last executing test programs: 12.162909882s ago: executing program 3 (id=884): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x0, @empty}, {0x2, 0x0, @local}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x3}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 9.109334309s ago: executing program 3 (id=907): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000040)=ANY=[@ANYRES32=r0]) 6.880625746s ago: executing program 3 (id=922): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) setrlimit(0x0, 0x0) 6.601262718s ago: executing program 4 (id=924): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000fe8000000000000000000000000000bb"], 0x190) syz_emit_ethernet(0x3e, &(0x7f00000008c0)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x8, 0x3a, 0x0, @remote, @mcast2, {[], @mlv2_report}}}}}, 0x0) 6.35021127s ago: executing program 4 (id=925): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x181041, 0x0) write$sequencer(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="8102000004"], 0x8) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) ioctl$SNDCTL_SEQ_PANIC(r0, 0x5111) 6.28264671s ago: executing program 2 (id=926): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000004580)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001400)=""/158, 0x9e}], 0x1}, 0x7fffffff}], 0x2, 0x0, 0x0) 6.036674838s ago: executing program 2 (id=927): syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0xa0221) r0 = syz_io_uring_setup(0x3663, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0xa3d, 0x0, 0x0, 0x0, 0xff39) 6.026882558s ago: executing program 4 (id=928): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) dup3(r0, r1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x5, 0x7, 0x10, @ipv4={'\x00', '\xff\xff', @multicast1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x20, 0x0, 0x6}}) 5.66148415s ago: executing program 4 (id=931): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x8100000000000000}, 0x0) 5.634418495s ago: executing program 2 (id=932): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000140)={r2}, &(0x7f0000000180)=0x14) 5.245782543s ago: executing program 2 (id=935): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) 5.092143864s ago: executing program 0 (id=936): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae", 0x3e, 0x2000051, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000200)) 4.918695569s ago: executing program 2 (id=937): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x40000, &(0x7f0000000640)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}}, 0x1, 0x0, 0x0) 4.635148123s ago: executing program 0 (id=938): r0 = syz_io_uring_setup(0x371b, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0xffffff}, &(0x7f0000000380), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x13, 0x2000ac0a, r1) 4.635055451s ago: executing program 3 (id=939): r0 = memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec)\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) close_range(r0, r0, 0x2) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) splice(r1, 0x0, r0, &(0x7f0000000140), 0x2, 0x0) 4.460928137s ago: executing program 2 (id=940): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x10) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x100000010) 4.357083527s ago: executing program 3 (id=941): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a3c000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001414000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a4f000000090a010400000000000000100100000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000014"], 0x64}}, 0x0) 4.215142259s ago: executing program 0 (id=942): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000e70000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e00)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14}}, 0x58}}, 0x0) 4.051539502s ago: executing program 4 (id=943): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="201104"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.830623462s ago: executing program 3 (id=945): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r1], 0x34}}, 0x0) 3.794370495s ago: executing program 0 (id=946): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x120, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@response={0x2, 0x0, 0x0, "82d18160f7d8dda36479a6b179161b4bbff2d0508977b3928ebd2dee05607d17", "0194bd7b1b0303c5ba7f602606a285b3", {"30da2d58da817f8a5f77a23de36a2164", "3b33cfa231a427159c7b9f0eceb155f0"}}}}}}}, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000440)=""/185, 0x94}], 0x1) 2.918288764s ago: executing program 1 (id=947): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x17, 0x51, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 2.695952905s ago: executing program 0 (id=948): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x800, 0x2, 0x8000, 0x253d, 0x2, 0x16ed9af8, 0xff4c}, 0x1c) 2.613382325s ago: executing program 1 (id=949): r0 = socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000000, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x8) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x7, 0x4) 2.314190404s ago: executing program 0 (id=950): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)=""/184, 0xb8}, {&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000000240)=""/78, 0x4e}], 0x3}, 0x0) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) 2.240027383s ago: executing program 1 (id=951): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="bcea"]) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000280)={0x51, 0x12, 0x0, {0x0, 0x2}, {}, @period={0x59, 0x0, 0x0, 0x0, 0x0, {0x0, 0x7, 0x0, 0x8001}, 0x0, 0x0}}) 1.935680397s ago: executing program 4 (id=952): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="88000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000f00000008000300", @ANYRES32=0x0, @ANYBLOB="6900060080000000ffffffff"], 0x88}}, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000219df108801b00d746d00102030109021b0001000000000904000001030000000905"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x1, 0x4, "d6625659"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x0}) 290.268886ms ago: executing program 1 (id=953): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x10000000}, {{0x18, 0x6, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5f5e0ff}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7000000}, {0x85, 0x0, 0x0, 0x2a}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0xffffff7f}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000200)='syzkaller\x00', 0xa, 0x100b, &(0x7f0000001e40)=""/4107, 0x0, 0x42, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 135.879079ms ago: executing program 1 (id=954): r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x0, 0x2}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind(r1, &(0x7f0000000080)=@un=@file={0x0, './file0\x00'}, 0x80) 0s ago: executing program 1 (id=955): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc66", 0x9) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0xc2, 0x1, 0x0, 0x0, {[@generic={0x3, 0x2}, @exp_smc={0xfe, 0x6}, @timestamp={0x8, 0xa, 0x8, 0x5}]}}}}}}}, 0x0) kernel console output (not intermixed with test programs): 81 - 0 [ 81.868959][ T939] hid-picolcd 0003:04D8:F002.0002: device report parse failed [ 81.959517][ T939] hid-picolcd 0003:04D8:F002.0002: probe with driver hid-picolcd failed with error -22 [ 82.021938][ T939] usb 2-1: USB disconnect, device number 3 [ 82.216906][ T3040] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.498512][ T939] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 82.709126][ T939] usb 5-1: Using ep0 maxpacket: 32 [ 82.721575][ T3040] bridge_slave_1: left allmulticast mode [ 82.727773][ T3040] bridge_slave_1: left promiscuous mode [ 82.746395][ T939] usb 5-1: config 0 has no interfaces? [ 82.773590][ T3040] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.779787][ T939] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 82.844949][ T939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.853692][ T3040] bridge_slave_0: left allmulticast mode [ 82.853739][ T3040] bridge_slave_0: left promiscuous mode [ 82.854265][ T3040] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.927470][ T939] usb 5-1: config 0 descriptor?? [ 83.164271][ T5419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.212284][ T5419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.270508][ T5282] usb 5-1: USB disconnect, device number 4 [ 83.721298][ T939] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 83.818967][ T5240] Bluetooth: hci3: command tx timeout [ 83.835896][ T3040] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.852743][ T3040] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.869759][ T3040] bond0 (unregistering): Released all slaves [ 83.892460][ T939] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 83.913674][ T939] usb 5-1: config 0 interface 0 has no altsetting 1 [ 83.933273][ T939] usb 5-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=25.e8 [ 83.943823][ T939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.953265][ T939] usb 5-1: Product: syz [ 83.958090][ T939] usb 5-1: Manufacturer: syz [ 83.968476][ T939] usb 5-1: SerialNumber: syz [ 83.975560][ T939] usb 5-1: config 0 descriptor?? [ 83.981875][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 84.002732][ T939] ttusbir 5-1:0.0: cannot find expected altsetting [ 84.098789][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.108515][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.128504][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.139193][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.232253][ T9] usb 5-1: USB disconnect, device number 5 [ 84.562666][ T5406] chnl_net:caif_netlink_parms(): no params data found [ 84.889836][ T3040] hsr_slave_0: left promiscuous mode [ 84.928711][ T3040] hsr_slave_1: left promiscuous mode [ 84.939999][ T3040] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.947818][ T3040] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.967880][ T3040] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.976943][ T3040] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.020905][ T3040] veth1_macvtap: left promiscuous mode [ 85.027039][ T3040] veth0_macvtap: left promiscuous mode [ 85.058548][ T3040] veth1_vlan: left promiscuous mode [ 85.068927][ T3040] veth0_vlan: left promiscuous mode [ 85.099264][ T58] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 85.280329][ T58] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 85.292870][ T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.324268][ T58] usb 4-1: config 0 descriptor?? [ 85.512897][ T29] audit: type=1326 audit(1727303022.374:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5483 comm="syz.4.81" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa9e5d7def9 code=0x0 [ 85.762044][ T58] usb 4-1: Cannot set MAC address [ 85.767637][ T58] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 85.786340][ T58] usb 4-1: USB disconnect, device number 3 [ 85.887847][ T1757] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 85.897110][ T1757] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 85.905743][ T5240] Bluetooth: hci3: command tx timeout [ 85.912440][ T1757] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 85.923775][ T1757] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 85.934024][ T1757] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 85.943287][ T1757] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 85.951955][ T1757] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 85.960231][ T1757] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 85.967937][ T1757] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 85.977276][ T1757] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 85.985724][ T1757] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 86.019368][ T1757] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 86.062263][ T3040] team0 (unregistering): Port device team_slave_1 removed [ 86.112762][ T3040] team0 (unregistering): Port device team_slave_0 removed [ 86.136691][ T5282] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 86.326056][ T5282] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 86.348300][ T5282] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.363991][ T5282] usb 3-1: Product: syz [ 86.371725][ T5282] usb 3-1: Manufacturer: syz [ 86.377910][ T5282] usb 3-1: SerialNumber: syz [ 86.410391][ T5282] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 86.481127][ T58] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 86.492441][ T5491] raw_sendmsg: syz.4.84 forgot to set AF_INET. Fix it! [ 86.749684][ T941] usb 3-1: USB disconnect, device number 3 [ 87.126507][ T25] cfg80211: failed to load regulatory.db [ 87.277603][ T5509] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 87.302641][ T5406] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.310496][ T5406] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.318723][ T5406] bridge_slave_0: entered allmulticast mode [ 87.326652][ T5406] bridge_slave_0: entered promiscuous mode [ 87.337528][ T5406] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.345594][ T5406] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.353263][ T5406] bridge_slave_1: entered allmulticast mode [ 87.361321][ T5406] bridge_slave_1: entered promiscuous mode [ 87.545873][ T5406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.587744][ T58] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 87.605038][ T5406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.615678][ T58] ath9k_htc: Failed to initialize the device [ 87.640276][ T941] usb 3-1: ath9k_htc: USB layer deinitialized [ 87.838948][ T5406] team0: Port device team_slave_0 added [ 87.861874][ T5406] team0: Port device team_slave_1 added [ 87.978433][ T5240] Bluetooth: hci3: command tx timeout [ 88.010500][ T5406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.067809][ T5406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.094086][ C1] vkms_vblank_simulate: vblank timer overrun [ 88.167937][ T5406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.256667][ T5406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.275269][ T5406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.368849][ T5406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.404660][ T3040] IPVS: stop unused estimator thread 0... [ 88.613330][ T5406] hsr_slave_0: entered promiscuous mode [ 88.663313][ T5406] hsr_slave_1: entered promiscuous mode [ 88.700129][ T5406] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.728421][ T5406] Cannot create hsr debugfs directory [ 89.099868][ T8] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 89.366247][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.403417][ T8] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice= 0.03 [ 89.439134][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.490293][ T8] usb 2-1: config 0 descriptor?? [ 89.569125][ T8] pwc: Askey VC010 type 2 USB webcam detected. [ 89.642568][ T5593] netlink: 64 bytes leftover after parsing attributes in process `syz.2.115'. [ 89.771077][ T8] pwc: send_video_command error -71 [ 89.776469][ T8] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 89.794429][ T8] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 89.838555][ T8] usb 2-1: USB disconnect, device number 4 [ 89.992844][ T5406] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.003664][ T58] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 90.018529][ T5406] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.031770][ T5406] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.043156][ T5406] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.063698][ T5240] Bluetooth: hci3: command tx timeout [ 90.137365][ T5406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.168699][ T939] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 90.180211][ T58] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.193161][ T58] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.217758][ T5406] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.232889][ T58] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 90.249321][ T58] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 90.261611][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.279764][ T3040] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.287178][ T3040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.312779][ T750] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.320283][ T750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.333281][ T58] usb 5-1: config 0 descriptor?? [ 90.339113][ T939] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 90.363441][ T939] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 90.376165][ T939] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 90.425275][ T939] usb 3-1: config 0 interface 0 has no altsetting 0 [ 90.462716][ T5614] netlink: 3 bytes leftover after parsing attributes in process `syz.3.122'. [ 90.465761][ T939] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 90.491025][ T939] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 90.494424][ T5614] ipvlan2: entered promiscuous mode [ 90.507982][ T5282] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 90.511258][ T939] usb 3-1: config 0 interface 0 has no altsetting 0 [ 90.535810][ T939] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 90.554023][ T939] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 90.594422][ T939] usb 3-1: config 0 interface 0 has no altsetting 0 [ 90.618485][ T939] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 90.642271][ T939] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 90.681312][ T5282] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.683686][ T939] usb 3-1: config 0 interface 0 has no altsetting 0 [ 90.731292][ T5282] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice= 0.03 [ 90.757347][ T939] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 90.795836][ T58] plantronics 0003:047F:FFFF.0004: unbalanced collection at end of report description [ 90.805865][ T5282] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.808391][ T939] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 90.823432][ T5406] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.846941][ T58] plantronics 0003:047F:FFFF.0004: parse failed [ 90.856206][ T5282] usb 2-1: config 0 descriptor?? [ 90.871948][ T939] usb 3-1: config 0 interface 0 has no altsetting 0 [ 90.878699][ T58] plantronics 0003:047F:FFFF.0004: probe with driver plantronics failed with error -22 [ 90.896206][ T939] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 90.906348][ T5282] pwc: Askey VC010 type 2 USB webcam detected. [ 90.928038][ T939] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 90.995131][ T5285] usb 5-1: USB disconnect, device number 6 [ 91.008867][ T939] usb 3-1: config 0 interface 0 has no altsetting 0 [ 91.020116][ T5406] veth0_vlan: entered promiscuous mode [ 91.030298][ T939] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 91.055899][ T939] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 91.074562][ T5406] veth1_vlan: entered promiscuous mode [ 91.111109][ T5406] veth0_macvtap: entered promiscuous mode [ 91.122491][ T5406] veth1_macvtap: entered promiscuous mode [ 91.143173][ T5406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.153429][ T939] usb 3-1: config 0 interface 0 has no altsetting 0 [ 91.156292][ T5406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.171776][ T5406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.183334][ T5406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.194579][ T5406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.206279][ T5406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.219632][ T5406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.231158][ T5406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.238646][ T939] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 91.243948][ T5406] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.278189][ T939] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 91.346310][ T939] usb 3-1: config 0 interface 0 has no altsetting 0 [ 91.371072][ T5406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.384782][ T5406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.395342][ T5406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.407053][ T5406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.418971][ T5406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.431030][ T5406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.432005][ T939] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 91.442893][ T5406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.459416][ T939] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 91.464038][ T5406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.484787][ T5406] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.499044][ T5406] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.509241][ T5406] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.519133][ T5406] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.525256][ T939] usb 3-1: Product: syz [ 91.528822][ T5406] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.542391][ T939] usb 3-1: Manufacturer: syz [ 91.565540][ T5282] pwc: recv_control_msg error -71 req 02 val 2b00 [ 91.572904][ T939] usb 3-1: SerialNumber: syz [ 91.579547][ T5282] pwc: recv_control_msg error -71 req 02 val 2700 [ 91.591987][ T5282] pwc: recv_control_msg error -71 req 02 val 2c00 [ 91.599694][ T5282] pwc: recv_control_msg error -71 req 04 val 1000 [ 91.608488][ T5282] pwc: recv_control_msg error -71 req 04 val 1300 [ 91.617668][ T5282] pwc: recv_control_msg error -71 req 04 val 1400 [ 91.626084][ T5282] pwc: recv_control_msg error -71 req 02 val 2000 [ 91.636345][ T5282] pwc: recv_control_msg error -71 req 02 val 2100 [ 91.644622][ T5282] pwc: recv_control_msg error -71 req 04 val 1500 [ 91.648060][ T939] usb 3-1: config 0 descriptor?? [ 91.652691][ T5282] pwc: recv_control_msg error -71 req 02 val 2500 [ 91.671277][ T5282] pwc: recv_control_msg error -71 req 02 val 2400 [ 91.684503][ T5282] pwc: recv_control_msg error -71 req 02 val 2600 [ 91.695197][ T5282] pwc: recv_control_msg error -71 req 02 val 2900 [ 91.705068][ T5282] pwc: recv_control_msg error -71 req 02 val 2800 [ 91.718374][ T5282] pwc: recv_control_msg error -71 req 04 val 1100 [ 91.730338][ T5282] pwc: recv_control_msg error -71 req 04 val 1200 [ 91.770418][ T5282] pwc: Registered as video71. [ 91.790869][ T939] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 91.801485][ T5282] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input7 [ 91.892590][ T5282] usb 2-1: USB disconnect, device number 5 [ 91.991620][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.027100][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.123457][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.145295][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.256157][ T939] usb 3-1: USB disconnect, device number 4 [ 92.319301][ T939] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 92.512937][ T5648] netlink: 8 bytes leftover after parsing attributes in process `syz.4.128'. [ 93.458125][ T5687] tap0: tun_chr_ioctl cmd 2147767507 [ 93.523818][ T5699] process 'syz.2.146' launched './file0' with NULL argv: empty string added [ 93.955305][ T5718] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.032929][ T5721] input: syz1 as /devices/virtual/input/input10 [ 94.238391][ T29] audit: type=1326 audit(1727303031.094:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5728 comm="syz.2.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba1f7def9 code=0x7ffc0000 [ 94.286994][ T5729] delete_channel: no stack [ 94.339180][ T29] audit: type=1326 audit(1727303031.094:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5728 comm="syz.2.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba1f7def9 code=0x7ffc0000 [ 94.459356][ T29] audit: type=1326 audit(1727303031.144:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5728 comm="syz.2.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffba1f7def9 code=0x7ffc0000 [ 94.555206][ T29] audit: type=1326 audit(1727303031.144:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5728 comm="syz.2.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba1f7def9 code=0x7ffc0000 [ 94.694253][ T29] audit: type=1326 audit(1727303031.144:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5728 comm="syz.2.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba1f7def9 code=0x7ffc0000 [ 94.794501][ T29] audit: type=1326 audit(1727303031.144:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5728 comm="syz.2.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffba1f7def9 code=0x7ffc0000 [ 94.831438][ T29] audit: type=1326 audit(1727303031.144:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5728 comm="syz.2.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba1f7def9 code=0x7ffc0000 [ 94.933973][ T29] audit: type=1326 audit(1727303031.144:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5728 comm="syz.2.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba1f7def9 code=0x7ffc0000 [ 95.021005][ T29] audit: type=1326 audit(1727303031.144:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5728 comm="syz.2.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7ffba1f7def9 code=0x7ffc0000 [ 95.049956][ T29] audit: type=1326 audit(1727303031.174:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5728 comm="syz.2.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba1f7def9 code=0x7ffc0000 [ 95.361040][ T941] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 95.492832][ T52] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.560066][ T941] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 95.588424][ T941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.629658][ T941] usb 3-1: Product: syz [ 95.634264][ T941] usb 3-1: Manufacturer: syz [ 95.656743][ T941] usb 3-1: SerialNumber: syz [ 95.692454][ T941] usb 3-1: config 0 descriptor?? [ 95.749965][ T52] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.955993][ T941] cx82310_eth 3-1:0.0: probe with driver cx82310_eth failed with error -22 [ 96.133426][ T5236] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 96.172356][ T52] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.314559][ T52] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.343452][ T5236] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 96.363665][ T5236] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 96.364946][ T941] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 96.405987][ T5236] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 96.486933][ T5236] usb 5-1: config 0 interface 0 has no altsetting 0 [ 96.496213][ T5243] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 96.506193][ T5243] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 96.516139][ T5243] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 96.524764][ T5236] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 96.535859][ T5236] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 96.551385][ T5243] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 96.561435][ T5236] usb 5-1: config 0 interface 0 has no altsetting 0 [ 96.570800][ T5243] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 96.583806][ T5243] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 96.592673][ T5236] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 96.603983][ T5236] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 96.618553][ T5236] usb 5-1: config 0 interface 0 has no altsetting 0 [ 96.626816][ T5236] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 96.637360][ T5236] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 96.649515][ T5236] usb 5-1: config 0 interface 0 has no altsetting 0 [ 96.659628][ T5236] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 96.669026][ T5236] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 96.679189][ T9] usb 3-1: USB disconnect, device number 5 [ 96.681960][ T5236] usb 5-1: config 0 interface 0 has no altsetting 0 [ 96.697033][ T5236] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 96.707851][ T5236] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 96.748311][ T5236] usb 5-1: config 0 interface 0 has no altsetting 0 [ 96.793670][ T5236] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 96.843815][ T5236] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 96.908693][ T5236] usb 5-1: config 0 interface 0 has no altsetting 0 [ 96.950377][ T5236] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 96.971374][ T52] bridge_slave_1: left allmulticast mode [ 96.977496][ T52] bridge_slave_1: left promiscuous mode [ 96.980848][ T5236] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 97.028365][ T5236] usb 5-1: config 0 interface 0 has no altsetting 0 [ 97.053251][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.060679][ T5236] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 97.075176][ T5236] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 97.097696][ T5236] usb 5-1: Product: syz [ 97.105414][ T52] bridge_slave_0: left allmulticast mode [ 97.113089][ T5236] usb 5-1: Manufacturer: syz [ 97.125007][ T5236] usb 5-1: SerialNumber: syz [ 97.128920][ T52] bridge_slave_0: left promiscuous mode [ 97.137557][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.151441][ T5236] usb 5-1: config 0 descriptor?? [ 97.303547][ T5236] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 97.583603][ T5285] usb 5-1: USB disconnect, device number 7 [ 97.619389][ T5285] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 98.171956][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.187760][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.204281][ T52] bond0 (unregistering): Released all slaves [ 98.621048][ T5243] Bluetooth: hci1: command tx timeout [ 99.168624][ T5285] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 99.346487][ T52] hsr_slave_0: left promiscuous mode [ 99.391975][ T52] hsr_slave_1: left promiscuous mode [ 99.404256][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.452116][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.469621][ T5285] usb 3-1: Using ep0 maxpacket: 32 [ 99.484862][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.509587][ T5285] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.518000][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.533835][ T5285] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.589159][ T5285] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 99.616673][ T52] veth1_macvtap: left promiscuous mode [ 99.624105][ T5285] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.633467][ T52] veth0_macvtap: left promiscuous mode [ 99.665802][ T52] veth1_vlan: left promiscuous mode [ 99.669807][ T5285] usb 3-1: config 0 descriptor?? [ 99.673865][ T52] veth0_vlan: left promiscuous mode [ 99.701228][ T5285] hub 3-1:0.0: USB hub found [ 99.887064][ T29] audit: type=1800 audit(1727303036.744:13): pid=5873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.204" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 99.921492][ T5285] hub 3-1:0.0: 1 port detected [ 100.130256][ T5285] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 100.144934][ T5285] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 100.161175][ T5285] usbhid 3-1:0.0: can't add hid device: -71 [ 100.167967][ T5285] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 100.211896][ T5285] usb 3-1: USB disconnect, device number 6 [ 100.570414][ T52] team0 (unregistering): Port device team_slave_1 removed [ 100.619774][ T52] team0 (unregistering): Port device team_slave_0 removed [ 100.704064][ T5243] Bluetooth: hci1: command tx timeout [ 101.244799][ T5880] tap0: tun_chr_ioctl cmd 2147767521 [ 101.358425][ T5799] chnl_net:caif_netlink_parms(): no params data found [ 101.945491][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.956120][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.973500][ T5799] bridge_slave_0: entered allmulticast mode [ 102.008025][ T5799] bridge_slave_0: entered promiscuous mode [ 102.177620][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.193231][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.207005][ T5799] bridge_slave_1: entered allmulticast mode [ 102.215327][ T5799] bridge_slave_1: entered promiscuous mode [ 102.262796][ T29] audit: type=1326 audit(1727303039.104:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5919 comm="syz.3.221" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5630b7def9 code=0x0 [ 102.323048][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.358435][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 102.377818][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.467207][ T5799] team0: Port device team_slave_0 added [ 102.499261][ T5799] team0: Port device team_slave_1 added [ 102.518759][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 102.527440][ T8] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 102.555397][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 102.586543][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.586850][ T8] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 102.606634][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.627800][ T8] usb 1-1: Product: syz [ 102.642381][ T8] usb 1-1: Manufacturer: syz [ 102.648874][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.655191][ T8] usb 1-1: SerialNumber: syz [ 102.713721][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.734871][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.742830][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.776994][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.782295][ T8] usb 1-1: config 0 descriptor?? [ 102.789340][ T5243] Bluetooth: hci1: command tx timeout [ 102.841602][ T8] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 102.877399][ T8] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 102.985483][ T5799] hsr_slave_0: entered promiscuous mode [ 102.997259][ T5799] hsr_slave_1: entered promiscuous mode [ 103.009579][ T5799] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.024630][ T5799] Cannot create hsr debugfs directory [ 103.191392][ T5940] tipc: Started in network mode [ 103.200425][ T5940] tipc: Node identity ac14140f, cluster identity 4711 [ 103.209335][ T5282] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 103.228091][ T5940] tipc: New replicast peer: 255.255.255.255 [ 103.247240][ T5940] tipc: Enabled bearer , priority 10 [ 103.415515][ T5282] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=9f.d4 [ 103.423403][ T8] em28xx 1-1:0.0: chip ID is em28178 [ 103.465754][ T5282] usb 3-1: New USB device strings: Mfr=188, Product=0, SerialNumber=0 [ 103.514290][ T5282] usb 3-1: Manufacturer: syz [ 103.534686][ T5282] usb 3-1: config 0 descriptor?? [ 103.720325][ T5285] usb 1-1: USB disconnect, device number 2 [ 103.760021][ T5285] em28xx 1-1:0.0: Disconnecting em28xx [ 103.777063][ T5285] em28xx 1-1:0.0: Freeing device [ 103.960318][ T5282] gs_usb 3-1:0.0: Couldn't get device config: (err=-71) [ 103.983595][ T5282] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 104.012377][ T5282] usb 3-1: USB disconnect, device number 7 [ 104.369992][ T5285] tipc: Node number set to 2886997007 [ 104.473906][ T5976] netlink: 'syz.4.233': attribute type 9 has an invalid length. [ 104.507144][ T5976] bond_slave_0: entered promiscuous mode [ 104.514818][ T5976] bond_slave_1: entered promiscuous mode [ 104.553754][ T5976] macvlan2: entered promiscuous mode [ 104.592417][ T5976] bond0: entered promiscuous mode [ 104.601418][ T5976] macvlan2: entered allmulticast mode [ 104.638400][ T5976] bond0: entered allmulticast mode [ 104.653537][ T5976] bond_slave_0: entered allmulticast mode [ 104.673435][ T5976] bond_slave_1: entered allmulticast mode [ 104.697155][ T5976] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 104.860391][ T5243] Bluetooth: hci1: command tx timeout [ 104.982121][ T5799] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 105.080716][ T5799] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 105.144747][ T5799] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 105.190057][ T5799] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 105.327482][ T25] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 105.401450][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.425346][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.474330][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.483043][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.500126][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.509820][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.648399][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 105.667992][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.712686][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.731511][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.786699][ T25] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 105.847612][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.913155][ T25] usb 5-1: config 0 descriptor?? [ 105.937126][ T5799] veth0_vlan: entered promiscuous mode [ 106.020522][ T5799] veth1_vlan: entered promiscuous mode [ 106.091461][ T5799] veth0_macvtap: entered promiscuous mode [ 106.132741][ T5799] veth1_macvtap: entered promiscuous mode [ 106.218961][ T5799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.258319][ T5799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.304245][ T5799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.337625][ T5799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.361896][ T5799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.387661][ T25] ft260 0003:0403:6030.0005: unknown main item tag 0x0 [ 106.405416][ T5799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.432152][ T5799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.466398][ T5799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.510389][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.585848][ T25] ft260 0003:0403:6030.0005: chip code: 5e81 abf2 [ 106.613596][ T5799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.668338][ T5799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.704992][ T5799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.728187][ T5799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.740385][ T5799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.754141][ T5799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.769733][ T5799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.782439][ T5799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.796571][ T25] ft260 0003:0403:6030.0005: failed to retrieve system status [ 106.806255][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.837034][ T25] ft260 0003:0403:6030.0005: probe with driver ft260 failed with error -71 [ 106.867582][ T5799] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.911384][ T25] usb 5-1: USB disconnect, device number 8 [ 106.917225][ T5799] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.933747][ T5799] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.951567][ T5799] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.317336][ T750] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.372571][ T750] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.467469][ T742] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.483894][ T742] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.888801][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 107.990317][ T6090] input: syz1 as /devices/virtual/input/input11 [ 108.046342][ T6092] netlink: 16 bytes leftover after parsing attributes in process `syz.3.261'. [ 108.090013][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.125394][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 108.225029][ T9] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 108.256142][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 108.267887][ T9] usb 5-1: SerialNumber: syz [ 108.470450][ T6110] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 108.517357][ T9] usb 5-1: 0:2 : does not exist [ 108.620668][ T6114] kernel profiling enabled (shift: 6) [ 108.670741][ T9] usb 5-1: USB disconnect, device number 9 [ 108.803181][ T5237] udevd[5237]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 109.335826][ T6134] tap0: tun_chr_ioctl cmd 2147767511 [ 109.582487][ T5282] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 109.888998][ T5282] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.912778][ T5282] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 109.947094][ T5282] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.967262][ T5282] usb 1-1: config 0 descriptor?? [ 110.182245][ T5282] usb 1-1: string descriptor 0 read error: -71 [ 110.190546][ T5282] usb 1-1: Found UVC 0.00 device (046d:08c1) [ 110.210279][ T5282] usb 1-1: No valid video chain found. [ 110.228436][ T5282] usb 1-1: USB disconnect, device number 3 [ 110.238930][ T6164] netlink: 28 bytes leftover after parsing attributes in process `syz.4.290'. [ 110.718573][ T5285] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 110.888328][ T5285] usb 5-1: Using ep0 maxpacket: 32 [ 110.921232][ T5285] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.944594][ T5285] usb 5-1: config 0 has no interfaces? [ 110.980265][ T5285] usb 5-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 111.005308][ T5285] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 111.033260][ T5285] usb 5-1: SerialNumber: syz [ 111.059144][ T5285] usb 5-1: config 0 descriptor?? [ 111.257715][ T6191] input: syz1 as /devices/virtual/input/input12 [ 111.307739][ T6171] netlink: 87 bytes leftover after parsing attributes in process `syz.4.293'. [ 111.370167][ T25] usb 5-1: USB disconnect, device number 10 [ 111.458412][ T5282] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 111.622090][ T5282] usb 3-1: Using ep0 maxpacket: 16 [ 111.645386][ T5282] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.679071][ T5282] usb 3-1: config 0 has no interfaces? [ 111.684918][ T5282] usb 3-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 111.718441][ T5282] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.760958][ T5282] usb 3-1: config 0 descriptor?? [ 111.917841][ T6213] netlink: 8 bytes leftover after parsing attributes in process `syz.1.312'. [ 112.052073][ T941] usb 3-1: USB disconnect, device number 8 [ 112.463178][ T6228] ALSA: mixer_oss: invalid OSS volume '' [ 112.822326][ T6245] netlink: 12 bytes leftover after parsing attributes in process `syz.3.327'. [ 113.020965][ T941] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 113.145385][ T29] audit: type=1326 audit(1727303050.005:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6256 comm="syz.3.332" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5630b7def9 code=0x0 [ 113.188684][ T941] usb 3-1: Using ep0 maxpacket: 8 [ 113.218709][ T941] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 113.236413][ T941] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 113.268277][ T941] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 113.279685][ T6265] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.334'. [ 113.310678][ T941] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 113.339318][ T941] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 113.383365][ T941] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 113.409341][ T941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.431481][ T29] audit: type=1326 audit(1727303050.295:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6268 comm="syz.0.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f156d97def9 code=0x7ffc0000 [ 113.490897][ T29] audit: type=1326 audit(1727303050.295:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6268 comm="syz.0.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f156d97def9 code=0x7ffc0000 [ 113.513999][ T29] audit: type=1326 audit(1727303050.295:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6268 comm="syz.0.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f156d97def9 code=0x7ffc0000 [ 113.544356][ T29] audit: type=1326 audit(1727303050.295:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6268 comm="syz.0.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f156d97def9 code=0x7ffc0000 [ 113.604957][ T29] audit: type=1326 audit(1727303050.295:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6268 comm="syz.0.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f156d97def9 code=0x7ffc0000 [ 113.667275][ T29] audit: type=1326 audit(1727303050.295:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6268 comm="syz.0.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f156d97def9 code=0x7ffc0000 [ 113.705930][ T941] usb 3-1: GET_CAPABILITIES returned 0 [ 113.712114][ T941] usbtmc 3-1:16.0: can't read capabilities [ 113.728539][ T6277] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 113.750084][ T8] IPVS: starting estimator thread 0... [ 113.771310][ T29] audit: type=1326 audit(1727303050.295:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6268 comm="syz.0.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f156d97def9 code=0x7ffc0000 [ 113.802972][ T29] audit: type=1326 audit(1727303050.295:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6268 comm="syz.0.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f156d97def9 code=0x7ffc0000 [ 113.833895][ T29] audit: type=1326 audit(1727303050.305:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6268 comm="syz.0.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f156d97def9 code=0x7ffc0000 [ 113.856334][ T6280] IPVS: using max 16 ests per chain, 38400 per kthread [ 113.874166][ T5282] usb 3-1: USB disconnect, device number 9 [ 114.177330][ T6294] mmap: syz.3.349 (6294) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 114.489543][ T6309] netlink: 24 bytes leftover after parsing attributes in process `syz.2.357'. [ 114.775164][ T6320] netlink: 'syz.4.361': attribute type 8 has an invalid length. [ 114.847329][ T6320] netlink: 16 bytes leftover after parsing attributes in process `syz.4.361'. [ 116.624243][ T6358] netlink: 'syz.0.377': attribute type 4 has an invalid length. [ 117.008454][ T25] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 117.184853][ T25] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 117.207057][ T25] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 117.228727][ T25] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 117.244186][ T25] usb 3-1: config 0 interface 0 has no altsetting 0 [ 117.267454][ T25] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 117.286840][ T25] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 117.315550][ T25] usb 3-1: config 0 interface 0 has no altsetting 0 [ 117.324209][ T25] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 117.344158][ T25] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 117.372926][ T25] usb 3-1: config 0 interface 0 has no altsetting 0 [ 117.390325][ T25] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 117.400160][ T25] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 117.417844][ T25] usb 3-1: config 0 interface 0 has no altsetting 0 [ 117.451578][ T25] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 117.471177][ T25] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 117.504651][ T25] usb 3-1: config 0 interface 0 has no altsetting 0 [ 117.537321][ T25] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 117.556955][ T25] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 117.593114][ T25] usb 3-1: config 0 interface 0 has no altsetting 0 [ 117.619066][ T25] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 117.648158][ T25] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 117.667683][ T6397] netlink: 20 bytes leftover after parsing attributes in process `syz.3.395'. [ 117.699041][ T25] usb 3-1: config 0 interface 0 has no altsetting 0 [ 117.732041][ T25] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 117.742177][ T25] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 117.768370][ T25] usb 3-1: config 0 interface 0 has no altsetting 0 [ 117.786781][ T25] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 117.848460][ T25] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 117.882878][ T25] usb 3-1: Product: syz [ 117.887138][ T25] usb 3-1: Manufacturer: syz [ 117.912664][ T25] usb 3-1: SerialNumber: syz [ 117.934084][ T25] usb 3-1: config 0 descriptor?? [ 117.971941][ T25] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 118.349045][ C1] usb 3-1: yurex_control_callback - control failed: -71 [ 118.349554][ T939] usb 3-1: USB disconnect, device number 10 [ 118.403661][ T939] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 118.527156][ T6417] netlink: 104 bytes leftover after parsing attributes in process `syz.3.403'. [ 118.718386][ T5285] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 118.880277][ T5285] usb 2-1: config 0 has no interfaces? [ 118.890882][ T5285] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 118.909862][ T5285] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.928668][ T5285] usb 2-1: config 0 descriptor?? [ 119.239128][ T5285] usb 2-1: USB disconnect, device number 6 [ 119.470465][ T939] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 119.566334][ T6450] netlink: 120 bytes leftover after parsing attributes in process `syz.3.418'. [ 119.649065][ T939] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 119.669651][ T939] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 119.686994][ T939] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 119.708650][ T5285] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 119.723968][ T939] usb 5-1: config 0 interface 0 has no altsetting 0 [ 119.747758][ T939] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 119.765487][ T939] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 119.785656][ T939] usb 5-1: config 0 interface 0 has no altsetting 0 [ 119.831987][ T939] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 119.864555][ T939] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 119.877638][ T6459] sch_tbf: burst 0 is lower than device netdevsim0 mtu (1514) ! [ 119.885923][ T5285] usb 1-1: Using ep0 maxpacket: 8 [ 119.892506][ T939] usb 5-1: config 0 interface 0 has no altsetting 0 [ 119.900816][ T5285] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 119.905030][ T939] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 119.912979][ T5285] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 119.930518][ T5285] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 119.940832][ T5285] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 119.954098][ T5285] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 119.963285][ T5285] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.978502][ T939] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 120.012157][ T939] usb 5-1: config 0 interface 0 has no altsetting 0 [ 120.118098][ T939] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 120.128771][ T939] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 120.140824][ T939] usb 5-1: config 0 interface 0 has no altsetting 0 [ 120.150440][ T939] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 120.159873][ T939] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 120.171127][ T939] usb 5-1: config 0 interface 0 has no altsetting 0 [ 120.189142][ T939] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 120.195328][ T5285] usb 1-1: GET_CAPABILITIES returned 0 [ 120.198204][ T939] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 120.205812][ T5285] usbtmc 1-1:16.0: can't read capabilities [ 120.217826][ T939] usb 5-1: config 0 interface 0 has no altsetting 0 [ 120.231272][ T939] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 120.266282][ T939] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 120.308318][ T939] usb 5-1: config 0 interface 0 has no altsetting 0 [ 120.419820][ T939] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 120.448962][ T939] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 120.457400][ T939] usb 5-1: Product: syz [ 120.461949][ T939] usb 5-1: Manufacturer: syz [ 120.466598][ T939] usb 5-1: SerialNumber: syz [ 120.499409][ T939] usb 5-1: config 0 descriptor?? [ 120.572580][ T939] yurex 5-1:0.0: USB YUREX device now attached to Yurex #1 [ 120.602224][ T5285] usb 1-1: USB disconnect, device number 4 [ 120.797043][ T5282] usb 5-1: USB disconnect, device number 11 [ 120.818895][ T5282] yurex 5-1:0.0: USB YUREX #1 now disconnected [ 121.035796][ T6476] input: syz1 as /devices/virtual/input/input13 [ 121.214557][ T6484] unknown channel width for channel at 907000KHz? [ 121.314342][ T6486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.434'. [ 121.399742][ T6490] netlink: 104 bytes leftover after parsing attributes in process `syz.2.435'. [ 121.534280][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 121.534336][ T29] audit: type=1326 audit(1727303058.385:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6493 comm="syz.1.439" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd34b17def9 code=0x0 [ 121.564523][ T6497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.440'. [ 122.398495][ T5282] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 122.581213][ T5282] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.603065][ T5282] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.634877][ T5282] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 122.672973][ T5282] usb 1-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 122.686412][ T5282] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.704700][ T5282] usb 1-1: config 0 descriptor?? [ 123.191578][ T5282] betop 0003:11C2:2208.0006: item fetching failed at offset 4/5 [ 123.223668][ T5282] betop 0003:11C2:2208.0006: parse failed [ 123.243217][ T5282] betop 0003:11C2:2208.0006: probe with driver betop failed with error -22 [ 123.244696][ T6566] input: syz1 as /devices/virtual/input/input14 [ 123.407917][ T9] usb 1-1: USB disconnect, device number 5 [ 124.766090][ T6614] netlink: 104 bytes leftover after parsing attributes in process `syz.0.491'. [ 125.721471][ T6652] netlink: 'syz.0.507': attribute type 1 has an invalid length. [ 125.729812][ T6652] netlink: 'syz.0.507': attribute type 2 has an invalid length. [ 125.763875][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 125.788520][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 125.854983][ T6656] ======================================================= [ 125.854983][ T6656] WARNING: The mand mount option has been deprecated and [ 125.854983][ T6656] and is ignored by this kernel. Remove the mand [ 125.854983][ T6656] option from the mount to silence this warning. [ 125.854983][ T6656] ======================================================= [ 125.868753][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 125.899098][ C0] vkms_vblank_simulate: vblank timer overrun [ 126.633550][ T52] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.806050][ T52] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.007778][ T52] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.175433][ T52] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.453428][ T52] bridge_slave_1: left allmulticast mode [ 127.578726][ T52] bridge_slave_1: left promiscuous mode [ 127.619015][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.684082][ T52] bridge_slave_0: left allmulticast mode [ 127.718103][ T52] bridge_slave_0: left promiscuous mode [ 127.726584][ T5240] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 127.730192][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.757935][ T5240] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 127.771973][ T5240] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 127.781924][ T5240] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 127.793422][ T5240] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 127.803532][ T5240] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 129.161811][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.181426][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.191369][ T5282] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 129.211724][ T52] bond0 (unregistering): Released all slaves [ 129.358430][ T5282] usb 3-1: Using ep0 maxpacket: 8 [ 129.366221][ T5282] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.377783][ T5282] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 129.386903][ T5282] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 129.400290][ T5282] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 129.412550][ T5282] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 129.427496][ T5282] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.447077][ T5282] hub 3-1:1.0: bad descriptor, ignoring hub [ 129.453758][ T5282] hub 3-1:1.0: probe with driver hub failed with error -5 [ 129.463213][ T5282] cdc_wdm 3-1:1.0: skipping garbage [ 129.470195][ T5282] cdc_wdm 3-1:1.0: skipping garbage [ 129.479076][ T5282] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 129.486292][ T5282] cdc_wdm 3-1:1.0: Unknown control protocol [ 129.748704][ T6747] netlink: 'syz.4.543': attribute type 8 has an invalid length. [ 129.901547][ T5240] Bluetooth: hci1: command tx timeout [ 130.212295][ T52] hsr_slave_0: left promiscuous mode [ 130.242433][ T52] hsr_slave_1: left promiscuous mode [ 130.276130][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.298588][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.331035][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.359517][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.465517][ T52] veth1_macvtap: left promiscuous mode [ 130.487025][ T52] veth0_macvtap: left promiscuous mode [ 130.513454][ T52] veth1_vlan: left promiscuous mode [ 130.541360][ T52] veth0_vlan: left promiscuous mode [ 130.633679][ T6737] cdc_wdm 3-1:1.0: Error autopm - -16 [ 130.640772][ T9] usb 3-1: USB disconnect, device number 11 [ 130.790469][ T6780] syz.3.550 uses obsolete (PF_INET,SOCK_PACKET) [ 131.487373][ T52] team0 (unregistering): Port device team_slave_1 removed [ 131.518948][ T6794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.555'. [ 131.552692][ T52] team0 (unregistering): Port device team_slave_0 removed [ 131.979669][ T5240] Bluetooth: hci1: command tx timeout [ 132.268083][ T6709] chnl_net:caif_netlink_parms(): no params data found [ 132.660916][ T6709] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.689147][ T6709] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.697087][ T6709] bridge_slave_0: entered allmulticast mode [ 132.745059][ T6709] bridge_slave_0: entered promiscuous mode [ 132.770487][ T6709] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.799778][ T6709] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.848040][ T6709] bridge_slave_1: entered allmulticast mode [ 132.859959][ T6709] bridge_slave_1: entered promiscuous mode [ 132.913080][ T6822] vcan0: tx drop: invalid sa for name 0x0000000020000000 [ 133.155538][ T6709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.192436][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.205330][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.217228][ T6709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.304908][ T5243] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 133.346596][ T5243] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 133.382324][ T5243] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 133.397222][ T5243] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 133.447734][ T5243] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 133.462912][ T5243] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 133.583176][ T6709] team0: Port device team_slave_0 added [ 133.620928][ T6709] team0: Port device team_slave_1 added [ 133.724846][ T6844] input: syz1 as /devices/virtual/input/input15 [ 133.932983][ T52] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.024837][ T6709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.032283][ T6709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.059250][ T6709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.073939][ T5240] Bluetooth: hci1: command tx timeout [ 134.119444][ T6709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.126622][ T6709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.152911][ T6709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.406783][ T52] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.711761][ T52] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.747931][ T6709] hsr_slave_0: entered promiscuous mode [ 134.756046][ T6709] hsr_slave_1: entered promiscuous mode [ 134.762669][ T6709] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.775827][ T6709] Cannot create hsr debugfs directory [ 134.872953][ T52] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.482283][ T52] bridge_slave_1: left promiscuous mode [ 135.495227][ T29] audit: type=1326 audit(1727303072.355:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6900 comm="syz.4.592" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa9e5d7def9 code=0x0 [ 135.536341][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.578524][ T5240] Bluetooth: hci3: command tx timeout [ 135.591183][ T52] bridge_slave_0: left allmulticast mode [ 135.597039][ T52] bridge_slave_0: left promiscuous mode [ 135.628930][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.138587][ T5240] Bluetooth: hci1: command tx timeout [ 136.643103][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.665495][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.686519][ T52] bond0 (unregistering): Released all slaves [ 136.716170][ T6840] chnl_net:caif_netlink_parms(): no params data found [ 136.996524][ T29] audit: type=1400 audit(1727303073.855:29): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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luetooth: hci3: command tx timeout [ 137.829079][ T52] hsr_slave_0: left promiscuous mode [ 137.876190][ T52] hsr_slave_1: left promiscuous mode [ 137.879530][ T29] audit: type=1326 audit(1727303074.735:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6967 comm="syz.4.613" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa9e5d7def9 code=0x0 [ 137.905899][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.914963][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.924086][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.936646][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.007787][ T52] veth1_macvtap: left promiscuous mode [ 138.030038][ T52] veth0_macvtap: left promiscuous mode [ 138.036008][ T52] veth1_vlan: left promiscuous mode [ 138.046597][ T52] veth0_vlan: left promiscuous mode [ 138.822812][ T52] team0 (unregistering): Port device team_slave_1 removed [ 138.885481][ T52] team0 (unregistering): Port device team_slave_0 removed [ 139.385070][ T6840] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.392753][ T6840] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.400240][ T6840] bridge_slave_0: entered allmulticast mode [ 139.407396][ T6840] bridge_slave_0: entered promiscuous mode [ 139.463638][ T6840] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.476302][ T6840] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.492969][ T6840] bridge_slave_1: entered allmulticast mode [ 139.500915][ T6840] bridge_slave_1: entered promiscuous mode [ 139.756654][ T6840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.771996][ T6840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.821342][ T5243] Bluetooth: hci3: command tx timeout [ 139.890981][ T6840] team0: Port device team_slave_0 added [ 139.932123][ T6840] team0: Port device team_slave_1 added [ 140.025743][ T6840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.045504][ T6840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.073469][ T6840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.087867][ T6840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.096195][ T6840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.132849][ T6840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.242277][ T6840] hsr_slave_0: entered promiscuous mode [ 140.261627][ T6840] hsr_slave_1: entered promiscuous mode [ 140.273999][ T6840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 140.284550][ T6840] Cannot create hsr debugfs directory [ 140.295123][ T6709] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 140.310477][ T6709] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 140.342297][ T6709] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 140.363590][ T6709] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 140.869139][ T25] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 141.049674][ T6709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.067763][ T6709] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.087045][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.094492][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.122527][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 141.162786][ T25] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 141.174316][ T25] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 141.182336][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.193700][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.200691][ T25] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 141.215055][ T25] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 141.269176][ T25] usb 3-1: config 0 interface 0 has no altsetting 0 [ 141.305288][ T25] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 141.370232][ T25] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 141.394265][ T6709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.404348][ T25] usb 3-1: Product: syz [ 141.408805][ T25] usb 3-1: Manufacturer: syz [ 141.416042][ T25] usb 3-1: SerialNumber: syz [ 141.450835][ T25] usb 3-1: config 0 descriptor?? [ 141.467538][ T25] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 141.500637][ T25] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 141.552139][ T6709] veth0_vlan: entered promiscuous mode [ 141.619337][ T6840] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 141.639830][ T6709] veth1_vlan: entered promiscuous mode [ 141.671800][ T6840] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 141.713741][ T6840] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 141.729783][ T9] usb 3-1: USB disconnect, device number 12 [ 141.736173][ C0] ldusb 3-1:0.0: usb_submit_urb failed (-19) [ 141.751750][ T9] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 141.769943][ T6709] veth0_macvtap: entered promiscuous mode [ 141.781436][ T6709] veth1_macvtap: entered promiscuous mode [ 141.800197][ T6709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.811596][ T6709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.822149][ T6709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.833240][ T6709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.844707][ T6709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.856896][ T6709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.869945][ T6709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.877665][ T6840] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 141.898991][ T5243] Bluetooth: hci3: command tx timeout [ 141.940180][ T6709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.951928][ T6709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.963063][ T6709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.969966][ T7013] ldusb: No device or device unplugged -19 [ 141.974080][ T6709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.991340][ T6709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.003027][ T6709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.015797][ T6709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.044747][ T6709] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.058061][ T6709] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.068639][ T6709] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.080043][ T6709] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.312140][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.335816][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.399344][ T750] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.407234][ T750] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.521548][ T6840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.634111][ T6840] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.723691][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.732104][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.741625][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.749541][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.966790][ T6840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.146691][ T6840] veth0_vlan: entered promiscuous mode [ 143.197595][ T6840] veth1_vlan: entered promiscuous mode [ 143.301142][ T6840] veth0_macvtap: entered promiscuous mode [ 143.307118][ T7068] misc userio: Can't change port type on an already running userio instance [ 143.361569][ T6840] veth1_macvtap: entered promiscuous mode [ 143.468518][ T6840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.521427][ T6840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.563787][ T6840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.628383][ T6840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.688316][ T6840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.723131][ T6840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.764248][ T6840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.812466][ T6840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.860124][ T6840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.924550][ T6840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.985736][ T6840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.018426][ T6840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.048275][ T6840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.080802][ T6840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.135594][ T6840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.178590][ T6840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.230067][ T6840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.259735][ T6840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.314479][ T6840] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.368409][ T6840] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.387892][ T6840] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.413844][ T6840] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.759882][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.805284][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.891291][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.927959][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.998761][ T939] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 146.146424][ T29] audit: type=1400 audit(1727303083.005:31): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 146.557220][ T939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.579525][ T939] usb 4-1: Product: syz [ 146.583899][ T939] usb 4-1: Manufacturer: syz [ 146.601676][ T939] usb 4-1: SerialNumber: syz [ 146.632399][ T939] usb 4-1: config 0 descriptor?? [ 146.970069][ T8] usb 4-1: USB disconnect, device number 4 [ 149.580481][ T941] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 149.750915][ T941] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 149.791855][ T941] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 149.845914][ T941] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 149.864689][ T939] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 149.892352][ T941] usb 2-1: config 0 interface 0 has no altsetting 0 [ 149.949925][ T941] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 149.970921][ T742] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.988862][ T941] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 150.007181][ T941] usb 2-1: config 0 interface 0 has no altsetting 0 [ 150.038450][ T939] usb 1-1: Using ep0 maxpacket: 8 [ 150.069557][ T941] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 150.110594][ T939] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.128444][ T941] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 150.157278][ T939] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 150.195127][ T941] usb 2-1: config 0 interface 0 has no altsetting 0 [ 150.209128][ T939] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 150.243956][ T941] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 150.254448][ T939] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 150.278343][ T941] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 150.302310][ T742] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.324911][ T939] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 150.341507][ T941] usb 2-1: config 0 interface 0 has no altsetting 0 [ 150.356299][ T939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.371001][ T941] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 150.403278][ T941] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 150.438160][ T939] hub 1-1:1.0: bad descriptor, ignoring hub [ 150.450362][ T939] hub 1-1:1.0: probe with driver hub failed with error -5 [ 150.457853][ T941] usb 2-1: config 0 interface 0 has no altsetting 0 [ 150.476476][ T939] cdc_wdm 1-1:1.0: skipping garbage [ 150.516582][ T941] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 150.530933][ T939] cdc_wdm 1-1:1.0: skipping garbage [ 150.537460][ T941] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 150.551271][ T939] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 150.557513][ T939] cdc_wdm 1-1:1.0: Unknown control protocol [ 150.579726][ T941] usb 2-1: config 0 interface 0 has no altsetting 0 [ 150.608420][ T941] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 150.632023][ T941] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 150.652931][ T941] usb 2-1: config 0 interface 0 has no altsetting 0 [ 150.663421][ T941] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 150.691613][ T742] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.713205][ T941] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 150.747922][ T941] usb 2-1: config 0 interface 0 has no altsetting 0 [ 150.764813][ T7280] io-wq is not configured for unbound workers [ 150.768635][ T941] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 150.804977][ T941] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 150.833172][ T941] usb 2-1: Product: syz [ 150.837435][ T941] usb 2-1: Manufacturer: syz [ 150.907890][ T742] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.920516][ T941] usb 2-1: SerialNumber: syz [ 150.949338][ T941] usb 2-1: config 0 descriptor?? [ 150.952834][ T5240] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 150.998116][ T5240] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 151.007943][ T5240] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 151.023212][ T5240] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 151.034631][ T5240] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 151.044799][ T5240] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 151.408188][ T742] bridge_slave_1: left allmulticast mode [ 151.424676][ T742] bridge_slave_1: left promiscuous mode [ 151.443368][ T742] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.492597][ T742] bridge_slave_0: left allmulticast mode [ 151.502537][ T742] bridge_slave_0: left promiscuous mode [ 151.512028][ T742] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.609554][ T7306] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 152.039538][ T5282] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 152.200250][ T5282] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.218162][ T5282] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.234961][ T5282] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 152.250600][ T5282] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.267395][ T5282] usb 3-1: config 0 descriptor?? [ 152.316556][ T742] bond0 (unregistering): left allmulticast mode [ 152.323227][ T742] bond_slave_0: left allmulticast mode [ 152.330557][ T742] bond_slave_1: left allmulticast mode [ 152.339805][ T742] bond0 (unregistering): left promiscuous mode [ 152.346713][ T742] bond_slave_0: left promiscuous mode [ 152.352734][ T742] bond_slave_1: left promiscuous mode [ 152.384338][ T742] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.398113][ T742] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.420608][ T742] bond0 (unregistering): Released all slaves [ 152.542645][ T742] tipc: Disabling bearer [ 152.553353][ T742] tipc: Left network mode [ 152.696674][ T5282] pyra 0003:1E7D:2CF6.0007: item fetching failed at offset 5/7 [ 152.714173][ T5282] pyra 0003:1E7D:2CF6.0007: parse failed [ 152.721218][ T5282] pyra 0003:1E7D:2CF6.0007: probe with driver pyra failed with error -22 [ 152.801358][ T7290] chnl_net:caif_netlink_parms(): no params data found [ 152.890690][ T5282] usb 3-1: USB disconnect, device number 13 [ 152.943287][ T742] hsr_slave_0: left promiscuous mode [ 152.956248][ T742] hsr_slave_1: left promiscuous mode [ 152.965338][ T742] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.973518][ T742] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.989356][ T742] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.999375][ T742] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.025750][ T742] veth1_macvtap: left promiscuous mode [ 153.033022][ T742] veth0_macvtap: left promiscuous mode [ 153.046263][ T742] veth1_vlan: left promiscuous mode [ 153.052158][ T742] veth0_vlan: left promiscuous mode [ 153.099193][ T5243] Bluetooth: hci4: command tx timeout [ 153.597064][ T742] team0 (unregistering): Port device team_slave_1 removed [ 153.643557][ T742] team0 (unregistering): Port device team_slave_0 removed [ 153.995291][ T5285] usb 1-1: USB disconnect, device number 6 [ 154.002887][ T7261] cdc_wdm 1-1:1.0: Error autopm - -16 [ 154.022857][ T941] yurex 2-1:0.0: USB YUREX device now attached to Yurex #1 [ 154.023294][ T7249] cdc_wdm 1-1:1.0: Error autopm - -16 [ 154.054313][ T941] usb 2-1: USB disconnect, device number 7 [ 154.117783][ T941] yurex 2-1:0.0: USB YUREX #1 now disconnected [ 154.367461][ T7346] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 154.714191][ T7290] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.781783][ T7290] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.818345][ T7290] bridge_slave_0: entered allmulticast mode [ 154.826100][ T7290] bridge_slave_0: entered promiscuous mode [ 154.859310][ T7290] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.888387][ T7290] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.901010][ T7290] bridge_slave_1: entered allmulticast mode [ 154.928399][ T7290] bridge_slave_1: entered promiscuous mode [ 155.178772][ T5243] Bluetooth: hci4: command tx timeout [ 155.271467][ T7290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.306128][ T7290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.512923][ T7290] team0: Port device team_slave_0 added [ 155.568953][ T7376] netlink: 12 bytes leftover after parsing attributes in process `syz.2.724'. [ 155.637290][ T7290] team0: Port device team_slave_1 added [ 155.815069][ T742] IPVS: stop unused estimator thread 0... [ 155.912039][ T7290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.938435][ T7290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.978302][ T7290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.046449][ T7290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.053855][ T7290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.081202][ T7290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.423338][ T7396] netlink: 152 bytes leftover after parsing attributes in process `syz.1.730'. [ 156.437911][ T7397] vlan2: entered allmulticast mode [ 156.449773][ T7397] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 156.474822][ T7397] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 156.508757][ T7290] hsr_slave_0: entered promiscuous mode [ 156.529975][ T7290] hsr_slave_1: entered promiscuous mode [ 156.545238][ T7290] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 156.559404][ T7290] Cannot create hsr debugfs directory [ 157.102339][ T7413] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 157.260050][ T5243] Bluetooth: hci4: command tx timeout [ 158.003385][ T7290] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 158.098007][ T7290] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 158.152709][ T7290] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 158.202381][ T7290] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 158.419236][ T941] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 158.503410][ T7290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.534452][ T7290] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.573437][ T7290] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 158.584131][ T7290] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 158.598064][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.605319][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.673824][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.681379][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.688700][ T941] usb 3-1: Using ep0 maxpacket: 8 [ 158.691071][ T941] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 158.705660][ T941] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 158.755335][ T941] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 158.787031][ T7461] netlink: 201400 bytes leftover after parsing attributes in process `syz.0.750'. [ 158.811304][ T941] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 158.882713][ T941] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 158.903247][ T7290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.918462][ T941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.167593][ T7290] veth0_vlan: entered promiscuous mode [ 159.183566][ T941] usb 3-1: GET_CAPABILITIES returned 0 [ 159.207360][ T941] usbtmc 3-1:16.0: can't read capabilities [ 159.306822][ T7290] veth1_vlan: entered promiscuous mode [ 159.313484][ T7477] IPv6: addrconf: prefix option has invalid lifetime [ 159.321242][ T7477] IPv6: addrconf: prefix option has invalid lifetime [ 159.329185][ T25] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 159.338457][ T5243] Bluetooth: hci4: command tx timeout [ 159.414273][ T7290] veth0_macvtap: entered promiscuous mode [ 159.430903][ T5285] usb 3-1: USB disconnect, device number 14 [ 159.506813][ T7290] veth1_macvtap: entered promiscuous mode [ 159.589776][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.601230][ T7290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.608288][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.622172][ T25] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 159.631551][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.651519][ T25] usb 1-1: config 0 descriptor?? [ 159.656206][ T7290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.683863][ T7290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.698348][ T7290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.709413][ T7290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.720941][ T7290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.732221][ T7290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.738508][ T8] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 159.746590][ T7290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.766399][ T7290] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.816091][ T7290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.829866][ T7290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.840328][ T7290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.851020][ T7290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.866567][ T7290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.884146][ T7290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.894979][ T7290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.907396][ T7290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.908420][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 159.922522][ T7290] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.946198][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.961247][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.973840][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 159.990430][ T7290] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.023822][ T8] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 160.039132][ T7290] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.047923][ T7290] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.068376][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.089675][ T25] hid-steam 0003:28DE:1142.0008: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 160.094942][ T8] usb 4-1: config 0 descriptor?? [ 160.105991][ T7290] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.178738][ T25] hid-steam 0003:28DE:1142.0008: Steam wireless receiver connected [ 160.266229][ T25] hid-steam 0003:28DE:1142.0009: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 160.369304][ T25] usb 1-1: USB disconnect, device number 7 [ 160.425743][ T25] hid-steam 0003:28DE:1142.0008: Steam wireless receiver disconnected [ 160.449644][ T2511] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.489420][ T2511] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.558050][ T742] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.572998][ T8] microsoft 0003:045E:07DA.000A: ignoring exceeding usage max [ 160.577638][ T742] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.650548][ T8] microsoft 0003:045E:07DA.000A: No inputs registered, leaving [ 160.691959][ T8] microsoft 0003:045E:07DA.000A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 160.729347][ T8] microsoft 0003:045E:07DA.000A: no inputs found [ 160.736209][ T8] microsoft 0003:045E:07DA.000A: could not initialize ff, continuing anyway [ 160.913407][ T8] usb 4-1: USB disconnect, device number 5 [ 162.240201][ T7570] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.400572][ T7575] netlink: 'syz.3.786': attribute type 1 has an invalid length. [ 162.408753][ T7575] netlink: 4 bytes leftover after parsing attributes in process `syz.3.786'. [ 162.517850][ T7578] openvswitch: netlink: nsh attr 14978 is out of range max 3 [ 162.524507][ T29] audit: type=1326 audit(1727303099.375:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7579 comm="syz.3.788" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5630b7def9 code=0x0 [ 162.599024][ T8] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 162.674307][ T7584] dummy0: entered promiscuous mode [ 162.691758][ T7584] dummy0: left promiscuous mode [ 162.758718][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 162.787878][ T8] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 162.818319][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 162.837815][ T8] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 162.849847][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.858919][ T8] usb 5-1: Product: syz [ 162.863826][ T8] usb 5-1: Manufacturer: syz [ 162.869490][ T8] usb 5-1: SerialNumber: syz [ 162.877223][ T8] usb 5-1: config 0 descriptor?? [ 162.898784][ T8] usb 5-1: no audio or video endpoints found [ 163.000520][ T7592] netlink: 20 bytes leftover after parsing attributes in process `syz.1.792'. [ 163.041131][ T7592] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 163.063694][ T7592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.792'. [ 163.103225][ T25] usb 5-1: USB disconnect, device number 12 [ 164.252802][ T7638] tun0: tun_chr_ioctl cmd 1074025680 [ 164.865277][ T7661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.826'. [ 165.389795][ T25] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 165.448436][ T8] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 165.588441][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 165.597077][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.609367][ T8] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 165.628321][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.641403][ T8] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 165.666928][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 165.668920][ T8] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 165.711686][ T25] usb 3-1: New USB device found, idVendor=1b96, idProduct=0010, bcdDevice= 0.00 [ 165.738143][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.747666][ T8] usb 5-1: config 0 interface 0 has no altsetting 0 [ 165.788727][ T8] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 165.801162][ T8] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 165.809984][ T25] usb 3-1: config 0 descriptor?? [ 165.854249][ T8] usb 5-1: config 0 interface 0 has no altsetting 0 [ 165.877266][ T8] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 165.900166][ T8] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 165.945605][ T8] usb 5-1: config 0 interface 0 has no altsetting 0 [ 165.964522][ T8] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 165.974605][ T8] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 165.988429][ T8] usb 5-1: config 0 interface 0 has no altsetting 0 [ 165.996631][ T8] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 166.008445][ T8] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 166.038279][ T8] usb 5-1: config 0 interface 0 has no altsetting 0 [ 166.050145][ T8] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 166.068340][ T8] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 166.088590][ T8] usb 5-1: config 0 interface 0 has no altsetting 0 [ 166.109682][ T8] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 166.134801][ T8] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 166.156153][ T29] audit: type=1326 audit(1727303103.015:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7701 comm="syz.0.843" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe22157def9 code=0x0 [ 166.177935][ T8] usb 5-1: config 0 interface 0 has no altsetting 0 [ 166.180100][ T8] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 166.205205][ T8] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 166.217875][ T8] usb 5-1: config 0 interface 0 has no altsetting 0 [ 166.228282][ T8] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 166.237960][ T25] ntrig 0003:1B96:0010.000B: unknown main item tag 0x0 [ 166.250758][ T8] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 166.256794][ T25] ntrig 0003:1B96:0010.000B: unknown main item tag 0x0 [ 166.265798][ T8] usb 5-1: Product: syz [ 166.272057][ T8] usb 5-1: Manufacturer: syz [ 166.275543][ T25] ntrig 0003:1B96:0010.000B: unknown main item tag 0x0 [ 166.276857][ T8] usb 5-1: SerialNumber: syz [ 166.291765][ T25] ntrig 0003:1B96:0010.000B: unknown main item tag 0x0 [ 166.305761][ T8] usb 5-1: config 0 descriptor?? [ 166.307542][ T25] ntrig 0003:1B96:0010.000B: unknown main item tag 0x0 [ 166.328907][ T8] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 166.334036][ T25] ntrig 0003:1B96:0010.000B: unknown main item tag 0x0 [ 166.353044][ T25] ntrig 0003:1B96:0010.000B: unknown main item tag 0x0 [ 166.374908][ T25] ntrig 0003:1B96:0010.000B: hidraw0: USB HID v0.00 Device [HID 1b96:0010] on usb-dummy_hcd.2-1/input0 [ 166.435058][ T25] ntrig 0003:1B96:0010.000B: Firmware version: 1.10.3.62.2 (e8d3 c277) [ 166.640091][ C0] usb 5-1: yurex_control_callback - control failed: -71 [ 166.646843][ T25] usb 3-1: USB disconnect, device number 15 [ 166.647781][ T8] usb 5-1: USB disconnect, device number 13 [ 166.664537][ T8] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 167.899939][ T7731] netlink: 4 bytes leftover after parsing attributes in process `syz.4.855'. [ 169.819247][ T5236] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 170.058564][ T5236] usb 1-1: config 0 has an invalid interface number: 204 but max is 0 [ 170.128970][ T5236] usb 1-1: config 0 has an invalid interface association descriptor of length 2, skipping [ 170.227094][ T5236] usb 1-1: config 0 has no interface number 0 [ 170.252497][ T5236] usb 1-1: config 0 interface 204 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 170.341010][ T5236] usb 1-1: config 0 interface 204 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 170.434819][ T5236] usb 1-1: config 0 interface 204 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 170.520911][ T5236] usb 1-1: config 0 interface 204 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 170.588157][ T5236] usb 1-1: config 0 interface 204 altsetting 0 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 170.678363][ T5236] usb 1-1: config 0 interface 204 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 170.746107][ T5236] usb 1-1: config 0 interface 204 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 170.810421][ T5236] usb 1-1: config 0 interface 204 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 170.890414][ T5236] usb 1-1: config 0 interface 204 altsetting 0 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 170.908521][ T5282] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 170.981946][ T5236] usb 1-1: config 0 interface 204 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 171.054272][ T5236] usb 1-1: config 0 interface 204 altsetting 0 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 171.098668][ T5282] usb 2-1: Using ep0 maxpacket: 8 [ 171.144324][ T5236] usb 1-1: config 0 interface 204 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 171.158394][ T5282] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 171.207728][ T5282] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 171.239280][ T5236] usb 1-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 171.283414][ T5282] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 171.298917][ T5236] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.361369][ T5236] usb 1-1: Product: syz [ 171.365623][ T5236] usb 1-1: Manufacturer: syz [ 171.384225][ T5282] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 171.440323][ T5236] usb 1-1: SerialNumber: syz [ 171.478670][ T5282] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 171.489240][ T5236] usb 1-1: config 0 descriptor?? [ 171.536560][ T7761] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 171.548280][ T5282] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.573202][ T5236] ems_usb 1-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -8 [ 171.666927][ T5236] ems_usb 1-1:0.204: probe with driver ems_usb failed with error -8 [ 171.859223][ T5282] usb 2-1: GET_CAPABILITIES returned 0 [ 171.865108][ T5282] usbtmc 2-1:16.0: can't read capabilities [ 171.895522][ T5285] usb 1-1: USB disconnect, device number 8 [ 172.044697][ T7787] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 172.069142][ T7773] usbtmc 2-1:16.0: send_request_dev_dep_msg_in returned -90 [ 172.121007][ T5236] usb 2-1: USB disconnect, device number 8 [ 172.736767][ T7798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.886'. [ 173.477923][ T7809] netlink: 20 bytes leftover after parsing attributes in process `syz.2.891'. [ 173.966867][ T5236] IPVS: starting estimator thread 0... [ 174.133453][ T7821] IPVS: using max 17 ests per chain, 40800 per kthread [ 175.449215][ T29] audit: type=1326 audit(1727303112.285:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7844 comm="syz.4.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef8cf7def9 code=0x7ffc0000 [ 175.632133][ T29] audit: type=1326 audit(1727303112.285:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7844 comm="syz.4.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef8cf7def9 code=0x7ffc0000 [ 175.842632][ T29] audit: type=1326 audit(1727303112.345:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7844 comm="syz.4.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7fef8cf7def9 code=0x7ffc0000 [ 175.935791][ T5282] IPVS: starting estimator thread 0... [ 176.028345][ T29] audit: type=1326 audit(1727303112.345:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7844 comm="syz.4.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef8cf7def9 code=0x7ffc0000 [ 176.078404][ T7855] IPVS: using max 15 ests per chain, 36000 per kthread [ 176.260214][ T29] audit: type=1326 audit(1727303112.345:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7844 comm="syz.4.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef8cf7def9 code=0x7ffc0000 [ 177.730428][ T29] audit: type=1326 audit(1727303114.595:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7880 comm="syz.0.920" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe22157def9 code=0x0 [ 180.360209][ T7921] netlink: 19 bytes leftover after parsing attributes in process `syz.3.941'. [ 180.948423][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 181.131179][ T9] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 181.145321][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.263085][ T9] usb 5-1: config 0 descriptor?? [ 181.291261][ T9] cp210x 5-1:0.0: cp210x converter detected [ 181.935981][ T9] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 181.977130][ T9] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 182.028601][ T9] usb 5-1: cp210x converter now attached to ttyUSB0 [ 182.096006][ T9] usb 5-1: USB disconnect, device number 14 [ 182.132066][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 182.199594][ T9] cp210x 5-1:0.0: device disconnected [ 182.588632][ T939] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 182.778687][ T939] usb 2-1: Using ep0 maxpacket: 8 [ 182.788683][ T939] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 182.806470][ T939] usb 2-1: config 179 has no interface number 0 [ 182.815463][ T939] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 182.836569][ T939] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 182.854777][ T939] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 182.867317][ T939] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 182.888819][ T941] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 182.907223][ T939] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 182.935118][ T939] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 182.961395][ T939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.980366][ T7941] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 183.048461][ T941] usb 5-1: Using ep0 maxpacket: 8 [ 183.073459][ T941] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 183.119230][ T941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 183.147034][ T941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 183.175963][ T941] usb 5-1: New USB device found, idVendor=1b80, idProduct=d700, bcdDevice=d0.46 [ 183.198867][ T941] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.244406][ T941] usb 5-1: Product: syz [ 183.282420][ T941] usb 5-1: Manufacturer: syz [ 183.310477][ T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input19 [ 183.327336][ T941] usb 5-1: SerialNumber: syz [ 183.354671][ T941] usb 5-1: config 0 descriptor?? [ 183.549471][ T9] usb 2-1: USB disconnect, device number 9 [ 183.549521][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 183.549560][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 183.635945][ T941] radio-si470x 5-1:0.0: DeviceID=0x6256 ChipID=0x5900 [ 183.667440][ T9] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 183.833392][ T941] radio-si470x 5-1:0.0: software version 98, hardware version 86 [ 184.047093][ T941] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 184.070118][ T941] radio-si470x 5-1:0.0: submitting int urb failed (-90) [ 184.077700][ T941] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 184.097767][ T941] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22 [ 184.144390][ T941] usb 5-1: USB disconnect, device number 15 [ 185.133700][ T24] sched: DL replenish lagged too much [ 209.618813][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 209.625957][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 212.488303][ T5235] Bluetooth: hci2: command 0x0406 tx timeout [ 212.495245][ T5235] Bluetooth: hci0: command 0x0406 tx timeout [ 213.526254][ T7939] netlink: 'syz.0.950': attribute type 29 has an invalid length. [ 216.427666][ T5243] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 216.448577][ T5243] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 216.477557][ T5243] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 216.528711][ T5243] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 216.549096][ T5243] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 216.557874][ T5243] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 216.599202][ T5243] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 216.609266][ T5243] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 216.650008][ T5243] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 216.669111][ T5243] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 216.681595][ T5243] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 216.690544][ T5243] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 217.774509][ T5240] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 217.789088][ T5240] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 217.797657][ T5240] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 217.810433][ T5240] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 217.843115][ T5230] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 217.856041][ T5230] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 217.909742][ T5230] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 217.921897][ T5230] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 217.930587][ T5230] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 217.939157][ T5230] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 217.949113][ T5230] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 217.957321][ T5230] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 218.171624][ T5240] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 218.184919][ T5240] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 218.195093][ T5240] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 218.209421][ T5240] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 218.220387][ T5240] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 218.229436][ T5240] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 218.619846][ T5240] Bluetooth: hci1: command tx timeout [ 218.778514][ T5240] Bluetooth: hci2: command tx timeout [ 219.898486][ T5240] Bluetooth: hci0: command tx timeout [ 220.058483][ T5240] Bluetooth: hci3: command tx timeout [ 220.298767][ T5240] Bluetooth: hci4: command tx timeout [ 220.698410][ T5240] Bluetooth: hci1: command tx timeout [ 220.859125][ T5240] Bluetooth: hci2: command tx timeout [ 221.978425][ T5240] Bluetooth: hci0: command tx timeout [ 222.139198][ T5240] Bluetooth: hci3: command tx timeout [ 222.378577][ T5240] Bluetooth: hci4: command tx timeout [ 222.779050][ T5240] Bluetooth: hci1: command tx timeout [ 222.940721][ T5240] Bluetooth: hci2: command tx timeout [ 224.058518][ T5240] Bluetooth: hci0: command tx timeout [ 224.218530][ T5240] Bluetooth: hci3: command tx timeout [ 224.458608][ T5240] Bluetooth: hci4: command tx timeout [ 224.858514][ T5240] Bluetooth: hci1: command tx timeout [ 225.018430][ T5240] Bluetooth: hci2: command tx timeout [ 226.144215][ T5240] Bluetooth: hci0: command tx timeout [ 226.298402][ T5240] Bluetooth: hci3: command tx timeout [ 226.538667][ T5240] Bluetooth: hci4: command tx timeout [ 256.064300][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.075502][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 302.786179][ T5230] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 302.805386][ T5230] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 302.816903][ T5230] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 302.825448][ T5230] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 302.833416][ T5230] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 302.848802][ T5230] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 303.519402][ T5240] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 303.533814][ T5240] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 303.543575][ T5240] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 303.553261][ T5240] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 303.565039][ T5240] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 303.573366][ T5240] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 304.458714][ T5243] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 304.474031][ T5243] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 304.483152][ T5243] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 304.491432][ T5243] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 304.499958][ T5243] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 304.510478][ T5243] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 304.519116][ T5243] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 304.532793][ T5243] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 304.540399][ T5243] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 304.550958][ T5243] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 304.571649][ T5243] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 304.585355][ T5243] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 304.710630][ T5240] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 304.728867][ T5240] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 304.737877][ T5240] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 304.749984][ T5240] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 304.759059][ T5240] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 304.771479][ T5240] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 304.938777][ T5243] Bluetooth: hci5: command tx timeout [ 305.658491][ T5243] Bluetooth: hci6: command tx timeout [ 306.618435][ T5243] Bluetooth: hci8: command tx timeout [ 306.699688][ T5243] Bluetooth: hci7: command tx timeout [ 306.858377][ T5243] Bluetooth: hci9: command tx timeout [ 307.018393][ T5243] Bluetooth: hci5: command tx timeout [ 307.739690][ T5243] Bluetooth: hci6: command tx timeout [ 308.698603][ T5243] Bluetooth: hci8: command tx timeout [ 308.778390][ T5243] Bluetooth: hci7: command tx timeout [ 308.938493][ T5243] Bluetooth: hci9: command tx timeout [ 309.098594][ T5243] Bluetooth: hci5: command tx timeout [ 309.819246][ T5243] Bluetooth: hci6: command tx timeout [ 310.778424][ T5243] Bluetooth: hci8: command tx timeout [ 310.858370][ T5243] Bluetooth: hci7: command tx timeout [ 311.018420][ T5243] Bluetooth: hci9: command tx timeout [ 311.179690][ T5243] Bluetooth: hci5: command tx timeout [ 311.898344][ T5243] Bluetooth: hci6: command tx timeout [ 312.858377][ T5243] Bluetooth: hci8: command tx timeout [ 312.939537][ T5243] Bluetooth: hci7: command tx timeout [ 313.098510][ T5243] Bluetooth: hci9: command tx timeout [ 317.502536][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.513907][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 340.068344][ T5240] Bluetooth: hci0: command 0x0406 tx timeout [ 340.074496][ T5240] Bluetooth: hci2: command 0x0406 tx timeout [ 340.089423][ T5240] Bluetooth: hci1: command 0x0406 tx timeout [ 345.196938][ T5227] Bluetooth: hci3: command 0x0406 tx timeout [ 345.204085][ T5230] Bluetooth: hci4: command 0x0406 tx timeout [ 360.831758][ T5243] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 360.848859][ T5243] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 360.863856][ T5243] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 360.876634][ T5243] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 360.886998][ T5243] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 360.894697][ T5243] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 361.140898][ T5235] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 361.152294][ T5235] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 361.161707][ T5235] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 361.171900][ T5235] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 361.181432][ T5235] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 361.189478][ T5235] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 361.286736][ T5243] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 361.297172][ T5243] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 361.317518][ T5243] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 361.332413][ T5243] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 361.344300][ T5243] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 361.352444][ T5243] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 362.111951][ T5235] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 362.129146][ T5235] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 362.138011][ T5235] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 362.154866][ T5235] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 362.164487][ T5235] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 362.177127][ T5235] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 362.675822][ T5243] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 362.689001][ T5243] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 362.697620][ T5243] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 362.707264][ T5243] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 362.716670][ T5243] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 362.729141][ T5243] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 362.938545][ T5243] Bluetooth: hci10: command tx timeout [ 363.258885][ T5243] Bluetooth: hci11: command tx timeout [ 363.418548][ T5243] Bluetooth: hci12: command tx timeout [ 364.218675][ T5243] Bluetooth: hci13: command tx timeout [ 364.778382][ T5243] Bluetooth: hci14: command tx timeout [ 365.018350][ T5243] Bluetooth: hci10: command tx timeout [ 365.338462][ T5243] Bluetooth: hci11: command tx timeout [ 365.498561][ T5243] Bluetooth: hci12: command tx timeout [ 366.298380][ T5243] Bluetooth: hci13: command tx timeout [ 366.858356][ T5243] Bluetooth: hci14: command tx timeout [ 367.098342][ T5243] Bluetooth: hci10: command tx timeout [ 367.418624][ T5243] Bluetooth: hci11: command tx timeout [ 367.578545][ T5243] Bluetooth: hci12: command tx timeout [ 368.378382][ T5243] Bluetooth: hci13: command tx timeout [ 368.938416][ T5243] Bluetooth: hci14: command tx timeout [ 369.179670][ T5243] Bluetooth: hci10: command tx timeout [ 369.498425][ T5243] Bluetooth: hci11: command tx timeout [ 369.658421][ T5243] Bluetooth: hci12: command tx timeout [ 370.458476][ T5243] Bluetooth: hci13: command tx timeout [ 371.018317][ T5243] Bluetooth: hci14: command tx timeout [ 377.658709][ T30] INFO: task kworker/u8:4:62 blocked for more than 147 seconds. [ 377.667673][ T30] Not tainted 6.11.0-syzkaller-10622-gaa486552a110 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 377.708287][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 377.717043][ T30] task:kworker/u8:4 state:D stack:22032 pid:62 tgid:62 ppid:2 flags:0x00004000 [ 377.786787][ T30] Workqueue: netns cleanup_net [ 377.878310][ T30] Call Trace: [ 377.881695][ T30] [ 377.937841][ T30] __schedule+0x1895/0x4b30 [ 377.968385][ T30] ? __pfx___schedule+0x10/0x10 [ 377.986653][ T30] ? __pfx_lock_release+0x10/0x10 [ 378.014854][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 378.048206][ T30] ? kthread_data+0x52/0xd0 [ 378.052830][ T30] ? schedule+0x90/0x320 [ 378.057156][ T30] ? wq_worker_sleeping+0x66/0x240 [ 378.123152][ T30] ? schedule+0x90/0x320 [ 378.127502][ T30] schedule+0x14b/0x320 [ 378.188283][ T30] schedule_preempt_disabled+0x13/0x30 [ 378.193936][ T30] __mutex_lock+0x6a7/0xd70 [ 378.236737][ T30] ? __mutex_lock+0x52a/0xd70 [ 378.260252][ T30] ? wg_netns_pre_exit+0x1f/0x1e0 [ 378.265482][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 378.302991][ T30] wg_netns_pre_exit+0x1f/0x1e0 [ 378.307949][ T30] cleanup_net+0x615/0xcc0 [ 378.348260][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 378.353323][ T30] ? process_scheduled_works+0x976/0x1850 [ 378.388205][ T30] process_scheduled_works+0xa63/0x1850 [ 378.393889][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 378.434331][ T30] ? assign_work+0x364/0x3d0 [ 378.454986][ T30] worker_thread+0x870/0xd30 [ 378.464828][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 378.475481][ T30] ? __kthread_parkme+0x169/0x1d0 [ 378.488311][ T30] ? __pfx_worker_thread+0x10/0x10 [ 378.493533][ T30] kthread+0x2f0/0x390 [ 378.497657][ T30] ? __pfx_worker_thread+0x10/0x10 [ 378.509267][ T30] ? __pfx_kthread+0x10/0x10 [ 378.513953][ T30] ret_from_fork+0x4b/0x80 [ 378.525547][ T30] ? __pfx_kthread+0x10/0x10 [ 378.531839][ T30] ret_from_fork_asm+0x1a/0x30 [ 378.536706][ T30] [ 378.543590][ T30] INFO: task kworker/1:6:5282 blocked for more than 148 seconds. [ 378.555308][ T30] Not tainted 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 378.567045][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 378.582288][ T30] task:kworker/1:6 state:D stack:20280 pid:5282 tgid:5282 ppid:2 flags:0x00004000 [ 378.597772][ T30] Workqueue: events_power_efficient reg_check_chans_work [ 378.613318][ T30] Call Trace: [ 378.616673][ T30] [ 378.621588][ T30] __schedule+0x1895/0x4b30 [ 378.626174][ T30] ? try_to_wake_up+0x971/0x1480 [ 378.636426][ T30] ? schedule+0x90/0x320 [ 378.642537][ T30] ? __pfx___schedule+0x10/0x10 [ 378.647465][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 378.658802][ T30] ? __pfx_lock_release+0x10/0x10 [ 378.664284][ T30] ? kick_pool+0x45c/0x620 [ 378.676811][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 378.694934][ T30] ? schedule+0x90/0x320 [ 378.701822][ T30] schedule+0x14b/0x320 [ 378.706838][ T30] schedule_preempt_disabled+0x13/0x30 [ 378.720302][ T30] __mutex_lock+0x6a7/0xd70 [ 378.724928][ T30] ? __mutex_lock+0x52a/0xd70 [ 378.735694][ T30] ? reg_check_chans_work+0x99/0xfd0 [ 378.741546][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 378.746676][ T30] ? process_scheduled_works+0x976/0x1850 [ 378.758535][ T30] reg_check_chans_work+0x99/0xfd0 [ 378.763747][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 378.775699][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 378.782402][ T30] ? __pfx_reg_check_chans_work+0x10/0x10 [ 378.797199][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 378.805530][ T30] ? process_scheduled_works+0x976/0x1850 [ 378.818613][ T30] process_scheduled_works+0xa63/0x1850 [ 378.824284][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 378.838308][ T30] ? assign_work+0x364/0x3d0 [ 378.842994][ T30] worker_thread+0x870/0xd30 [ 378.847656][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 378.860210][ T30] ? __kthread_parkme+0x169/0x1d0 [ 378.865326][ T30] ? __pfx_worker_thread+0x10/0x10 [ 378.876326][ T30] kthread+0x2f0/0x390 [ 378.881513][ T30] ? __pfx_worker_thread+0x10/0x10 [ 378.886707][ T30] ? __pfx_kthread+0x10/0x10 [ 378.898701][ T30] ret_from_fork+0x4b/0x80 [ 378.903214][ T30] ? __pfx_kthread+0x10/0x10 [ 378.907854][ T30] ret_from_fork_asm+0x1a/0x30 [ 378.922433][ T30] [ 378.925630][ T30] INFO: task syz.3.199:5864 blocked for more than 149 seconds. [ 378.941778][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.948643][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.962990][ T30] Not tainted 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 378.972013][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 378.986085][ T30] task:syz.3.199 state:D stack:26112 pid:5864 tgid:5864 ppid:5247 flags:0x00004006 [ 379.004825][ T30] Call Trace: [ 379.010440][ T30] [ 379.013452][ T30] __schedule+0x1895/0x4b30 [ 379.018028][ T30] ? __pfx___schedule+0x10/0x10 [ 379.030774][ T30] ? __pfx_lock_release+0x10/0x10 [ 379.035902][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 379.048038][ T30] ? schedule+0x90/0x320 [ 379.055674][ T30] schedule+0x14b/0x320 [ 379.066233][ T30] schedule_preempt_disabled+0x13/0x30 [ 379.072260][ T30] __mutex_lock+0x6a7/0xd70 [ 379.076840][ T30] ? __mutex_lock+0x52a/0xd70 [ 379.087978][ T30] ? tun_chr_close+0x3b/0x1b0 [ 379.093169][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 379.108770][ T30] ? __pfx_call_rcu+0x10/0x10 [ 379.114353][ T30] tun_chr_close+0x3b/0x1b0 [ 379.125456][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 379.131096][ T30] __fput+0x23f/0x880 [ 379.135252][ T30] task_work_run+0x24f/0x310 [ 379.148445][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 379.153855][ T30] ? __pfx_task_work_run+0x10/0x10 [ 379.165119][ T30] ? do_exit+0xa2a/0x28e0 [ 379.170009][ T30] ? kmem_cache_free+0x1a2/0x420 [ 379.175030][ T30] ? do_exit+0xa2a/0x28e0 [ 379.188211][ T30] do_exit+0xa2f/0x28e0 [ 379.192471][ T30] ? __pfx_do_exit+0x10/0x10 [ 379.197208][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 379.212221][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 379.223831][ T30] do_group_exit+0x207/0x2c0 [ 379.231409][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 379.236717][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 379.247356][ T30] get_signal+0x176f/0x1810 [ 379.256700][ T30] ? do_nanosleep+0x80/0x600 [ 379.268285][ T30] ? __pfx_get_signal+0x10/0x10 [ 379.273243][ T30] ? hrtimer_nanosleep+0x331/0x3f0 [ 379.286959][ T30] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 379.293018][ T30] arch_do_signal_or_restart+0x96/0x860 [ 379.306473][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 379.313287][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 379.326391][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 379.333185][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 379.346965][ T30] do_syscall_64+0x100/0x230 [ 379.352090][ T30] ? clear_bhb_loop+0x35/0x90 [ 379.356850][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.368165][ T30] RIP: 0033:0x7f5630baffe5 [ 379.372698][ T30] RSP: 002b:00007f5631a32f80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 379.388574][ T30] RAX: fffffffffffffdfc RBX: 00007f5630d35f80 RCX: 00007f5630baffe5 [ 379.396821][ T30] RDX: 00007f5631a32fc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 379.412840][ T30] RBP: 00007f5630bf0b76 R08: 0000000000000000 R09: 0000000000000000 [ 379.423443][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 379.440506][ T30] R13: 0000000000000001 R14: 00007f5630d35f80 R15: 00007f5630e5fa28 [ 379.453665][ T30] [ 379.456866][ T30] INFO: task syz-executor:7290 blocked for more than 149 seconds. [ 379.467055][ T30] Not tainted 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 379.483981][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 379.494423][ T30] task:syz-executor state:D stack:20696 pid:7290 tgid:7290 ppid:1 flags:0x00004006 [ 379.513622][ T30] Call Trace: [ 379.516988][ T30] [ 379.522556][ T30] __schedule+0x1895/0x4b30 [ 379.527180][ T30] ? __pfx___schedule+0x10/0x10 [ 379.539963][ T30] ? __pfx_lock_release+0x10/0x10 [ 379.545086][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 379.556504][ T30] ? schedule+0x90/0x320 [ 379.562697][ T30] schedule+0x14b/0x320 [ 379.567020][ T30] schedule_preempt_disabled+0x13/0x30 [ 379.577763][ T30] __mutex_lock+0x6a7/0xd70 [ 379.587188][ T30] ? __mutex_lock+0x52a/0xd70 [ 379.597317][ T30] ? tun_chr_close+0x3b/0x1b0 [ 379.603824][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 379.615225][ T30] ? __pfx_call_rcu+0x10/0x10 [ 379.621978][ T30] tun_chr_close+0x3b/0x1b0 [ 379.626743][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 379.640973][ T30] __fput+0x23f/0x880 [ 379.645081][ T30] task_work_run+0x24f/0x310 [ 379.654978][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 379.662671][ T30] ? __pfx_task_work_run+0x10/0x10 [ 379.667859][ T30] ? do_exit+0xa2a/0x28e0 [ 379.677601][ T30] ? kmem_cache_free+0x1a2/0x420 [ 379.685465][ T30] ? do_exit+0xa2a/0x28e0 [ 379.696735][ T30] do_exit+0xa2f/0x28e0 [ 379.702789][ T30] ? __pfx_do_exit+0x10/0x10 [ 379.707453][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 379.718739][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 379.724818][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 379.741199][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 379.746557][ T30] do_group_exit+0x207/0x2c0 [ 379.757524][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 379.763347][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 379.775295][ T30] get_signal+0x176f/0x1810 [ 379.781689][ T30] ? __pfx_get_signal+0x10/0x10 [ 379.786633][ T30] ? __pfx_vfs_read+0x10/0x10 [ 379.797844][ T30] arch_do_signal_or_restart+0x96/0x860 [ 379.805925][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 379.819272][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 379.825631][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 379.838743][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 379.844393][ T30] do_syscall_64+0x100/0x230 [ 379.855887][ T30] ? clear_bhb_loop+0x35/0x90 [ 379.861203][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.867957][ T30] RIP: 0033:0x7fef8cf7c93c [ 379.878764][ T30] RSP: 002b:00007fef8d25fd90 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 379.887281][ T30] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 00007fef8cf7c93c [ 379.902801][ T30] RDX: 0000000000000028 RSI: 00007fef8d25fe40 RDI: 00000000000000f9 [ 379.916928][ T30] RBP: 00007fef8d25fdec R08: 0000000000000000 R09: 0079746972756365 [ 379.932128][ T30] R10: 00007fef8d1087e0 R11: 0000000000000246 R12: 0000000000000032 [ 379.944392][ T30] R13: 000000000002d01e R14: 000000000002c93a R15: 00007fef8d25fe40 [ 379.955226][ T30] [ 379.962337][ T30] INFO: task syz-executor:7963 blocked for more than 150 seconds. [ 379.973000][ T30] Not tainted 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 379.985644][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 379.997866][ T30] task:syz-executor state:D stack:26512 pid:7963 tgid:7963 ppid:1 flags:0x00004006 [ 380.014484][ T30] Call Trace: [ 380.022780][ T30] [ 380.025799][ T30] __schedule+0x1895/0x4b30 [ 380.037801][ T30] ? __pfx___schedule+0x10/0x10 [ 380.044459][ T30] ? __pfx_lock_release+0x10/0x10 [ 380.054871][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 380.062181][ T30] ? schedule+0x90/0x320 [ 380.066507][ T30] schedule+0x14b/0x320 [ 380.076130][ T30] schedule_preempt_disabled+0x13/0x30 [ 380.084521][ T30] __mutex_lock+0x6a7/0xd70 [ 380.094311][ T30] ? __mutex_lock+0x52a/0xd70 [ 380.103869][ T30] ? register_nexthop_notifier+0x84/0x290 [ 380.114836][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 380.124174][ T30] ? __asan_memset+0x23/0x50 [ 380.135826][ T30] register_nexthop_notifier+0x84/0x290 [ 380.146298][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 380.157339][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 380.165428][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 380.178302][ T30] ? __asan_memset+0x23/0x50 [ 380.182994][ T30] ops_init+0x31e/0x590 [ 380.187291][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 380.199302][ T30] setup_net+0x287/0x9e0 [ 380.203626][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 380.214857][ T30] ? __pfx_setup_net+0x10/0x10 [ 380.233600][ T30] copy_net_ns+0x33f/0x570 [ 380.241706][ T30] create_new_namespaces+0x425/0x7b0 [ 380.247779][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 380.260523][ T30] ksys_unshare+0x619/0xc10 [ 380.265141][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 380.275543][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 380.284568][ T30] ? do_syscall_64+0x100/0x230 [ 380.293398][ T30] __x64_sys_unshare+0x38/0x40 [ 380.306879][ T30] do_syscall_64+0xf3/0x230 [ 380.311702][ T30] ? clear_bhb_loop+0x35/0x90 [ 380.316552][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.332503][ T30] RIP: 0033:0x7f0fcc97f6f7 [ 380.337034][ T30] RSP: 002b:00007f0fccc5ffa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 380.348188][ T30] RAX: ffffffffffffffda RBX: 00007f0fcc9f22ec RCX: 00007f0fcc97f6f7 [ 380.356264][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 380.374711][ T30] RBP: 0000000000000000 R08: 00007f0fcd667d60 R09: 0000000000000000 [ 380.385725][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 380.397820][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 380.412331][ T30] [ 380.415537][ T30] INFO: task syz-executor:7964 blocked for more than 150 seconds. [ 380.437367][ T30] Not tainted 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 380.453266][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 380.463846][ T30] task:syz-executor state:D stack:26520 pid:7964 tgid:7964 ppid:1 flags:0x00004006 [ 380.483548][ T30] Call Trace: [ 380.486910][ T30] [ 380.492846][ T30] __schedule+0x1895/0x4b30 [ 380.497891][ T30] ? __pfx___schedule+0x10/0x10 [ 380.506879][ T30] ? __pfx_lock_release+0x10/0x10 [ 380.515008][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 380.525957][ T30] ? schedule+0x90/0x320 [ 380.534377][ T30] schedule+0x14b/0x320 [ 380.543140][ T30] schedule_preempt_disabled+0x13/0x30 [ 380.552438][ T30] __mutex_lock+0x6a7/0xd70 [ 380.557051][ T30] ? __mutex_lock+0x52a/0xd70 [ 380.565902][ T30] ? register_nexthop_notifier+0x84/0x290 [ 380.575721][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 380.584870][ T30] ? __asan_memset+0x23/0x50 [ 380.594180][ T30] register_nexthop_notifier+0x84/0x290 [ 380.603813][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 380.612549][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 380.624019][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 380.634262][ T30] ? __asan_memset+0x23/0x50 [ 380.642966][ T30] ops_init+0x31e/0x590 [ 380.647229][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 380.656723][ T30] setup_net+0x287/0x9e0 [ 380.667821][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 380.676229][ T30] ? __pfx_setup_net+0x10/0x10 [ 380.685428][ T30] copy_net_ns+0x33f/0x570 [ 380.692704][ T30] create_new_namespaces+0x425/0x7b0 [ 380.704420][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 380.713018][ T30] ksys_unshare+0x619/0xc10 [ 380.717622][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 380.728026][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 380.738373][ T30] ? do_syscall_64+0x100/0x230 [ 380.743243][ T30] __x64_sys_unshare+0x38/0x40 [ 380.748070][ T30] do_syscall_64+0xf3/0x230 [ 380.759438][ T30] ? clear_bhb_loop+0x35/0x90 [ 380.764206][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.777926][ T30] RIP: 0033:0x7f73df37f6f7 [ 380.783652][ T30] RSP: 002b:00007f73df65ffa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 380.798588][ T30] RAX: ffffffffffffffda RBX: 00007f73df3f22ec RCX: 00007f73df37f6f7 [ 380.806818][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 380.824270][ T30] RBP: 0000000000000000 R08: 00007f73e0067d60 R09: 0000000000000000 [ 380.832795][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 380.848215][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 380.857424][ T30] [ 380.868237][ T30] INFO: task syz-executor:7967 blocked for more than 151 seconds. [ 380.876215][ T30] Not tainted 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 380.890901][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 380.903616][ T30] task:syz-executor state:D stack:26400 pid:7967 tgid:7967 ppid:1 flags:0x00004004 [ 380.918325][ T30] Call Trace: [ 380.921850][ T30] [ 380.924911][ T30] __schedule+0x1895/0x4b30 [ 380.939800][ T30] ? __pfx___schedule+0x10/0x10 [ 380.944761][ T30] ? __pfx_lock_release+0x10/0x10 [ 380.958482][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 380.964412][ T30] ? schedule+0x90/0x320 [ 380.976578][ T30] schedule+0x14b/0x320 [ 380.981287][ T30] schedule_preempt_disabled+0x13/0x30 [ 380.987361][ T30] __mutex_lock+0x6a7/0xd70 [ 380.998326][ T30] ? __mutex_lock+0x52a/0xd70 [ 381.003152][ T30] ? register_nexthop_notifier+0x84/0x290 [ 381.015880][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 381.021621][ T30] ? __asan_memset+0x23/0x50 [ 381.026303][ T30] register_nexthop_notifier+0x84/0x290 [ 381.040370][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 381.047831][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 381.060831][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 381.067108][ T30] ? __asan_memset+0x23/0x50 [ 381.078079][ T30] ops_init+0x31e/0x590 [ 381.082852][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 381.094608][ T30] setup_net+0x287/0x9e0 [ 381.099971][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 381.105703][ T30] ? __pfx_setup_net+0x10/0x10 [ 381.117850][ T30] copy_net_ns+0x33f/0x570 [ 381.122825][ T30] create_new_namespaces+0x425/0x7b0 [ 381.134548][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 381.141152][ T30] ksys_unshare+0x619/0xc10 [ 381.147005][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 381.163629][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 381.174445][ T30] ? do_syscall_64+0x100/0x230 [ 381.187520][ T30] __x64_sys_unshare+0x38/0x40 [ 381.196356][ T30] do_syscall_64+0xf3/0x230 [ 381.203781][ T30] ? clear_bhb_loop+0x35/0x90 [ 381.214284][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.223240][ T30] RIP: 0033:0x7fb3ccf7f6f7 [ 381.227739][ T30] RSP: 002b:00007fb3cd25ffa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 381.238307][ T30] RAX: ffffffffffffffda RBX: 00007fb3ccff22ec RCX: 00007fb3ccf7f6f7 [ 381.255537][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 381.278346][ T30] RBP: 0000000000000000 R08: 00007fb3cdc67d60 R09: 0000000000000000 [ 381.286601][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 381.305421][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 381.314157][ T30] [ 381.317334][ T30] INFO: task syz-executor:7968 blocked for more than 151 seconds. [ 381.328247][ T30] Not tainted 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 381.335625][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 381.362648][ T30] task:syz-executor state:D stack:26736 pid:7968 tgid:7968 ppid:1 flags:0x00004006 [ 381.383670][ T30] Call Trace: [ 381.387033][ T30] [ 381.391929][ T30] __schedule+0x1895/0x4b30 [ 381.396711][ T30] ? __pfx___schedule+0x10/0x10 [ 381.408326][ T30] ? __pfx_lock_release+0x10/0x10 [ 381.413460][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 381.424715][ T30] ? schedule+0x90/0x320 [ 381.430063][ T30] schedule+0x14b/0x320 [ 381.434295][ T30] schedule_preempt_disabled+0x13/0x30 [ 381.446305][ T30] __mutex_lock+0x6a7/0xd70 [ 381.453550][ T30] ? __mutex_lock+0x52a/0xd70 [ 381.464730][ T30] ? register_nexthop_notifier+0x84/0x290 [ 381.471883][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 381.477231][ T30] ? __asan_memset+0x23/0x50 [ 381.488697][ T30] register_nexthop_notifier+0x84/0x290 [ 381.494347][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 381.507838][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 381.514651][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 381.527113][ T30] ? __asan_memset+0x23/0x50 [ 381.532290][ T30] ops_init+0x31e/0x590 [ 381.536516][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 381.548271][ T30] setup_net+0x287/0x9e0 [ 381.554855][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 381.567313][ T30] ? __pfx_setup_net+0x10/0x10 [ 381.574576][ T30] copy_net_ns+0x33f/0x570 [ 381.584236][ T30] create_new_namespaces+0x425/0x7b0 [ 381.594818][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 381.607109][ T30] ksys_unshare+0x619/0xc10 [ 381.613500][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 381.623825][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 381.631654][ T30] ? do_syscall_64+0x100/0x230 [ 381.636500][ T30] __x64_sys_unshare+0x38/0x40 [ 381.646498][ T30] do_syscall_64+0xf3/0x230 [ 381.654611][ T30] ? clear_bhb_loop+0x35/0x90 [ 381.665850][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.674377][ T30] RIP: 0033:0x7fe1cc77f6f7 [ 381.684069][ T30] RSP: 002b:00007fe1cca5ffa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 381.694274][ T30] RAX: ffffffffffffffda RBX: 00007fe1cc7f22ec RCX: 00007fe1cc77f6f7 [ 381.708314][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 381.716377][ T30] RBP: 0000000000000000 R08: 00007fe1cd467d60 R09: 0000000000000000 [ 381.730244][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 381.743270][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 381.754156][ T30] [ 381.757314][ T30] INFO: task syz-executor:7970 blocked for more than 151 seconds. [ 381.773754][ T30] Not tainted 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 381.784021][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 381.800349][ T30] task:syz-executor state:D stack:26592 pid:7970 tgid:7970 ppid:1 flags:0x00004004 [ 381.819763][ T30] Call Trace: [ 381.823209][ T30] [ 381.826180][ T30] __schedule+0x1895/0x4b30 [ 381.837291][ T30] ? __pfx___schedule+0x10/0x10 [ 381.843981][ T30] ? __pfx_lock_release+0x10/0x10 [ 381.855340][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 381.862612][ T30] ? schedule+0x90/0x320 [ 381.866938][ T30] schedule+0x14b/0x320 [ 381.877638][ T30] schedule_preempt_disabled+0x13/0x30 [ 381.884878][ T30] __mutex_lock+0x6a7/0xd70 [ 381.897121][ T30] ? __mutex_lock+0x52a/0xd70 [ 381.902473][ T30] ? register_nexthop_notifier+0x84/0x290 [ 381.914708][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 381.922457][ T30] ? __asan_memset+0x23/0x50 [ 381.927225][ T30] register_nexthop_notifier+0x84/0x290 [ 381.938246][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 381.944149][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 381.957638][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 381.965581][ T30] ? __asan_memset+0x23/0x50 [ 381.976591][ T30] ops_init+0x31e/0x590 [ 381.982341][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 381.996477][ T30] setup_net+0x287/0x9e0 [ 382.001277][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 382.006904][ T30] ? __pfx_setup_net+0x10/0x10 [ 382.018346][ T30] copy_net_ns+0x33f/0x570 [ 382.022851][ T30] create_new_namespaces+0x425/0x7b0 [ 382.037847][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 382.045377][ T30] ksys_unshare+0x619/0xc10 [ 382.056270][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 382.061981][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 382.069722][ T30] ? do_syscall_64+0x100/0x230 [ 382.074579][ T30] __x64_sys_unshare+0x38/0x40 [ 382.086694][ T30] do_syscall_64+0xf3/0x230 [ 382.093007][ T30] ? clear_bhb_loop+0x35/0x90 [ 382.097764][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.108183][ T30] RIP: 0033:0x7fed4d37f6f7 [ 382.112673][ T30] RSP: 002b:00007fed4d65ffa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 382.126703][ T30] RAX: ffffffffffffffda RBX: 00007fed4d3f22ec RCX: 00007fed4d37f6f7 [ 382.136456][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 382.155287][ T30] RBP: 0000000000000000 R08: 00007fed4e067d60 R09: 0000000000000000 [ 382.163915][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 382.179516][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 382.194730][ T30] [ 382.197929][ T30] [ 382.197929][ T30] Showing all locks held in the system: [ 382.207807][ T30] 4 locks held by kworker/0:1/9: [ 382.219095][ T30] 1 lock held by khungtaskd/30: [ 382.224022][ T30] #0: ffffffff8e937ee0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 382.242628][ T30] 3 locks held by kworker/u8:2/35: [ 382.247814][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 382.270986][ T30] #1: ffffc90000ab7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 382.290413][ T30] #2: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 382.307168][ T30] 4 locks held by kworker/u8:4/62: [ 382.314016][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 382.333215][ T30] #1: ffffc900015d7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 382.344408][ T30] #2: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 382.358295][ T30] #3: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 382.367742][ T30] 3 locks held by kworker/u8:5/742: [ 382.383477][ T30] #0: ffff88802e0c8948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 382.408197][ T30] #1: ffffc900035bfd00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 382.429467][ T30] #2: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 382.445518][ T30] 3 locks held by kworker/0:2/939: [ 382.451116][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 382.468173][ T30] #1: ffffc90003cb7d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 382.488326][ T30] #2: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 382.508312][ T30] 2 locks held by kworker/u8:7/2511: [ 382.513692][ T30] 2 locks held by getty/4983: [ 382.526645][ T30] #0: ffff88814ce900a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 382.537000][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 382.554397][ T30] 3 locks held by kworker/1:6/5282: [ 382.560293][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 382.577893][ T30] #1: ffffc90004497d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 382.594463][ T30] #2: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 382.605411][ T30] 1 lock held by syz.3.199/5864: [ 382.620760][ T30] #0: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 382.636222][ T30] 2 locks held by syz-executor/6709: [ 382.642031][ T30] #0: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 382.657465][ T30] #1: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 382.676988][ T30] 1 lock held by syz-executor/7290: [ 382.683998][ T30] #0: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 382.699888][ T30] 2 locks held by syz-executor/7963: [ 382.705335][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 382.722485][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 382.741546][ T30] 2 locks held by syz-executor/7964: [ 382.747082][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 382.763161][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 382.775201][ T30] 2 locks held by syz-executor/7967: [ 382.789502][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 382.805047][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 382.823117][ T30] 2 locks held by syz-executor/7968: [ 382.830877][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 382.846930][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 382.863710][ T30] 2 locks held by syz-executor/7970: [ 382.870749][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 382.884571][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 382.902473][ T30] 2 locks held by syz-executor/7987: [ 382.907929][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 382.921600][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 382.935925][ T30] 2 locks held by syz-executor/7989: [ 382.945071][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 382.964493][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 382.975133][ T30] 2 locks held by syz-executor/7993: [ 382.987624][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 382.998751][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 383.017865][ T30] 2 locks held by syz-executor/7995: [ 383.024033][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 383.040056][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 383.056229][ T30] 2 locks held by syz-executor/7996: [ 383.065808][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 383.082046][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 383.095278][ T30] 2 locks held by syz-executor/8007: [ 383.107425][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 383.119519][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 383.135461][ T30] 2 locks held by syz-executor/8009: [ 383.142768][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 383.160809][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 383.177472][ T30] 2 locks held by syz-executor/8011: [ 383.184778][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 383.204942][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 383.217994][ T30] 2 locks held by syz-executor/8016: [ 383.228645][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 383.243983][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 383.255992][ T30] 2 locks held by syz-executor/8020: [ 383.270939][ T30] #0: ffffffff8fcc4dd0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 383.285859][ T30] #1: ffffffff8fcd18c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 383.304867][ T30] [ 383.307280][ T30] ============================================= [ 383.307280][ T30] [ 383.317252][ T30] NMI backtrace for cpu 1 [ 383.321659][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 383.331870][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 383.341995][ T30] Call Trace: [ 383.345318][ T30] [ 383.348463][ T30] dump_stack_lvl+0x241/0x360 [ 383.353223][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 383.358561][ T30] ? __pfx__printk+0x10/0x10 [ 383.363215][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 383.368223][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 383.373774][ T30] ? _printk+0xd5/0x120 [ 383.378100][ T30] ? __pfx__printk+0x10/0x10 [ 383.382739][ T30] ? __wake_up_klogd+0xcc/0x110 [ 383.387656][ T30] ? __pfx__printk+0x10/0x10 [ 383.392315][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 383.397404][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 383.403451][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 383.409504][ T30] watchdog+0xff4/0x1040 [ 383.413806][ T30] ? watchdog+0x1ea/0x1040 [ 383.418293][ T30] ? __pfx_watchdog+0x10/0x10 [ 383.423027][ T30] kthread+0x2f0/0x390 [ 383.427146][ T30] ? __pfx_watchdog+0x10/0x10 [ 383.431916][ T30] ? __pfx_kthread+0x10/0x10 [ 383.436730][ T30] ret_from_fork+0x4b/0x80 [ 383.441223][ T30] ? __pfx_kthread+0x10/0x10 [ 383.445885][ T30] ret_from_fork_asm+0x1a/0x30 [ 383.450721][ T30] [ 383.454935][ T30] Sending NMI from CPU 1 to CPUs 0: [ 383.460741][ C0] NMI backtrace for cpu 0 [ 383.460758][ C0] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:1 Not tainted 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 383.460787][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 383.460799][ C0] Workqueue: events_power_efficient neigh_periodic_work [ 383.460834][ C0] RIP: 0010:unwind_next_frame+0x4c0/0x22d0 [ 383.460865][ C0] Code: e8 03 42 0f b6 04 20 84 c0 0f 85 8a 16 00 00 41 0f b7 1f c1 eb 0b 80 e3 01 48 8b 44 24 28 42 0f b6 04 20 84 c0 4c 8b 74 24 78 <0f> 85 8d 16 00 00 48 8b 04 24 88 18 41 0f b7 1f 83 e3 0f 83 fb 05 [ 383.460888][ C0] RSP: 0018:ffffc90000006c70 EFLAGS: 00000246 [ 383.460903][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff9035b3dc [ 383.460916][ C0] RDX: ffffffff90af2768 RSI: ffffffff90af273e RDI: 0000000000000001 [ 383.460929][ C0] RBP: ffffc90000006d90 R08: 000000000000000b R09: ffffc90000006e30 [ 383.460941][ C0] R10: ffffc90000006d90 R11: ffffffff81806870 R12: dffffc0000000000 [ 383.460955][ C0] R13: ffffc90000006d40 R14: ffffc90000006d78 R15: ffffffff90af276c [ 383.460969][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 383.460984][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 383.460997][ C0] CR2: 00007f41d2cab1cb CR3: 000000000e734000 CR4: 00000000003506f0 [ 383.461013][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 383.461024][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 383.461036][ C0] Call Trace: [ 383.461042][ C0] [ 383.461050][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 383.461077][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 383.461105][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 383.461130][ C0] ? nmi_handle+0x2a/0x5a0 [ 383.461155][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 383.461178][ C0] ? nmi_handle+0x14f/0x5a0 [ 383.461194][ C0] ? nmi_handle+0x2a/0x5a0 [ 383.461213][ C0] ? unwind_next_frame+0x4c0/0x22d0 [ 383.461239][ C0] ? default_do_nmi+0x63/0x160 [ 383.461266][ C0] ? exc_nmi+0x123/0x1f0 [ 383.461291][ C0] ? end_repeat_nmi+0xf/0x53 [ 383.461315][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 383.461339][ C0] ? unwind_next_frame+0x4c0/0x22d0 [ 383.461366][ C0] ? unwind_next_frame+0x4c0/0x22d0 [ 383.461393][ C0] ? unwind_next_frame+0x4c0/0x22d0 [ 383.461420][ C0] [ 383.461425][ C0] [ 383.461436][ C0] ? kasan_save_track+0x3f/0x80 [ 383.461455][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 383.461476][ C0] arch_stack_walk+0x11c/0x150 [ 383.461497][ C0] ? kasan_save_track+0x3f/0x80 [ 383.461515][ C0] stack_trace_save+0x118/0x1d0 [ 383.461536][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 383.461557][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 383.461586][ C0] kasan_save_track+0x3f/0x80 [ 383.461601][ C0] ? kasan_save_track+0x3f/0x80 [ 383.461639][ C0] ? skb_release_data+0x6a0/0x8a0 [ 383.461664][ C0] kasan_save_free_info+0x40/0x50 [ 383.461687][ C0] __kasan_slab_free+0x59/0x70 [ 383.461704][ C0] ? nft_synproxy_eval_v4+0x3d2/0x610 [ 383.461724][ C0] kmem_cache_free+0x1a2/0x420 [ 383.461747][ C0] ? nft_synproxy_eval_v4+0x3d2/0x610 [ 383.461775][ C0] nft_synproxy_eval_v4+0x3d2/0x610 [ 383.461798][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 383.461820][ C0] ? nf_ip_checksum+0x13a/0x500 [ 383.461844][ C0] nft_synproxy_do_eval+0x362/0xa60 [ 383.461867][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 383.461891][ C0] ? __pfx_validate_chain+0x10/0x10 [ 383.461915][ C0] nft_do_chain+0x4ad/0x1da0 [ 383.461943][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 383.461963][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 383.462000][ C0] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 383.462025][ C0] nft_do_chain_inet+0x418/0x6b0 [ 383.462047][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 383.462066][ C0] ? ipt_do_table+0x312/0x1860 [ 383.462096][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 383.462115][ C0] nf_hook_slow+0xc3/0x220 [ 383.462132][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 383.462158][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 383.462183][ C0] NF_HOOK+0x29e/0x450 [ 383.462208][ C0] ? NF_HOOK+0x9a/0x450 [ 383.462232][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 383.462257][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 383.462285][ C0] ? ip_rcv_finish+0x406/0x560 [ 383.462310][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 383.462335][ C0] NF_HOOK+0x3a4/0x450 [ 383.462358][ C0] ? __lock_acquire+0x1384/0x2050 [ 383.462384][ C0] ? NF_HOOK+0x9a/0x450 [ 383.462407][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 383.462430][ C0] ? ip_rcv_core+0x801/0xd10 [ 383.462455][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 383.462483][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 383.462508][ C0] __netif_receive_skb+0x2bf/0x650 [ 383.462536][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 383.462561][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 383.462587][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 383.462612][ C0] ? __pfx_lock_release+0x10/0x10 [ 383.462638][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 383.462663][ C0] process_backlog+0x662/0x15b0 [ 383.462683][ C0] ? process_backlog+0x33b/0x15b0 [ 383.462705][ C0] ? __pfx_process_backlog+0x10/0x10 [ 383.462721][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 383.462748][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 383.462780][ C0] __napi_poll+0xcb/0x490 [ 383.462808][ C0] net_rx_action+0x89b/0x1240 [ 383.462836][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 383.462855][ C0] ? sched_clock+0x4a/0x70 [ 383.462884][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 383.462914][ C0] handle_softirqs+0x2c5/0x980 [ 383.462939][ C0] ? do_softirq+0x11b/0x1e0 [ 383.462962][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 383.462988][ C0] do_softirq+0x11b/0x1e0 [ 383.463009][ C0] [ 383.463015][ C0] [ 383.463023][ C0] ? __pfx_do_softirq+0x10/0x10 [ 383.463045][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 383.463072][ C0] ? rcu_is_watching+0x15/0xb0 [ 383.463092][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 383.463115][ C0] ? neigh_periodic_work+0xb35/0xd50 [ 383.463141][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 383.463164][ C0] ? neigh_destroy+0x423/0x580 [ 383.463193][ C0] neigh_periodic_work+0xb35/0xd50 [ 383.463223][ C0] ? process_scheduled_works+0x976/0x1850 [ 383.463248][ C0] process_scheduled_works+0xa63/0x1850 [ 383.463284][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 383.463313][ C0] ? assign_work+0x364/0x3d0 [ 383.463338][ C0] worker_thread+0x870/0xd30 [ 383.463369][ C0] ? __kthread_parkme+0x169/0x1d0 [ 383.463397][ C0] ? __pfx_worker_thread+0x10/0x10 [ 383.463420][ C0] kthread+0x2f0/0x390 [ 383.463436][ C0] ? __pfx_worker_thread+0x10/0x10 [ 383.463460][ C0] ? __pfx_kthread+0x10/0x10 [ 383.463477][ C0] ret_from_fork+0x4b/0x80 [ 383.463501][ C0] ? __pfx_kthread+0x10/0x10 [ 383.463518][ C0] ret_from_fork_asm+0x1a/0x30 [ 383.463550][ C0] [ 384.183302][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 384.190227][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-10622-gaa486552a110 #0 [ 384.200423][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 384.210873][ T30] Call Trace: [ 384.214183][ T30] [ 384.217146][ T30] dump_stack_lvl+0x241/0x360 [ 384.221878][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 384.227130][ T30] ? __pfx__printk+0x10/0x10 [ 384.231767][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 384.237810][ T30] ? vscnprintf+0x5d/0x90 [ 384.242197][ T30] panic+0x349/0x880 [ 384.246149][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 384.252361][ T30] ? __pfx_panic+0x10/0x10 [ 384.256828][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 384.262245][ T30] ? __irq_work_queue_local+0x137/0x410 [ 384.267933][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 384.273533][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 384.279746][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 384.285976][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 384.292219][ T30] watchdog+0x1033/0x1040 [ 384.296601][ T30] ? watchdog+0x1ea/0x1040 [ 384.301094][ T30] ? __pfx_watchdog+0x10/0x10 [ 384.305821][ T30] kthread+0x2f0/0x390 [ 384.309942][ T30] ? __pfx_watchdog+0x10/0x10 [ 384.314710][ T30] ? __pfx_kthread+0x10/0x10 [ 384.319347][ T30] ret_from_fork+0x4b/0x80 [ 384.323822][ T30] ? __pfx_kthread+0x10/0x10 [ 384.328463][ T30] ret_from_fork_asm+0x1a/0x30 [ 384.333297][ T30] [ 384.336699][ T30] Kernel Offset: disabled [ 384.341128][ T30] Rebooting in 86400 seconds..