.0.578'. [ 112.288896][ T7160] hsr_slave_0: entered promiscuous mode [ 112.301421][ T7160] hsr_slave_1: entered promiscuous mode [ 112.310623][ T7160] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.319607][ T5832] Bluetooth: hci3: command tx timeout [ 112.326564][ T7160] Cannot create hsr debugfs directory [ 112.356462][ T3519] bridge_slave_1: left allmulticast mode [ 112.365750][ T3519] bridge_slave_1: left promiscuous mode [ 112.371469][ T3519] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.397013][ T3519] bridge_slave_0: left allmulticast mode [ 112.403568][ T3519] bridge_slave_0: left promiscuous mode [ 112.409400][ T3519] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.500338][ T7129] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 112.644434][ T7129] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 112.712715][ T25] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 112.858356][ T3519] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.871587][ T3519] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.883307][ T25] usb 4-1: config index 0 descriptor too short (expected 1298, got 18) [ 112.891594][ T25] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 112.905515][ T25] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 112.918172][ T3519] bond0 (unregistering): Released all slaves [ 112.934813][ T25] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 112.947482][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.966969][ T25] usb 4-1: Product: syz [ 112.971341][ T25] usb 4-1: Manufacturer: syz [ 112.976778][ T25] usb 4-1: SerialNumber: syz [ 112.987678][ T25] usb 4-1: config 0 descriptor?? [ 113.072910][ T7129] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 113.097024][ T7129] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 113.428571][ T7160] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 113.442995][ T5832] Bluetooth: hci4: command tx timeout [ 113.456123][ T3519] hsr_slave_0: left promiscuous mode [ 113.473233][ T3519] hsr_slave_1: left promiscuous mode [ 113.483524][ T3519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.491531][ T3519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.503000][ T3519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.510468][ T3519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.521084][ T3519] veth1_macvtap: left promiscuous mode [ 113.529894][ T3519] veth0_macvtap: left promiscuous mode [ 113.536109][ T3519] veth1_vlan: left promiscuous mode [ 113.541520][ T3519] veth0_vlan: left promiscuous mode [ 113.600216][ T7129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.610282][ T7160] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 113.697387][ T3519] team0 (unregistering): Port device team_slave_1 removed [ 113.709870][ T3519] team0 (unregistering): Port device team_slave_0 removed [ 113.782680][ T7160] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 113.798871][ T7160] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 113.811697][ T7129] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.846440][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.853599][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.871644][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.878826][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.986155][ T7160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.025415][ T7160] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.027564][ T25] usb 4-1: Firmware version (0.0) predates our first public release. [ 114.049369][ T1109] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.056571][ T1109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.071460][ T3565] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.078636][ T3565] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.092430][ T25] usb 4-1: Please update to version 0.2 or newer [ 114.140744][ T25] usb 4-1: USB disconnect, device number 11 [ 114.285092][ T7129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.369526][ T7129] veth0_vlan: entered promiscuous mode [ 114.392791][ T5832] Bluetooth: hci3: command tx timeout [ 114.402146][ T7129] veth1_vlan: entered promiscuous mode [ 114.484569][ T7160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.505895][ T7129] veth0_macvtap: entered promiscuous mode [ 114.530472][ T7129] veth1_macvtap: entered promiscuous mode [ 114.558479][ T7129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.606241][ T7129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.642332][ T7129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.660811][ T7129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.675120][ T7129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.688004][ T7129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.700538][ T7129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.711529][ T7129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.733411][ T7129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.747519][ T7129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.758755][ T7129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.769010][ T7129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.779856][ T7129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.798286][ T7129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.826332][ T7129] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.861432][ T7129] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.876475][ T7129] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.900981][ T7129] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.000302][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.030903][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.091501][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.115844][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.136774][ T7160] veth0_vlan: entered promiscuous mode [ 115.154403][ T5935] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 115.164585][ T7160] veth1_vlan: entered promiscuous mode [ 115.227942][ T7160] veth0_macvtap: entered promiscuous mode [ 115.247914][ T7160] veth1_macvtap: entered promiscuous mode [ 115.268484][ T7160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.280738][ T7160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.291486][ T7160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.304000][ T7160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.312427][ T5935] usb 1-1: Using ep0 maxpacket: 16 [ 115.315675][ T7160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.330363][ T5935] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 115.347958][ T5935] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.347982][ T7160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.348009][ T7160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.368892][ T5935] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 115.379819][ T7160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.400484][ T7160] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.421797][ T5935] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 115.436139][ T5935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.448844][ T7160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.449110][ T5935] usb 1-1: Product: syz [ 115.467425][ T5935] usb 1-1: Manufacturer: syz [ 115.472101][ T5935] usb 1-1: SerialNumber: syz [ 115.479864][ T7160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.503440][ T7160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.518863][ T7380] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 115.528237][ T7160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.538090][ T5832] Bluetooth: hci4: command tx timeout [ 115.570233][ T7160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.591268][ T7160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.606833][ T7160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.617497][ T7160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.629993][ T7160] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.705222][ T7160] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.722604][ T7160] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.744698][ T7160] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.761669][ T7160] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.893097][ T1109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.911374][ T5935] usb 1-1: 0:2 : does not exist [ 115.921333][ T1109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.006484][ T3519] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.029904][ T3519] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.318963][ T5935] usb 1-1: 1:0: cannot get min/max values for control 2 (id 1) [ 116.350480][ T5935] usb 1-1: USB disconnect, device number 11 [ 116.385385][ T5822] udevd[5822]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 116.462352][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 116.483072][ T5832] Bluetooth: hci3: command tx timeout [ 116.614287][ T9] usb 5-1: config 0 has an invalid interface number: 104 but max is 0 [ 116.624696][ T9] usb 5-1: config 0 has no interface number 0 [ 116.631201][ T9] usb 5-1: config 0 interface 104 has no altsetting 0 [ 116.652783][ T9] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=a1.c9 [ 116.672202][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.690636][ T9] usb 5-1: Product: syz [ 116.695002][ T9] usb 5-1: Manufacturer: syz [ 116.699677][ T9] usb 5-1: SerialNumber: syz [ 116.725718][ T9] usb 5-1: config 0 descriptor?? [ 116.746381][ T9] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 116.950657][ T9] gspca_vc032x: reg_r err -71 [ 116.958024][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 116.978243][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 116.996906][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.023944][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.054308][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.059756][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.099883][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.105661][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.111275][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.132299][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.148586][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.168955][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.189173][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.217400][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.236231][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.252629][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.266119][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.280767][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 117.288641][ T9] gspca_vc032x: Unknown sensor... [ 117.318651][ T9] vc032x 5-1:0.104: probe with driver vc032x failed with error -22 [ 117.322836][ T7464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.606'. [ 117.349899][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 117.349918][ T29] audit: type=1400 audit(1737814398.664:25): lsm=SMACK fn=smack_ipc_permission action=denied subject="w" object="_" requested=w pid=7463 comm="syz.1.608" ipc_key=0 [ 117.375697][ T7464] vlan2: entered promiscuous mode [ 117.380795][ T7464] hsr0: entered promiscuous mode [ 117.382604][ T9] usb 5-1: USB disconnect, device number 8 [ 117.469507][ T7464] hsr0: left promiscuous mode [ 117.592384][ T5832] Bluetooth: hci4: command tx timeout [ 118.733205][ T5871] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 118.902626][ T5871] usb 6-1: Using ep0 maxpacket: 32 [ 118.924026][ T5871] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 118.949335][ T5871] usb 6-1: config 0 has no interface number 0 [ 118.969109][ T5871] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 118.989168][ T5871] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.001799][ T5871] usb 6-1: Product: syz [ 119.007461][ T5871] usb 6-1: Manufacturer: syz [ 119.012837][ T5871] usb 6-1: SerialNumber: syz [ 119.023128][ T5871] usb 6-1: config 0 descriptor?? [ 119.235899][ T5871] radio-si470x 6-1:0.35: this is not a si470x device. [ 119.437383][ T5871] radio-raremono 6-1:0.35: this is not Thanko's Raremono. [ 119.465552][ T5871] usb 6-1: USB disconnect, device number 2 [ 119.624974][ T25] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 119.722410][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 119.792389][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 119.799066][ T25] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 74 [ 119.811243][ T25] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 119.820584][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.830345][ T25] usb 2-1: Product: syz [ 119.834662][ T25] usb 2-1: Manufacturer: syz [ 119.839400][ T25] usb 2-1: SerialNumber: syz [ 119.846696][ T25] usb 2-1: config 0 descriptor?? [ 119.852399][ T7596] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 119.860735][ T25] hub 2-1:0.0: bad descriptor, ignoring hub [ 119.867053][ T25] hub 2-1:0.0: probe with driver hub failed with error -5 [ 119.878664][ T25] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input17 [ 119.883909][ T9] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 119.918420][ T9] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 119.940865][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 119.974549][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.018144][ T7603] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 120.046569][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 120.170802][ T25] usb 2-1: USB disconnect, device number 9 [ 120.176834][ C1] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 120.261010][ T5827] usb 4-1: USB disconnect, device number 12 [ 120.829135][ T7668] netlink: 136 bytes leftover after parsing attributes in process `syz.0.667'. [ 121.196210][ T7695] input: syz0 as /devices/virtual/input/input18 [ 121.222368][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 121.403631][ T9] usb 6-1: config index 0 descriptor too short (expected 19, got 18) [ 121.430819][ T9] usb 6-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 121.452103][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.474387][ T9] usb 6-1: config 0 descriptor?? [ 121.812468][ T25] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 121.894309][ T7730] input: syz0 as /devices/virtual/input/input19 [ 121.972333][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 121.986949][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.004722][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.019443][ T25] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 122.036988][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.055604][ T25] usb 2-1: config 0 descriptor?? [ 122.332067][ T29] audit: type=1800 audit(1737814403.644:26): pid=7751 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.687" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 122.482391][ T5901] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 122.493136][ T25] ft260 0003:0403:6030.000A: unknown main item tag 0x0 [ 122.498135][ T9] pegasus 6-1:0.0: probe with driver pegasus failed with error -71 [ 122.517519][ T9] usb 6-1: USB disconnect, device number 3 [ 122.682810][ T5901] usb 1-1: Using ep0 maxpacket: 16 [ 122.688137][ T25] ft260 0003:0403:6030.000A: chip code: 5e81 abf2 [ 122.697483][ T5901] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 122.707167][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.715249][ T5901] usb 1-1: Product: syz [ 122.719429][ T5901] usb 1-1: Manufacturer: syz [ 122.724586][ T5901] usb 1-1: SerialNumber: syz [ 122.731713][ T5901] r8152-cfgselector 1-1: Unknown version 0x0000 [ 122.738080][ T5901] r8152-cfgselector 1-1: config 0 descriptor?? [ 122.762365][ T5827] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 122.932441][ T5827] usb 5-1: Using ep0 maxpacket: 8 [ 122.940702][ T5827] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 122.950526][ T5827] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.959066][ T5827] usb 5-1: Product: syz [ 122.964610][ T5827] usb 5-1: Manufacturer: syz [ 122.969363][ T5827] usb 5-1: SerialNumber: syz [ 122.974413][ T5901] r8152-cfgselector 1-1: Unknown version 0x0000 [ 122.980813][ T5901] r8152-cfgselector 1-1: bad CDC descriptors [ 122.988328][ T5827] usb 5-1: config 0 descriptor?? [ 122.997613][ T5901] r8152-cfgselector 1-1: USB disconnect, device number 12 [ 123.108835][ T9] usb 2-1: USB disconnect, device number 10 [ 123.127081][ T54] Bluetooth: hci5: sending frame failed (-49) [ 123.133617][ T5832] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 123.199371][ T5827] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 123.744992][ T7778] tap0: tun_chr_ioctl cmd 1074025675 [ 123.750452][ T7778] tap0: persist enabled [ 123.769980][ T7778] tap0: tun_chr_ioctl cmd 1074025675 [ 123.788726][ T7778] tap0: persist disabled [ 123.817890][ T5827] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 123.839613][ T5827] usb 5-1: USB disconnect, device number 9 [ 124.344231][ T5827] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 124.408585][ T54] Bluetooth: hci5: sending frame failed (-49) [ 124.415555][ T5832] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 124.533183][ T5827] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 124.542026][ T5827] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 124.555076][ T5827] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 124.568982][ T5827] usb 2-1: config 0 interface 0 has no altsetting 0 [ 124.577301][ T5827] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 124.586751][ T5827] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 124.599546][ T5827] usb 2-1: config 0 interface 0 has no altsetting 0 [ 124.607972][ T5827] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 124.642516][ T5827] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 124.672362][ T5827] usb 2-1: config 0 interface 0 has no altsetting 0 [ 124.686956][ T5827] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 124.702501][ T5827] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 124.732457][ T5827] usb 2-1: config 0 interface 0 has no altsetting 0 [ 124.749517][ T5827] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 124.759447][ T5827] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 124.774598][ T5827] usb 2-1: config 0 interface 0 has no altsetting 0 [ 124.783467][ T5827] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 124.793285][ T5827] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 124.812477][ T5827] usb 2-1: config 0 interface 0 has no altsetting 0 [ 124.820534][ T5827] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 124.832592][ T5827] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 124.862350][ T5827] usb 2-1: config 0 interface 0 has no altsetting 0 [ 124.892905][ T5827] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 124.901989][ T5827] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 124.925139][ T5827] usb 2-1: config 0 interface 0 has no altsetting 0 [ 124.934134][ T5827] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 124.958851][ T5827] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 124.971092][ T5827] usb 2-1: Product: syz [ 124.989839][ T5827] usb 2-1: Manufacturer: syz [ 124.999889][ T5827] usb 2-1: SerialNumber: syz [ 125.042630][ T5827] usb 2-1: config 0 descriptor?? [ 125.052691][ T5827] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 125.233555][ T7854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.734'. [ 125.351335][ T5871] usb 2-1: USB disconnect, device number 11 [ 125.371843][ T5871] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 125.401183][ T7859] loop2: detected capacity change from 0 to 7 [ 125.429852][ T7859] Dev loop2: unable to read RDB block 7 [ 125.465176][ T7859] loop2: unable to read partition table [ 125.479170][ T7859] loop2: partition table beyond EOD, truncated [ 125.505349][ T7859] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 126.072333][ T5935] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 126.223908][ T5935] usb 1-1: config index 0 descriptor too short (expected 4114, got 18) [ 126.234952][ T5935] usb 1-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 126.244132][ T5935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.254059][ T5935] usb 1-1: Product: syz [ 126.258261][ T5935] usb 1-1: Manufacturer: syz [ 126.263572][ T5935] usb 1-1: SerialNumber: syz [ 126.269415][ T5935] usb 1-1: config 0 descriptor?? [ 126.880296][ T5935] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 127.081137][ T5935] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 127.091264][ T5935] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 127.101738][ T5935] asix 1-1:0.0: probe with driver asix failed with error -71 [ 127.111422][ T5935] usb 1-1: USB disconnect, device number 13 [ 127.118682][ T5822] udevd[5822]: setting mode of /dev/bus/usb/001/013 to 020664 failed: No such file or directory [ 127.130141][ T5822] udevd[5822]: setting owner of /dev/bus/usb/001/013 to uid=0, gid=0 failed: No such file or directory [ 127.682400][ T54] Bluetooth: hci5: command 0x1003 tx timeout [ 127.682466][ T5832] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 127.896261][ T7917] tipc: Started in network mode [ 127.909974][ T7917] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 127.935588][ T7917] tipc: Enabled bearer , priority 10 [ 128.167919][ T7935] program syz.1.768 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 128.997006][ T54] Bluetooth: hci5: sending frame failed (-49) [ 129.016147][ T5832] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 129.052318][ T9] tipc: Node number set to 4269801491 [ 129.652348][ T5827] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 129.708751][ T8014] syzkaller1: entered promiscuous mode [ 129.754796][ T8014] syzkaller1: entered allmulticast mode [ 129.823798][ T5827] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 129.839587][ T5827] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 129.862218][ T5827] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 129.871812][ T5827] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 129.884230][ T5827] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 129.897457][ T5827] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 129.907035][ T5827] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 129.916186][ T5827] usb 4-1: Product: syz [ 129.920599][ T5827] usb 4-1: Manufacturer: syz [ 129.939662][ T5827] cdc_wdm 4-1:1.0: skipping garbage [ 129.945767][ T5827] cdc_wdm 4-1:1.0: skipping garbage [ 129.954562][ T5827] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 129.960766][ T5827] cdc_wdm 4-1:1.0: Unknown control protocol [ 130.012309][ T5901] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 130.141528][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 130.148209][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 130.154783][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 130.161430][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 130.167846][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 130.174484][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 130.180890][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 130.187540][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 130.193999][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 130.200624][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 130.207672][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 130.214332][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 130.221214][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 130.227872][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 130.234161][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 130.240802][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 130.247303][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 130.253944][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 130.260370][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 130.267008][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 130.273477][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 130.282272][ T5827] usb 4-1: USB disconnect, device number 13 [ 130.293845][ T5901] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.306246][ T5901] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 130.333086][ T5901] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 130.344046][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.353346][ T5901] usb 1-1: Product: syz [ 130.357614][ T5901] usb 1-1: Manufacturer: syz [ 130.362322][ T5901] usb 1-1: SerialNumber: syz [ 131.383936][ T5901] cdc_ncm 1-1:1.0: bind() failure [ 131.396833][ T5901] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 131.407492][ T5901] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 131.424707][ T5901] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 131.473371][ T5901] usb 1-1: USB disconnect, device number 14 [ 131.584237][ T8092] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 132.557044][ T8164] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 132.799164][ T1157] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.877083][ T1157] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.938953][ T1157] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.952358][ T5832] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 133.017037][ T1157] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.173548][ T1157] bridge_slave_1: left allmulticast mode [ 133.179265][ T1157] bridge_slave_1: left promiscuous mode [ 133.196641][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.198764][ T1157] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.204313][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.226084][ T1157] bridge_slave_0: left allmulticast mode [ 133.242406][ T1157] bridge_slave_0: left promiscuous mode [ 133.248170][ T1157] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.400521][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 133.412906][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 133.420408][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 133.428818][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 133.446725][ T5832] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 133.456531][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 133.498921][ T1157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.535959][ T1157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.557175][ T1157] bond0 (unregistering): Released all slaves [ 133.794982][ T8207] chnl_net:caif_netlink_parms(): no params data found [ 133.868528][ T1157] hsr_slave_0: left promiscuous mode [ 133.877539][ T1157] hsr_slave_1: left promiscuous mode [ 133.887088][ T1157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.897109][ T1157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.906734][ T1157] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.916583][ T1157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.926534][ T1157] veth1_macvtap: left promiscuous mode [ 133.932653][ T1157] veth0_macvtap: left promiscuous mode [ 133.938387][ T1157] veth1_vlan: left promiscuous mode [ 133.944078][ T1157] veth0_vlan: left promiscuous mode [ 134.076577][ T1157] team0 (unregistering): Port device team_slave_1 removed [ 134.089587][ T1157] team0 (unregistering): Port device team_slave_0 removed [ 134.166047][ T8207] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.175422][ T8207] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.183702][ T8207] bridge_slave_0: entered allmulticast mode [ 134.190638][ T8207] bridge_slave_0: entered promiscuous mode [ 134.200808][ T8207] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.211533][ T8207] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.221416][ T8207] bridge_slave_1: entered allmulticast mode [ 134.229955][ T8207] bridge_slave_1: entered promiscuous mode [ 134.261929][ T8207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.274847][ T8207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.307102][ T8207] team0: Port device team_slave_0 added [ 134.314930][ T8207] team0: Port device team_slave_1 added [ 134.341753][ T8207] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.351817][ T8207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.385418][ T8207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.399664][ T8207] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.407033][ T8207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.435690][ T8207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.486116][ T8207] hsr_slave_0: entered promiscuous mode [ 134.496084][ T8207] hsr_slave_1: entered promiscuous mode [ 134.510421][ T8207] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.518562][ T8207] Cannot create hsr debugfs directory [ 134.607445][ T8207] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 134.633952][ T8207] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 134.643886][ T8207] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 134.656063][ T8207] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 134.685646][ T8207] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.692911][ T8207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.700365][ T8207] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.707538][ T8207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.765259][ T8207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.779255][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.788129][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.805107][ T8207] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.819114][ T3565] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.826393][ T3565] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.862255][ T3565] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.869370][ T3565] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.888732][ T8207] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 135.026275][ T8207] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.211576][ T8207] veth0_vlan: entered promiscuous mode [ 135.228800][ T8207] veth1_vlan: entered promiscuous mode [ 135.265905][ T8207] veth0_macvtap: entered promiscuous mode [ 135.275331][ T8207] veth1_macvtap: entered promiscuous mode [ 135.293454][ T8207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.306747][ T8207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.317876][ T8207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.330757][ T8207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.340846][ T8207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.351344][ T8207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.361389][ T8207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.372198][ T8207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.383729][ T8207] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.401727][ T8207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.413483][ T8207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.423403][ T8207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.434042][ T8207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.444912][ T8207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.455500][ T8207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.466147][ T8207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.477062][ T8207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.487970][ T8207] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.501408][ T8207] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.510880][ T8207] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.512466][ T54] Bluetooth: hci4: command tx timeout [ 135.528024][ T8207] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.536963][ T8207] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.588442][ T3565] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.604434][ T3565] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.624181][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.632216][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.734884][ T8362] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 136.845508][ T8367] nullb0: AHDI p1 p2 [ 136.849864][ T8367] nullb0: p1 start 795240812 is beyond EOD, truncated [ 136.942488][ T5827] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 137.132528][ T5827] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.147541][ T5827] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.158527][ T5827] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 137.171581][ T5827] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 137.181468][ T5827] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.191215][ T5827] usb 2-1: config 0 descriptor?? [ 137.592526][ T5832] Bluetooth: hci4: command tx timeout [ 137.608183][ T5827] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 137.622706][ T5827] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 137.875781][ T5901] usb 2-1: USB disconnect, device number 12 [ 138.632562][ T5832] Bluetooth: hci5: command 0x1003 tx timeout [ 138.632621][ T54] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 139.302762][ T5901] kernel write not supported for file bpf-prog (pid: 5901 comm: kworker/1:6) [ 139.673972][ T54] Bluetooth: hci4: command tx timeout [ 139.712112][ T8479] syzkaller1: entered promiscuous mode [ 139.741340][ T8479] syzkaller1: entered allmulticast mode [ 140.169643][ T8508] netlink: 'syz.0.907': attribute type 1 has an invalid length. [ 140.212407][ T5901] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 140.292779][ T5827] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 140.384070][ T5901] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.395825][ T5901] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 140.407848][ T5901] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 140.422449][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 140.440870][ T5901] usb 2-1: SerialNumber: syz [ 140.463791][ T5827] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.477460][ T5827] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.488279][ T5827] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 140.498833][ T5827] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.520087][ T8529] ebt_among: src integrity fail: 300 [ 140.557519][ T5827] usb 5-1: config 0 descriptor?? [ 140.674916][ T5901] usb 2-1: 0:2 : does not exist [ 140.702311][ T5901] usb 2-1: unit 64 not found! [ 140.736771][ T5901] usb 2-1: USB disconnect, device number 13 [ 140.954265][ T5822] udevd[5822]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 140.994229][ T8557] syzkaller1: entered promiscuous mode [ 141.000204][ T8557] syzkaller1: entered allmulticast mode [ 141.007389][ T5827] hid-steam 0003:28DE:1142.000C: unknown main item tag 0x0 [ 141.019159][ T5827] hid-steam 0003:28DE:1142.000C: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 141.082616][ T5827] hid-steam 0003:28DE:1142.000C: Steam wireless receiver connected [ 141.096181][ T5827] hid-steam 0003:28DE:1142.000D: unknown main item tag 0x0 [ 141.115836][ T5827] hid-steam 0003:28DE:1142.000D: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 141.210612][ T5827] usb 5-1: USB disconnect, device number 10 [ 141.235093][ T5827] hid-steam 0003:28DE:1142.000C: Steam wireless receiver disconnected [ 141.752657][ T54] Bluetooth: hci4: command tx timeout [ 141.769686][ T8595] mkiss: ax0: crc mode is auto. [ 141.815817][ T8596] netlink: 4 bytes leftover after parsing attributes in process `syz.0.940'. [ 142.119355][ T8619] netlink: 284 bytes leftover after parsing attributes in process `syz.4.949'. [ 142.412321][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 142.421933][ T8637] netlink: 4 bytes leftover after parsing attributes in process `syz.6.957'. [ 142.562685][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 142.576770][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.601601][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.625532][ T9] usb 1-1: New USB device found, idVendor=05a4, idProduct=8003, bcdDevice= 0.00 [ 142.626325][ T8647] input: syz0 as /devices/virtual/input/input21 [ 142.644377][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.669676][ T9] usb 1-1: config 0 descriptor?? [ 143.134260][ T9] ortek 0003:05A4:8003.000E: unknown main item tag 0x2 [ 143.141201][ T9] ortek 0003:05A4:8003.000E: unknown main item tag 0x0 [ 143.178361][ T9] ortek 0003:05A4:8003.000E: hidraw0: USB HID v0.00 Device [HID 05a4:8003] on usb-dummy_hcd.0-1/input0 [ 143.339144][ T9] usb 1-1: USB disconnect, device number 15 [ 143.852353][ T5901] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 144.024768][ T5901] usb 4-1: Using ep0 maxpacket: 32 [ 144.050797][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.063926][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.096580][ T5901] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 144.119400][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.134180][ T5901] usb 4-1: config 0 descriptor?? [ 144.347317][ T8749] vcan0: tx drop: invalid da for name 0x0000000000000004 [ 144.582759][ T5901] savu 0003:1E7D:2D5A.000F: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 144.606962][ T29] audit: type=1326 audit(1737814425.924:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8760 comm="syz.0.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1b78cd29 code=0x7ffc0000 [ 144.609915][ T8763] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 144.657634][ T8763] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 144.687823][ T29] audit: type=1326 audit(1737814425.924:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8760 comm="syz.0.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1b78cd29 code=0x7ffc0000 [ 144.735567][ T29] audit: type=1326 audit(1737814425.964:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8760 comm="syz.0.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f6f1b78cd29 code=0x7ffc0000 [ 144.758851][ T29] audit: type=1326 audit(1737814425.964:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8760 comm="syz.0.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1b78cd29 code=0x7ffc0000 [ 144.794560][ T29] audit: type=1326 audit(1737814425.964:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8760 comm="syz.0.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1b78cd29 code=0x7ffc0000 [ 144.852965][ T29] audit: type=1326 audit(1737814425.994:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8760 comm="syz.0.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6f1b78cd29 code=0x7ffc0000 [ 144.854594][ T5901] usb 4-1: USB disconnect, device number 14 [ 144.889676][ T29] audit: type=1326 audit(1737814425.994:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8760 comm="syz.0.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1b78cd29 code=0x7ffc0000 [ 144.935966][ T29] audit: type=1326 audit(1737814425.994:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8760 comm="syz.0.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1b78cd29 code=0x7ffc0000 [ 144.960035][ T29] audit: type=1326 audit(1737814425.994:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8760 comm="syz.0.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=301 compat=0 ip=0x7f6f1b78cd29 code=0x7ffc0000 [ 144.985037][ T29] audit: type=1326 audit(1737814425.994:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8760 comm="syz.0.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1b78cd29 code=0x7ffc0000 [ 145.162370][ T25] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 145.325212][ T25] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 145.334522][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.354623][ T25] usb 7-1: config 0 descriptor?? [ 145.369187][ T25] cp210x 7-1:0.0: cp210x converter detected [ 145.768429][ T25] cp210x 7-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 145.810294][ T25] usb 7-1: cp210x converter now attached to ttyUSB0 [ 146.009191][ T25] usb 7-1: USB disconnect, device number 2 [ 146.033010][ T25] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 146.093396][ T25] cp210x 7-1:0.0: device disconnected [ 146.518595][ T8842] netlink: 'syz.3.1042': attribute type 16 has an invalid length. [ 146.532339][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 146.540839][ T8842] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.1042'. [ 146.692361][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 146.698990][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 146.712184][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 146.772370][ T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 146.787952][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.825764][ T9] usb 2-1: config 0 descriptor?? [ 147.267197][ T9] kovaplus 0003:1E7D:2D50.0010: unknown main item tag 0x0 [ 147.290557][ T9] kovaplus 0003:1E7D:2D50.0010: unknown main item tag 0x0 [ 147.315937][ T9] kovaplus 0003:1E7D:2D50.0010: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.1-1/input0 [ 147.772302][ T5871] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 147.867600][ T9] kovaplus 0003:1E7D:2D50.0010: couldn't init struct kovaplus_device [ 147.877843][ T9] kovaplus 0003:1E7D:2D50.0010: couldn't install mouse [ 147.886904][ T9] kovaplus 0003:1E7D:2D50.0010: probe with driver kovaplus failed with error -71 [ 147.914432][ T9] usb 2-1: USB disconnect, device number 14 [ 147.932400][ T5871] usb 7-1: Using ep0 maxpacket: 32 [ 147.940896][ T5871] usb 7-1: config 0 has an invalid interface number: 35 but max is 0 [ 147.977587][ T5871] usb 7-1: config 0 has no interface number 0 [ 147.999585][ T5871] usb 7-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 148.022348][ T5871] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.030490][ T5871] usb 7-1: Product: syz [ 148.041436][ T5871] usb 7-1: Manufacturer: syz [ 148.052516][ T5871] usb 7-1: SerialNumber: syz [ 148.064756][ T5871] usb 7-1: config 0 descriptor?? [ 148.079228][ T5871] radio-si470x 7-1:0.35: could not find interrupt in endpoint [ 148.092587][ T5871] radio-si470x 7-1:0.35: probe with driver radio-si470x failed with error -5 [ 148.289824][ T3519] tipc: Subscription rejected, illegal request [ 148.304707][ T5871] radio-raremono 7-1:0.35: this is not Thanko's Raremono. [ 148.319263][ T5871] usbhid 7-1:0.35: couldn't find an input interrupt endpoint [ 148.341272][ T5871] usb 7-1: USB disconnect, device number 3 [ 148.802703][ T25] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 148.973657][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 148.987757][ T8952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1082'. [ 148.987808][ T25] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 149.040712][ T25] usb 4-1: config 0 has no interface number 0 [ 149.054745][ T25] usb 4-1: config 0 interface 184 has no altsetting 0 [ 149.086196][ T25] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 149.111729][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.143567][ T25] usb 4-1: Product: syz [ 149.157590][ T25] usb 4-1: Manufacturer: syz [ 149.174540][ T25] usb 4-1: SerialNumber: syz [ 149.195126][ T25] usb 4-1: config 0 descriptor?? [ 149.208494][ T25] smsc75xx v1.0.0 [ 149.431382][ T8980] 9pnet: p9_errstr2errno: server reported unknown error 18446 [ 149.784093][ T9005] input: syz1 as /devices/virtual/input/input22 [ 149.817412][ T25] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 149.857707][ T8989] binder: 8988:8989 ioctl c0306201 20001a80 returned -14 [ 149.858743][ T25] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 149.915888][ T9012] netlink: 165 bytes leftover after parsing attributes in process `syz.4.1102'. [ 150.123004][ T25] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 150.155911][ T25] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 150.197550][ T25] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 150.215985][ T25] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 150.237867][ T9037] kernel read not supported for file /!selinuxselinux (pid: 9037 comm: syz.4.1111) [ 150.249496][ T25] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 150.264002][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 150.264020][ T29] audit: type=1800 audit(1737814431.584:42): pid=9037 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.1111" name="!selinuxselinux" dev="mqueue" ino=24676 res=0 errno=0 [ 150.302426][ T25] usb 4-1: USB disconnect, device number 15 [ 150.436165][ T9051] netlink: 'syz.1.1114': attribute type 11 has an invalid length. [ 150.443667][ T9052] tap0: tun_chr_ioctl cmd 1074025677 [ 150.453006][ T9052] tap0: linktype set to 270 [ 150.802333][ T5868] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 150.842434][ T9] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 150.953069][ T25] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 150.963931][ T5868] usb 2-1: Using ep0 maxpacket: 8 [ 150.975960][ T5868] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 150.997542][ T5868] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 151.021230][ T9] usb 7-1: not running at top speed; connect to a high speed hub [ 151.037718][ T5868] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 151.050195][ T5868] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 151.065320][ T9] usb 7-1: config 0 has an invalid interface number: 243 but max is 0 [ 151.083658][ T9] usb 7-1: config 0 has no interface number 0 [ 151.090022][ T5868] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 151.099417][ T9] usb 7-1: config 0 interface 243 has no altsetting 0 [ 151.106788][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.118891][ T9] usb 7-1: New USB device found, idVendor=13d8, idProduct=0002, bcdDevice=ec.26 [ 151.132697][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 151.135466][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.147122][ T9] usb 7-1: Product: syz [ 151.148431][ T25] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 151.163117][ T9] usb 7-1: Manufacturer: syz [ 151.167798][ T9] usb 7-1: SerialNumber: syz [ 151.184173][ T9] usb 7-1: config 0 descriptor?? [ 151.256075][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 151.281154][ T25] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 151.310129][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.324342][ T25] usb 4-1: Product: syz [ 151.334643][ T25] usb 4-1: Manufacturer: syz [ 151.335180][ T5868] usb 2-1: GET_CAPABILITIES returned 0 [ 151.343948][ T25] usb 4-1: SerialNumber: syz [ 151.352635][ T5868] usbtmc 2-1:16.0: can't read capabilities [ 151.365970][ T25] usb 4-1: config 0 descriptor?? [ 151.401324][ T25] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 151.408956][ T9] usb 7-1: selecting invalid altsetting 3 [ 151.425121][ T9] comedi comedi0: could not set alternate setting 3 in high speed [ 151.428147][ T25] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 151.451086][ T9] usbdux 7-1:0.243: driver 'usbdux' failed to auto-configure device. [ 151.470175][ T9] usbdux 7-1:0.243: probe with driver usbdux failed with error -22 [ 151.501902][ T9] usb 7-1: USB disconnect, device number 4 [ 151.538828][ T5868] usb 2-1: USB disconnect, device number 15 [ 152.021518][ T25] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 152.029366][ T25] em28xx 4-1:0.0: Config register raw data: 0x41 [ 152.250990][ T9] usb 4-1: USB disconnect, device number 16 [ 152.263512][ T9] em28xx 4-1:0.0: Disconnecting em28xx [ 152.287759][ T9] em28xx 4-1:0.0: Freeing device [ 152.332314][ T5868] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 152.506156][ T5868] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.519757][ T5868] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.530645][ T5868] usb 7-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 152.541566][ T5868] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.563873][ T5868] usb 7-1: config 0 descriptor?? [ 152.739591][ T9178] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1146'. [ 152.751004][ T9178] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1146'. [ 152.979705][ T5868] itetech 0003:06CB:73F5.0011: unbalanced collection at end of report description [ 152.992746][ T5868] itetech 0003:06CB:73F5.0011: probe with driver itetech failed with error -22 [ 153.076854][ T9204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1154'. [ 153.180805][ T5871] usb 7-1: USB disconnect, device number 5 [ 153.662388][ T25] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 153.816326][ T9245] bond0: entered promiscuous mode [ 153.821485][ T9245] bond_slave_0: entered promiscuous mode [ 153.827965][ T9245] bond_slave_1: entered promiscuous mode [ 153.836759][ T25] usb 5-1: config 0 has an invalid interface number: 150 but max is 0 [ 153.851789][ T25] usb 5-1: config 0 has no interface number 0 [ 153.862913][ T25] usb 5-1: New USB device found, idVendor=2899, idProduct=012c, bcdDevice= 2.2c [ 153.881372][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.898875][ T25] usb 5-1: Product: syz [ 153.907846][ T25] usb 5-1: Manufacturer: syz [ 153.918131][ T25] usb 5-1: SerialNumber: syz [ 153.931918][ T25] usb 5-1: config 0 descriptor?? [ 154.032034][ T9255] input: syz1 as /devices/virtual/input/input23 [ 154.145682][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 154.156850][ T25] gspca_main: spca500-2.14.0 probing 2899:012c [ 154.166511][ T25] usb 5-1: USB disconnect, device number 11 [ 154.222299][ T5827] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 154.402562][ T5827] usb 7-1: Using ep0 maxpacket: 16 [ 154.409400][ T5827] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.421371][ T5827] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.431409][ T5827] usb 7-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 154.440569][ T5827] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.450193][ T5827] usb 7-1: config 0 descriptor?? [ 154.512375][ T9] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 154.521269][ T9277] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1185'. [ 154.627111][ T9283] sp0: Synchronizing with TNC [ 154.691352][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.707060][ T9] usb 4-1: New USB device found, idVendor=06cd, idProduct=0108, bcdDevice=bb.20 [ 154.718850][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.729699][ T9] usb 4-1: Product: syz [ 154.735999][ T9] usb 4-1: Manufacturer: syz [ 154.740670][ T9] usb 4-1: SerialNumber: syz [ 154.752970][ T9] usb 4-1: config 0 descriptor?? [ 154.765110][ T9] keyspan 4-1:0.0: Keyspan 1 port adapter converter detected [ 154.782776][ T9] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 87 [ 154.790524][ T9] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 7 [ 154.821485][ T9] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 154.854396][ T9] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 154.862067][ T9] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 154.869010][ T5827] input: HID 05ac:8241 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:05AC:8241.0012/input/input24 [ 154.894790][ T9] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 85 [ 154.914664][ T9] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 5 [ 154.949875][ T9] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 154.983341][ T9] usb 4-1: USB disconnect, device number 17 [ 155.001841][ T9] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 155.002873][ T5827] appleir 0003:05AC:8241.0012: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.6-1/input0 [ 155.023143][ T9] keyspan 4-1:0.0: device disconnected [ 155.075665][ T5868] usb 7-1: USB disconnect, device number 6 [ 155.242490][ T5818] syz-executor (5818) used greatest stack depth: 19600 bytes left [ 155.272073][ T3565] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.358845][ T3565] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.453447][ T3565] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.564123][ T3565] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.699688][ T9314] syzkaller1: entered promiscuous mode [ 155.710926][ T9314] syzkaller1: entered allmulticast mode [ 155.881174][ T3565] bridge_slave_1: left allmulticast mode [ 155.907986][ T3565] bridge_slave_1: left promiscuous mode [ 155.942959][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 155.953033][ T3565] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.961658][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 155.969865][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 155.978108][ T3565] bridge_slave_0: left allmulticast mode [ 155.985446][ T3565] bridge_slave_0: left promiscuous mode [ 155.991292][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 155.999366][ T3565] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.006921][ T5832] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 156.014806][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 156.156039][ T9336] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 156.240537][ T9330] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 156.576972][ T3565] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.594510][ T3565] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.605612][ T3565] bond0 (unregistering): Released all slaves [ 156.662737][ T9371] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 156.734996][ T9373] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 157.051536][ T9393] gretap0: entered promiscuous mode [ 157.057681][ T9393] vlan2: entered promiscuous mode [ 157.064644][ T9393] gretap0: left promiscuous mode [ 158.072631][ T5832] Bluetooth: hci0: command tx timeout [ 160.152499][ T5832] Bluetooth: hci0: command tx timeout [ 162.232520][ T5832] Bluetooth: hci0: command tx timeout [ 164.312450][ T5832] Bluetooth: hci0: command tx timeout [ 165.295939][ T9439] loop2: detected capacity change from 0 to 7 [ 165.302979][ T9439] Dev loop2: unable to read RDB block 7 [ 165.308564][ T9439] loop2: unable to read partition table [ 165.314782][ T9439] loop2: partition table beyond EOD, truncated [ 165.321007][ T9439] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 172.859473][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 172.867719][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 172.876018][ T54] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 172.877312][ T5819] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 172.883321][ T54] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 172.891407][ T5819] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 172.897799][ T54] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 172.905098][ T5819] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 172.912193][ T54] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 172.918763][ T5819] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 172.926302][ T54] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 172.940977][ T5832] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 173.289711][ T5832] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 173.297083][ T5832] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 173.304584][ T5832] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 173.312764][ T5832] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 173.320325][ T5832] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 173.327659][ T5832] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 174.952491][ T5829] Bluetooth: hci5: command tx timeout [ 175.032701][ T5829] Bluetooth: hci6: command tx timeout [ 175.352426][ T5829] Bluetooth: hci7: command tx timeout [ 177.032523][ T5829] Bluetooth: hci5: command tx timeout [ 177.112532][ T5829] Bluetooth: hci6: command tx timeout [ 177.432482][ T5829] Bluetooth: hci7: command tx timeout [ 179.112442][ T5829] Bluetooth: hci5: command tx timeout [ 179.202437][ T5829] Bluetooth: hci6: command tx timeout [ 179.512426][ T5829] Bluetooth: hci7: command tx timeout [ 180.805937][ T5832] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 180.815103][ T5832] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 180.823159][ T5832] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 180.831248][ T5832] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 180.839082][ T5832] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 180.846506][ T5832] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 181.192707][ T5832] Bluetooth: hci5: command tx timeout [ 181.272495][ T5832] Bluetooth: hci6: command tx timeout [ 181.592425][ T5832] Bluetooth: hci7: command tx timeout [ 182.872401][ T5832] Bluetooth: hci8: command tx timeout [ 184.952535][ T5832] Bluetooth: hci8: command tx timeout [ 187.032568][ T5832] Bluetooth: hci8: command tx timeout [ 189.112422][ T5832] Bluetooth: hci8: command tx timeout [ 194.638251][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.644975][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.722416][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 196.726974][ T5819] Bluetooth: hci2: command 0x0406 tx timeout [ 215.886049][ T5829] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 215.896242][ T5829] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 215.903576][ T5829] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 215.911372][ T5829] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 215.919442][ T5829] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 215.926710][ T5829] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 217.992460][ T5832] Bluetooth: hci9: command tx timeout [ 220.072411][ T5832] Bluetooth: hci9: command tx timeout [ 222.152524][ T5832] Bluetooth: hci9: command tx timeout [ 224.232448][ T5832] Bluetooth: hci9: command tx timeout [ 232.552428][ T5829] Bluetooth: hci3: command 0x0406 tx timeout [ 232.940031][ T5819] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 232.947811][ T5819] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 232.956592][ T5819] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 232.958083][ T54] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 232.964741][ T5819] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 232.971277][ T54] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 232.981127][ T5819] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 232.989978][ T54] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 232.992804][ T5819] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 232.999866][ T54] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 233.007179][ T5819] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 233.017641][ T54] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 233.377407][ T5819] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 233.384992][ T5819] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 233.392771][ T5819] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 233.400749][ T5819] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 233.408744][ T5819] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 233.416207][ T5819] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 235.032422][ T5819] Bluetooth: hci10: command tx timeout [ 235.032871][ T5829] Bluetooth: hci11: command tx timeout [ 235.432461][ T5829] Bluetooth: hci12: command tx timeout [ 237.112535][ T5819] Bluetooth: hci11: command tx timeout [ 237.118874][ T5829] Bluetooth: hci10: command tx timeout [ 237.512518][ T5829] Bluetooth: hci12: command tx timeout [ 239.192542][ T5819] Bluetooth: hci10: command tx timeout [ 239.195378][ T5829] Bluetooth: hci11: command tx timeout [ 239.592404][ T5829] Bluetooth: hci12: command tx timeout [ 240.882441][ T5819] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 240.889867][ T5819] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 240.897803][ T5819] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 240.906155][ T5819] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 240.913941][ T5819] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 240.921731][ T5819] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 241.272559][ T5819] Bluetooth: hci11: command tx timeout [ 241.282413][ T5819] Bluetooth: hci10: command tx timeout [ 241.672466][ T5819] Bluetooth: hci12: command tx timeout [ 242.962546][ T5819] Bluetooth: hci13: command tx timeout [ 245.032406][ T5819] Bluetooth: hci13: command tx timeout [ 247.112477][ T5819] Bluetooth: hci13: command tx timeout [ 249.192470][ T5819] Bluetooth: hci13: command tx timeout [ 256.078934][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.085586][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.152355][ T5829] Bluetooth: hci4: command 0x0406 tx timeout [ 275.974935][ T5829] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 275.986691][ T5829] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 275.994525][ T5829] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 276.002842][ T5829] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 276.010453][ T5829] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 276.018077][ T5829] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 278.073021][ T5819] Bluetooth: hci14: command tx timeout [ 278.632416][ T5819] Bluetooth: hci0: command 0x0406 tx timeout [ 280.152489][ T5829] Bluetooth: hci14: command tx timeout [ 282.232406][ T5829] Bluetooth: hci14: command tx timeout [ 284.312397][ T5829] Bluetooth: hci14: command tx timeout [ 293.588107][ T5819] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 293.595588][ T5819] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 293.603743][ T5819] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 293.611502][ T5819] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 293.619313][ T5819] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 293.632333][ T5819] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 293.647125][ T5829] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 293.655919][ T5829] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 293.663462][ T5829] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 293.671186][ T5829] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 293.682894][ T5829] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 293.690295][ T5829] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 293.736075][ T5819] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 293.744164][ T5819] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 293.751534][ T5819] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 293.759760][ T5819] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 293.767408][ T5819] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 293.774849][ T5819] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 295.672478][ T5819] Bluetooth: hci15: command tx timeout [ 295.754599][ T5819] Bluetooth: hci16: command tx timeout [ 295.832372][ T5819] Bluetooth: hci17: command tx timeout [ 297.752366][ T5839] Bluetooth: hci15: command tx timeout [ 297.833043][ T5839] Bluetooth: hci16: command tx timeout [ 297.912370][ T5839] Bluetooth: hci17: command tx timeout [ 299.113387][ T5839] Bluetooth: hci5: command 0x0406 tx timeout [ 299.116237][ T5134] Bluetooth: hci6: command 0x0406 tx timeout [ 299.119540][ T5832] Bluetooth: hci7: command 0x0406 tx timeout [ 299.832469][ T5829] Bluetooth: hci15: command tx timeout [ 299.912436][ T5829] Bluetooth: hci16: command tx timeout [ 299.992387][ T5829] Bluetooth: hci17: command tx timeout [ 301.464549][ T5819] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 301.471967][ T5819] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 301.479932][ T5819] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 301.488285][ T5819] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 301.495964][ T5819] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 301.503568][ T5819] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 301.912456][ T5819] Bluetooth: hci15: command tx timeout [ 301.992358][ T5819] Bluetooth: hci16: command tx timeout [ 302.072342][ T5819] Bluetooth: hci17: command tx timeout [ 303.512331][ T5829] Bluetooth: hci18: command tx timeout [ 304.232408][ T5829] Bluetooth: hci8: command 0x0406 tx timeout [ 305.592331][ T5819] Bluetooth: hci18: command tx timeout [ 307.672341][ T5819] Bluetooth: hci18: command tx timeout [ 309.752296][ T5819] Bluetooth: hci18: command tx timeout [ 312.393849][ T30] INFO: task kworker/0:1:9 blocked for more than 143 seconds. [ 312.401375][ T30] Not tainted 6.13.0-syzkaller-07078-gb46c89c08f41 #0 [ 312.408776][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 312.423908][ T30] task:kworker/0:1 state:D stack:20336 pid:9 tgid:9 ppid:2 flags:0x00004000 [ 312.434588][ T30] Workqueue: events disconnect_work [ 312.440003][ T30] Call Trace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 312.443409][ T30] [ 312.446502][ T30] __schedule+0x181a/0x4b90 [ 312.451057][ T30] ? schedule+0x90/0x320 [ 312.455397][ T30] ? schedule+0x90/0x320 [ 312.459668][ T30] ? schedule+0x90/0x320 [ 312.493765][ T30] ? __pfx___schedule+0x10/0x10 [ 312.498687][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 312.506867][ T30] ? __pfx_lock_release+0x10/0x10 [ 312.511956][ T30] ? kick_pool+0x1bd/0x620 [ 312.516926][ T30] ? schedule+0x90/0x320 [ 312.521205][ T30] ? rcu_is_watching+0x15/0xb0 [ 312.526083][ T30] ? schedule+0x90/0x320 [ 312.530361][ T30] schedule+0x14b/0x320 [ 312.534665][ T30] schedule_preempt_disabled+0x13/0x30 [ 312.540169][ T30] __mutex_lock+0x817/0x1010 [ 312.544836][ T30] ? __mutex_lock+0x602/0x1010 [ 312.549625][ T30] ? disconnect_work+0x9d/0x250 [ 312.554530][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 312.559588][ T30] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 312.565670][ T30] ? debug_object_deactivate+0x2d5/0x390 [ 312.571326][ T30] ? __pfx_debug_object_deactivate+0x10/0x10 [ 312.577437][ T30] ? cfg80211_beaconing_iface_active+0x188/0x3b0 [ 312.583845][ T30] disconnect_work+0x9d/0x250 [ 312.588561][ T30] ? process_scheduled_works+0x976/0x1840 [ 312.594407][ T30] process_scheduled_works+0xa66/0x1840 [ 312.600401][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 312.606439][ T30] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 312.612010][ T30] ? assign_work+0x364/0x3d0 [ 312.616649][ T30] worker_thread+0x870/0xd30 [ 312.621685][ T30] ? __kthread_parkme+0x169/0x1d0 [ 312.626832][ T30] ? __pfx_worker_thread+0x10/0x10 [ 312.631968][ T30] kthread+0x7a9/0x920 [ 312.636193][ T30] ? __pfx_kthread+0x10/0x10 [ 312.641277][ T30] ? __pfx_worker_thread+0x10/0x10 [ 312.646468][ T30] ? __pfx_kthread+0x10/0x10 [ 312.651098][ T30] ? __pfx_kthread+0x10/0x10 [ 312.655765][ T30] ? __pfx_kthread+0x10/0x10 [ 312.660382][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 312.665645][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 312.670865][ T30] ? __pfx_kthread+0x10/0x10 [ 312.675529][ T30] ret_from_fork+0x4b/0x80 [ 312.679968][ T30] ? __pfx_kthread+0x10/0x10 [ 312.684613][ T30] ret_from_fork_asm+0x1a/0x30 [ 312.689403][ T30] [ 312.692497][ T30] INFO: task kworker/u8:1:12 blocked for more than 143 seconds. [ 312.700430][ T30] Not tainted 6.13.0-syzkaller-07078-gb46c89c08f41 #0 [ 312.707800][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 312.716637][ T30] task:kworker/u8:1 state:D stack:22288 pid:12 tgid:12 ppid:2 flags:0x00004000 [ 312.727369][ T30] Workqueue: events_unbound linkwatch_event [ 312.733353][ T30] Call Trace: [ 312.736691][ T30] [ 312.739623][ T30] __schedule+0x181a/0x4b90 [ 312.744208][ T30] ? schedule+0x90/0x320 [ 312.748479][ T30] ? schedule+0x90/0x320 [ 312.752760][ T30] ? __pfx___schedule+0x10/0x10 [ 312.757631][ T30] ? __pfx_lock_release+0x10/0x10 [ 312.762719][ T30] ? rcu_is_watching+0x15/0xb0 [ 312.767519][ T30] ? kthread_data+0x52/0xd0 [ 312.772045][ T30] ? schedule+0x90/0x320 [ 312.776360][ T30] ? wq_worker_sleeping+0x66/0x240 [ 312.781512][ T30] ? schedule+0x90/0x320 [ 312.785812][ T30] schedule+0x14b/0x320 [ 312.789987][ T30] schedule_preempt_disabled+0x13/0x30 [ 312.795568][ T30] __mutex_lock+0x817/0x1010 [ 312.800489][ T30] ? __mutex_lock+0x602/0x1010 [ 312.805334][ T30] ? linkwatch_event+0xe/0x60 [ 312.810037][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 312.815104][ T30] ? __pfx_debug_object_deactivate+0x10/0x10 [ 312.821111][ T30] ? rcu_is_watching+0x15/0xb0 [ 312.826433][ T30] ? process_scheduled_works+0x976/0x1840 [ 312.832254][ T30] linkwatch_event+0xe/0x60 [ 312.836808][ T30] process_scheduled_works+0xa66/0x1840 [ 312.842484][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 312.848494][ T30] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 312.854118][ T30] ? assign_work+0x364/0x3d0 [ 312.858731][ T30] worker_thread+0x870/0xd30 [ 312.863385][ T30] ? __kthread_parkme+0x169/0x1d0 [ 312.868432][ T30] ? __pfx_worker_thread+0x10/0x10 [ 312.873606][ T30] kthread+0x7a9/0x920 [ 312.877704][ T30] ? __pfx_kthread+0x10/0x10 [ 312.882361][ T30] ? __pfx_worker_thread+0x10/0x10 [ 312.887503][ T30] ? __pfx_kthread+0x10/0x10 [ 312.892122][ T30] ? __pfx_kthread+0x10/0x10 [ 312.896792][ T30] ? __pfx_kthread+0x10/0x10 [ 312.901414][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 312.907065][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 312.912397][ T30] ? __pfx_kthread+0x10/0x10 [ 312.917034][ T30] ret_from_fork+0x4b/0x80 [ 312.921457][ T30] ? __pfx_kthread+0x10/0x10 [ 312.926594][ T30] ret_from_fork_asm+0x1a/0x30 [ 312.931415][ T30] [ 312.934599][ T30] INFO: task kworker/u8:6:1109 blocked for more than 143 seconds. [ 312.942674][ T30] Not tainted 6.13.0-syzkaller-07078-gb46c89c08f41 #0 [ 312.949980][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 312.958702][ T30] task:kworker/u8:6 state:D stack:22096 pid:1109 tgid:1109 ppid:2 flags:0x00004000 [ 312.968950][ T30] Workqueue: cfg80211 cfg80211_dfs_channels_update_work [ 312.975942][ T30] Call Trace: [ 312.979233][ T30] [ 312.982211][ T30] __schedule+0x181a/0x4b90 [ 312.986737][ T30] ? schedule+0x90/0x320 [ 312.990975][ T30] ? schedule+0x90/0x320 [ 312.995280][ T30] ? __pfx___schedule+0x10/0x10 [ 313.000153][ T30] ? __pfx_lock_release+0x10/0x10 [ 313.005611][ T30] ? rcu_is_watching+0x15/0xb0 [ 313.010425][ T30] ? kthread_data+0x52/0xd0 [ 313.015016][ T30] ? schedule+0x90/0x320 [ 313.019290][ T30] ? wq_worker_sleeping+0x66/0x240 [ 313.024463][ T30] ? schedule+0x90/0x320 [ 313.029120][ T30] schedule+0x14b/0x320 [ 313.033704][ T30] schedule_preempt_disabled+0x13/0x30 [ 313.039261][ T30] __mutex_lock+0x817/0x1010 [ 313.043902][ T30] ? __mutex_lock+0x602/0x1010 [ 313.048719][ T30] ? cfg80211_dfs_channels_update_work+0xbf/0x610 [ 313.055196][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 313.060286][ T30] ? rcu_is_watching+0x15/0xb0 [ 313.065118][ T30] cfg80211_dfs_channels_update_work+0xbf/0x610 [ 313.071390][ T30] ? debug_object_deactivate+0x2d5/0x390 [ 313.077132][ T30] ? __pfx_lock_release+0x10/0x10 [ 313.082263][ T30] ? __pfx_debug_object_deactivate+0x10/0x10 [ 313.088259][ T30] ? __pfx_cfg80211_dfs_channels_update_work+0x10/0x10 [ 313.095178][ T30] ? rcu_is_watching+0x15/0xb0 [ 313.099975][ T30] ? process_scheduled_works+0x976/0x1840 [ 313.105755][ T30] process_scheduled_works+0xa66/0x1840 [ 313.111650][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 313.117718][ T30] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 313.123369][ T30] ? assign_work+0x364/0x3d0 [ 313.128010][ T30] worker_thread+0x870/0xd30 [ 313.133135][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 313.139091][ T30] ? __kthread_parkme+0x169/0x1d0 [ 313.144198][ T30] ? __pfx_worker_thread+0x10/0x10 [ 313.149357][ T30] kthread+0x7a9/0x920 [ 313.153504][ T30] ? __pfx_kthread+0x10/0x10 [ 313.158191][ T30] ? __pfx_worker_thread+0x10/0x10 [ 313.163380][ T30] ? __pfx_kthread+0x10/0x10 [ 313.168016][ T30] ? __pfx_kthread+0x10/0x10 [ 313.172679][ T30] ? __pfx_kthread+0x10/0x10 [ 313.177319][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 313.182581][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 313.187815][ T30] ? __pfx_kthread+0x10/0x10 [ 313.192543][ T30] ret_from_fork+0x4b/0x80 [ 313.196985][ T30] ? __pfx_kthread+0x10/0x10 [ 313.201580][ T30] ret_from_fork_asm+0x1a/0x30 [ 313.206408][ T30] [ 313.209794][ T30] INFO: task kworker/u8:9:3565 blocked for more than 144 seconds. [ 313.217879][ T30] Not tainted 6.13.0-syzkaller-07078-gb46c89c08f41 #0 [ 313.225486][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 313.234527][ T30] task:kworker/u8:9 state:D stack:22032 pid:3565 tgid:3565 ppid:2 flags:0x00004000 [ 313.244932][ T30] Workqueue: netns cleanup_net [ 313.249745][ T30] Call Trace: [ 313.253268][ T30] [ 313.256246][ T30] __schedule+0x181a/0x4b90 [ 313.260783][ T30] ? schedule+0x90/0x320 [ 313.265155][ T30] ? schedule+0x90/0x320 [ 313.269423][ T30] ? __pfx___schedule+0x10/0x10 [ 313.274391][ T30] ? __pfx_lock_release+0x10/0x10 [ 313.279447][ T30] ? rcu_is_watching+0x15/0xb0 [ 313.284322][ T30] ? kthread_data+0x52/0xd0 [ 313.288845][ T30] ? schedule+0x90/0x320 [ 313.293193][ T30] ? wq_worker_sleeping+0x66/0x240 [ 313.298350][ T30] ? schedule+0x90/0x320 [ 313.302660][ T30] schedule+0x14b/0x320 [ 313.306834][ T30] schedule_preempt_disabled+0x13/0x30 [ 313.312440][ T30] __mutex_lock+0x817/0x1010 [ 313.317059][ T30] ? __mutex_lock+0x602/0x1010 [ 313.321824][ T30] ? unregister_netdevice_many_notify+0xac2/0x2030 [ 313.328384][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 313.333511][ T30] ? __pfx___might_resched+0x10/0x10 [ 313.338985][ T30] ? unregister_netdevice_many_notify+0x9fa/0x2030 [ 313.345588][ T30] ? rcu_is_watching+0x15/0xb0 [ 313.350383][ T30] ? unregister_netdevice_many_notify+0x9fa/0x2030 [ 313.356980][ T30] unregister_netdevice_many_notify+0xac2/0x2030 [ 313.363549][ T30] ? rcu_is_watching+0x15/0xb0 [ 313.368345][ T30] ? lock_release+0xbf/0xa30 [ 313.372996][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 313.379359][ T30] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 313.386188][ T30] ? rcu_is_watching+0x15/0xb0 [ 313.390984][ T30] ? __pfx_lock_release+0x10/0x10 [ 313.396141][ T30] unregister_netdevice_queue+0x303/0x370 [ 313.401893][ T30] ? __pfx_up_write+0x10/0x10 [ 313.406608][ T30] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 313.412927][ T30] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 313.418741][ T30] _cfg80211_unregister_wdev+0x163/0x590 [ 313.424513][ T30] ieee80211_remove_interfaces+0x4ef/0x700 [ 313.430355][ T30] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 313.437357][ T30] ? rcu_is_watching+0x15/0xb0 [ 313.443073][ T30] ieee80211_unregister_hw+0x5d/0x2c0 [ 313.448483][ T30] mac80211_hwsim_del_radio+0x2c4/0x4c0 [ 313.454094][ T30] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 313.460189][ T30] hwsim_exit_net+0x5c1/0x670 [ 313.464955][ T30] ? __pfx_hwsim_exit_net+0x10/0x10 [ 313.470180][ T30] ? __ip_vs_dev_cleanup_batch+0x239/0x260 [ 313.476053][ T30] cleanup_net+0x812/0xd60 [ 313.480516][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 313.485567][ T30] ? rcu_is_watching+0x15/0xb0 [ 313.490362][ T30] ? process_scheduled_works+0x976/0x1840 [ 313.496197][ T30] process_scheduled_works+0xa66/0x1840 [ 313.501794][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 313.507926][ T30] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 313.514031][ T30] ? assign_work+0x364/0x3d0 [ 313.518959][ T30] worker_thread+0x870/0xd30 [ 313.523721][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 313.529735][ T30] ? __kthread_parkme+0x169/0x1d0 [ 313.534801][ T30] ? __pfx_worker_thread+0x10/0x10 [ 313.539943][ T30] kthread+0x7a9/0x920 [ 313.544473][ T30] ? __pfx_kthread+0x10/0x10 [ 313.549108][ T30] ? __pfx_worker_thread+0x10/0x10 [ 313.554354][ T30] ? __pfx_kthread+0x10/0x10 [ 313.558982][ T30] ? __pfx_kthread+0x10/0x10 [ 313.563719][ T30] ? __pfx_kthread+0x10/0x10 [ 313.568337][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 313.573596][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 313.578811][ T30] ? __pfx_kthread+0x10/0x10 [ 313.583634][ T30] ret_from_fork+0x4b/0x80 [ 313.588080][ T30] ? __pfx_kthread+0x10/0x10 [ 313.592792][ T30] ret_from_fork_asm+0x1a/0x30 [ 313.597585][ T30] [ 313.600629][ T30] INFO: task dhcpcd:5490 blocked for more than 144 seconds. [ 313.608036][ T30] Not tainted 6.13.0-syzkaller-07078-gb46c89c08f41 #0 [ 313.615436][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 313.624364][ T30] task:dhcpcd state:D stack:21456 pid:5490 tgid:5490 ppid:5489 flags:0x00000002 [ 313.634708][ T30] Call Trace: [ 313.638025][ T30] [ 313.640987][ T30] __schedule+0x181a/0x4b90 [ 313.646720][ T30] ? schedule+0x90/0x320 [ 313.651006][ T30] ? schedule+0x90/0x320 [ 313.655339][ T30] ? __pfx___schedule+0x10/0x10 [ 313.660208][ T30] ? __pfx_lock_release+0x10/0x10 [ 313.665306][ T30] ? rcu_is_watching+0x15/0xb0 [ 313.670099][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 313.676169][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 313.682572][ T30] ? schedule+0x90/0x320 [ 313.686836][ T30] schedule+0x14b/0x320 [ 313.690989][ T30] schedule_preempt_disabled+0x13/0x30 [ 313.696544][ T30] __mutex_lock+0x817/0x1010 [ 313.701187][ T30] ? __mutex_lock+0x602/0x1010 [ 313.706026][ T30] ? devinet_ioctl+0x31a/0x1ac0 [ 313.710901][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 313.716015][ T30] ? safesetid_security_capable+0xb2/0x1d0 [ 313.722220][ T30] ? bpf_lsm_capable+0x9/0x10 [ 313.726934][ T30] devinet_ioctl+0x31a/0x1ac0 [ 313.731615][ T30] ? get_user_ifreq+0x1bb/0x200 [ 313.736585][ T30] inet_ioctl+0x3d7/0x4f0 [ 313.740947][ T30] ? __pfx_inet_ioctl+0x10/0x10 [ 313.746346][ T30] ? tomoyo_path_number_perm+0x679/0x860 [ 313.752019][ T30] ? tomoyo_path_number_perm+0x206/0x860 [ 313.757763][ T30] sock_do_ioctl+0x158/0x460 [ 313.762437][ T30] ? __pfx_sock_do_ioctl+0x10/0x10 [ 313.767588][ T30] ? __pfx_lock_release+0x10/0x10 [ 313.772844][ T30] ? __asan_memset+0x23/0x50 [ 313.777479][ T30] ? smack_file_ioctl+0x29e/0x3a0 [ 313.782568][ T30] sock_ioctl+0x626/0x8e0 [ 313.786918][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 313.791766][ T30] ? __sys_socket+0x20a/0x3c0 [ 313.796550][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 313.802954][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 313.809306][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 313.814244][ T30] __se_sys_ioctl+0xf5/0x170 [ 313.818865][ T30] do_syscall_64+0xf3/0x230 [ 313.823788][ T30] ? clear_bhb_loop+0x35/0x90 [ 313.828586][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.834634][ T30] RIP: 0033:0x7fc49dbc8d49 [ 313.839080][ T30] RSP: 002b:00007fff48751798 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 313.848021][ T30] RAX: ffffffffffffffda RBX: 00007fc49dafa6c0 RCX: 00007fc49dbc8d49 [ 313.856107][ T30] RDX: 00007fff48761988 RSI: 0000000000008914 RDI: 0000000000000023 [ 313.864136][ T30] RBP: 00007fff48771b48 R08: 00007fff48761948 R09: 00007fff487618f8 [ 313.872125][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 313.880205][ T30] R13: 00007fff48761988 R14: 0000000000000028 R15: 0000000000008914 [ 313.888263][ T30] [ 313.891339][ T30] INFO: task syz-executor:9322 blocked for more than 144 seconds. [ 313.899278][ T30] Not tainted 6.13.0-syzkaller-07078-gb46c89c08f41 #0 [ 313.906618][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 313.915365][ T30] task:syz-executor state:D stack:22128 pid:9322 tgid:9322 ppid:1 flags:0x00004004 [ 313.926585][ T30] Call Trace: [ 313.929898][ T30] [ 313.932919][ T30] __schedule+0x181a/0x4b90 [ 313.937459][ T30] ? schedule+0x90/0x320 [ 313.941704][ T30] ? schedule+0x90/0x320 [ 313.945992][ T30] ? __pfx___schedule+0x10/0x10 [ 313.951266][ T30] ? __pfx_lock_release+0x10/0x10 [ 313.956399][ T30] ? rcu_is_watching+0x15/0xb0 [ 313.961194][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 313.967219][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 313.973629][ T30] ? schedule+0x90/0x320 [ 313.977876][ T30] schedule+0x14b/0x320 [ 313.982033][ T30] schedule_preempt_disabled+0x13/0x30 [ 313.987544][ T30] __mutex_lock+0x817/0x1010 [ 313.992206][ T30] ? __mutex_lock+0x602/0x1010 [ 313.996996][ T30] ? rtnl_newlink+0xce2/0x2210 [ 314.001765][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 314.006871][ T30] ? safesetid_security_capable+0xb2/0x1d0 [ 314.012727][ T30] ? ns_capable+0x8a/0xf0 [ 314.017059][ T30] ? rtnl_link_get_net_capable+0x168/0x340 [ 314.022934][ T30] rtnl_newlink+0xce2/0x2210 [ 314.027554][ T30] ? rtnl_newlink+0x741/0x2210 [ 314.032754][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 314.037831][ T30] ? rcu_is_watching+0x15/0xb0 [ 314.042687][ T30] ? lock_release+0xbf/0xa30 [ 314.047324][ T30] ? rcu_is_watching+0x15/0xb0 [ 314.052627][ T30] ? lock_release+0xbf/0xa30 [ 314.057264][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 314.062350][ T30] ? lock_release+0xbf/0xa30 [ 314.066967][ T30] ? deref_stack_reg+0x17c/0x210 [ 314.071911][ T30] ? __pfx_lock_release+0x10/0x10 [ 314.077388][ T30] ? stack_trace_save+0x118/0x1d0 [ 314.082570][ T30] ? unwind_next_frame+0x18e6/0x22d0 [ 314.087888][ T30] ? deref_stack_reg+0x17c/0x210 [ 314.092896][ T30] ? preempt_count_add+0x93/0x190 [ 314.097941][ T30] ? 0xffffffffa0000948 [ 314.102129][ T30] ? is_bpf_text_address+0x285/0x2a0 [ 314.107503][ T30] ? is_bpf_text_address+0x26/0x2a0 [ 314.112766][ T30] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 314.119029][ T30] ? kernel_text_address+0xa7/0xe0 [ 314.124237][ T30] ? __kernel_text_address+0xd/0x40 [ 314.129470][ T30] ? unwind_get_return_address+0x4d/0x90 [ 314.135534][ T30] ? rcu_is_watching+0x15/0xb0 [ 314.140349][ T30] ? lock_release+0xbf/0xa30 [ 314.145045][ T30] ? __pfx_lock_release+0x10/0x10 [ 314.150107][ T30] ? safesetid_security_capable+0xb2/0x1d0 [ 314.156443][ T30] ? bpf_lsm_capable+0x9/0x10 [ 314.161168][ T30] ? security_capable+0x7e/0x2d0 [ 314.166197][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 314.171267][ T30] rtnetlink_rcv_msg+0x791/0xcf0 [ 314.176292][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 314.181444][ T30] ? lock_release+0xbf/0xa30 [ 314.186139][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 314.191618][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 314.196700][ T30] ? rcu_is_watching+0x15/0xb0 [ 314.201496][ T30] ? lock_acquire+0xe3/0x550 [ 314.206210][ T30] netlink_rcv_skb+0x1e3/0x430 [ 314.211004][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 314.216523][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 314.221848][ T30] ? net_generic+0x1f/0x240 [ 314.226424][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 314.231663][ T30] netlink_unicast+0x7f6/0x990 [ 314.236753][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 314.242090][ T30] ? __virt_addr_valid+0x45f/0x530 [ 314.247537][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 314.252669][ T30] ? __check_object_size+0x47a/0x730 [ 314.258205][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 314.263106][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 314.268447][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 314.273892][ T30] __sock_sendmsg+0x221/0x270 [ 314.278605][ T30] __sys_sendto+0x363/0x4c0 [ 314.283247][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 314.288314][ T30] ? rcu_is_watching+0x15/0xb0 [ 314.293203][ T30] ? blkcg_maybe_throttle_current+0x1ab/0xb80 [ 314.299298][ T30] ? xfd_validate_state+0x6e/0x150 [ 314.304531][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 314.310887][ T30] ? rcu_is_watching+0x15/0xb0 [ 314.315775][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 314.322260][ T30] ? rcu_is_watching+0x15/0xb0 [ 314.327136][ T30] __x64_sys_sendto+0xde/0x100 [ 314.331911][ T30] do_syscall_64+0xf3/0x230 [ 314.336562][ T30] ? clear_bhb_loop+0x35/0x90 [ 314.341276][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.347224][ T30] RIP: 0033:0x7f23d2b8ebbc [ 314.351688][ T30] RSP: 002b:00007ffff1accbd0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 314.360457][ T30] RAX: ffffffffffffffda RBX: 00007f23d38d4620 RCX: 00007f23d2b8ebbc [ 314.368656][ T30] RDX: 000000000000003c RSI: 00007f23d38d4670 RDI: 0000000000000003 [ 314.376685][ T30] RBP: 0000000000000000 R08: 00007ffff1accc24 R09: 000000000000000c [ 314.384778][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 314.393055][ T30] R13: 0000000000000000 R14: 00007f23d38d4670 R15: 0000000000000000 [ 314.401069][ T30] [ 314.404261][ T30] INFO: task syz.6.1232:9414 blocked for more than 145 seconds. [ 314.411922][ T30] Not tainted 6.13.0-syzkaller-07078-gb46c89c08f41 #0 [ 314.419264][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 314.428016][ T30] task:syz.6.1232 state:D stack:26832 pid:9414 tgid:9413 ppid:8207 flags:0x00000004 [ 314.438849][ T30] Call Trace: [ 314.442311][ T30] [ 314.445275][ T30] __schedule+0x181a/0x4b90 [ 314.449792][ T30] ? schedule+0x90/0x320 [ 314.454127][ T30] ? schedule+0x90/0x320 [ 314.458396][ T30] ? __pfx___schedule+0x10/0x10 [ 314.463564][ T30] ? __pfx_lock_release+0x10/0x10 [ 314.468630][ T30] ? rcu_is_watching+0x15/0xb0 [ 314.473923][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 314.479852][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 314.486235][ T30] ? netlink_sendmsg+0x8e4/0xcb0 [ 314.491204][ T30] ? schedule+0x90/0x320 [ 314.495550][ T30] schedule+0x14b/0x320 [ 314.499734][ T30] schedule_preempt_disabled+0x13/0x30 [ 314.505282][ T30] __mutex_lock+0x817/0x1010 [ 314.509913][ T30] ? __mutex_lock+0x602/0x1010 [ 314.514794][ T30] ? ethnl_default_set_doit+0x3ab/0xa00 [ 314.520376][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 314.525462][ T30] ? __pfx_ethnl_parse_header_dev_get+0x10/0x10 [ 314.531738][ T30] ? ethnl_set_linkmodes_validate+0x1fd/0x330 [ 314.537912][ T30] ethnl_default_set_doit+0x3ab/0xa00 [ 314.543763][ T30] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 314.549723][ T30] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 314.556245][ T30] genl_rcv_msg+0xb14/0xec0 [ 314.560793][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 314.566392][ T30] ? __dev_queue_xmit+0x1775/0x3f50 [ 314.571631][ T30] ? kasan_save_track+0x51/0x80 [ 314.576589][ T30] ? ____sys_sendmsg+0x52a/0x7e0 [ 314.581588][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 314.586692][ T30] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 314.592722][ T30] ? __pfx___might_resched+0x10/0x10 [ 314.598056][ T30] netlink_rcv_skb+0x1e3/0x430 [ 314.602890][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 314.607963][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 314.613383][ T30] ? lock_release+0xbf/0xa30 [ 314.618024][ T30] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 314.623597][ T30] genl_rcv+0x28/0x40 [ 314.627606][ T30] netlink_unicast+0x7f6/0x990 [ 314.632494][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 314.637807][ T30] ? __virt_addr_valid+0x45f/0x530 [ 314.643336][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 314.648391][ T30] ? __check_object_size+0x47a/0x730 [ 314.653785][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 314.658598][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 314.663969][ T30] ? lock_release+0xbf/0xa30 [ 314.669070][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 314.674516][ T30] __sock_sendmsg+0x221/0x270 [ 314.679240][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 314.684130][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 314.689451][ T30] ? __fget_files+0x2a/0x410 [ 314.694156][ T30] ? __fget_files+0x2a/0x410 [ 314.698781][ T30] __sys_sendmsg+0x269/0x350 [ 314.703463][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 314.708621][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 314.715083][ T30] ? rcu_is_watching+0x15/0xb0 [ 314.719911][ T30] ? rcu_is_watching+0x15/0xb0 [ 314.724737][ T30] do_syscall_64+0xf3/0x230 [ 314.729271][ T30] ? clear_bhb_loop+0x35/0x90 [ 314.734078][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.740036][ T30] RIP: 0033:0x7f22f0f8cd29 [ 314.744504][ T30] RSP: 002b:00007f22f1e21038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 314.753421][ T30] RAX: ffffffffffffffda RBX: 00007f22f11a5fa0 RCX: 00007f22f0f8cd29 [ 314.761421][ T30] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 314.769932][ T30] RBP: 00007f22f100e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 314.778058][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 314.786106][ T30] R13: 0000000000000000 R14: 00007f22f11a5fa0 R15: 00007ffc9faa2d08 [ 314.794265][ T30] [ 314.797363][ T30] INFO: task syz.6.1232:9416 blocked for more than 145 seconds. [ 314.805106][ T30] Not tainted 6.13.0-syzkaller-07078-gb46c89c08f41 #0 [ 314.812453][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 314.821134][ T30] task:syz.6.1232 state:D stack:24656 pid:9416 tgid:9413 ppid:8207 flags:0x00004004 [ 314.831401][ T30] Call Trace: [ 314.834757][ T30] [ 314.837733][ T30] __schedule+0x181a/0x4b90 [ 314.842347][ T30] ? schedule+0x90/0x320 [ 314.846610][ T30] ? schedule+0x90/0x320 [ 314.851154][ T30] ? __pfx___schedule+0x10/0x10 [ 314.856092][ T30] ? __pfx_lock_release+0x10/0x10 [ 314.861142][ T30] ? rcu_is_watching+0x15/0xb0 [ 314.866055][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 314.872462][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 314.878834][ T30] ? netlink_sendmsg+0x8e4/0xcb0 [ 314.883885][ T30] ? schedule+0x90/0x320 [ 314.888161][ T30] schedule+0x14b/0x320 [ 314.892379][ T30] schedule_preempt_disabled+0x13/0x30 [ 314.897861][ T30] __mutex_lock+0x817/0x1010 [ 314.902566][ T30] ? __mutex_lock+0x602/0x1010 [ 314.907382][ T30] ? ethnl_default_set_doit+0x3ab/0xa00 [ 314.912993][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 314.918054][ T30] ? __pfx_ethnl_parse_header_dev_get+0x10/0x10 [ 314.924422][ T30] ? ethnl_set_linkmodes_validate+0x1fd/0x330 [ 314.930543][ T30] ethnl_default_set_doit+0x3ab/0xa00 [ 314.936072][ T30] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 314.942025][ T30] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 314.948472][ T30] genl_rcv_msg+0xb14/0xec0 [ 314.953528][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 314.958590][ T30] ? __dev_queue_xmit+0x1775/0x3f50 [ 314.963880][ T30] ? kasan_save_track+0x51/0x80 [ 314.968751][ T30] ? ____sys_sendmsg+0x52a/0x7e0 [ 314.974254][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 314.979320][ T30] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 314.985340][ T30] ? __pfx___might_resched+0x10/0x10 [ 314.990655][ T30] netlink_rcv_skb+0x1e3/0x430 [ 314.995465][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 315.000512][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 315.005893][ T30] ? lock_release+0xbf/0xa30 [ 315.010517][ T30] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 315.016042][ T30] genl_rcv+0x28/0x40 [ 315.020051][ T30] netlink_unicast+0x7f6/0x990 [ 315.024940][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 315.030257][ T30] ? __virt_addr_valid+0x45f/0x530 [ 315.035440][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 315.040493][ T30] ? __check_object_size+0x47a/0x730 [ 315.045881][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 315.050694][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.056421][ T30] ? lock_release+0xbf/0xa30 [ 315.061060][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.066467][ T30] __sock_sendmsg+0x221/0x270 [ 315.071177][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 315.076012][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 315.081828][ T30] ? __fget_files+0x2a/0x410 [ 315.086527][ T30] ? __fget_files+0x2a/0x410 [ 315.091149][ T30] __sys_sendmsg+0x269/0x350 [ 315.095814][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 315.100959][ T30] ? handle_mm_fault+0x18ac/0x1c60 [ 315.106190][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 315.112875][ T30] ? rcu_is_watching+0x15/0xb0 [ 315.117726][ T30] ? rcu_is_watching+0x15/0xb0 [ 315.122607][ T30] do_syscall_64+0xf3/0x230 [ 315.127160][ T30] ? clear_bhb_loop+0x35/0x90 [ 315.131853][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.138031][ T30] RIP: 0033:0x7f22f0f8cd29 [ 315.142537][ T30] RSP: 002b:00007f22f1e00038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 315.150969][ T30] RAX: ffffffffffffffda RBX: 00007f22f11a6080 RCX: 00007f22f0f8cd29 [ 315.159382][ T30] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 315.167458][ T30] RBP: 00007f22f100e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 315.175500][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 315.184025][ T30] R13: 0000000000000001 R14: 00007f22f11a6080 R15: 00007ffc9faa2d08 [ 315.192056][ T30] [ 315.195159][ T30] INFO: task syz.4.1234:9418 blocked for more than 146 seconds. [ 315.202854][ T30] Not tainted 6.13.0-syzkaller-07078-gb46c89c08f41 #0 [ 315.210149][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 315.218859][ T30] task:syz.4.1234 state:D stack:28208 pid:9418 tgid:9417 ppid:5823 flags:0x00000004 [ 315.229145][ T30] Call Trace: [ 315.232479][ T30] [ 315.235450][ T30] __schedule+0x181a/0x4b90 [ 315.239972][ T30] ? schedule+0x90/0x320 [ 315.244297][ T30] ? schedule+0x90/0x320 [ 315.248561][ T30] ? __pfx___schedule+0x10/0x10 [ 315.253474][ T30] ? __pfx_lock_release+0x10/0x10 [ 315.258823][ T30] ? rcu_is_watching+0x15/0xb0 [ 315.263708][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 315.269633][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 315.276162][ T30] ? schedule+0x90/0x320 [ 315.280525][ T30] schedule+0x14b/0x320 [ 315.285244][ T30] schedule_preempt_disabled+0x13/0x30 [ 315.290736][ T30] __mutex_lock+0x817/0x1010 [ 315.295397][ T30] ? __mutex_lock+0x602/0x1010 [ 315.300198][ T30] ? __tun_chr_ioctl+0x48c/0x2400 [ 315.305317][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 315.310380][ T30] ? __might_fault+0xaa/0x120 [ 315.315147][ T30] __tun_chr_ioctl+0x48c/0x2400 [ 315.320059][ T30] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 315.325433][ T30] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 315.330594][ T30] __se_sys_ioctl+0xf5/0x170 [ 315.335267][ T30] do_syscall_64+0xf3/0x230 [ 315.339800][ T30] ? clear_bhb_loop+0x35/0x90 [ 315.344562][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.350487][ T30] RIP: 0033:0x7f437598cd29 [ 315.354996][ T30] RSP: 002b:00007f43767a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 315.363898][ T30] RAX: ffffffffffffffda RBX: 00007f4375ba5fa0 RCX: 00007f437598cd29 [ 315.371902][ T30] RDX: 0000000020000200 RSI: 00000000400454ca RDI: 0000000000000003 [ 315.379952][ T30] RBP: 00007f4375a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 315.388408][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 315.396452][ T30] R13: 0000000000000000 R14: 00007f4375ba5fa0 R15: 00007ffc6d49a818 [ 315.404523][ T30] [ 315.407562][ T30] INFO: task syz.4.1234:9419 blocked for more than 146 seconds. [ 315.415245][ T30] Not tainted 6.13.0-syzkaller-07078-gb46c89c08f41 #0 [ 315.422697][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 315.431373][ T30] task:syz.4.1234 state:D stack:27600 pid:9419 tgid:9417 ppid:5823 flags:0x00004004 [ 315.441861][ T30] Call Trace: [ 315.445216][ T30] [ 315.448150][ T30] __schedule+0x181a/0x4b90 [ 315.452716][ T30] ? schedule+0x90/0x320 [ 315.456975][ T30] ? schedule+0x90/0x320 [ 315.461220][ T30] ? __pfx___schedule+0x10/0x10 [ 315.466589][ T30] ? __pfx_lock_release+0x10/0x10 [ 315.471650][ T30] ? rcu_is_watching+0x15/0xb0 [ 315.476479][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 315.482457][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 315.489221][ T30] ? schedule+0x90/0x320 [ 315.493563][ T30] schedule+0x14b/0x320 [ 315.497739][ T30] schedule_preempt_disabled+0x13/0x30 [ 315.503257][ T30] __mutex_lock+0x817/0x1010 [ 315.507874][ T30] ? __mutex_lock+0x602/0x1010 [ 315.512720][ T30] ? devinet_ioctl+0x31a/0x1ac0 [ 315.517596][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 315.522756][ T30] ? safesetid_security_capable+0xb2/0x1d0 [ 315.528599][ T30] ? bpf_lsm_capable+0x9/0x10 [ 315.533375][ T30] devinet_ioctl+0x31a/0x1ac0 [ 315.538082][ T30] ? get_user_ifreq+0x1bb/0x200 [ 315.543020][ T30] inet_ioctl+0x3d7/0x4f0 [ 315.547496][ T30] ? __pfx_inet_ioctl+0x10/0x10 [ 315.552414][ T30] ? tomoyo_path_number_perm+0x679/0x860 [ 315.558091][ T30] ? tomoyo_path_number_perm+0x206/0x860 [ 315.563810][ T30] ? packet_ioctl+0x26b/0x350 [ 315.568864][ T30] sock_do_ioctl+0x158/0x460 [ 315.573537][ T30] ? __pfx_sock_do_ioctl+0x10/0x10 [ 315.578676][ T30] ? __asan_memset+0x23/0x50 [ 315.583345][ T30] ? smack_file_ioctl+0x29e/0x3a0 [ 315.588810][ T30] sock_ioctl+0x626/0x8e0 [ 315.593361][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 315.598237][ T30] ? __fget_files+0x2a/0x410 [ 315.602912][ T30] ? __fget_files+0x2a/0x410 [ 315.607534][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 315.612450][ T30] __se_sys_ioctl+0xf5/0x170 [ 315.617070][ T30] do_syscall_64+0xf3/0x230 [ 315.621577][ T30] ? clear_bhb_loop+0x35/0x90 [ 315.626325][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.632287][ T30] RIP: 0033:0x7f437598cd29 [ 315.636729][ T30] RSP: 002b:00007f4376784038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 315.645218][ T30] RAX: ffffffffffffffda RBX: 00007f4375ba6080 RCX: 00007f437598cd29 [ 315.653257][ T30] RDX: 0000000020000180 RSI: 0000000000008914 RDI: 0000000000000004 [ 315.661237][ T30] RBP: 00007f4375a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 315.669628][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 315.677668][ T30] R13: 0000000000000000 R14: 00007f4375ba6080 R15: 00007ffc6d49a818 [ 315.685725][ T30] [ 315.688768][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 315.698343][ T30] INFO: task syz.1.1240:9434 blocked for more than 146 seconds. [ 315.706065][ T30] Not tainted 6.13.0-syzkaller-07078-gb46c89c08f41 #0 [ 315.713401][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 315.722077][ T30] task:syz.1.1240 state:D stack:26768 pid:9434 tgid:9434 ppid:7129 flags:0x00000004 [ 315.732354][ T30] Call Trace: [ 315.735650][ T30] [ 315.738581][ T30] __schedule+0x181a/0x4b90 [ 315.743152][ T30] ? schedule+0x90/0x320 [ 315.747425][ T30] ? schedule+0x90/0x320 [ 315.751666][ T30] ? __pfx___schedule+0x10/0x10 [ 315.756581][ T30] ? __pfx_lock_release+0x10/0x10 [ 315.761638][ T30] ? rcu_is_watching+0x15/0xb0 [ 315.766462][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 315.772808][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 315.779192][ T30] ? fput+0x17a/0x290 [ 315.783248][ T30] ? schedule+0x90/0x320 [ 315.787514][ T30] schedule+0x14b/0x320 [ 315.791672][ T30] schedule_preempt_disabled+0x13/0x30 [ 315.797680][ T30] __mutex_lock+0x817/0x1010 [ 315.802388][ T30] ? __mutex_lock+0x602/0x1010 [ 315.807183][ T30] ? raw_release+0x1b8/0x8b0 [ 315.811776][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 315.816873][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 315.821928][ T30] ? __pfx_ima_file_free+0x10/0x10 [ 315.827150][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 315.832471][ T30] raw_release+0x1b8/0x8b0 [ 315.836927][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 315.842358][ T30] sock_close+0xbc/0x240 [ 315.846634][ T30] ? __pfx_sock_close+0x10/0x10 [ 315.851484][ T30] __fput+0x3e9/0x9f0 [ 315.855548][ T30] task_work_run+0x24f/0x310 [ 315.860172][ T30] ? _raw_spin_unlock+0x28/0x50 [ 315.865086][ T30] ? __pfx_task_work_run+0x10/0x10 [ 315.870229][ T30] ? rcu_is_watching+0x15/0xb0 [ 315.875412][ T30] syscall_exit_to_user_mode+0x13f/0x340 [ 315.881100][ T30] do_syscall_64+0x100/0x230 [ 315.885771][ T30] ? clear_bhb_loop+0x35/0x90 [ 315.890493][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.896958][ T30] RIP: 0033:0x7febc4b8cd29 [ 315.901405][ T30] RSP: 002b:00007ffda38ebee8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 315.909879][ T30] RAX: 0000000000000000 RBX: 000000000002683f RCX: 00007febc4b8cd29 [ 315.917953][ T30] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 315.925977][ T30] RBP: 00007febc4da7ba0 R08: 0000000000000001 R09: 00007ffda38ec1df [ 315.934041][ T30] R10: 00007febc4a00000 R11: 0000000000000246 R12: 0000000000026875 [ 315.942058][ T30] R13: 00007febc4da5fa0 R14: 0000000000000032 R15: ffffffffffffffff [ 315.950100][ T30] [ 315.953195][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 315.962291][ T30] INFO: task syz.3.1243:9442 blocked for more than 146 seconds. [ 315.969953][ T30] Not tainted 6.13.0-syzkaller-07078-gb46c89c08f41 #0 [ 315.977536][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 315.986393][ T30] task:syz.3.1243 state:D stack:26576 pid:9442 tgid:9441 ppid:5824 flags:0x00000004 [ 315.996727][ T30] Call Trace: [ 316.000193][ T30] [ 316.003204][ T30] __schedule+0x181a/0x4b90 [ 316.007734][ T30] ? schedule+0x90/0x320 [ 316.012015][ T30] ? schedule+0x90/0x320 [ 316.016298][ T30] ? __pfx___schedule+0x10/0x10 [ 316.021176][ T30] ? __pfx_lock_release+0x10/0x10 [ 316.026400][ T30] ? rcu_is_watching+0x15/0xb0 [ 316.031205][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 316.037189][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 316.043581][ T30] ? schedule+0x90/0x320 [ 316.047851][ T30] schedule+0x14b/0x320 [ 316.052016][ T30] schedule_preempt_disabled+0x13/0x30 [ 316.057531][ T30] __mutex_lock+0x817/0x1010 [ 316.062201][ T30] ? __mutex_lock+0x602/0x1010 [ 316.066999][ T30] ? nl80211_pre_doit+0x5f/0x8b0 [ 316.071961][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 316.077212][ T30] ? __nla_parse+0x40/0x60 [ 316.081679][ T30] nl80211_pre_doit+0x5f/0x8b0 [ 316.086493][ T30] genl_rcv_msg+0xaaa/0xec0 [ 316.091043][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 316.096135][ T30] ? __dev_queue_xmit+0x1775/0x3f50 [ 316.101500][ T30] ? kasan_save_track+0x51/0x80 [ 316.106414][ T30] ? ____sys_sendmsg+0x52a/0x7e0 [ 316.111386][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 316.116461][ T30] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 316.121854][ T30] ? __pfx_nl80211_set_key+0x10/0x10 [ 316.127197][ T30] ? __pfx_nl80211_post_doit+0x10/0x10 [ 316.132819][ T30] ? __pfx___might_resched+0x10/0x10 [ 316.138113][ T30] netlink_rcv_skb+0x1e3/0x430 [ 316.142962][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 316.148054][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 316.153445][ T30] ? lock_release+0xbf/0xa30 [ 316.158230][ T30] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 316.163863][ T30] genl_rcv+0x28/0x40 [ 316.167880][ T30] netlink_unicast+0x7f6/0x990 [ 316.172719][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 316.178029][ T30] ? __virt_addr_valid+0x45f/0x530 [ 316.183281][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 316.188344][ T30] ? __check_object_size+0x47a/0x730 [ 316.193689][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 316.198486][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 316.204277][ T30] ? lock_release+0xbf/0xa30 [ 316.208917][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 316.214269][ T30] __sock_sendmsg+0x221/0x270 [ 316.218969][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 316.223798][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 316.229151][ T30] ? __fget_files+0x2a/0x410 [ 316.233986][ T30] ? __fget_files+0x2a/0x410 [ 316.238613][ T30] __sys_sendmsg+0x269/0x350 [ 316.243426][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 316.248590][ T30] ? __se_sys_futex+0x3f9/0x480 [ 316.253493][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 316.259850][ T30] ? rcu_is_watching+0x15/0xb0 [ 316.264675][ T30] ? rcu_is_watching+0x15/0xb0 [ 316.269649][ T30] do_syscall_64+0xf3/0x230 [ 316.274217][ T30] ? clear_bhb_loop+0x35/0x90 [ 316.278927][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.284958][ T30] RIP: 0033:0x7f796d38cd29 [ 316.289391][ T30] RSP: 002b:00007f796e177038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 316.297871][ T30] RAX: ffffffffffffffda RBX: 00007f796d5a5fa0 RCX: 00007f796d38cd29 [ 316.306145][ T30] RDX: 0000000004000040 RSI: 0000000020000980 RDI: 0000000000000004 [ 316.314214][ T30] RBP: 00007f796d40e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 316.322253][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 316.330256][ T30] R13: 0000000000000000 R14: 00007f796d5a5fa0 R15: 00007ffda2a37338 [ 316.338341][ T30] [ 316.341400][ T30] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 316.350532][ T30] INFO: lockdep is turned off. [ 316.355454][ T30] NMI backtrace for cpu 1 [ 316.355469][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-07078-gb46c89c08f41 #0 [ 316.355485][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 316.355493][ T30] Call Trace: [ 316.355498][ T30] [ 316.355505][ T30] dump_stack_lvl+0x241/0x360 [ 316.355534][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 316.355557][ T30] ? __pfx__printk+0x10/0x10 [ 316.355579][ T30] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 316.355603][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 316.355620][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 316.355643][ T30] ? _printk+0xd5/0x120 [ 316.355662][ T30] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 316.355682][ T30] ? __pfx__printk+0x10/0x10 [ 316.355704][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 316.355722][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 316.355747][ T30] watchdog+0xff6/0x1040 [ 316.355765][ T30] ? watchdog+0x1ea/0x1040 [ 316.355784][ T30] ? __pfx_watchdog+0x10/0x10 [ 316.355807][ T30] kthread+0x7a9/0x920 [ 316.355825][ T30] ? __pfx_kthread+0x10/0x10 [ 316.355844][ T30] ? __pfx_watchdog+0x10/0x10 [ 316.355862][ T30] ? __pfx_kthread+0x10/0x10 [ 316.355880][ T30] ? __pfx_kthread+0x10/0x10 [ 316.355899][ T30] ? __pfx_kthread+0x10/0x10 [ 316.355917][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 316.355931][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 316.355948][ T30] ? __pfx_kthread+0x10/0x10 [ 316.355966][ T30] ret_from_fork+0x4b/0x80 [ 316.355983][ T30] ? __pfx_kthread+0x10/0x10 [ 316.356002][ T30] ret_from_fork_asm+0x1a/0x30 [ 316.356023][ T30] [ 316.356028][ T30] Sending NMI from CPU 1 to CPUs 0: [ 316.523516][ C0] NMI backtrace for cpu 0 [ 316.523532][ C0] CPU: 0 UID: 0 PID: 9462 Comm: kworker/u8:10 Not tainted 6.13.0-syzkaller-07078-gb46c89c08f41 #0 [ 316.523552][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 316.523563][ C0] Workqueue: bat_events batadv_nc_worker [ 316.523595][ C0] RIP: 0010:kasan_check_range+0x70/0x290 [ 316.523617][ C0] Code: ff df 4e 8d 1c 13 49 ff c8 4d 89 c1 49 c1 e9 03 49 be 01 00 00 00 00 fc ff df 4f 8d 3c 31 4c 89 fd 4c 29 dd 48 83 fd 10 7f 29 <48> 85 ed 0f 84 3e 01 00 00 4c 89 cd 48 f7 d5 48 01 dd 41 80 3b 00 [ 316.523632][ C0] RSP: 0018:ffffc90004bbf910 EFLAGS: 00000283 [ 316.523646][ C0] RAX: 0000000000000001 RBX: 1ffffffff2034b86 RCX: ffffffff819aaec4 [ 316.523658][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff901a5c30 [ 316.523670][ C0] RBP: 0000000000000001 R08: ffffffff901a5c37 R09: 1ffffffff2034b86 [ 316.523682][ C0] R10: dffffc0000000000 R11: fffffbfff2034b86 R12: 1ffff92000977f30 [ 316.523695][ C0] R13: dffffc0000000000 R14: dffffc0000000001 R15: fffffbfff2034b87 [ 316.523707][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 316.523721][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 316.523732][ C0] CR2: 00007f14e69838ba CR3: 000000000e738000 CR4: 00000000003526f0 [ 316.523747][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 316.523757][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 316.523768][ C0] Call Trace: [ 316.523774][ C0] [ 316.523781][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 316.523798][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 316.523822][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 316.523856][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 316.523876][ C0] ? nmi_handle+0x14f/0x5a0 [ 316.523899][ C0] ? nmi_handle+0x2a/0x5a0 [ 316.523923][ C0] ? kasan_check_range+0x70/0x290 [ 316.523941][ C0] ? default_do_nmi+0x63/0x160 [ 316.523967][ C0] ? exc_nmi+0x123/0x1f0 [ 316.523991][ C0] ? end_repeat_nmi+0xf/0x53 [ 316.524018][ C0] ? lock_acquire+0xd4/0x550 [ 316.524038][ C0] ? kasan_check_range+0x70/0x290 [ 316.524058][ C0] ? kasan_check_range+0x70/0x290 [ 316.524083][ C0] ? kasan_check_range+0x70/0x290 [ 316.524102][ C0] [ 316.524108][ C0] [ 316.524115][ C0] lock_acquire+0xd4/0x550 [ 316.524138][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 316.524159][ C0] ? lock_acquire+0xe3/0x550 [ 316.524180][ C0] ? __pfx_lock_release+0x10/0x10 [ 316.524201][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 316.524220][ C0] ? debug_object_deactivate+0x2d5/0x390 [ 316.524238][ C0] ? __pfx_lock_release+0x10/0x10 [ 316.524259][ C0] ? __pfx_debug_object_deactivate+0x10/0x10 [ 316.524277][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 316.524300][ C0] batadv_nc_worker+0xec/0x610 [ 316.524323][ C0] ? batadv_nc_worker+0xcb/0x610 [ 316.524347][ C0] ? batadv_nc_worker+0xcb/0x610 [ 316.524371][ C0] ? process_scheduled_works+0x976/0x1840 [ 316.524390][ C0] process_scheduled_works+0xa66/0x1840 [ 316.524420][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 316.524439][ C0] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 316.524457][ C0] ? assign_work+0x364/0x3d0 [ 316.524476][ C0] worker_thread+0x870/0xd30 [ 316.524498][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 316.524517][ C0] ? __kthread_parkme+0x169/0x1d0 [ 316.524537][ C0] ? __pfx_worker_thread+0x10/0x10 [ 316.524555][ C0] kthread+0x7a9/0x920 [ 316.524577][ C0] ? __pfx_worker_thread+0x10/0x10 [ 316.524596][ C0] ? __pfx_kthread+0x10/0x10 [ 316.524616][ C0] ? __pfx_kthread+0x10/0x10 [ 316.524638][ C0] ? rcu_is_watching+0x15/0xb0 [ 316.524663][ C0] ? __pfx_kthread+0x10/0x10 [ 316.524684][ C0] ? __pfx_kthread+0x10/0x10 [ 316.524706][ C0] ret_from_fork+0x4b/0x80 [ 316.524725][ C0] ? __pfx_kthread+0x10/0x10 [ 316.524746][ C0] ret_from_fork_asm+0x1a/0x30 [ 316.524770][ C0] [ 316.525571][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 316.913677][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-07078-gb46c89c08f41 #0 [ 316.924242][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 316.934398][ T30] Call Trace: [ 316.937701][ T30] [ 316.940671][ T30] dump_stack_lvl+0x241/0x360 [ 316.945387][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 316.950606][ T30] ? __pfx__printk+0x10/0x10 [ 316.955213][ T30] ? vscnprintf+0x5d/0x90 [ 316.959550][ T30] panic+0x349/0x880 [ 316.963462][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 316.969636][ T30] ? __pfx_panic+0x10/0x10 [ 316.974069][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 316.979452][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 316.985621][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 316.991788][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 316.997960][ T30] watchdog+0x1035/0x1040 [ 317.002308][ T30] ? watchdog+0x1ea/0x1040 [ 317.006747][ T30] ? __pfx_watchdog+0x10/0x10 [ 317.011430][ T30] kthread+0x7a9/0x920 [ 317.015506][ T30] ? __pfx_kthread+0x10/0x10 [ 317.020106][ T30] ? __pfx_watchdog+0x10/0x10 [ 317.024885][ T30] ? __pfx_kthread+0x10/0x10 [ 317.029485][ T30] ? __pfx_kthread+0x10/0x10 [ 317.034088][ T30] ? __pfx_kthread+0x10/0x10 [ 317.038688][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 317.043900][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 317.049103][ T30] ? __pfx_kthread+0x10/0x10 [ 317.053703][ T30] ret_from_fork+0x4b/0x80 [ 317.058130][ T30] ? __pfx_kthread+0x10/0x10 [ 317.062735][ T30] ret_from_fork_asm+0x1a/0x30 [ 317.067511][ T30] [ 317.070862][ T30] Kernel Offset: disabled [ 317.075193][ T30] Rebooting in 86400 seconds..