last executing test programs: 18.360031151s ago: executing program 0 (id=3632): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="00000001000000090090", @ANYBLOB="b0"], 0x0, 0x0, 0x0, 0x0}, 0x0) 17.696839811s ago: executing program 2 (id=3649): r0 = syz_io_uring_setup(0x5c2, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) io_uring_enter(r0, 0x219, 0x0, 0xf, 0x0, 0x0) 17.488402441s ago: executing program 2 (id=3652): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000480)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x1}}}}}}, 0x0) 17.381060104s ago: executing program 1 (id=3653): syz_emit_ethernet(0xa6, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x70, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "005ff92900ddab4992020900"}]}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000001340)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @remote, @private1}}}}}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff}}}}}}, 0x0) 17.253599243s ago: executing program 2 (id=3654): r0 = socket$isdn(0x22, 0x2, 0x26) r1 = socket$isdn(0x22, 0x2, 0x2) dup3(r1, r0, 0x0) 17.152094664s ago: executing program 1 (id=3655): r0 = timerfd_create(0x0, 0x80800) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/8, 0x8}, {&(0x7f0000000700)=""/214, 0xd6}], 0x2) 16.913911377s ago: executing program 2 (id=3657): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x18, &(0x7f00000000c0)={0x20, 0x10, 0x2, {0x2, 0x7e8e703122aff25f}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 16.904445196s ago: executing program 1 (id=3658): ioctl$SNDRV_PCM_IOCTL_TTSTAMP(0xffffffffffffffff, 0x40044103, 0x0) tkill(0x0, 0x7) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000094037b40fd080200fdca010203010902120001000000000904"], 0x0) 15.157855347s ago: executing program 0 (id=3662): r0 = syz_io_uring_setup(0x65fc, &(0x7f0000000000)={0x0, 0x0, 0x80, 0x400000, 0x2}, &(0x7f0000000280), &(0x7f0000000340)) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000800)={&(0x7f0000001000)={[{0x0}]}, 0x1}, 0x1) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000100)={&(0x7f0000001000)={[{0x0}]}, 0x1}, 0x1) 15.15743011s ago: executing program 1 (id=3663): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000005200010000000000000000000a000000080007"], 0x1c}}, 0x0) 15.054119342s ago: executing program 2 (id=3664): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f0000000240)=""/112, 0x349b7f55) 14.749574489s ago: executing program 1 (id=3666): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="d1ffacd516de50ac9d15bc75316da4defa1e72f65a65cdd26dcc389aacf7856da9aecf3765d4c032e1960faf25bad906b7d3440b6e71a82f1d8f8b8db35b6091f3af94c6b46b9ab10fe3923f268771078d2668be7bd3eb941d4bb5baa8547e36283a065ce5766cbff3a8fc37fc4507643d3786bbf231d3ed88cb8b01eab14e4372cf4f89bd1b853caa5d9f07f523b9dfa8cc09053ff36fde08e96fb6b3acc196b1bd1e2d3a6c65f585df7e2b8b17439a7ab29a7dfe642c2f0ac7a81eca8073b559663f2daf7a0832b2b09557794a21bf114831f8e6db3922d0cd169e5a8b4adc95d7322ee75944de15f57780b88fef7f3d9b256705ccfa2125b43ce8e3aacaead963cdd7f792f14c9b24493f9f830f6de8da93bbd4357095631adec14224dd9bb049e826f3a49624393e6a031103faff0902ba88ae30af4a61caa77ff956214196fcf3c5536d823284306f367afcb46fb43231911cc53091671e7d853ebf015241b18e9fb6ac6d9a7a1b05dfd6d9e56a51567cd8837dd045abf6b85550f0dd8dded43147ab9bfadc18b9984699d5d875cb21a95a7f584d8c466d033df75193f9ae58b85cfacc54f6c6e12a0debe40ee361a839563bc2cb64271672a55370c2b035b482074ce2487ef8a3bc1c68856e6e09539276d961a0c647f1ee3237496fc99623e8fd33faf7797d86a88dcee152d15e10739bcbbd6077b76867e291f350d999024c12faf81f83792f48f7f6dd66aa6854e460ef7f8c755f3a6dd76509ea0d2db39057a5129185b2fb11546cd5d6cc59f640e9028ae6c7075fba5e5b5593d7f79ec387833f465d09bde464112821eaec5e6e8f2aee8d7358f9c14afe2018856f610848706c71cda62493aef2e39efb71b4a8e804847eda66b2b5b1d75b478f19208ee1ac43afb2dbbba5dd0f29f6946022e09fb853cb176ca3474ba2fa67cb245fe85ec61a095d6fd9ac2ac5685920201617342fe56072427b9bd3626a1a371e67041fcda781be0c234d6feb5ad500e8bc7074381fd0d04983a4a6cdb6c8e03d59dc50925e9e4b24e6f8e455f02818959f2927f0a2d9ff62ec3c5c399077048f7d3dad0830b2e6563693f2f9d48eca8c34804a7626282a4a214d13786993c011a88194dbf7b23e25f592e62186c9fb565fac7632de356153c89a6be0b6b26ba48c2427424769fcbd7ee072ed4bd4d0731d06c8537d616b1145a6c70edb13fb4dba3565221b3a2897a23861cd0e8e0060021cdd7de002d5e785e5d6d3d07f4e445ada9c8d9ba8b819d0b5c7b5d15a5192d3a83c125c8e117c823a9e33316b8c9154e7330d3a865048dbd9c14757691bfe56f10423f6ab717bec5eebeac6ba9ad1aeb6cde09d7fda8e475a71ac48d46b8d9a40879c9dec2db5c4799e5fc8e8b3d419031c1033fce88ae2c93d7ca62c9302e6b45ca8dfebe5b92724f035e8e9d7704efb23f445999fe08cfa28404874d8acc8d37870d394d9fcc8dbe763bc85c37f0f3bcc2cbea420cd073db598e7d89c14a31e5bf57cbefa301427c93091505f1f3e5cdf712958b2e8fc56684d3388107c1728f0e5a3be2164246071653e256ed3bf3000c17301da9a5a3d9ca475867c4f311a24e5ae909a62047a9e6bb71cbcb4f159c2ef0f66b4d0f9da51aba99cd9448443dd277362af18d32f111c48a952ef555b2c7c58b997ce61e74cc7551b57eaffe411219baddf490926d8e260dcd87c069e617195c352950f9b51ce88c12c4f7997ba515f77e68d44f831cdf4d7ee8b1b7cedcb4c4fc7e85ba288c8555d49d5b4b9bb70dc4b688bd12e6b38e37150f3ea457a76b23d5abe6551ea598e090aed87822b0954b8db1a7c605c925b7f9240b0e7a020f292a1fd4a37c74139bc6e7ff08373ebfc8feea371ae0b6c61c715f6f1f4b0b994c7e2e129f87db959aae6ff48664d824b29ba9f255890f9c537178db9c5302097891557f8175a46f308b1a2530aa726ea9d4cfce76db50637369724d0c5f51c97edb58ff5eb9b2434b3721b61688ba12471b97c6a65ba085e15406568ac852590701f2ef8451c5cf1191d70f51eaea9ddc4cbdd7428f627db5069111f65062d5cc34581826af3e670613dda99e31c42736aabd87be56e214ed606862a152455f91891b7430bae03284569c234588f495a5ecc4a23fad6ba34e2ee9ebde8c7f5f62c9344659375c2a1fe6fa6e4ef68712223b9471c513bb11429dbb8a45463c8882f462275ee0da567c60c2d8038843e0c20486676e9978f2aec9187820c94a6e7e519d06daf2ab198f5cafcab4d9c90a479800906192d66a3301a34fa6c5a931cea0a479a4d98d86d9de3e061323504b57186dd33df7a16ccb688c0de203666cb0a6b543a9d069dded44a3b432cbb71da921dcab6be1c2d7494d3b07841d9b4f9d659b5d3d3b2ed916f91588d589128e4b2d4448e6aab5a8160eddca0f6e022abb85e251a11cd6bae57a09b2c434ab5bdf6264afb20d5ab022d152e345bd32ba9283aa5b3cd9118bd271a8ac9083c98b8a83064e65428f7ad7b35bf1d60d4e703f22d2d316fc12bd68bcced82cf0962a3d5769c6a3d75d59f7a7b76454661fd3574b8c8e26d20c372407854505ea6c2406fbd8a1ba7bb017c565228aa6d03d18ed309a308ffb1ecec73c246413e7c70f25070eafed9e70d22e9e8b44125c44eceff37e65bf073bc6fad1ea2b72675af4bf70586a8f7e0f35700de94c802522897576ed115fa21b3d23a367844520b33f5b9aedc0245096765f4cb3b2ff4e54f39bd7346c2347875d75a931b17c6c424ddb4767e0e63cc7725a8fc4b1dbe7929b2f909cc5be8b09e63330341e6471dcac0f8b44693d01805a1467b71612260e2a273861b3697440a5f75497796bffcf79d62a4a50a6ed5ef2efe8c83374f2ecd08d8d628aa03b01a11caeb2bdecc0ab2abcecfa15627979d7c3f9dec5389fc6625e957f8075e23e636dd5514596189d568e14d33ae518e6e9978c6a36a74b49fdbd1260095c9abe447e618878039b75e305b1d2c9ddeb9e5cedb11802e0833739d8595d57d749c890c9290cca4aa96e6718747543796a187e54a66c2f71beefddf911a7a74b59c48ba642d5ecd4d415f48dfbde5baac8a4ba063c1b985d9f9f3180e8a1c8b2cf6a25c2ff17688cc858ac8b9c67960f09a1ca5f28f8e877159e00fe7fb10cca73b391508895e7e52c22f9b38d73dabd6ff7c55ebf4e1611daee8d52b4ceee49a6df7daeb81bf9d1c943a74c03d3dda52c5b99f3225c1b87074f5cef6187878bc5b665ec0561adcc9781280dd1c6592555d327afea78b21beeeb66a0af3eab3249245f41cdbca309d3fba5d4b345319dd0a26134c0c896f2c8d32fda28600013f6a4c95b4038faba70d6c480b360c55bdc0595f7ca636e85521ba505d894f9c5f0a90719bc9944f386ad7491422ff12f34a3c048708d51305a8cc5b2a502ac1575a14c75e9fb7219ede2f6d9c1b362230b6189e0d8cd8ccd11fd0325182c6e46c9977bf63aa02f7024aeb4389f989f5733a198b45e4329c4c1a538a009f216ad3ac09cac39547b4fd21a5d7146ea307ad9b9339f39d5161d17b59860a0aed38cd89d1b68c6438346d51a3a283074e34ee01d2eca527b1b3836ccdf7e807007152c79d14324e3d887c9551a9447527db4434810f5b0b73d855f32a0c89aa784e43f4c1657d408dd33f88aeae1e5186bbcc2a348b708e3cec9080e12ee3676beb5ee86a9b5cc4a3496c242b95a248906ed62f984b22373bdfd97515441f34e01006d8d1244aa88403f207cd8820ffe07634fc86d00f871c1e4c9e8fc1a00d295e36d98119599b62379cda10ada85efe7b50c5f38d8d010a2cd53db900939db1ffce14feffb7940d12842f4f2b507e1fa49e526752d1e3d80a0c2a75e870d85f77fd91fc46ac1b1288dd33338cdad154d6b80b5a925431868d62a3fb0036f28fe259a3f555f767526a9ea230c33843efc49ac3182a357845ea122d606ab22c9f937b2b905e02dd1cb07d380e3486be6167f00b6e6d90a3c1d6aee15da439a55542ce177e498998ba8ac69a848e63e4c7564e4dc04aad595fa1ab81275edafa0d352029c304200d2f2c5881cbf5a26b2141bdb117879cc11e7c13bd62f221ae1ac04dca3d8d58a13c130557ecf5f36184c7366d3852d0cbd6ca42f2a971d87c0bb204097af1a3abdab7b95d07fcdbf5f42607695dedcd26e30b8fc5cfd7b333a95f3ee69d5ba7911dadb1394285c437a0f26fc027737ba5ee7d63333f80acb59f1a7faf2ec3031c6533107502bffc92d8726a48ce00cdb5f1258d85ff8eb72bfb162e122022f1f3e8a72b41d2689d5228b1130fbc946384401f3bbe726314bb09d430333ad78de07b3cec5c18a4f4abb69507b6451ca4e610b8fc988c983426e0cc3b9d15393026eb75d3d08634b8a7495cef69aab83d27ea1b5b41f40b996dd10023d81f77d61192930ffc25cae1e149412322fcb0aa47bee3afc44ec3dda96c9294854e2cbaebfea6f9a90f0b3797d5f505824b4de964151569f881f87f9dd9d30a2a2f9ed01059a909cba157902903c77f2f3d056231e7c7483a3f35e04360e084f0d3f94a92c92c77b3f06479fbc417366d7fe87ddfcdfd86274f87a5f817b0f947924cbe2329f16f6b00c8a0ab96164f7b35fed38a388380af05c3600abc37a944c9e75a691728c26896ac3615297766f406aeb0f2fd147d68fad3fb3b032880280ebb4bf89252a36b0d9eb393daae72829b8da870b886676244897d5322b32703fcf138b66eedeb3024666a88fd99d8962f696ab7b34e19ced1bd27488aa2ffe5bfa11f8f9289bd8c052d4e88316cc33b0255ef1bfca4c17067d7f78175c56db481fe8dc6f73b1cbdf9d5823f115c9e03f2dfd07bc1ad88564d48b18cd9a30d83cbd5e6a3eedcb0ee86e5dd47f32820cb74dcf730b2052b31297b529e5e24f042335d13915e4048132fe1a101841e919c7870bb680eddead9a6111394bc12e274fbd88abaf2d254721c42e82abf4d1e319a631794ed6ce319ddd844ac5e9b1fc96dd9aaad42f2e087abe1b85430c4a00631970e3e74a6ed923f49e0df75685e044fae3fcea0af4dbfeebe0a9c2e73e8a89b89603a75f585e3ebba5453ae595da1469ea90ea3c9fb6a22411c56c58dfbf504caa629dbfc73ebbedc91669f2babf8b8215c525edf8feb366f104ffa9eb2bb79232660aece4730ef1ae8585c629ffe1390356a58e900da145b83ad177c7bb2d125e59d7ff4d3a8562efc620b4cf9b33c2305bbf1957e0f8b06f0fbe9c80db73b08fdd0be4a1ea4f91f52af47160040424aed8ac3c10251fb0b5d9be08247edf3dda5d1750d0597d60c8a0d9418a4e0c9325bb90f0886f9e5dda9e88ac1942ec1e53da0cf5ccad66b9cdfc2fdca784dd06a73713ef73785706d024873ddca5ccfcf0b91748a2c1fbd8c241934b5b473007b29d76aec5addf7b945a5f7abd6ddeccc8d0ccb26d69d4793b7224c27ba7bf45aac8a2be56086ab8c65ea69fdd593a01a29e2912378002d824bd98e6ed1c5dd5f33be529e640997f5f1bbde051fb2a669145966db4889bf32aa13777ac6c077c51bb8b2523954cea3adc307cfe53b8cbb00edf0c04c456392aea6613e8078a309dc538a6a24f80fc1b7f9fce3e3291ca6dab8090a634fcdb24e7a9de8aecd595b988f597cd623d148a8841b0a5203953166ea2e85316928f28dd2604d37c9ec80a49c0d91cbfe6d584b9b6a321b97bf99ae1d67985fd441976a828c97456003a7892c7c7f4a51bb49e3d3ea1e95ec29c89a2676", 0x1001}], 0x3) 14.720852734s ago: executing program 0 (id=3667): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) getresgid(&(0x7f0000006fc0), &(0x7f0000007000), &(0x7f0000007040)) 14.652640726s ago: executing program 2 (id=3668): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) pwritev2(r0, &(0x7f0000000180)=[{&(0x7f0000000000)='\t', 0x1}], 0x1, 0x0, 0x0, 0x10) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000100)={0x5c00, 0xa00}) 14.379811117s ago: executing program 1 (id=3669): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000100)={0xffffffffffffff6b, &(0x7f0000000080)}) 13.055354235s ago: executing program 0 (id=3672): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0106000000000000000009000200240004"], 0x38}}, 0x0) 12.815371669s ago: executing program 0 (id=3673): r0 = socket(0x2, 0x3, 0xff) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001980)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000100)=[{&(0x7f0000001600)="107f2ee8b90573738464b653", 0xc}, {&(0x7f00000001c0)="dd760343bfe5758d", 0x8}], 0x2}}], 0x1, 0x0) 12.543017928s ago: executing program 0 (id=3674): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x1}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}]}, 0x3c}}, 0x0) 12.484068189s ago: executing program 3 (id=3675): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x1, 0x5d5c, 0x9}) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x100300) 12.374260763s ago: executing program 3 (id=3676): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x458, 0x501b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000b00)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "efb9ce47"}]}}, 0x0}, 0x0) 10.540159406s ago: executing program 3 (id=3682): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x2, 0x3, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 10.358453588s ago: executing program 3 (id=3694): r0 = socket$isdn(0x22, 0x2, 0x26) r1 = socket$isdn(0x22, 0x2, 0x2) dup3(r1, r0, 0x0) 1.561859855s ago: executing program 4 (id=3688): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) 1.347295475s ago: executing program 4 (id=3689): r0 = socket$igmp6(0xa, 0x3, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt(r0, 0xff, 0x0, &(0x7f0000000240)="d91f1332", 0x4) 1.117808948s ago: executing program 4 (id=3690): syz_usbip_server_init(0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04050400c9000400"], 0x7) 334.051879ms ago: executing program 4 (id=3691): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x2, &(0x7f00000000c0)="f6", 0x1) getsockopt$inet_int(r0, 0x0, 0x2, 0x0, &(0x7f00000002c0)) 315.572499ms ago: executing program 3 (id=3699): set_mempolicy(0x3, &(0x7f0000000040)=0xfffffffffffffffb, 0x5) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) 130.129712ms ago: executing program 3 (id=3692): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 129.771709ms ago: executing program 4 (id=3693): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="2c0000008400000001000000000000000c"], 0x2c}], 0x1, 0x0) 0s ago: executing program 4 (id=3695): r0 = timerfd_create(0x0, 0x80800) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/8, 0x8}, {&(0x7f0000000700)=""/214, 0xd6}], 0x2) kernel console output (not intermixed with test programs): , SerialNumber=0 [ 310.715770][ T8546] usb 2-1: config 0 descriptor?? [ 310.924783][ T51] usb 5-1: Using ep0 maxpacket: 16 [ 310.931735][ T51] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.943274][ T51] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.962677][ T51] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 310.992290][ T51] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.00 [ 311.023183][ T51] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.028284][T11371] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2629'. [ 311.056837][ T51] usb 5-1: config 0 descriptor?? [ 311.166680][ T8546] arvo 0003:1E7D:30D4.0096: collection stack underflow [ 311.176268][ T8546] arvo 0003:1E7D:30D4.0096: item 0 4 0 12 parsing failed [ 311.183917][ T8546] arvo 0003:1E7D:30D4.0096: parse failed [ 311.190093][ T8546] arvo 0003:1E7D:30D4.0096: probe with driver arvo failed with error -22 [ 311.413664][ T8546] usb 2-1: USB disconnect, device number 53 [ 311.538952][ T51] cmedia_hs100b 0003:0D8C:0014.0097: item fetching failed at offset 0/2 [ 311.555139][ T51] cmedia_hs100b 0003:0D8C:0014.0097: probe with driver cmedia_hs100b failed with error -22 [ 311.762655][ T8546] usb 5-1: USB disconnect, device number 45 [ 312.505047][T11447] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2666'. [ 313.082558][T11479] Invalid logical block size (65534) [ 313.620860][T11509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2693'. [ 313.814923][ T5285] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 313.994713][ T5285] usb 4-1: Using ep0 maxpacket: 16 [ 314.005183][ T5285] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.016848][ T5285] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.039961][ T5285] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 314.094231][ T5285] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 314.114621][ T5285] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.135542][ T5285] usb 4-1: config 0 descriptor?? [ 314.339656][T11544] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.2714'. [ 314.584179][ T5285] microsoft 0003:045E:07DA.0098: unknown main item tag 0x0 [ 314.605104][ T5285] microsoft 0003:045E:07DA.0098: unknown main item tag 0x0 [ 314.627428][ T5285] microsoft 0003:045E:07DA.0098: unknown main item tag 0x0 [ 314.638459][ T5285] microsoft 0003:045E:07DA.0098: unknown main item tag 0x0 [ 314.654606][ T5285] microsoft 0003:045E:07DA.0098: item 0 4 0 8 parsing failed [ 314.662714][ T5285] microsoft 0003:045E:07DA.0098: parse failed [ 314.671102][ T5285] microsoft 0003:045E:07DA.0098: probe with driver microsoft failed with error -22 [ 314.808460][ T937] usb 4-1: USB disconnect, device number 36 [ 314.991980][T11574] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 314.998576][T11574] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 315.004777][ T5285] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 315.014759][T11574] vhci_hcd vhci_hcd.0: Device attached [ 315.034671][T11574] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 315.041251][T11574] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 315.049475][T11574] vhci_hcd vhci_hcd.0: Device attached [ 315.174626][ T5285] usb 2-1: Using ep0 maxpacket: 16 [ 315.186607][ T5285] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.198666][ T5285] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.205038][ T937] vhci_hcd: vhci_device speed not set [ 315.214370][ T5285] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 315.223812][ T5285] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.234611][ T5285] usb 2-1: config 0 descriptor?? [ 315.274804][ T937] usb 13-1: new full-speed USB device number 2 using vhci_hcd [ 315.297321][T11578] vhci_hcd: connection closed [ 315.300857][T11576] vhci_hcd: connection closed [ 315.306217][ T2574] vhci_hcd: stop threads [ 315.316015][ T2574] vhci_hcd: release socket [ 315.320758][ T2574] vhci_hcd: disconnect device [ 315.326282][ T2574] vhci_hcd: stop threads [ 315.330906][ T2574] vhci_hcd: release socket [ 315.337776][ T2574] vhci_hcd: disconnect device [ 315.673184][ T5285] corsair 0003:1B1C:1B02.0099: unbalanced collection at end of report description [ 315.684153][ T5285] corsair 0003:1B1C:1B02.0099: parse failed [ 315.698057][ T5285] corsair 0003:1B1C:1B02.0099: probe with driver corsair failed with error -22 [ 315.811177][T11609] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2742'. [ 315.827718][T11609] Êü: entered promiscuous mode [ 315.927281][ T5285] usb 2-1: USB disconnect, device number 54 [ 315.937736][T11615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2744'. [ 316.195765][T11628] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2749'. [ 316.815397][ T5285] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 316.974946][ T5285] usb 4-1: Using ep0 maxpacket: 8 [ 316.987661][ T5285] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.006585][ T5285] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.036903][ T5285] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 317.072860][ T5285] usb 4-1: config 0 interface 0 has no altsetting 0 [ 317.095759][ T5285] usb 4-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 317.123967][ T5285] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.156005][ T5285] usb 4-1: config 0 descriptor?? [ 317.344604][ T5287] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 317.475251][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.481794][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.504672][ T5287] usb 2-1: Using ep0 maxpacket: 16 [ 317.512108][ T5287] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 317.535450][ T5287] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 317.557361][ T5287] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 317.594590][ T5287] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 317.607038][ T5285] hid_mf 0003:0079:1846.009A: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.3-1/input0 [ 317.627212][ T5287] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 317.643555][ T5285] hid_mf 0003:0079:1846.009A: Invalid report, this should never happen! [ 317.680240][ T5285] hid_mf 0003:0079:1846.009A: Force feedback init failed. [ 317.699228][ T5287] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 317.756562][ T5287] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.765198][ T5287] usb 2-1: Product: syz [ 317.769499][ T5287] usb 2-1: Manufacturer: syz [ 317.774129][ T5287] usb 2-1: SerialNumber: syz [ 317.788894][ T5287] usb 2-1: config 0 descriptor?? [ 317.863791][ T5356] usb 4-1: USB disconnect, device number 37 [ 318.032726][ T5287] appledisplay 2-1:0.0: Error while getting initial brightness: -71 [ 318.071895][ T5287] appledisplay 2-1:0.0: probe with driver appledisplay failed with error -71 [ 318.103284][ T5287] usb 2-1: USB disconnect, device number 55 [ 318.846596][T11747] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2804'. [ 318.895390][ T5287] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 318.914624][ T5356] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 319.024750][ T5285] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 319.045195][ T5287] usb 4-1: Using ep0 maxpacket: 32 [ 319.053278][ T5287] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 319.063005][ T5287] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.072191][ T5287] usb 4-1: Product: syz [ 319.076557][ T5287] usb 4-1: Manufacturer: syz [ 319.081207][ T5287] usb 4-1: SerialNumber: syz [ 319.086731][ T5356] usb 5-1: Using ep0 maxpacket: 16 [ 319.094079][ T5287] usb 4-1: config 0 descriptor?? [ 319.100925][ T5356] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.112093][ T5356] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.121924][ T5356] usb 5-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 319.131097][ T5356] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.144286][ T5287] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 319.153286][ T5356] usb 5-1: config 0 descriptor?? [ 319.174703][ T5285] usb 2-1: Using ep0 maxpacket: 16 [ 319.183371][ T5285] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.195923][ T5285] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.207023][ T5285] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 319.222129][ T5285] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 319.231385][ T5285] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.242045][ T5285] usb 2-1: config 0 descriptor?? [ 319.573092][ T5356] betop 0003:11C2:2208.009B: unknown main item tag 0x0 [ 319.582488][ T5356] betop 0003:11C2:2208.009B: hidraw0: USB HID v0.00 Device [HID 11c2:2208] on usb-dummy_hcd.4-1/input0 [ 319.593909][ T5356] betop 0003:11C2:2208.009B: no inputs found [ 319.664286][ T5285] microsoft 0003:045E:07DA.009C: No inputs registered, leaving [ 319.676321][ T5285] microsoft 0003:045E:07DA.009C: hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 319.689136][ T5285] microsoft 0003:045E:07DA.009C: no inputs found [ 319.695914][ T5285] microsoft 0003:045E:07DA.009C: could not initialize ff, continuing anyway [ 319.722532][ T5287] gspca_ov534_9: reg_w failed -71 [ 319.787466][ T5285] usb 5-1: USB disconnect, device number 46 [ 319.885027][ T5302] usb 2-1: USB disconnect, device number 56 [ 320.017245][ T5287] gspca_ov534_9: Unknown sensor 0000 [ 320.017323][ T5287] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 320.034834][ T5287] usb 4-1: USB disconnect, device number 38 [ 320.244732][ T5285] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 320.404672][ T937] vhci_hcd: vhci_device speed not set [ 320.418306][ T5285] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.429404][ T5285] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.439406][ T5285] usb 3-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 320.448618][ T5285] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.460896][ T5285] usb 3-1: config 0 descriptor?? [ 320.880931][ T5285] lenovo 0003:17EF:6062.009D: hidraw0: USB HID v0.00 Device [HID 17ef:6062] on usb-dummy_hcd.2-1/input0 [ 321.088916][ T9] usb 3-1: USB disconnect, device number 52 [ 321.696290][ T51] usb usb14-port1: attempt power cycle [ 322.257942][ T51] usb usb14-port1: unable to enumerate USB device [ 323.126690][ T29] audit: type=1326 audit(1727145481.670:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11769 comm="syz.3.2817" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 323.206285][ T29] audit: type=1326 audit(1727145481.670:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11769 comm="syz.3.2817" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 323.254391][ T29] audit: type=1326 audit(1727145481.700:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11769 comm="syz.3.2817" exe="/root/syz-executor" sig=0 arch=40000003 syscall=327 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 323.323382][ T29] audit: type=1326 audit(1727145481.700:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11769 comm="syz.3.2817" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 323.384012][ T29] audit: type=1326 audit(1727145481.700:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11769 comm="syz.3.2817" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06579 code=0x7ffc0000 [ 323.560796][T11793] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2828'. [ 323.566664][T11798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2827'. [ 323.816736][T11812] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 324.065495][ T5287] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 324.236848][ T5287] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.264631][ T5287] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.297571][ T5287] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 324.311265][ T5287] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.328908][ T5287] usb 5-1: config 0 descriptor?? [ 324.426894][T11842] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2852'. [ 324.452268][T11842] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2852'. [ 324.754617][ T5287] holtek_kbd 0003:04D9:A055.009E: unknown main item tag 0x0 [ 324.762013][ T5287] holtek_kbd 0003:04D9:A055.009E: item fetching failed at offset 3/5 [ 324.791088][ T5287] holtek_kbd 0003:04D9:A055.009E: probe with driver holtek_kbd failed with error -22 [ 324.974851][ T937] usb 5-1: USB disconnect, device number 47 [ 325.110395][T11881] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2882'. [ 325.256916][ T29] audit: type=1326 audit(1727145483.800:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11890 comm="syz.1.2875" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 325.306145][ T29] audit: type=1326 audit(1727145483.800:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11890 comm="syz.1.2875" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 325.337374][ T29] audit: type=1326 audit(1727145483.800:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11890 comm="syz.1.2875" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 325.369884][ T29] audit: type=1326 audit(1727145483.800:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11890 comm="syz.1.2875" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 325.428013][ T29] audit: type=1326 audit(1727145483.800:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11890 comm="syz.1.2875" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 325.669524][T11907] Option 'L"»áî}0æ' to dns_resolver key: bad/missing value [ 326.024669][ T937] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 326.174772][ T937] usb 2-1: Using ep0 maxpacket: 16 [ 326.183697][ T937] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 326.192893][ T937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.200988][ T937] usb 2-1: Product: syz [ 326.205372][ T937] usb 2-1: Manufacturer: syz [ 326.210012][ T937] usb 2-1: SerialNumber: syz [ 326.216448][ T937] usb 2-1: config 0 descriptor?? [ 326.227006][ T937] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 326.842133][ T937] ssu100 2-1:0.0: probe with driver ssu100 failed with error -71 [ 326.886074][ T937] usb 2-1: USB disconnect, device number 57 [ 327.414930][ T12] bridge_slave_1: left promiscuous mode [ 327.445389][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.520995][ T12] bridge_slave_0: left promiscuous mode [ 327.535066][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.598484][ T5244] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 327.630806][ T5244] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 327.728542][ T5244] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 327.794852][ T5244] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 327.802936][ T5244] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 327.810964][ T5244] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 327.914739][ T5287] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 328.097805][ T5287] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 328.112521][ T5287] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.134754][ T5287] usb 3-1: Product: syz [ 328.159326][ T5287] usb 3-1: Manufacturer: syz [ 328.164215][ T5287] usb 3-1: SerialNumber: syz [ 328.184147][ T5287] usb 3-1: config 0 descriptor?? [ 328.263425][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 328.276302][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 328.295482][ T12] bond0 (unregistering): Released all slaves [ 328.314411][T11962] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.2908'. [ 328.412780][ T12] Êü: left promiscuous mode [ 328.517849][ T12] tipc: Disabling bearer [ 328.540401][ T12] tipc: Left network mode [ 328.652203][ T5287] mos7840 3-1:0.0: required endpoints missing [ 328.661180][ T5287] usb 3-1: USB disconnect, device number 53 [ 328.715725][T11981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2912'. [ 328.877715][T11990] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2915'. [ 328.896610][T11990] openvswitch: netlink: ERSPAN option length err (len 3060, max 255). [ 329.046177][T11997] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2916'. [ 329.081011][T11997] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 329.284355][ T12] hsr_slave_0: left promiscuous mode [ 329.290611][ T12] hsr_slave_1: left promiscuous mode [ 329.303579][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.384361][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 329.582749][T12022] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2925'. [ 329.930048][ T12] team0 (unregistering): Port device team_slave_1 removed [ 329.937516][ T5244] Bluetooth: hci0: command tx timeout [ 329.944293][ T51] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 329.993091][ T12] team0 (unregistering): Port device team_slave_0 removed [ 330.066107][ T937] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 330.127418][ T51] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.141925][ T51] usb 3-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 330.152751][ T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.166521][ T51] usb 3-1: config 0 descriptor?? [ 330.234932][ T937] usb 5-1: Using ep0 maxpacket: 16 [ 330.242143][ T937] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.274230][ T937] usb 5-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 330.293332][ T937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.310827][ T937] usb 5-1: Product: syz [ 330.315324][ T937] usb 5-1: Manufacturer: syz [ 330.319961][ T937] usb 5-1: SerialNumber: syz [ 330.338179][ T937] usb 5-1: config 0 descriptor?? [ 330.570626][T11960] chnl_net:caif_netlink_parms(): no params data found [ 330.605436][ T51] petalynx 0003:18B1:0037.009F: unknown main item tag 0xd [ 330.622871][ T51] petalynx 0003:18B1:0037.009F: unexpected long global item [ 330.651244][ T51] petalynx 0003:18B1:0037.009F: parse failed [ 330.684884][ T51] petalynx 0003:18B1:0037.009F: probe with driver petalynx failed with error -22 [ 330.824875][ T51] usb 3-1: USB disconnect, device number 54 [ 330.854338][ T937] usb 5-1: Found UVC 0.00 device syz (045e:0721) [ 330.861093][T11960] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.869227][T11960] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.876847][T11960] bridge_slave_0: entered allmulticast mode [ 330.883005][ T937] usb 5-1: No valid video chain found. [ 330.890880][T11960] bridge_slave_0: entered promiscuous mode [ 330.929981][T11960] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.947278][T11960] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.954851][T11960] bridge_slave_1: entered allmulticast mode [ 330.961972][T11960] bridge_slave_1: entered promiscuous mode [ 331.089984][T11960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.095082][ T51] usb 5-1: USB disconnect, device number 48 [ 331.121807][T11960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.216301][T11960] team0: Port device team_slave_0 added [ 331.238766][T11960] team0: Port device team_slave_1 added [ 331.300049][T11960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.313577][T11960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.346589][T11960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.364435][T11960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.374847][ T9] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 331.394374][T11960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.427618][T11960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.504340][T11960] hsr_slave_0: entered promiscuous mode [ 331.511774][T11960] hsr_slave_1: entered promiscuous mode [ 331.534588][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 331.552068][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.572422][ T9] usb 2-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00 [ 331.602097][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.620887][ T9] usb 2-1: config 0 descriptor?? [ 331.914127][T12080] pim6reg: entered allmulticast mode [ 331.982576][T12080] pim6reg: left allmulticast mode [ 332.014852][ T5244] Bluetooth: hci0: command tx timeout [ 332.077489][ T9] sigmamicro 0003:1C4F:0059.00A0: unknown main item tag 0x0 [ 332.100405][ T9] sigmamicro 0003:1C4F:0059.00A0: hidraw0: USB HID v0.00 Device [HID 1c4f:0059] on usb-dummy_hcd.1-1/input0 [ 332.226374][T12091] netlink: 'syz.2.2944': attribute type 5 has an invalid length. [ 332.325312][ T9] usb 2-1: USB disconnect, device number 58 [ 332.543861][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 332.543879][ T29] audit: type=1326 audit(1727145491.080:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12102 comm="syz.2.2949" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x7ffc0000 [ 332.547095][ T29] audit: type=1326 audit(1727145491.090:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12102 comm="syz.2.2949" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x7ffc0000 [ 332.555104][ T29] audit: type=1326 audit(1727145491.090:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12102 comm="syz.2.2949" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f75579 code=0x7ffc0000 [ 332.555151][ T29] audit: type=1326 audit(1727145491.100:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12102 comm="syz.2.2949" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x7ffc0000 [ 332.559043][ T29] audit: type=1326 audit(1727145491.100:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12102 comm="syz.2.2949" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x7ffc0000 [ 332.559081][ T29] audit: type=1326 audit(1727145491.100:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12102 comm="syz.2.2949" exe="/root/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf7f75579 code=0x7ffc0000 [ 332.560779][ T29] audit: type=1326 audit(1727145491.100:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12102 comm="syz.2.2949" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf7f75579 code=0x7ffc0000 [ 332.761947][ T29] audit: type=1326 audit(1727145491.300:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12102 comm="syz.2.2949" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x7ffc0000 [ 332.761998][ T29] audit: type=1326 audit(1727145491.300:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12102 comm="syz.2.2949" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75579 code=0x7ffc0000 [ 332.809987][T11960] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 332.917660][T11960] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 332.932707][T11960] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 332.945981][T11960] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 333.219845][T11960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.286211][T11960] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.307385][ T2574] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.314686][ T2574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.376374][T12118] tipc: Enabled bearer , priority 10 [ 333.408808][ T2574] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.416030][ T2574] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.714269][T11960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.894916][T11960] veth0_vlan: entered promiscuous mode [ 333.907116][T11960] veth1_vlan: entered promiscuous mode [ 334.015262][T11960] veth0_macvtap: entered promiscuous mode [ 334.024040][T12137] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 334.042311][T12139] program syz.4.2958 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 334.044726][T11960] veth1_macvtap: entered promiscuous mode [ 334.069967][T11960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.080849][T11960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.091431][T11960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.102406][T11960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.112481][ T5244] Bluetooth: hci0: command tx timeout [ 334.113783][T11960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.146118][T11960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.162729][T12140] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 334.175726][T11960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.185837][T11960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.198151][T11960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.214155][T11960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 334.252776][T11960] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.262321][ C1] sd 0:0:1:0: [sda] tag#402 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 334.272704][ C1] sd 0:0:1:0: [sda] tag#402 CDB: Read(6) 08 00 00 00 00 00 [ 334.284445][T11960] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.293721][T11960] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.302668][T11960] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.416358][T12151] netlink: 47 bytes leftover after parsing attributes in process `syz.1.2963'. [ 334.448616][T12151] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2963'. [ 334.480123][T12156] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 334.505455][ T5302] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 334.645395][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.653631][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.664128][ T29] audit: type=1326 audit(1727145493.200:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12162 comm="syz.4.2966" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84579 code=0x7ffc0000 [ 334.731427][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.741823][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.776271][ T5302] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 334.814960][ T5302] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 334.854601][ T5302] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 334.911500][ T5302] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 334.941819][ T5302] usb 3-1: config 0 interface 0 has no altsetting 0 [ 334.962630][ T5302] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 334.973708][ T5302] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 334.994662][ T5302] usb 3-1: Product: syz [ 334.994689][ T5302] usb 3-1: Manufacturer: syz [ 334.994708][ T5302] usb 3-1: SerialNumber: syz [ 334.997414][ T5302] usb 3-1: config 0 descriptor?? [ 335.058867][ T5302] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 335.100080][ T5302] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 335.358121][ T5302] usb 3-1: USB disconnect, device number 55 [ 335.382698][ T5302] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 335.667889][T12214] netlink: 'syz.3.2978': attribute type 3 has an invalid length. [ 335.705849][T12214] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2978'. [ 336.067230][T12233] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2986'. [ 336.177770][ T5244] Bluetooth: hci0: command tx timeout [ 336.750339][T12274] netlink: 'syz.2.3001': attribute type 5 has an invalid length. [ 336.984655][ T5287] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 337.171386][ T5287] usb 4-1: config 0 has no interfaces? [ 337.184827][ T5287] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 337.193980][ T5287] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.224690][ T5287] usb 4-1: Product: syz [ 337.229023][ T5287] usb 4-1: Manufacturer: syz [ 337.244583][ T5287] usb 4-1: SerialNumber: syz [ 337.264661][ T5302] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 337.282718][ T5287] usb 4-1: config 0 descriptor?? [ 337.418187][ T5302] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.429686][ T5302] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.449591][ T5302] usb 5-1: New USB device found, idVendor=056a, idProduct=0059, bcdDevice= 0.00 [ 337.490290][ T5302] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.515209][ T5302] usb 5-1: config 0 descriptor?? [ 337.538219][ T8546] usb 4-1: USB disconnect, device number 39 [ 337.954702][ T5302] wacom 0003:056A:0059.00A1: unknown main item tag 0x0 [ 337.974856][ T5302] wacom 0003:056A:0059.00A1: hidraw0: USB HID v0.00 Device [HID 056a:0059] on usb-dummy_hcd.4-1/input0 [ 338.200098][ T9] usb 5-1: USB disconnect, device number 49 [ 338.544577][ T5302] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 338.659129][T12362] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3029'. [ 338.704720][ T5302] usb 2-1: Using ep0 maxpacket: 32 [ 338.711748][ T5302] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.743479][ T5302] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.759075][ T5302] usb 2-1: New USB device found, idVendor=1e71, idProduct=200f, bcdDevice= 0.00 [ 338.782815][ T5302] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.803800][ T5302] usb 2-1: config 0 descriptor?? [ 338.841512][T12368] vivid-007: disconnect [ 338.847830][T12367] vivid-007: reconnect [ 339.400167][ T5302] nzxt-smart2 0003:1E71:200F.00A2: unknown main item tag 0xe [ 339.425498][ T5302] nzxt-smart2 0003:1E71:200F.00A2: hidraw0: USB HID v0.00 Device [HID 1e71:200f] on usb-dummy_hcd.1-1/input0 [ 339.586482][T12402] openvswitch: netlink: Actions may not be safe on all matching packets [ 339.596004][ T5302] usb 2-1: USB disconnect, device number 59 [ 339.929602][T12418] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3054'. [ 341.464623][ T5287] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 341.614922][ T5287] usb 4-1: Using ep0 maxpacket: 16 [ 341.622116][ T5287] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.632204][ T5287] usb 4-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00 [ 341.641354][ T5287] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.651597][ T5287] usb 4-1: config 0 descriptor?? [ 342.081936][ T5287] sigmamicro 0003:1C4F:0059.00A3: unknown main item tag 0x0 [ 342.093817][ T5287] sigmamicro 0003:1C4F:0059.00A3: hidraw0: USB HID v0.00 Device [HID 1c4f:0059] on usb-dummy_hcd.3-1/input0 [ 342.189350][T12498] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3094'. [ 342.199555][T12498] tipc: Started in network mode [ 342.205966][T12498] tipc: Node identity , cluster identity 4711 [ 342.212331][T12498] tipc: Failed to set node id, please configure manually [ 342.219971][T12498] tipc: Enabling of bearer rejected, failed to enable media [ 342.403789][ T9] usb 4-1: USB disconnect, device number 40 [ 342.415166][ T52] bridge_slave_1: left promiscuous mode [ 342.424561][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.468076][ T52] bridge_slave_0: left promiscuous mode [ 342.505515][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.531184][ T4620] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 342.542133][ T4620] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 342.552304][ T4620] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 342.561969][ T4620] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 342.580873][ T4620] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 342.589131][ T4620] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 342.713089][ T52] tipc: Disabling bearer [ 342.964795][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 342.964816][ T29] audit: type=1326 audit(1727145501.500:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12524 comm="syz.1.3103" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 342.994100][ T29] audit: type=1326 audit(1727145501.530:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12524 comm="syz.1.3103" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 343.036521][ T29] audit: type=1326 audit(1727145501.570:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12524 comm="syz.1.3103" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 343.065140][ T29] audit: type=1326 audit(1727145501.580:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12524 comm="syz.1.3103" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 343.087629][ T29] audit: type=1326 audit(1727145501.580:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12524 comm="syz.1.3103" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 343.109828][ T29] audit: type=1326 audit(1727145501.610:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12524 comm="syz.1.3103" exe="/root/syz-executor" sig=0 arch=40000003 syscall=368 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 343.132368][ T29] audit: type=1326 audit(1727145501.610:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12524 comm="syz.1.3103" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 343.154601][ T29] audit: type=1326 audit(1727145501.610:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12524 comm="syz.1.3103" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 343.578669][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 343.587382][ T5287] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 343.600492][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 343.611419][ T52] bond0 (unregistering): Released all slaves [ 343.641025][T12548] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3111'. [ 343.655558][T12548] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3111'. [ 343.749078][ T5287] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.794103][ T5287] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.804638][ T52] tipc: Disabling bearer [ 343.810899][ T5287] usb 4-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 343.821061][ T5287] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.831810][ T5287] usb 4-1: config 0 descriptor?? [ 343.858261][ T52] tipc: Left network mode [ 344.214256][T12514] chnl_net:caif_netlink_parms(): no params data found [ 344.255174][ T5285] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 344.295616][ T5287] logitech 0003:046D:C626.00A4: unbalanced delimiter at end of report description [ 344.344761][ T52] hsr_slave_0: left promiscuous mode [ 344.351327][ T5287] logitech 0003:046D:C626.00A4: parse failed [ 344.365522][ T5287] logitech 0003:046D:C626.00A4: probe with driver logitech failed with error -22 [ 344.375481][ T52] hsr_slave_1: left promiscuous mode [ 344.408201][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 344.426023][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 344.439825][ T5285] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 344.454804][ T5285] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.484677][ T5285] usb 2-1: Product: syz [ 344.488997][ T5285] usb 2-1: Manufacturer: syz [ 344.513995][ T5285] usb 2-1: SerialNumber: syz [ 344.578613][ T5285] usb 2-1: config 0 descriptor?? [ 344.587793][ T5287] usb 4-1: USB disconnect, device number 41 [ 344.606661][ T5285] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 060 [ 344.664691][ T5244] Bluetooth: hci1: command tx timeout [ 344.813749][ T29] audit: type=1326 audit(1727145503.350:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12572 comm="syz.0.3124" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 344.870625][ T29] audit: type=1326 audit(1727145503.360:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12572 comm="syz.0.3124" exe="/root/syz-executor" sig=0 arch=40000003 syscall=323 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 345.109565][ T52] team0 (unregistering): Port device team_slave_1 removed [ 345.163213][ T52] team0 (unregistering): Port device team_slave_0 removed [ 345.265537][ T5285] i2c i2c-1: failure reading functionality [ 345.272974][ T5285] i2c i2c-1: connected i2c-tiny-usb device [ 345.301304][ T5285] usb 2-1: USB disconnect, device number 60 [ 345.767216][T12583] netlink: 'syz.3.3117': attribute type 3 has an invalid length. [ 346.031995][T12514] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.046241][T12514] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.053522][T12514] bridge_slave_0: entered allmulticast mode [ 346.067089][T12514] bridge_slave_0: entered promiscuous mode [ 346.082357][T12599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3121'. [ 346.103503][T12599] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3121'. [ 346.150382][T12514] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.158253][T12514] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.165719][T12514] bridge_slave_1: entered allmulticast mode [ 346.172811][T12514] bridge_slave_1: entered promiscuous mode [ 346.286311][T12514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.328105][T12514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.496331][T12514] team0: Port device team_slave_0 added [ 346.530332][T12514] team0: Port device team_slave_1 added [ 346.617613][T12514] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.642558][T12514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.725552][T12514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.735354][ T5244] Bluetooth: hci1: command tx timeout [ 346.781930][T12514] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.821849][T12514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.885889][T12514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.108366][T12514] hsr_slave_0: entered promiscuous mode [ 347.115617][T12514] hsr_slave_1: entered promiscuous mode [ 347.123373][T12514] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 347.140240][T12514] Cannot create hsr debugfs directory [ 347.322707][T12658] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 347.845016][ T51] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 348.014723][ T51] usb 3-1: Using ep0 maxpacket: 16 [ 348.027595][ T51] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.063073][ T51] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.085699][ T51] usb 3-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 348.095467][ T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.107712][ T51] usb 3-1: config 0 descriptor?? [ 348.114681][ T8546] usb 2-1: new low-speed USB device number 61 using dummy_hcd [ 348.190651][ T9] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 348.280145][T12514] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 348.293326][T12514] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 348.306399][ T8546] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 348.320393][T12514] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 348.324208][ T8546] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 348.346772][T12514] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 348.349400][ T8546] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 348.364539][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 348.372625][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.384763][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.397570][ T8546] usb 2-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 348.414115][ T9] usb 4-1: New USB device found, idVendor=2133, idProduct=0018, bcdDevice= 0.00 [ 348.425120][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.436078][ T8546] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 348.450631][ T9] usb 4-1: config 0 descriptor?? [ 348.469387][ T8546] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 348.496545][ T8546] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 348.517726][ T8546] usb 2-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 348.543317][T12514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.556059][ T8546] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 348.557612][ T51] megaworld 0003:07B5:0312.00A5: item fetching failed at offset 2/5 [ 348.574607][ T8546] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 348.574641][ T8546] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 348.574691][ T8546] usb 2-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 348.614442][T12514] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.619222][ T51] megaworld 0003:07B5:0312.00A5: parse failed [ 348.631369][ T51] megaworld 0003:07B5:0312.00A5: probe with driver megaworld failed with error -22 [ 348.650384][ T8546] usb 2-1: string descriptor 0 read error: -22 [ 348.677858][ T8546] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 348.696826][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.703982][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.724163][ T8546] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.725725][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.739341][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.771876][ T8546] adutux 2-1:168.0: interrupt endpoints not found [ 348.815528][ T5244] Bluetooth: hci1: command tx timeout [ 348.869529][T12514] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.871923][ T51] usb 3-1: USB disconnect, device number 56 [ 348.938884][ T9] viewsonic 0003:2133:0018.00A6: hidraw0: USB HID v0.00 Device [HID 2133:0018] on usb-dummy_hcd.3-1/input0 [ 348.958910][T12514] veth0_vlan: entered promiscuous mode [ 348.973250][T12514] veth1_vlan: entered promiscuous mode [ 349.047664][T12514] veth0_macvtap: entered promiscuous mode [ 349.050679][ T9] usb 2-1: USB disconnect, device number 61 [ 349.081431][T12514] veth1_macvtap: entered promiscuous mode [ 349.102553][T12514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.120894][T12514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.131024][T12514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.146145][ T8546] usb 4-1: USB disconnect, device number 42 [ 349.153523][T12514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.172392][T12514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.187276][T12514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.202012][T12514] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.213464][T12514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.230916][T12514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.242653][T12514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.254314][T12514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.264870][T12514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.280581][T12514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.292153][T12514] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.319433][T12514] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.330614][T12514] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.347484][T12514] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.360460][T12514] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.495760][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.514606][ T9] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 349.542016][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.572713][ T1177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.580888][ T1177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.684570][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 349.696530][ T9] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 349.712228][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 349.739122][ T9] usb 2-1: config 168 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 349.751749][T12720] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 349.760319][ T9] usb 2-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 349.792764][ T9] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 349.815304][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 349.831235][ T9] usb 2-1: config 168 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 349.851789][ T9] usb 2-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 349.916941][ T9] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 349.927784][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 349.937942][ T9] usb 2-1: config 168 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 349.948093][ T9] usb 2-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 349.973145][ T9] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 349.987177][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.996567][ T9] usb 2-1: Product: syz [ 350.000951][ T9] usb 2-1: Manufacturer: syz [ 350.006135][ T9] usb 2-1: SerialNumber: syz [ 350.244628][ T5287] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 350.263623][ T9] adutux 2-1:168.0: interrupt endpoints not found [ 350.283294][ T9] usb 2-1: USB disconnect, device number 62 [ 350.354625][ T51] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 350.394709][ T5287] usb 5-1: Using ep0 maxpacket: 32 [ 350.461934][ T5287] usb 5-1: New USB device found, idVendor=0cde, idProduct=0023, bcdDevice=21.32 [ 350.477371][ T5287] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.489345][ T5287] usb 5-1: Product: syz [ 350.493849][ T5287] usb 5-1: Manufacturer: syz [ 350.506546][ T51] usb 4-1: Using ep0 maxpacket: 16 [ 350.518069][ T5287] usb 5-1: SerialNumber: syz [ 350.529053][ T51] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.540620][ T51] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.553460][ T5287] usb 5-1: config 0 descriptor?? [ 350.560720][ T51] usb 4-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 350.571519][ T51] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.594149][ T51] usb 4-1: config 0 descriptor?? [ 350.894636][ T5244] Bluetooth: hci1: command tx timeout [ 350.946226][T12578] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.025403][ T51] cypress 0003:04B4:DE61.00A7: unknown main item tag 0x0 [ 351.044445][ T51] cypress 0003:04B4:DE61.00A7: hidraw0: USB HID v0.00 Device [HID 04b4:de61] on usb-dummy_hcd.3-1/input0 [ 351.141400][T12578] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.279292][ T51] usb 4-1: USB disconnect, device number 43 [ 351.308892][T12578] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.397513][T12578] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.444923][ T5287] usb 5-1: reset high-speed USB device number 50 using dummy_hcd [ 351.596798][ T4620] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 351.613314][ T4620] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 351.622945][ T4620] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 351.635967][ T4620] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 351.648669][ T4620] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 351.655403][ T5287] usb 5-1: device firmware changed [ 351.662768][ T4620] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 351.723320][ T5287] usb 5-1: USB disconnect, device number 50 [ 351.854818][ T5287] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 352.027678][ T5287] usb 5-1: Using ep0 maxpacket: 32 [ 352.038702][ T5287] usb 5-1: string descriptor 0 read error: -22 [ 352.047962][ T5287] usb 5-1: New USB device found, idVendor=0cde, idProduct=0023, bcdDevice=21.32 [ 352.074539][ T5287] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.104154][ T5287] usb 5-1: config 0 descriptor?? [ 352.184668][ T9] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 352.246722][ T5287] usb 5-1: reset high-speed USB device number 51 using dummy_hcd [ 352.347380][ T9] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 352.373924][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.405162][ T9] usb 4-1: config 0 descriptor?? [ 352.504268][T12578] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 352.522928][T12578] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 352.536639][T12578] bond0 (unregistering): Released all slaves [ 352.603746][T12578] Êü: left promiscuous mode [ 352.655863][T12791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.695414][T12791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.755798][ T9] [drm] vendor descriptor length:6 data:06 5f 01 05 41 00 00 00 00 00 00 [ 352.780441][ T9] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 352.957575][ T9] [drm:udl_init] *ERROR* Selecting channel failed [ 352.991748][ T9] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 353.023482][ T9] [drm] Initialized udl on minor 2 [ 353.056407][ T9] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 353.066065][ T9] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 353.075036][ T5284] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 353.092067][ T9] usb 4-1: USB disconnect, device number 44 [ 353.098186][ T5284] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 353.171260][ T5287] usb 5-1: USB disconnect, device number 51 [ 353.482456][T12578] hsr_slave_0: left promiscuous mode [ 353.489670][T12578] hsr_slave_1: left promiscuous mode [ 353.498971][T12578] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.499009][T12578] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.500409][T12578] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 353.500441][T12578] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.585802][T12578] veth1_macvtap: left promiscuous mode [ 353.585902][T12578] veth0_macvtap: left promiscuous mode [ 353.586038][T12578] veth1_vlan: left promiscuous mode [ 353.586164][T12578] veth0_vlan: left promiscuous mode [ 353.785020][ T5244] Bluetooth: hci2: command tx timeout [ 354.198246][T12868] netlink: 'syz.4.3191': attribute type 5 has an invalid length. [ 354.854624][ T9] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 354.997951][T12578] team0 (unregistering): Port device team_slave_1 removed [ 355.024675][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 355.048157][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.068619][T12578] team0 (unregistering): Port device team_slave_0 removed [ 355.081951][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 355.104563][ T9] usb 4-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 355.123882][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.163349][ T9] usb 4-1: config 0 descriptor?? [ 355.624954][ T9] input: HID 041e:3100 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:041E:3100.00A8/input/input67 [ 355.715088][ T9] creative-sb0540 0003:041E:3100.00A8: input,hidraw0: USB HID v0.00 Device [HID 041e:3100] on usb-dummy_hcd.3-1/input0 [ 355.856274][ T5244] Bluetooth: hci2: command tx timeout [ 355.897109][ T9] usb 4-1: USB disconnect, device number 45 [ 355.940761][T12781] chnl_net:caif_netlink_parms(): no params data found [ 356.176502][T12781] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.193404][T12781] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.210740][T12781] bridge_slave_0: entered allmulticast mode [ 356.223321][T12781] bridge_slave_0: entered promiscuous mode [ 356.249669][T12781] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.272872][T12781] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.284123][T12781] bridge_slave_1: entered allmulticast mode [ 356.294151][T12781] bridge_slave_1: entered promiscuous mode [ 356.344251][T12781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.363220][T12781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 356.401003][T12781] team0: Port device team_slave_0 added [ 356.411900][T12781] team0: Port device team_slave_1 added [ 356.436251][T12781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.443246][T12781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.479271][T12781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.521099][T12781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.528330][T12781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.554435][T12781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.623077][T12781] hsr_slave_0: entered promiscuous mode [ 356.632219][T12781] hsr_slave_1: entered promiscuous mode [ 356.643735][T12781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 356.654309][T12781] Cannot create hsr debugfs directory [ 356.784647][ T8546] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 356.976642][ T8546] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.011769][ T8546] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.042564][ T8546] usb 5-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 357.053035][ T8546] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.073698][ T8546] usb 5-1: config 0 descriptor?? [ 357.412686][T12962] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3230'. [ 357.423454][T12962] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3230'. [ 357.554390][ T8546] hid-multitouch 0003:0EEF:72D0.00A9: hidraw0: USB HID v0.00 Device [HID 0eef:72d0] on usb-dummy_hcd.4-1/input0 [ 357.641469][T12781] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 357.668838][T12781] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 357.707529][T12781] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 357.779325][T12781] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 357.788050][ T9] usb 5-1: USB disconnect, device number 52 [ 357.935587][ T5244] Bluetooth: hci2: command tx timeout [ 358.016608][ T5285] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 358.050599][T12781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.091030][T12781] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.122322][ T2574] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.129819][ T2574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.184633][ T5285] usb 4-1: Using ep0 maxpacket: 32 [ 358.193510][ T5285] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 358.193635][ T2574] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.212437][ T2574] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.226422][ T5285] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 358.263723][ T5285] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 358.274633][ T9] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 358.299626][ T5285] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 358.340012][ T5285] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.382677][ T5285] usb 4-1: config 0 descriptor?? [ 358.409472][T12975] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 358.451198][ T5285] hub 4-1:0.0: USB hub found [ 358.452691][T12781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.467885][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 358.486268][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 358.532640][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 358.556511][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 358.586130][ T9] usb 2-1: SerialNumber: syz [ 358.607020][ T9] usb 2-1: config 0 descriptor?? [ 358.615486][T12781] veth0_vlan: entered promiscuous mode [ 358.636223][ T9] usb 2-1: Found UVC 0.00 device (05ac:8501) [ 358.643225][ T9] usb 2-1: Failed to create links for entity 255 [ 358.671101][ T5285] hub 4-1:0.0: 4 ports detected [ 358.676132][T12781] veth1_vlan: entered promiscuous mode [ 358.702481][ T9] usb 2-1: Failed to register entities (-22). [ 358.708309][ T5285] hub 4-1:0.0: insufficient power available to use all downstream ports [ 358.728122][T12781] veth0_macvtap: entered promiscuous mode [ 358.780934][T12781] veth1_macvtap: entered promiscuous mode [ 358.832599][T12781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.886387][T12781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.893667][ T5285] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 358.898567][ T9] usb 2-1: USB disconnect, device number 63 [ 358.909592][ T5285] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 358.924700][T12781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.954311][ T5285] usbhid 4-1:0.0: can't add hid device: -71 [ 358.963322][T12781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.981297][T12781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.982192][ T5285] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 359.005797][T12781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.031956][T12781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 359.051686][T12781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.069240][T12781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.081486][T12781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.084728][ T5285] usb 4-1: USB disconnect, device number 46 [ 359.092070][T12781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.108958][T12781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.125289][T12781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.138149][T12781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 359.197415][T12781] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.211775][T12781] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.221924][T12781] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.241807][T12781] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.376254][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.390028][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.455845][ T2898] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.477403][ T2898] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.015111][ T5244] Bluetooth: hci2: command tx timeout [ 360.254767][ T9] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 360.424653][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 360.436914][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.467810][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 360.486741][ T9] usb 3-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 360.524703][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.546053][ T9] usb 3-1: config 0 descriptor?? [ 360.727863][T13059] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3241'. [ 360.975850][ T9] belkin 0003:1020:0006.00AA: unknown main item tag 0xd [ 361.023737][ T9] belkin 0003:1020:0006.00AA: hidraw0: USB HID v0.00 Device [HID 1020:0006] on usb-dummy_hcd.2-1/input0 [ 361.099011][T12972] coredump: 640(syz.0.3232): written to core: VMAs: 31, size 82612224; core: 61996734 bytes, pos 82616320 [ 361.234717][ T5285] usb 3-1: USB disconnect, device number 57 [ 361.310081][ T9] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 361.501879][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.525123][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.541092][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 361.570584][ T9] usb 4-1: New USB device found, idVendor=056a, idProduct=00b5, bcdDevice= 0.00 [ 361.580422][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.604286][ T9] usb 4-1: config 0 descriptor?? [ 362.028667][ T9] wacom 0003:056A:00B5.00AB: Unknown device_type for 'HID 056a:00b5'. Assuming pen. [ 362.072364][ T9] wacom 0003:056A:00B5.00AB: hidraw0: USB HID v0.00 Device [HID 056a:00b5] on usb-dummy_hcd.3-1/input0 [ 362.101523][ T9] input: Wacom Intuos3 6x11 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00B5.00AB/input/input68 [ 362.172323][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 362.172343][ T29] audit: type=1326 audit(1727145520.710:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13103 comm="syz.0.3264" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 362.177107][ T8546] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 362.181540][ T29] audit: type=1326 audit(1727145520.720:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13103 comm="syz.0.3264" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 362.250058][ T9] usb 4-1: USB disconnect, device number 47 [ 362.256119][ T29] audit: type=1326 audit(1727145520.720:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13103 comm="syz.0.3264" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 362.256165][ T29] audit: type=1326 audit(1727145520.720:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13103 comm="syz.0.3264" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 362.256204][ T29] audit: type=1326 audit(1727145520.720:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13103 comm="syz.0.3264" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 362.256245][ T29] audit: type=1326 audit(1727145520.740:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13103 comm="syz.0.3264" exe="/root/syz-executor" sig=0 arch=40000003 syscall=148 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 362.256284][ T29] audit: type=1326 audit(1727145520.750:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13103 comm="syz.0.3264" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 362.256322][ T29] audit: type=1326 audit(1727145520.750:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13103 comm="syz.0.3264" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 362.474712][ T8546] usb 2-1: Using ep0 maxpacket: 32 [ 362.485102][ T8546] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.505845][ T8546] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.555268][ T8546] usb 2-1: New USB device found, idVendor=046d, idProduct=c714, bcdDevice= 0.00 [ 362.565186][ T8546] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.577129][ T8546] usb 2-1: config 0 descriptor?? [ 362.802163][T13121] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3271'. [ 362.904702][ T9] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 363.090290][T13131] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3276'. [ 363.091240][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.139104][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 363.161318][ T9] usb 3-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 363.184777][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.222633][ T9] usb 3-1: config 0 descriptor?? [ 363.230803][ T937] usb 2-1: USB disconnect, device number 64 [ 363.538250][ T29] audit: type=1326 audit(1727145522.070:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13146 comm="syz.3.3285" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 363.606476][ T29] audit: type=1326 audit(1727145522.070:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13146 comm="syz.3.3285" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 363.667738][ T9] hid-rmi 0003:06CB:81A7.00AD: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.2-1/input0 [ 363.905578][ T5302] usb 3-1: USB disconnect, device number 58 [ 364.187185][T13171] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 364.197593][T13171] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 364.203799][T13171] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 364.210286][T13171] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 364.222040][T13171] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 364.243555][T13171] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 364.250551][T13171] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 364.275186][T13171] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 364.291411][T13171] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 364.298910][T13171] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 364.316939][T13171] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 364.884731][ T9] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 365.055140][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 365.066600][ T9] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 365.080758][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.092857][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 365.134605][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 365.164259][ T9] usb 4-1: New USB device found, idVendor=056a, idProduct=00b3, bcdDevice= 0.00 [ 365.174717][ T5287] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 365.183979][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.195894][ T9] usb 4-1: config 0 descriptor?? [ 365.363377][ T5287] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.376660][ T5287] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 365.404718][ T5287] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 365.413918][ T5287] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.430906][ T5287] usb 3-1: config 0 descriptor?? [ 365.653869][ T9] wacom 0003:056A:00B3.00AE: unknown main item tag 0x0 [ 365.675765][ T9] wacom 0003:056A:00B3.00AE: Unknown device_type for 'HID 056a:00b3'. Assuming pen. [ 365.705547][T13234] vim2m vim2m.0: vidioc_s_fmt queue busy [ 365.735177][ T9] wacom 0003:056A:00B3.00AE: hidraw0: USB HID v0.00 Device [HID 056a:00b3] on usb-dummy_hcd.3-1/input0 [ 365.787537][ T9] input: Wacom Intuos3 12x12 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00B3.00AE/input/input71 [ 365.878158][ T5287] mcp2221 0003:04D8:00DD.00AF: item fetching failed at offset 3/5 [ 365.895882][ T9] usb 4-1: USB disconnect, device number 48 [ 365.897594][ T5287] mcp2221 0003:04D8:00DD.00AF: can't parse reports [ 365.955307][ T5287] mcp2221 0003:04D8:00DD.00AF: probe with driver mcp2221 failed with error -22 [ 366.101610][ T5285] usb 3-1: USB disconnect, device number 59 [ 366.161001][T13249] netlink: 'syz.0.3334': attribute type 10 has an invalid length. [ 366.255217][ T5244] Bluetooth: hci1: command 0x0c1a tx timeout [ 366.255248][ T4620] Bluetooth: hci0: command 0x0c1a tx timeout [ 366.261454][ T5245] Bluetooth: hci8: command 0x0c1a tx timeout [ 366.267410][ T5237] Bluetooth: hci7: command 0x0c1a tx timeout [ 366.305511][T13253] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 366.305511][T13253] program syz.1.3345 not setting count and/or reply_len properly [ 366.341329][ T5237] Bluetooth: hci2: command 0x0c1a tx timeout [ 366.842777][T13282] macvlan2: entered promiscuous mode [ 366.863892][T13282] macvlan2: entered allmulticast mode [ 367.149960][T13297] tipc: Started in network mode [ 367.180110][T13297] tipc: Node identity fc0100000000000000000000000000fd, cluster identity 4711 [ 367.194595][T13297] tipc: Enabling of bearer rejected, failed to enable media [ 367.265065][T13305] bridge0: port 3(ipvlan0) entered blocking state [ 367.277076][T13305] bridge0: port 3(ipvlan0) entered disabled state [ 367.289464][T13305] ipvlan0: entered allmulticast mode [ 367.308009][T13305] veth0_vlan: entered allmulticast mode [ 367.326031][T13305] ipvlan0: left allmulticast mode [ 367.344696][T13305] veth0_vlan: left allmulticast mode [ 367.609656][T13324] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3367'. [ 367.625283][ T5285] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 367.812377][ T5285] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.864666][ T5285] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 367.892943][ T5285] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 367.911246][ T5285] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.943548][ T5285] usb 3-1: config 0 descriptor?? [ 367.950671][T13341] netlink: 160 bytes leftover after parsing attributes in process `syz.4.3378'. [ 367.970953][T13341] tipc: Enabling of bearer rejected, failed to enable media [ 368.335684][ T5237] Bluetooth: hci1: command 0x0c1a tx timeout [ 368.335699][ T5244] Bluetooth: hci0: command 0x0c1a tx timeout [ 368.362973][ T5285] plantronics 0003:047F:FFFF.00B0: unbalanced collection at end of report description [ 368.379123][ T5285] plantronics 0003:047F:FFFF.00B0: parse failed [ 368.385614][ T5285] plantronics 0003:047F:FFFF.00B0: probe with driver plantronics failed with error -22 [ 368.414692][ T5237] Bluetooth: hci2: command 0x0c1a tx timeout [ 368.582182][ T9] usb 3-1: USB disconnect, device number 60 [ 368.785960][ T5284] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 368.946400][ T5284] usb 5-1: Using ep0 maxpacket: 16 [ 368.962333][ T5284] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 368.973530][ T5284] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 368.983527][ T5284] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 368.994555][ T5284] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 369.004678][ T5284] usb 5-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 369.013756][ T5284] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.024747][ T5284] usb 5-1: config 0 descriptor?? [ 369.444929][ T5284] hid-u2fzero 0003:10C4:8ACF.00B1: unknown main item tag 0x0 [ 369.452408][ T5284] hid-u2fzero 0003:10C4:8ACF.00B1: unknown main item tag 0x0 [ 369.464630][ T5287] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 369.472420][ T5284] hid-u2fzero 0003:10C4:8ACF.00B1: unknown main item tag 0x0 [ 369.472528][ T5284] hid-u2fzero 0003:10C4:8ACF.00B1: unknown main item tag 0x0 [ 369.472560][ T5284] hid-u2fzero 0003:10C4:8ACF.00B1: unknown main item tag 0x0 [ 369.478276][ T5284] hid-u2fzero 0003:10C4:8ACF.00B1: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.4-1/input0 [ 369.510519][ T5284] hid-u2fzero 0003:10C4:8ACF.00B1: U2F Zero LED initialised [ 369.522175][ T5284] hid-u2fzero 0003:10C4:8ACF.00B1: U2F Zero RNG initialised [ 369.657205][ T5287] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 369.666672][ T5287] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.679838][ T5287] usb 3-1: config 0 descriptor?? [ 369.701353][ T5287] cp210x 3-1:0.0: cp210x converter detected [ 369.739792][ T5284] usb 5-1: USB disconnect, device number 53 [ 369.907378][T13376] warn_alloc: 3 callbacks suppressed [ 369.907402][T13376] syz.3.3396: vmalloc error: size 3485696, failed to allocated page array size 6808, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 369.931010][T13376] CPU: 0 UID: 0 PID: 13376 Comm: syz.3.3396 Not tainted 6.11.0-syzkaller-09959-gabf2050f51fd #0 [ 369.941481][T13376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 369.951571][T13376] Call Trace: [ 369.954883][T13376] [ 369.957834][T13376] dump_stack_lvl+0x241/0x360 [ 369.962562][T13376] ? __pfx_dump_stack_lvl+0x10/0x10 [ 369.967827][T13376] ? __pfx__printk+0x10/0x10 [ 369.972462][T13376] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 369.978914][T13376] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 369.985458][T13376] warn_alloc+0x278/0x410 [ 369.989849][T13376] ? __pfx_warn_alloc+0x10/0x10 [ 369.994733][T13376] ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 370.000915][T13376] ? __get_vm_area_node+0x23d/0x270 [ 370.006159][T13376] __vmalloc_node_range_noprof+0x691/0x13f0 [ 370.012108][T13376] ? __kmalloc_cache_node_noprof+0x1d3/0x300 [ 370.018112][T13376] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 370.024474][T13376] ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 370.030650][T13376] ? __get_vm_area_node+0x23d/0x270 [ 370.035879][T13376] __vmalloc_node_range_noprof+0x59c/0x13f0 [ 370.041816][T13376] ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 370.047981][T13376] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 370.053737][T13376] ? rcu_is_watching+0x15/0xb0 [ 370.058514][T13376] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 370.064864][T13376] ? rcu_is_watching+0x15/0xb0 [ 370.069641][T13376] ? trace_kmalloc+0x1f/0xd0 [ 370.074246][T13376] ? __kmalloc_node_noprof+0x247/0x440 [ 370.079714][T13376] ? __kvmalloc_node_noprof+0x72/0x190 [ 370.085205][T13376] __kvmalloc_node_noprof+0x142/0x190 [ 370.090609][T13376] ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 370.096811][T13376] __v4l2_ctrl_modify_dimensions+0x43b/0xb60 [ 370.102812][T13376] ? tpg_update_mv_step+0x361/0x4f0 [ 370.108036][T13376] vivid_update_format_cap+0x133c/0x2090 [ 370.113691][T13376] ? __pfx_vivid_update_format_cap+0x10/0x10 [ 370.119683][T13376] vivid_vid_cap_s_dv_timings+0x535/0x1230 [ 370.125513][T13376] __video_do_ioctl+0xc23/0xdd0 [ 370.130391][T13376] ? __pfx___video_do_ioctl+0x10/0x10 [ 370.135794][T13376] ? __might_fault+0xc6/0x120 [ 370.140494][T13376] video_usercopy+0x89b/0x1180 [ 370.145279][T13376] ? __pfx___video_do_ioctl+0x10/0x10 [ 370.150663][T13376] ? __pfx_video_usercopy+0x10/0x10 [ 370.155895][T13376] ? __fget_files+0x29/0x470 [ 370.160503][T13376] v4l2_ioctl+0x189/0x1e0 [ 370.164860][T13376] v4l2_compat_ioctl32+0x1d7/0x260 [ 370.169989][T13376] __se_compat_sys_ioctl+0x510/0xc90 [ 370.175297][T13376] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 370.181129][T13376] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 370.187134][T13376] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 370.193526][T13376] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 370.200142][T13376] ? lockdep_hardirqs_on+0x99/0x150 [ 370.205378][T13376] __do_fast_syscall_32+0xb4/0x110 [ 370.210508][T13376] ? exc_page_fault+0x590/0x8c0 [ 370.215378][T13376] do_fast_syscall_32+0x34/0x80 [ 370.220243][T13376] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 370.226596][T13376] RIP: 0023:0xf73fd579 [ 370.230672][T13376] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 370.250286][T13376] RSP: 002b:00000000f56e656c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 370.258728][T13376] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0845657 [ 370.266714][T13376] RDX: 0000000020000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 370.274693][T13376] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 370.282672][T13376] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 370.290663][T13376] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 370.298662][T13376] [ 370.314682][T13376] Mem-Info: [ 370.317870][T13376] active_anon:4522 inactive_anon:0 isolated_anon:0 [ 370.317870][T13376] active_file:16553 inactive_file:3038 isolated_file:0 [ 370.317870][T13376] unevictable:768 dirty:183 writeback:0 [ 370.317870][T13376] slab_reclaimable:8943 slab_unreclaimable:97922 [ 370.317870][T13376] mapped:21780 shmem:1264 pagetables:832 [ 370.317870][T13376] sec_pagetables:0 bounce:0 [ 370.317870][T13376] kernel_misc_reclaimable:0 [ 370.317870][T13376] free:1321691 free_pcp:7323 free_cma:0 [ 370.381587][ T5287] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 370.394362][T13376] Node 0 active_anon:18088kB inactive_anon:0kB active_file:66212kB inactive_file:12148kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:87120kB dirty:732kB writeback:0kB shmem:3520kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10488kB pagetables:3328kB sec_pagetables:0kB all_unreclaimable? no [ 370.429577][ T5237] Bluetooth: hci0: command 0x0c1a tx timeout [ 370.429623][ T5244] Bluetooth: hci1: command 0x0c1a tx timeout [ 370.436059][T13376] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 370.472399][ T5287] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 370.480580][ T5287] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 370.491210][ T5287] usb 3-1: cp210x converter now attached to ttyUSB0 [ 370.498141][ T5244] Bluetooth: hci2: command 0x0c1a tx timeout [ 370.499754][ T5287] usb 3-1: USB disconnect, device number 61 [ 370.510971][T13376] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 370.542928][ T5287] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 370.554698][T13376] lowmem_reserve[]: 0 2465 2466 0 0 [ 370.560301][T13376] Node 0 DMA32 free:1373608kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:18028kB inactive_anon:0kB active_file:66080kB inactive_file:11580kB unevictable:1536kB writepending:732kB present:3129332kB managed:2552492kB mlocked:0kB bounce:0kB free_pcp:1980kB local_pcp:1080kB free_cma:0kB [ 370.560613][ T5287] cp210x 3-1:0.0: device disconnected [ 370.602697][T13376] lowmem_reserve[]: 0 0 0 0 0 [ 370.617791][T13376] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:160kB inactive_anon:0kB active_file:132kB inactive_file:568kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:8kB free_cma:0kB [ 370.664625][T13376] lowmem_reserve[]: 0 0 0 0 0 [ 370.669573][T13376] Node 1 Normal free:3902524kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:24212kB local_pcp:3188kB free_cma:0kB [ 370.699762][T13376] lowmem_reserve[]: 0 0 0 0 0 [ 370.706664][T13376] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 370.719901][T13376] Node 0 DMA32: 423*4kB (UME) 591*8kB (UME) 421*16kB (UME) 188*32kB (UME) 136*64kB (ME) 64*128kB (UME) 16*256kB (UME) 167*512kB (UM) 145*1024kB (UM) 5*2048kB (UME) 266*4096kB (UM) = 1373924kB [ 370.739330][T13376] Node 0 Normal: 11*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 44kB [ 370.751617][T13376] Node 1 Normal: 193*4kB (UME) 59*8kB (UE) 42*16kB (UE) 158*32kB (UE) 52*64kB (UME) 12*128kB (UE) 8*256kB (UM) 7*512kB (UM) 4*1024kB (UME) 3*2048kB (UE) 946*4096kB (UM) = 3902524kB [ 370.770233][T13376] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 370.781969][T13376] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 370.791597][T13376] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 370.802959][T13376] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 370.812570][T13376] 20855 total pagecache pages [ 370.824070][T13376] 0 pages in swap cache [ 370.834719][T13376] Free swap = 124488kB [ 370.838936][T13376] Total swap = 124996kB [ 370.845596][T13376] 2097051 pages RAM [ 370.849804][T13376] 0 pages HighMem/MovableOnly [ 370.854842][T13400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3418'. [ 370.855281][T13376] 427078 pages reserved [ 370.868543][T13376] 0 pages cma reserved [ 371.160759][T13410] vim2m vim2m.0: vidioc_s_fmt queue busy [ 371.846223][T13426] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 371.846223][T13426] program syz.0.3416 not setting count and/or reply_len properly [ 372.135529][T13434] netlink: 160 bytes leftover after parsing attributes in process `syz.0.3421'. [ 372.175150][T13434] tipc: Enabling of bearer rejected, failed to enable media [ 372.794688][ T8546] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 372.882076][T13451] vim2m vim2m.0: vidioc_s_fmt queue busy [ 372.956356][ T8546] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 372.994674][ T8546] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.070156][ T8546] usb 5-1: config 0 descriptor?? [ 373.099525][ T8546] cp210x 5-1:0.0: cp210x converter detected [ 373.506099][ T8546] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 373.534745][ T8546] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 373.600774][ T8546] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 373.628079][ T8546] usb 5-1: cp210x converter now attached to ttyUSB0 [ 373.671291][ T8546] usb 5-1: USB disconnect, device number 54 [ 373.702818][ T8546] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 373.761330][ T8546] cp210x 5-1:0.0: device disconnected [ 373.918544][T13469] usb usb1: usbfs: process 13469 (syz.2.3434) did not claim interface 0 before use [ 374.514695][ T51] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 374.720761][ T51] usb 3-1: Using ep0 maxpacket: 8 [ 374.732010][ T51] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.776146][ T51] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 374.825701][ T51] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 374.844625][ T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.871014][T13496] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3451'. [ 374.880207][T13496] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3451'. [ 374.921662][ T51] usb 3-1: config 0 descriptor?? [ 375.334596][ T8546] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 375.397914][ T51] greenasia 0003:0E8F:0012.00B2: hidraw0: USB HID v0.00 Device [HID 0e8f:0012] on usb-dummy_hcd.2-1/input0 [ 375.414594][ T51] greenasia 0003:0E8F:0012.00B2: no inputs found [ 375.444855][ T5284] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 375.484552][ T8546] usb 4-1: Using ep0 maxpacket: 16 [ 375.505730][ T8546] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.524902][ T8546] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.544710][ T8546] usb 4-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 375.553885][ T8546] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.586856][ T8546] usb 4-1: config 0 descriptor?? [ 375.596586][ T5284] usb 5-1: Using ep0 maxpacket: 16 [ 375.615870][ T5284] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.634993][ T5284] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.648829][ T51] usb 3-1: USB disconnect, device number 62 [ 375.651534][ T5284] usb 5-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 375.672604][ T5284] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.692377][ T5284] usb 5-1: config 0 descriptor?? [ 376.006246][ T8546] waltop 0003:172F:0037.00B3: item fetching failed at offset 4/6 [ 376.016283][ T8546] waltop 0003:172F:0037.00B3: probe with driver waltop failed with error -22 [ 376.110851][ T5284] hkems 0003:2006:0118.00B4: unknown main item tag 0x2 [ 376.118017][ T5284] hkems 0003:2006:0118.00B4: unknown main item tag 0x0 [ 376.131329][ T5284] hkems 0003:2006:0118.00B4: hidraw0: USB HID v0.00 Device [HID 2006:0118] on usb-dummy_hcd.4-1/input0 [ 376.142632][ T5284] hkems 0003:2006:0118.00B4: no inputs found [ 376.148728][ T5284] hkems 0003:2006:0118.00B4: force feedback init failed [ 376.219572][ T5284] usb 4-1: USB disconnect, device number 49 [ 376.348490][ T5302] usb 5-1: USB disconnect, device number 55 [ 376.527054][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 376.527071][ T29] audit: type=1326 audit(1727145535.070:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13524 comm="syz.2.3461" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x0 [ 377.438978][ T29] audit: type=1326 audit(1727145535.980:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13529 comm="syz.4.3479" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x0 [ 377.599543][T13541] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3465'. [ 377.608934][T13541] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3465'. [ 377.714945][ T5302] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 377.827105][ T5287] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 377.884655][ T5302] usb 2-1: Using ep0 maxpacket: 16 [ 377.896338][ T5302] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.913449][ T5302] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 377.925382][ T5302] usb 2-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 377.937234][ T5302] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.949802][ T5302] usb 2-1: config 0 descriptor?? [ 377.986930][ T5287] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.004833][ T5287] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 378.024566][ T5287] usb 4-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 378.033812][ T5287] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.044913][ T5287] usb 4-1: config 0 descriptor?? [ 378.383952][ T5302] hkems 0003:2006:0118.00B5: unknown main item tag 0x2 [ 378.391319][ T5302] hkems 0003:2006:0118.00B5: unknown main item tag 0x0 [ 378.401402][ T5302] hkems 0003:2006:0118.00B5: hidraw0: USB HID v0.00 Device [HID 2006:0118] on usb-dummy_hcd.1-1/input0 [ 378.412728][ T5302] hkems 0003:2006:0118.00B5: no inputs found [ 378.418911][ T5302] hkems 0003:2006:0118.00B5: force feedback init failed [ 378.464077][ T5287] holtek 0003:1241:5015.00B6: collection stack underflow [ 378.471766][ T5287] holtek 0003:1241:5015.00B6: item 0 1 0 12 parsing failed [ 378.480579][ T5287] holtek 0003:1241:5015.00B6: parse failed [ 378.486735][ T5287] holtek 0003:1241:5015.00B6: probe with driver holtek failed with error -22 [ 378.600818][ T5284] usb 2-1: USB disconnect, device number 65 [ 378.677581][ T5287] usb 4-1: USB disconnect, device number 50 [ 378.896679][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.903095][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.515700][ T5302] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 379.756800][ T5302] usb 2-1: Using ep0 maxpacket: 16 [ 379.773568][ T5302] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.804612][ T5302] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 379.821323][ T5302] usb 2-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 379.855797][ T5302] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.876119][ T5302] usb 2-1: config 0 descriptor?? [ 380.318348][ T29] audit: type=1326 audit(1727145538.800:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13590 comm="syz.3.3506" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 380.345208][ T29] audit: type=1326 audit(1727145538.800:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13590 comm="syz.3.3506" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 380.367869][ T29] audit: type=1326 audit(1727145538.810:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13590 comm="syz.3.3506" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 380.391184][ T29] audit: type=1326 audit(1727145538.810:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13590 comm="syz.3.3506" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 380.413398][ T29] audit: type=1326 audit(1727145538.810:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13590 comm="syz.3.3506" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 380.436029][ T29] audit: type=1326 audit(1727145538.810:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13590 comm="syz.3.3506" exe="/root/syz-executor" sig=0 arch=40000003 syscall=94 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 380.458557][ T29] audit: type=1326 audit(1727145538.810:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13590 comm="syz.3.3506" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 380.480758][ T29] audit: type=1326 audit(1727145538.810:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13590 comm="syz.3.3506" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 380.509067][ T5302] waltop 0003:172F:0037.00B7: item fetching failed at offset 4/6 [ 380.517468][ T5302] waltop 0003:172F:0037.00B7: probe with driver waltop failed with error -22 [ 380.602893][T13598] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 380.666244][ T5284] usb 2-1: USB disconnect, device number 66 [ 381.490283][T13629] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 381.953072][T13647] tipc: Started in network mode [ 381.984692][T13647] tipc: Node identity aaaaaaaaaa3f, cluster identity 4711 [ 382.010167][T13647] tipc: Enabled bearer , priority 0 [ 382.142208][ T5302] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 382.325435][ T5302] usb 4-1: Using ep0 maxpacket: 8 [ 382.335157][ T5302] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.347951][ T5302] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.374216][ T5302] usb 4-1: config 0 interface 0 has no altsetting 0 [ 382.394523][ T5302] usb 4-1: New USB device found, idVendor=5543, idProduct=0045, bcdDevice= 0.00 [ 382.444402][ T5302] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.480710][ T5302] usb 4-1: config 0 descriptor?? [ 382.615927][T13668] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3530'. [ 382.750094][T13674] tipc: Enabled bearer , priority 0 [ 383.013359][ T5287] tipc: Node number set to 9808554 [ 383.059162][T13689] tipc: Cannot configure node identity twice [ 383.065503][T13689] tipc: Cannot configure node identity twice [ 383.149402][ T5302] usb 4-1: string descriptor 0 read error: -71 [ 383.162962][ T5302] uclogic 0003:5543:0045.00B8: failed retrieving string descriptor #200: -71 [ 383.175889][ T5302] uclogic 0003:5543:0045.00B8: failed retrieving pen parameters: -71 [ 383.222992][ T5302] uclogic 0003:5543:0045.00B8: failed probing pen v2 parameters: -71 [ 383.235358][ T5302] uclogic 0003:5543:0045.00B8: failed probing parameters: -71 [ 383.253309][T13699] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3544'. [ 383.264010][ T5302] uclogic 0003:5543:0045.00B8: probe with driver uclogic failed with error -71 [ 383.296671][ T5302] usb 4-1: USB disconnect, device number 51 [ 383.316112][ T8546] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 383.486634][ T8546] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 383.514759][ T8546] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 383.533743][ T8546] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 383.552824][ T8546] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 383.565101][ T8546] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 383.578794][ T8546] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 383.588479][ T8546] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 383.596997][ T8546] usb 2-1: Product: syz [ 383.602447][ T8546] usb 2-1: Manufacturer: syz [ 383.617223][ T8546] cdc_wdm 2-1:1.0: skipping garbage [ 383.622480][ T8546] cdc_wdm 2-1:1.0: skipping garbage [ 383.633549][ T8546] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 383.640220][ T8546] cdc_wdm 2-1:1.0: Unknown control protocol [ 383.754867][ T5302] tipc: Node number set to 4227924221 [ 383.872521][ T8546] usb 2-1: USB disconnect, device number 67 [ 384.078295][T13723] tipc: Started in network mode [ 384.083426][T13723] tipc: Node identity 2, cluster identity 4711 [ 384.094433][T13723] tipc: Node number set to 2 [ 384.100717][T13723] tipc: Cannot configure node identity twice [ 384.584933][ T5302] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 384.764735][ T5302] usb 3-1: Using ep0 maxpacket: 8 [ 384.779819][ T5302] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.792274][ T5302] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 384.858336][ T5302] usb 3-1: config 0 interface 0 has no altsetting 0 [ 384.876323][ T5302] usb 3-1: New USB device found, idVendor=5543, idProduct=0045, bcdDevice= 0.00 [ 384.904592][ T5302] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.928055][ T5302] usb 3-1: config 0 descriptor?? [ 385.375151][ T5284] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 385.476585][T13787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3599'. [ 385.555917][ T5284] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 385.566012][ T5284] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 385.566469][ T5302] usb 3-1: string descriptor 0 read error: -71 [ 385.584612][ T5284] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 385.588236][ T5302] uclogic 0003:5543:0045.00B9: failed retrieving string descriptor #200: -71 [ 385.593603][ T5284] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 385.593654][ T5284] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 385.605837][ T5284] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 385.623238][ T5302] uclogic 0003:5543:0045.00B9: failed retrieving pen parameters: -71 [ 385.628044][ T8546] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 385.640610][ T5302] uclogic 0003:5543:0045.00B9: failed probing pen v2 parameters: -71 [ 385.653701][ T5284] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 385.672953][ T5302] uclogic 0003:5543:0045.00B9: failed probing parameters: -71 [ 385.683175][ T5284] usb 5-1: Product: syz [ 385.684967][ T5302] uclogic 0003:5543:0045.00B9: probe with driver uclogic failed with error -71 [ 385.692506][ T5284] usb 5-1: Manufacturer: syz [ 385.706268][ T5302] usb 3-1: USB disconnect, device number 63 [ 385.749987][ T5284] cdc_wdm 5-1:1.0: skipping garbage [ 385.757868][ T5284] cdc_wdm 5-1:1.0: skipping garbage [ 385.768712][ T5284] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 385.795390][ T8546] usb 4-1: Using ep0 maxpacket: 8 [ 385.800698][ T5284] cdc_wdm 5-1:1.0: Unknown control protocol [ 385.821413][ T8546] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.843666][ T8546] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.864848][ T8546] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 385.874104][ T8546] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.925095][ T8546] usb 4-1: config 0 descriptor?? [ 386.013549][ T937] usb 5-1: USB disconnect, device number 56 [ 386.404760][ T8546] hid-picolcd 0003:04D8:F002.00BA: No report with id 0xf3 found [ 386.412476][ T8546] hid-picolcd 0003:04D8:F002.00BA: No report with id 0xf4 found [ 386.514671][ T5302] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 386.596789][ T5287] usb 4-1: USB disconnect, device number 52 [ 386.673688][ T5302] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.692717][ T5302] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.702964][ T5302] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 386.712277][ T5302] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.722769][ T5302] usb 2-1: config 0 descriptor?? [ 387.145572][ T5302] cm6533_jd 0003:0D8C:0022.00BB: unknown main item tag 0x0 [ 387.157172][ T5302] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.00BB/input/input74 [ 387.188301][ T5302] cm6533_jd 0003:0D8C:0022.00BB: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 387.361783][ T5302] usb 2-1: USB disconnect, device number 68 [ 389.654009][T13826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3604'. [ 389.720307][T13833] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3608'. [ 389.845164][ T937] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 389.853695][T13837] netlink: 'syz.2.3612': attribute type 29 has an invalid length. [ 389.864864][ T5302] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 390.006853][ T937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.018709][ T937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.029071][ T937] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 390.038240][ T937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.054596][ T937] usb 4-1: config 0 descriptor?? [ 390.061149][ T5302] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 390.071995][ T5302] usb 5-1: config 0 has no interfaces? [ 390.077809][ T5302] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 390.086970][ T5302] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.100087][ T5302] usb 5-1: config 0 descriptor?? [ 390.320499][ T5302] usb 5-1: USB disconnect, device number 57 [ 390.473816][ T937] cm6533_jd 0003:0D8C:0022.00BC: unknown main item tag 0x0 [ 390.494688][ T937] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0022.00BC/input/input75 [ 390.514879][ T937] cm6533_jd 0003:0D8C:0022.00BC: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 390.686977][ T937] usb 4-1: USB disconnect, device number 53 [ 390.910488][T13844] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3625'. [ 391.170413][ T5287] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 391.364641][ T5287] usb 5-1: Using ep0 maxpacket: 8 [ 391.371088][ T5287] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.383140][ T5287] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 391.397076][ T5287] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 391.406219][ T5287] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.415998][ T5287] usb 5-1: config 0 descriptor?? [ 391.884681][ T5287] hid-picolcd 0003:04D8:F002.00BD: No report with id 0xf3 found [ 391.893184][ T5287] hid-picolcd 0003:04D8:F002.00BD: No report with id 0xf4 found [ 392.042262][ T937] usb 5-1: USB disconnect, device number 58 [ 392.654723][T13857] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3623'. [ 392.778539][T13867] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 392.785225][T13867] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 392.798224][T13867] vhci_hcd vhci_hcd.0: Device attached [ 392.832256][T13868] vhci_hcd: connection closed [ 392.832783][ T2898] vhci_hcd: stop threads [ 392.840687][T13871] netlink: 'syz.3.3624': attribute type 29 has an invalid length. [ 392.864047][ T2898] vhci_hcd: release socket [ 392.881254][ T2898] vhci_hcd: disconnect device [ 393.014626][ T5356] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 393.178296][ T5356] usb 3-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 393.187567][ T5356] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.195705][ T5356] usb 3-1: Product: syz [ 393.199981][ T5356] usb 3-1: Manufacturer: syz [ 393.205150][ T5356] usb 3-1: SerialNumber: syz [ 393.211496][ T5356] usb 3-1: config 0 descriptor?? [ 393.220446][ T5356] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 393.629893][ T5356] input: sonixb as /devices/platform/dummy_hcd.2/usb3/3-1/input/input76 [ 393.842102][ T937] usb 3-1: USB disconnect, device number 64 [ 394.453759][T13880] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3630'. [ 397.113885][T13926] delete_channel: no stack [ 397.654656][ T5356] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 397.662643][ T5287] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 397.829966][T13938] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.839372][T13938] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.848625][T13938] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.857530][T13938] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.881682][ T5356] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 397.911864][ T5287] usb 2-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 397.940201][ T5356] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.949161][ T5287] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.974181][ T5287] usb 2-1: Product: syz [ 397.997485][ T5356] usb 3-1: config 0 descriptor?? [ 398.004040][ T5287] usb 2-1: Manufacturer: syz [ 398.019301][ T5287] usb 2-1: SerialNumber: syz [ 398.050694][ T5287] usb 2-1: config 0 descriptor?? [ 398.163861][ T5244] Bluetooth: hci3: urb ffff888140e9a600 submission failed (2) [ 398.313803][ T5287] usb 2-1: USB disconnect, device number 69 [ 398.427852][ T5356] [drm:udl_init] *ERROR* Selecting channel failed [ 398.511463][ T5356] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 398.544621][ T5356] [drm] Initialized udl on minor 2 [ 398.612855][ T5356] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 398.644889][ T5356] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 398.655696][ T5287] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 398.726341][ T5356] usb 3-1: USB disconnect, device number 65 [ 398.732441][ T5287] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 398.775161][ T5287] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 399.366562][T13946] trusted_key: encrypted_key: key user:syz not found [ 399.534130][T13948] netlink: 'syz.4.3665': attribute type 6 has an invalid length. [ 400.524707][ T5356] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 400.744887][ T5356] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 400.784558][ T5356] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 400.829591][ T5356] usb 5-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 400.869578][ T5356] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.924709][ T5356] usb 5-1: config 0 descriptor?? [ 401.208024][T13963] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3672'. [ 401.348785][ T5356] samsung 0003:0419:0600.00BE: unknown main item tag 0x0 [ 401.394684][ T5356] samsung 0003:0419:0600.00BE: unknown main item tag 0x0 [ 401.439674][ T5356] samsung 0003:0419:0600.00BE: hidraw0: USB HID v0.00 Device [HID 0419:0600] on usb-dummy_hcd.4-1/input0 [ 401.554369][ T5356] usb 5-1: USB disconnect, device number 59 [ 402.074631][ T5356] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 402.248174][ T5356] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.296014][ T5356] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.337960][ T5356] usb 4-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00 [ 402.362573][ T5356] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.402365][ T5356] usb 4-1: config 0 descriptor?? [ 402.672378][T13978] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 402.847078][ T5356] kye 0003:0458:501B.00BF: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 402.918818][ T5356] kye 0003:0458:501B.00BF: hidraw0: USB HID v0.00 Device [HID 0458:501b] on usb-dummy_hcd.3-1/input0 [ 402.957632][ T5356] kye 0003:0458:501B.00BF: tablet-enabling feature report not found [ 402.983072][ T5356] kye 0003:0458:501B.00BF: tablet enabling failed [ 403.062252][ T5356] usb 4-1: USB disconnect, device number 54 [ 403.681828][T13984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3683'. [ 403.883757][T13989] delete_channel: no stack [ 410.780418][ T5237] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 410.795279][ T5237] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 410.806850][ T5237] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 410.815364][ T5237] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 410.823099][ T5237] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 410.831121][ T5237] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 410.850049][ T5244] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 410.859105][ T5244] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 410.869420][ T5244] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 410.892661][ T5244] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 410.900501][ T5244] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 410.908314][ T5244] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 412.900168][ T5244] Bluetooth: hci3: command tx timeout [ 412.976304][ T5244] Bluetooth: hci4: command tx timeout [ 413.119635][T14006] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 413.126235][T14006] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 413.161169][T14006] vhci_hcd vhci_hcd.0: Device attached [ 413.190004][ T5237] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 413.199994][ T5237] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 413.208538][ T5237] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 413.218460][ T5237] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 413.226669][ T5237] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 413.242822][ T5237] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 413.283633][T14007] vhci_hcd: connection closed [ 413.293023][ T2574] vhci_hcd: stop threads [ 413.311504][ T2574] vhci_hcd: release socket [ 413.329716][ T2574] vhci_hcd: disconnect device [ 413.344721][ T5287] vhci_hcd: vhci_device speed not set [ 414.974662][ T5237] Bluetooth: hci3: command tx timeout [ 415.054660][ T5237] Bluetooth: hci4: command tx timeout [ 415.294685][ T5237] Bluetooth: hci5: command tx timeout [ 417.054610][ T5237] Bluetooth: hci3: command tx timeout [ 417.134727][ T5237] Bluetooth: hci4: command tx timeout [ 417.374566][ T5237] Bluetooth: hci5: command tx timeout [ 419.134736][ T5237] Bluetooth: hci3: command tx timeout [ 419.216406][ T5237] Bluetooth: hci4: command tx timeout [ 419.456984][ T5237] Bluetooth: hci5: command tx timeout [ 421.534717][ T5237] Bluetooth: hci5: command tx timeout [ 440.342099][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.348755][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 474.000814][ T5244] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 474.013945][ T5244] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 474.024688][ T5244] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 474.055579][ T5244] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 474.068200][ T5244] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 474.077167][ T5244] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 474.285782][ T5237] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 474.296305][ T5237] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 474.314623][ T5237] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 474.322661][ T5237] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 474.331454][ T5237] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 474.344751][ T5237] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 474.657114][ T5244] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 474.667747][ T5244] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 474.676050][ T5244] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 474.684173][ T5244] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 474.692542][ T5244] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 474.704677][ T5244] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 474.901023][T14036] chnl_net:caif_netlink_parms(): no params data found [ 475.116092][T14036] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.130364][T14036] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.140999][T14036] bridge_slave_0: entered allmulticast mode [ 475.157221][T14036] bridge_slave_0: entered promiscuous mode [ 475.172321][T14036] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.181361][T14036] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.196552][T14036] bridge_slave_1: entered allmulticast mode [ 475.203700][T14036] bridge_slave_1: entered promiscuous mode [ 475.341498][T14036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.362105][T14036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.439983][T14036] team0: Port device team_slave_0 added [ 475.461006][T14036] team0: Port device team_slave_1 added [ 475.610201][T14036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 475.622704][T14036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.657808][T14036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.679114][T14036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 475.691501][T14036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.727069][T14036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.901573][T14036] hsr_slave_0: entered promiscuous mode [ 475.942376][T14036] hsr_slave_1: entered promiscuous mode [ 475.972626][T14036] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 475.988089][T14036] Cannot create hsr debugfs directory [ 476.177595][ T5244] Bluetooth: hci0: command tx timeout [ 476.414589][ T5244] Bluetooth: hci2: command tx timeout [ 476.734636][ T5244] Bluetooth: hci6: command tx timeout [ 478.254734][ T5244] Bluetooth: hci0: command tx timeout [ 478.494688][ T5244] Bluetooth: hci2: command tx timeout [ 478.814675][ T5244] Bluetooth: hci6: command tx timeout [ 480.344677][ T5244] Bluetooth: hci0: command tx timeout [ 480.574616][ T5244] Bluetooth: hci2: command tx timeout [ 480.894656][ T5244] Bluetooth: hci6: command tx timeout [ 482.414543][ T5244] Bluetooth: hci0: command tx timeout [ 482.660164][ T5244] Bluetooth: hci2: command tx timeout [ 482.974628][ T5244] Bluetooth: hci6: command tx timeout [ 501.781371][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.787899][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 517.204649][ T5283] kworker/0:3 (5283) used greatest stack depth: 18296 bytes left [ 534.435402][T14057] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 534.445142][T14057] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 534.455399][T14057] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 534.464829][T14057] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 534.472704][T14057] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 534.480293][T14057] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 534.582867][T14057] Bluetooth: hci4: command 0x0406 tx timeout [ 534.590023][ T5244] Bluetooth: hci3: command 0x0406 tx timeout [ 534.986437][ T4620] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 534.996631][ T4620] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 535.004961][ T4620] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 535.013029][ T4620] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 535.022660][ T4620] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 535.030224][ T4620] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 535.207180][ T5237] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 535.221334][ T5237] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 535.230014][ T5237] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 535.238298][ T5237] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 535.249315][ T5237] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 535.257724][ T5237] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 536.574920][ T4620] Bluetooth: hci7: command tx timeout [ 537.134909][ T4620] Bluetooth: hci8: command tx timeout [ 537.298093][ T4620] Bluetooth: hci9: command tx timeout [ 538.654834][ T4620] Bluetooth: hci7: command tx timeout [ 539.214622][ T4620] Bluetooth: hci8: command tx timeout [ 539.374533][ T4620] Bluetooth: hci9: command tx timeout [ 539.702723][ T4620] Bluetooth: hci5: command 0x0406 tx timeout [ 540.734762][ T5237] Bluetooth: hci7: command tx timeout [ 541.304884][ T5237] Bluetooth: hci8: command tx timeout [ 541.454837][ T4620] Bluetooth: hci9: command tx timeout [ 542.824843][ T5237] Bluetooth: hci7: command tx timeout [ 543.374667][ T5237] Bluetooth: hci8: command tx timeout [ 543.534577][ T5237] Bluetooth: hci9: command tx timeout [ 563.220092][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.226617][ T1261] ieee802154 phy1 wpan1: encryption failed: -22 [ 571.917724][T14036] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.294826][ T30] INFO: task kworker/u8:4:62 blocked for more than 143 seconds. [ 577.302533][ T30] Not tainted 6.11.0-syzkaller-09959-gabf2050f51fd #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 577.352063][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 577.403030][ T30] task:kworker/u8:4 state:D stack:19032 pid:62 tgid:62 ppid:2 flags:0x00004000 [ 577.485659][ T30] Workqueue: netns cleanup_net [ 577.490530][ T30] Call Trace: [ 577.554641][ T30] [ 577.557747][ T30] __schedule+0x1895/0x4b30 [ 577.562323][ T30] ? __pfx___schedule+0x10/0x10 [ 577.621160][ T30] ? __pfx_lock_release+0x10/0x10 [ 577.654454][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 577.660035][ T30] ? kthread_data+0x52/0xd0 [ 577.694581][ T30] ? schedule+0x90/0x320 [ 577.698907][ T30] ? wq_worker_sleeping+0x66/0x240 [ 577.704077][ T30] ? schedule+0x90/0x320 [ 577.744437][ T30] schedule+0x14b/0x320 [ 577.749346][ T30] schedule_preempt_disabled+0x13/0x30 [ 577.784664][ T30] __mutex_lock+0x6a7/0xd70 [ 577.789265][ T30] ? __mutex_lock+0x52a/0xd70 [ 577.793993][ T30] ? wg_netns_pre_exit+0x1f/0x1e0 [ 577.825463][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 577.830597][ T30] wg_netns_pre_exit+0x1f/0x1e0 [ 577.844272][ T30] cleanup_net+0x615/0xcc0 [ 577.848840][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 577.854467][ T30] ? process_scheduled_works+0x976/0x1850 [ 577.860258][ T30] process_scheduled_works+0xa63/0x1850 [ 577.866037][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 577.872187][ T30] ? assign_work+0x364/0x3d0 [ 577.876901][ T30] worker_thread+0x870/0xd30 [ 577.881549][ T30] ? __kthread_parkme+0x169/0x1d0 [ 577.886693][ T30] ? __pfx_worker_thread+0x10/0x10 [ 577.891867][ T30] kthread+0x2f0/0x390 [ 577.896070][ T30] ? __pfx_worker_thread+0x10/0x10 [ 577.901232][ T30] ? __pfx_kthread+0x10/0x10 [ 577.905931][ T30] ret_from_fork+0x4b/0x80 [ 577.910408][ T30] ? __pfx_kthread+0x10/0x10 [ 577.915075][ T30] ret_from_fork_asm+0x1a/0x30 [ 577.919910][ T30] [ 577.922986][ T30] INFO: task kworker/u8:5:1177 blocked for more than 143 seconds. [ 577.930884][ T30] Not tainted 6.11.0-syzkaller-09959-gabf2050f51fd #0 [ 577.938346][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 577.947120][ T30] task:kworker/u8:5 state:D stack:20496 pid:1177 tgid:1177 ppid:2 flags:0x00004000 [ 577.957836][ T30] Workqueue: ipv6_addrconf addrconf_dad_work [ 577.963878][ T30] Call Trace: [ 577.967521][ T30] [ 577.970488][ T30] __schedule+0x1895/0x4b30 [ 577.975149][ T30] ? __pfx___schedule+0x10/0x10 [ 577.980063][ T30] ? __pfx_lock_release+0x10/0x10 [ 577.985198][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 577.990700][ T30] ? kthread_data+0x52/0xd0 [ 577.995305][ T30] ? schedule+0x90/0x320 [ 577.999587][ T30] ? wq_worker_sleeping+0x66/0x240 [ 578.004826][ T30] ? schedule+0x90/0x320 [ 578.009109][ T30] schedule+0x14b/0x320 [ 578.013309][ T30] schedule_preempt_disabled+0x13/0x30 [ 578.033070][ T30] __mutex_lock+0x6a7/0xd70 [ 578.054449][ T30] ? mark_lock+0x9a/0x360 [ 578.059604][ T30] ? __mutex_lock+0x52a/0xd70 [ 578.064338][ T30] ? addrconf_dad_work+0xd0/0x16f0 [ 578.099842][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 578.124535][ T30] addrconf_dad_work+0xd0/0x16f0 [ 578.129557][ T30] ? __pfx_addrconf_dad_work+0x10/0x10 [ 578.144446][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 578.150861][ T30] ? process_scheduled_works+0x976/0x1850 [ 578.174848][ T30] process_scheduled_works+0xa63/0x1850 [ 578.180535][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 578.194496][ T30] ? assign_work+0x364/0x3d0 [ 578.199176][ T30] worker_thread+0x870/0xd30 [ 578.203913][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 578.224419][ T30] ? __kthread_parkme+0x169/0x1d0 [ 578.229525][ T30] ? __pfx_worker_thread+0x10/0x10 [ 578.244416][ T30] kthread+0x2f0/0x390 [ 578.248551][ T30] ? __pfx_worker_thread+0x10/0x10 [ 578.253704][ T30] ? __pfx_kthread+0x10/0x10 [ 578.272659][ T30] ret_from_fork+0x4b/0x80 [ 578.277424][ T30] ? __pfx_kthread+0x10/0x10 [ 578.282055][ T30] ret_from_fork_asm+0x1a/0x30 [ 578.286946][ T30] [ 578.290033][ T30] INFO: task kworker/u8:6:2574 blocked for more than 144 seconds. [ 578.308153][ T30] Not tainted 6.11.0-syzkaller-09959-gabf2050f51fd #0 [ 578.315895][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 578.325172][ T30] task:kworker/u8:6 state:D stack:21240 pid:2574 tgid:2574 ppid:2 flags:0x00004000 [ 578.342921][ T30] Workqueue: events_unbound linkwatch_event [ 578.349091][ T30] Call Trace: [ 578.352411][ T30] [ 578.355530][ T30] __schedule+0x1895/0x4b30 [ 578.360100][ T30] ? __pfx___schedule+0x10/0x10 [ 578.365327][ T30] ? __pfx_lock_release+0x10/0x10 [ 578.370405][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 578.376268][ T30] ? kthread_data+0x52/0xd0 [ 578.380822][ T30] ? schedule+0x90/0x320 [ 578.385144][ T30] ? wq_worker_sleeping+0x66/0x240 [ 578.390304][ T30] ? schedule+0x90/0x320 [ 578.402434][ T30] schedule+0x14b/0x320 [ 578.406763][ T30] schedule_preempt_disabled+0x13/0x30 [ 578.412290][ T30] __mutex_lock+0x6a7/0xd70 [ 578.417205][ T30] ? __mutex_lock+0x52a/0xd70 [ 578.421936][ T30] ? linkwatch_event+0xe/0x60 [ 578.454551][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 578.459690][ T30] ? process_scheduled_works+0x976/0x1850 [ 578.488637][ T30] linkwatch_event+0xe/0x60 [ 578.493219][ T30] process_scheduled_works+0xa63/0x1850 [ 578.534485][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 578.540561][ T30] ? assign_work+0x364/0x3d0 [ 578.554523][ T30] worker_thread+0x870/0xd30 [ 578.559195][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 578.604185][ T30] ? __kthread_parkme+0x169/0x1d0 [ 578.632603][ T30] ? __pfx_worker_thread+0x10/0x10 [ 578.651414][ T30] kthread+0x2f0/0x390 [ 578.681851][ T30] ? __pfx_worker_thread+0x10/0x10 [ 578.700051][ T30] ? __pfx_kthread+0x10/0x10 [ 578.734407][ T30] ret_from_fork+0x4b/0x80 [ 578.744553][ T30] ? __pfx_kthread+0x10/0x10 [ 578.749203][ T30] ret_from_fork_asm+0x1a/0x30 [ 578.754064][ T30] [ 578.802273][ T30] INFO: task syz.2.3668:13954 blocked for more than 144 seconds. [ 578.850261][ T30] Not tainted 6.11.0-syzkaller-09959-gabf2050f51fd #0 [ 578.894575][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 578.903325][ T30] task:syz.2.3668 state:D stack:24832 pid:13954 tgid:13953 ppid:12781 flags:0x20004002 [ 578.991665][ T30] Call Trace: [ 579.003196][ T30] [ 579.041283][ T30] __schedule+0x1895/0x4b30 [ 579.054588][ T30] ? __pfx___schedule+0x10/0x10 [ 579.059526][ T30] ? __pfx_lock_release+0x10/0x10 [ 579.104641][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 579.110198][ T30] ? schedule+0x90/0x320 [ 579.154456][ T30] schedule+0x14b/0x320 [ 579.158710][ T30] schedule_preempt_disabled+0x13/0x30 [ 579.164237][ T30] __mutex_lock+0x6a7/0xd70 [ 579.244496][ T30] ? __mutex_lock+0x52a/0xd70 [ 579.249279][ T30] ? tun_chr_close+0x3b/0x1b0 [ 579.254011][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 579.340528][ T30] ? __pfx_call_rcu+0x10/0x10 [ 579.364484][ T30] tun_chr_close+0x3b/0x1b0 [ 579.369088][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 579.374275][ T30] __fput+0x23f/0x880 [ 579.472432][ T30] task_work_run+0x24f/0x310 [ 579.514471][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 579.519862][ T30] ? __pfx_task_work_run+0x10/0x10 [ 579.604489][ T30] ? do_exit+0xa2a/0x28e0 [ 579.608925][ T30] ? kmem_cache_free+0x1a2/0x420 [ 579.684481][ T30] ? do_exit+0xa2a/0x28e0 [ 579.688901][ T30] do_exit+0xa2f/0x28e0 [ 579.693103][ T30] ? __pfx_do_exit+0x10/0x10 [ 579.761125][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 579.794541][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 579.831561][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 579.864598][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 579.869812][ T30] do_group_exit+0x207/0x2c0 [ 579.911486][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 579.944572][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 579.949870][ T30] get_signal+0x176f/0x1810 [ 580.001209][ T30] ? file_to_blk_mode+0xcc/0x140 [ 580.014582][ T30] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 580.020295][ T30] ? __pfx_get_signal+0x10/0x10 [ 580.064424][ T30] ? fput+0x1af/0x230 [ 580.068503][ T30] arch_do_signal_or_restart+0x96/0x860 [ 580.074097][ T30] ? __fget_files+0x29/0x470 [ 580.142611][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 580.179724][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 580.195101][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 580.200775][ T30] __do_fast_syscall_32+0xc4/0x110 [ 580.234605][ T30] ? exc_page_fault+0x590/0x8c0 [ 580.239558][ T30] do_fast_syscall_32+0x34/0x80 [ 580.273366][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 580.291606][ T30] RIP: 0023:0xf73cd579 [ 580.308415][ T30] RSP: 002b:00000000f56b656c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 580.330523][ T30] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000127f [ 580.361420][ T30] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 580.374557][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 580.382584][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 580.424505][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 580.432563][ T30] [ 580.456251][ T30] INFO: task syz-executor:13997 blocked for more than 146 seconds. [ 580.464219][ T30] Not tainted 6.11.0-syzkaller-09959-gabf2050f51fd #0 [ 580.524913][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 580.533649][ T30] task:syz-executor state:D stack:26208 pid:13997 tgid:13997 ppid:1 flags:0x20004006 [ 580.568564][ T30] Call Trace: [ 580.571923][ T30] [ 580.594601][ T30] __schedule+0x1895/0x4b30 [ 580.599207][ T30] ? __pfx___schedule+0x10/0x10 [ 580.604116][ T30] ? __pfx_lock_release+0x10/0x10 [ 580.626511][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 580.632068][ T30] ? schedule+0x90/0x320 [ 580.664492][ T30] schedule+0x14b/0x320 [ 580.668832][ T30] schedule_preempt_disabled+0x13/0x30 [ 580.674349][ T30] __mutex_lock+0x6a7/0xd70 [ 580.704539][ T30] ? __mutex_lock+0x52a/0xd70 [ 580.718441][ T30] ? ip_tunnel_init_net+0x20e/0x720 [ 580.723720][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 580.764282][ T30] ? read_word_at_a_time+0xe/0x20 [ 580.771137][ T30] ? sized_strscpy+0x8d/0x220 [ 580.791724][ T30] ip_tunnel_init_net+0x20e/0x720 [ 580.797272][ T30] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 580.802890][ T30] ? ops_init+0x75/0x590 [ 580.835123][ T30] ops_init+0x31e/0x590 [ 580.839373][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 580.852624][ T30] setup_net+0x287/0x9e0 [ 580.857330][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 580.862932][ T30] ? __pfx_setup_net+0x10/0x10 [ 580.876703][ T30] copy_net_ns+0x33f/0x570 [ 580.881209][ T30] create_new_namespaces+0x425/0x7b0 [ 580.893327][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 580.900144][ T30] ksys_unshare+0x619/0xc10 [ 580.912067][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 580.917546][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 580.926400][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 580.933066][ T30] __ia32_sys_unshare+0x37/0x40 [ 580.945671][ T30] __do_fast_syscall_32+0xb4/0x110 [ 580.951489][ T30] ? exc_page_fault+0x590/0x8c0 [ 580.962824][ T30] do_fast_syscall_32+0x34/0x80 [ 580.969430][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 580.982363][ T30] RIP: 0023:0xf741d579 [ 580.989359][ T30] RSP: 002b:00000000f756ff7c EFLAGS: 00000206 ORIG_RAX: 0000000000000136 [ 581.004250][ T30] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 581.014319][ T30] RDX: 00000000f740bff4 RSI: 00000000f72e2a6a RDI: 0000000030000000 [ 581.022622][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 581.034404][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 581.042425][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 581.059643][ T30] [ 581.062910][ T30] INFO: task syz-executor:13999 blocked for more than 147 seconds. [ 581.074141][ T30] Not tainted 6.11.0-syzkaller-09959-gabf2050f51fd #0 [ 581.088693][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 581.102032][ T30] task:syz-executor state:D stack:25840 pid:13999 tgid:13999 ppid:1 flags:0x20004006 [ 581.117270][ T30] Call Trace: [ 581.120591][ T30] [ 581.123559][ T30] __schedule+0x1895/0x4b30 [ 581.133652][ T30] ? __pfx___schedule+0x10/0x10 [ 581.151328][ T30] ? __pfx_lock_release+0x10/0x10 [ 581.161837][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 581.174574][ T30] ? schedule+0x90/0x320 [ 581.178884][ T30] schedule+0x14b/0x320 [ 581.183090][ T30] schedule_preempt_disabled+0x13/0x30 [ 581.194739][ T30] __mutex_lock+0x6a7/0xd70 [ 581.199322][ T30] ? __mutex_lock+0x52a/0xd70 [ 581.204050][ T30] ? ip_tunnel_init_net+0x20e/0x720 [ 581.221466][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 581.232685][ T30] ? read_word_at_a_time+0xe/0x20 [ 581.240988][ T30] ? sized_strscpy+0x8d/0x220 [ 581.250740][ T30] ip_tunnel_init_net+0x20e/0x720 [ 581.259101][ T30] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 581.270017][ T30] ? ops_init+0x75/0x590 [ 581.274350][ T30] ops_init+0x31e/0x590 [ 581.282060][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 581.292223][ T30] setup_net+0x287/0x9e0 [ 581.302134][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 581.312666][ T30] ? __pfx_setup_net+0x10/0x10 [ 581.320202][ T30] copy_net_ns+0x33f/0x570 [ 581.329695][ T30] create_new_namespaces+0x425/0x7b0 [ 581.339684][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 581.350845][ T30] ksys_unshare+0x619/0xc10 [ 581.358647][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 581.363736][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 581.377383][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 581.384048][ T30] __ia32_sys_unshare+0x37/0x40 [ 581.392860][ T30] __do_fast_syscall_32+0xb4/0x110 [ 581.402882][ T30] ? exc_page_fault+0x590/0x8c0 [ 581.411652][ T30] do_fast_syscall_32+0x34/0x80 [ 581.420374][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 581.430762][ T30] RIP: 0023:0xf7fbf579 [ 581.439714][ T30] RSP: 002b:00000000f75aff7c EFLAGS: 00000206 ORIG_RAX: 0000000000000136 [ 581.452005][ T30] RAX: ffffffffffffffda RBX: 0000000040000000 RCX: 0000000000000000 [ 581.469969][ T30] RDX: 00000000f744bff4 RSI: 00000000f7322a6a RDI: 0000000030000000 [ 581.480748][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 581.493623][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 581.504256][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 581.515585][ T30] [ 581.523399][ T30] INFO: task syz-executor:14010 blocked for more than 147 seconds. [ 581.533051][ T30] Not tainted 6.11.0-syzkaller-09959-gabf2050f51fd #0 [ 581.544452][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 581.553156][ T30] task:syz-executor state:D stack:21168 pid:14010 tgid:14010 ppid:1 flags:0x20004004 [ 581.572659][ T30] Call Trace: [ 581.576726][ T30] [ 581.579705][ T30] __schedule+0x1895/0x4b30 [ 581.584267][ T30] ? __pfx___schedule+0x10/0x10 [ 581.596698][ T30] ? __pfx_lock_release+0x10/0x10 [ 581.601799][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 581.612545][ T30] ? schedule+0x90/0x320 [ 581.619653][ T30] schedule+0x14b/0x320 [ 581.623874][ T30] schedule_preempt_disabled+0x13/0x30 [ 581.634588][ T30] __mutex_lock+0x6a7/0xd70 [ 581.641822][ T30] ? __mutex_lock+0x52a/0xd70 [ 581.651749][ T30] ? rtnl_newlink+0xab7/0x20a0 [ 581.659243][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 581.664337][ T30] ? __asan_memset+0x23/0x50 [ 581.677257][ T30] ? nla_strscpy+0x113/0x180 [ 581.681908][ T30] rtnl_newlink+0xab7/0x20a0 [ 581.692010][ T30] ? rtnl_newlink+0x491/0x20a0 [ 581.703583][ T30] ? rtnl_newlink+0x491/0x20a0 [ 581.711119][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 581.721086][ T30] ? __pfx___mutex_trylock_common+0x10/0x10 [ 581.729625][ T30] ? __pfx_lock_release+0x10/0x10 [ 581.739677][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 581.749790][ T30] rtnetlink_rcv_msg+0x73f/0xcf0 [ 581.759851][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 581.767741][ T30] ? __lock_acquire+0x1384/0x2050 [ 581.773453][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 581.784875][ T30] netlink_rcv_skb+0x1e3/0x430 [ 581.789722][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 581.802721][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 581.809813][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 581.822591][ T30] netlink_unicast+0x7f6/0x990 [ 581.827755][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 581.833096][ T30] ? __virt_addr_valid+0x183/0x530 [ 581.844517][ T30] ? __check_object_size+0x48e/0x900 [ 581.849870][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 581.862521][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 581.869470][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 581.882296][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 581.887973][ T30] __sock_sendmsg+0x221/0x270 [ 581.892706][ T30] __sys_sendto+0x39b/0x4f0 [ 581.904979][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 581.910336][ T30] ? __might_fault+0xaa/0x120 [ 581.922555][ T30] ? __might_fault+0xc6/0x120 [ 581.929461][ T30] __se_compat_sys_socketcall+0xb18/0x1430 [ 581.942682][ T30] ? __pfx___se_compat_sys_socketcall+0x10/0x10 [ 581.950502][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 581.964433][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 581.969819][ T30] __do_fast_syscall_32+0xb4/0x110 [ 581.982091][ T30] ? exc_page_fault+0x590/0x8c0 [ 581.988895][ T30] do_fast_syscall_32+0x34/0x80 [ 581.993814][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 582.008031][ T30] RIP: 0023:0xf7f01579 [ 582.012155][ T30] RSP: 002b:00000000f74ef850 EFLAGS: 00000206 ORIG_RAX: 0000000000000066 [ 582.029003][ T30] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f74ef864 [ 582.039692][ T30] RDX: 0000000000000000 RSI: 00000000f7ef4568 RDI: 00000000f738bff4 [ 582.054463][ T30] RBP: 00000000f7ef4568 R08: 0000000000000000 R09: 0000000000000000 [ 582.062484][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 582.078670][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 582.091027][ T30] [ 582.094170][ T30] INFO: task syz.3.3692:14017 blocked for more than 148 seconds. [ 582.109718][ T30] Not tainted 6.11.0-syzkaller-09959-gabf2050f51fd #0 [ 582.120616][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 582.134330][ T30] task:syz.3.3692 state:D stack:25776 pid:14017 tgid:14016 ppid:11960 flags:0x20004002 [ 582.152391][ T30] Call Trace: [ 582.156048][ T30] [ 582.159023][ T30] __schedule+0x1895/0x4b30 [ 582.163597][ T30] ? __pfx___schedule+0x10/0x10 [ 582.174419][ T30] ? __pfx_lock_release+0x10/0x10 [ 582.179512][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 582.193709][ T30] ? schedule+0x90/0x320 [ 582.198343][ T30] schedule+0x14b/0x320 [ 582.202557][ T30] schedule_preempt_disabled+0x13/0x30 [ 582.214424][ T30] __mutex_lock+0x6a7/0xd70 [ 582.218997][ T30] ? __mutex_lock+0x52a/0xd70 [ 582.223723][ T30] ? tun_chr_close+0x3b/0x1b0 [ 582.237982][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 582.243076][ T30] ? __pfx_call_rcu+0x10/0x10 [ 582.254976][ T30] tun_chr_close+0x3b/0x1b0 [ 582.259534][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 582.274166][ T30] __fput+0x23f/0x880 [ 582.280348][ T30] task_work_run+0x24f/0x310 [ 582.290177][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 582.299497][ T30] ? __pfx_task_work_run+0x10/0x10 [ 582.310041][ T30] ? do_exit+0xa2a/0x28e0 [ 582.317020][ T30] ? kmem_cache_free+0x1a2/0x420 [ 582.322011][ T30] ? do_exit+0xa2a/0x28e0 [ 582.331490][ T30] do_exit+0xa2f/0x28e0 [ 582.341286][ T30] ? __pfx_do_exit+0x10/0x10 [ 582.351225][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 582.361539][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 582.372533][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 582.382186][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 582.392813][ T30] do_group_exit+0x207/0x2c0 [ 582.400143][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 582.410363][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 582.421076][ T30] get_signal+0x176f/0x1810 [ 582.430661][ T30] ? __pfx_get_signal+0x10/0x10 [ 582.438204][ T30] ? task_work_add+0x3b4/0x450 [ 582.443113][ T30] arch_do_signal_or_restart+0x96/0x860 [ 582.453723][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 582.464166][ T30] ? ksys_write+0x250/0x2b0 [ 582.475627][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 582.481437][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 582.495098][ T30] __do_fast_syscall_32+0xc4/0x110 [ 582.500273][ T30] ? exc_page_fault+0x590/0x8c0 [ 582.512716][ T30] do_fast_syscall_32+0x34/0x80 [ 582.519130][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 582.531797][ T30] RIP: 0023:0xf73fd579 [ 582.538647][ T30] RSP: 002b:00000000f56e656c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 582.553343][ T30] RAX: 000000000000001c RBX: 0000000000000003 RCX: 0000000020000040 [ 582.563911][ T30] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000 [ 582.578672][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 582.592540][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 582.608073][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 582.619921][ T30] [ 582.623061][ T30] [ 582.623061][ T30] Showing all locks held in the system: [ 582.634406][ T30] 2 locks held by kworker/u8:1/12: [ 582.640069][ T30] #0: ffff8880b873ea98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 582.656501][ T30] #1: ffffc90000117d00 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 582.680879][ T30] 1 lock held by khungtaskd/30: [ 582.689047][ T30] #0: ffffffff8e937ee0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 582.704224][ T30] 3 locks held by kworker/1:1/51: [ 582.713978][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 582.732665][ T30] #1: ffffc90000bb7d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 582.746318][ T30] #2: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 582.764171][ T30] 4 locks held by kworker/u8:4/62: [ 582.772229][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 582.790648][ T30] #1: ffffc900015d7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 582.802710][ T30] #2: ffffffff8fcc1150 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 582.819582][ T30] #3: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 582.833166][ T30] 6 locks held by kworker/0:2/937: [ 582.844481][ T30] 3 locks held by kworker/u8:5/1177: [ 582.849813][ T30] #0: ffff88814ba08148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 582.868865][ T30] #1: ffffc900041f7d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 582.887105][ T30] #2: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 582.903538][ T30] 3 locks held by kworker/u8:6/2574: [ 582.910849][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 582.929012][ T30] #1: ffffc90009667d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 582.944331][ T30] #2: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 582.961011][ T30] 2 locks held by getty/4983: [ 582.971207][ T30] #0: ffff888031f790a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 582.984238][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 583.003745][ T30] 3 locks held by kworker/0:9/8546: [ 583.009330][ T30] 1 lock held by syz-executor/12514: [ 583.022307][ T30] #0: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 583.031697][ T30] 1 lock held by syz.2.3668/13954: [ 583.044195][ T30] #0: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 583.061903][ T30] 2 locks held by syz-executor/13997: [ 583.067677][ T30] #0: ffffffff8fcc1150 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 583.084422][ T30] #1: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 583.094014][ T30] 2 locks held by syz-executor/13999: [ 583.110647][ T30] #0: ffffffff8fcc1150 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 583.124059][ T30] #1: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 583.137902][ T30] 1 lock held by syz-executor/14010: [ 583.143231][ T30] #0: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_newlink+0xab7/0x20a0 [ 583.162079][ T30] 1 lock held by syz.3.3692/14017: [ 583.171342][ T30] #0: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 583.185339][ T30] 1 lock held by syz-executor/14032: [ 583.190675][ T30] #0: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x48c/0x2400 [ 583.208291][ T30] 7 locks held by syz-executor/14036: [ 583.213710][ T30] #0: ffff8880322ca420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 583.238404][ T30] #1: ffff88802e330888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 583.256179][ T30] #2: ffff8880273fc4b8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 583.272736][ T30] #3: ffffffff8f56d3e8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 583.291452][ T30] #4: ffff88806b9260e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 583.313960][ T30] #5: ffff8880265c1250 (&devlink->lock_key#12){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 583.325964][ T30] #6: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 583.342787][ T30] 2 locks held by syz-executor/14040: [ 583.348532][ T30] #0: ffffffff8fcc1150 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 583.364513][ T30] #1: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 583.384405][ T30] 2 locks held by syz-executor/14059: [ 583.389830][ T30] #0: ffffffff8fcc1150 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 583.406997][ T30] #1: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 583.422002][ T30] 2 locks held by syz-executor/14061: [ 583.431153][ T30] #0: ffffffff8fcc1150 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 583.444403][ T30] #1: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 583.461295][ T30] 2 locks held by syz-executor/14063: [ 583.467509][ T30] #0: ffffffff8fcc1150 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 583.485133][ T30] #1: ffffffff8fccdc48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 583.502715][ T30] [ 583.505410][ T30] ============================================= [ 583.505410][ T30] [ 583.513858][ T30] NMI backtrace for cpu 1 [ 583.518210][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-09959-gabf2050f51fd #0 [ 583.528387][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 583.538471][ T30] Call Trace: [ 583.541777][ T30] [ 583.544737][ T30] dump_stack_lvl+0x241/0x360 [ 583.549475][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 583.554730][ T30] ? __pfx__printk+0x10/0x10 [ 583.559386][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 583.564415][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 583.569920][ T30] ? _printk+0xd5/0x120 [ 583.574122][ T30] ? __pfx__printk+0x10/0x10 [ 583.578755][ T30] ? __wake_up_klogd+0xcc/0x110 [ 583.583686][ T30] ? __pfx__printk+0x10/0x10 [ 583.588327][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 583.593397][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 583.599422][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 583.605470][ T30] watchdog+0xff4/0x1040 [ 583.609757][ T30] ? watchdog+0x1ea/0x1040 [ 583.614232][ T30] ? __pfx_watchdog+0x10/0x10 [ 583.618952][ T30] kthread+0x2f0/0x390 [ 583.623145][ T30] ? __pfx_watchdog+0x10/0x10 [ 583.627919][ T30] ? __pfx_kthread+0x10/0x10 [ 583.632550][ T30] ret_from_fork+0x4b/0x80 [ 583.637011][ T30] ? __pfx_kthread+0x10/0x10 [ 583.641724][ T30] ret_from_fork_asm+0x1a/0x30 [ 583.646549][ T30] [ 583.650508][ T30] Sending NMI from CPU 1 to CPUs 0: [ 583.656200][ C0] NMI backtrace for cpu 0 [ 583.656216][ C0] CPU: 0 UID: 0 PID: 937 Comm: kworker/0:2 Not tainted 6.11.0-syzkaller-09959-gabf2050f51fd #0 [ 583.656238][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 583.656251][ C0] Workqueue: events nsim_dev_trap_report_work [ 583.656282][ C0] RIP: 0010:lock_release+0x101/0xa30 [ 583.656312][ C0] Code: 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 1f 06 00 00 83 3d bd 99 ac 0e 00 4c 8b 74 24 18 0f 84 55 05 00 00 65 8b 05 2f 4d 92 7e <85> c0 0f 85 46 05 00 00 65 48 8b 04 25 c0 d7 03 00 48 89 44 24 20 [ 583.656329][ C0] RSP: 0018:ffffc90000007b60 EFLAGS: 00000202 [ 583.656344][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81703d00 [ 583.656358][ C0] RDX: 0000000000000000 RSI: ffffffff8c60efa0 RDI: ffffffff8c60ef60 [ 583.656372][ C0] RBP: ffffc90000007c90 R08: ffffffff901ca4af R09: 1ffffffff2039495 [ 583.656386][ C0] R10: dffffc0000000000 R11: fffffbfff2039496 R12: 1ffff92000000f78 [ 583.656401][ C0] R13: ffffffff817c63b7 R14: ffffffff8e937fa0 R15: dffffc0000000000 [ 583.656416][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 583.656432][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 583.656446][ C0] CR2: 00000000f71f1760 CR3: 000000000e734000 CR4: 00000000003506f0 [ 583.656462][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 583.656474][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 583.656486][ C0] Call Trace: [ 583.656493][ C0] [ 583.656501][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 583.656523][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 583.656550][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 583.656571][ C0] ? nmi_handle+0x2a/0x5a0 [ 583.656603][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 583.656627][ C0] ? nmi_handle+0x14f/0x5a0 [ 583.656645][ C0] ? nmi_handle+0x2a/0x5a0 [ 583.656663][ C0] ? lock_release+0x101/0xa30 [ 583.656688][ C0] ? default_do_nmi+0x63/0x160 [ 583.656710][ C0] ? exc_nmi+0x123/0x1f0 [ 583.656729][ C0] ? end_repeat_nmi+0xf/0x53 [ 583.656756][ C0] ? rcu_core+0xa37/0x17a0 [ 583.656776][ C0] ? lock_release+0xb0/0xa30 [ 583.656801][ C0] ? lock_release+0x101/0xa30 [ 583.656827][ C0] ? lock_release+0x101/0xa30 [ 583.656855][ C0] ? lock_release+0x101/0xa30 [ 583.656881][ C0] [ 583.656887][ C0] [ 583.656896][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 583.656923][ C0] ? __pfx_lock_release+0x10/0x10 [ 583.656948][ C0] ? dst_destroy+0x2ac/0x460 [ 583.656975][ C0] ? kmem_cache_free+0x1a2/0x420 [ 583.656999][ C0] ? dst_destroy+0x2ac/0x460 [ 583.657028][ C0] ? dst_destroy+0x43a/0x460 [ 583.657055][ C0] ? rcu_core+0xa37/0x17a0 [ 583.657072][ C0] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 583.657100][ C0] rcu_core+0xabb/0x17a0 [ 583.657125][ C0] ? __pfx_rcu_core+0x10/0x10 [ 583.657144][ C0] ? sched_clock+0x4a/0x70 [ 583.657174][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 583.657206][ C0] handle_softirqs+0x2c5/0x980 [ 583.657232][ C0] ? do_softirq+0x11b/0x1e0 [ 583.657256][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 583.657284][ C0] do_softirq+0x11b/0x1e0 [ 583.657306][ C0] [ 583.657313][ C0] [ 583.657320][ C0] ? __pfx_do_softirq+0x10/0x10 [ 583.657343][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 583.657371][ C0] ? rcu_is_watching+0x15/0xb0 [ 583.657392][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 583.657416][ C0] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 583.657441][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 583.657464][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 583.657489][ C0] ? nsim_dev_trap_report_work+0x6a7/0xaa0 [ 583.657516][ C0] nsim_dev_trap_report_work+0x75d/0xaa0 [ 583.657549][ C0] ? process_scheduled_works+0x976/0x1850 [ 583.657573][ C0] process_scheduled_works+0xa63/0x1850 [ 583.657616][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 583.657645][ C0] ? assign_work+0x364/0x3d0 [ 583.657671][ C0] worker_thread+0x870/0xd30 [ 583.657699][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 583.657726][ C0] ? __kthread_parkme+0x169/0x1d0 [ 583.657753][ C0] ? __pfx_worker_thread+0x10/0x10 [ 583.657778][ C0] kthread+0x2f0/0x390 [ 583.657794][ C0] ? __pfx_worker_thread+0x10/0x10 [ 583.657818][ C0] ? __pfx_kthread+0x10/0x10 [ 583.657835][ C0] ret_from_fork+0x4b/0x80 [ 583.657861][ C0] ? __pfx_kthread+0x10/0x10 [ 583.657878][ C0] ret_from_fork_asm+0x1a/0x30 [ 583.657910][ C0] [ 584.130659][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 584.137583][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-09959-gabf2050f51fd #0 [ 584.147775][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 584.157868][ T30] Call Trace: [ 584.161181][ T30] [ 584.164140][ T30] dump_stack_lvl+0x241/0x360 [ 584.168885][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 584.174134][ T30] ? __pfx__printk+0x10/0x10 [ 584.178758][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 584.184788][ T30] ? vscnprintf+0x5d/0x90 [ 584.189156][ T30] panic+0x349/0x880 [ 584.193090][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 584.199278][ T30] ? __pfx_panic+0x10/0x10 [ 584.203729][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 584.209135][ T30] ? __irq_work_queue_local+0x137/0x410 [ 584.214725][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 584.220136][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 584.226328][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 584.232527][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 584.238718][ T30] watchdog+0x1033/0x1040 [ 584.243086][ T30] ? watchdog+0x1ea/0x1040 [ 584.247547][ T30] ? __pfx_watchdog+0x10/0x10 [ 584.252261][ T30] kthread+0x2f0/0x390 [ 584.256362][ T30] ? __pfx_watchdog+0x10/0x10 [ 584.261085][ T30] ? __pfx_kthread+0x10/0x10 [ 584.265714][ T30] ret_from_fork+0x4b/0x80 [ 584.270174][ T30] ? __pfx_kthread+0x10/0x10 [ 584.274802][ T30] ret_from_fork_asm+0x1a/0x30 [ 584.279622][ T30] [ 584.283027][ T30] Kernel Offset: disabled [ 584.287452][ T30] Rebooting in 86400 seconds..