last executing test programs: 42.99516252s ago: executing program 2 (id=463): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000400)=ANY=[@ANYBLOB="0a000000000000000100004002000000030000000500000001f0ffff06000000040000000000000000000000000000000d000000000000000300000002010d"]) 42.85991755s ago: executing program 1 (id=466): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000380)='blkio.bfq.time_recursive\x00', 0x0, 0x0) preadv2(r1, &(0x7f0000000040)=[{&(0x7f0000000100)=""/74, 0x4a}], 0x1, 0x2, 0xfffffff9, 0x1) 42.701047585s ago: executing program 1 (id=467): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x5}, 0x1c) syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@local, @empty, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5f1060", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x88be, 0x86ddffff}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0x4}}}}}}}}}, 0x0) 42.591611605s ago: executing program 0 (id=468): socket$netlink(0x10, 0x3, 0x10) r0 = getpgrp(0x0) syz_pidfd_open(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7}, 0x18) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_io_uring_setup(0x24fc, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r8, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ_FIXED) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 42.395286552s ago: executing program 2 (id=470): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000740)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000780)={0x20, r0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x8045}, 0x20040010) 42.352032964s ago: executing program 1 (id=480): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xd06d000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) 41.911673123s ago: executing program 2 (id=471): r0 = syz_usb_connect(0x5, 0x24, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x32, 0xf4, 0x49, 0x10, 0x9c0, 0x201, 0xaa4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe5, 0xa5, 0xc8}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000240)={0x20, 0x17, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 41.894224665s ago: executing program 0 (id=482): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\b'}}}]}, 0x48}}, 0x0) 41.501361053s ago: executing program 0 (id=473): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e00)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000610000005000400000000000900020073797a3100000000050005000200000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 41.324838897s ago: executing program 0 (id=474): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setgroups(0x0, 0x0) 41.142485572s ago: executing program 3 (id=476): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4f27, 0x5, 0xfffd, 0x4, 0x5, 0xcc7, 0x8, 0x8, 0xa, 0x100, 0x2, 0x3, 0x1, 0x1, 0x6, 0x101, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e58, 0xb, 0xe69, 0x7, 0x8, 0x6, 0x0, 0xfffffff8]}) ioctl$COMEDI_SETRSUBD(r0, 0x6410) 40.813399195s ago: executing program 4 (id=477): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000376, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 40.464393148s ago: executing program 3 (id=478): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040)=0x1) 40.373320678s ago: executing program 4 (id=479): mount(0x0, 0x0, &(0x7f0000000280)='gfs2\x00', 0x2000004, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310401080000030000001600000018000180140002006e657464657673696d3000000000000005000300010000000500040001000000050002"], 0x44}}, 0x8000) 40.088848221s ago: executing program 4 (id=481): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, 0x0, 0x0, 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x20000041) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x8) listen(r4, 0x80000001) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 40.064502055s ago: executing program 1 (id=483): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a"], 0x4c}}, 0x0) 39.784040034s ago: executing program 1 (id=484): getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0xf, 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x8000) mkdir(0x0, 0xe8) openat$nvram(0xffffffffffffff9c, 0x0, 0x22000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) keyctl$clear(0x7, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000140)='-3', 0x2}]) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0xfffffffe, 0x3, 0x4}, 0x1000000, 0x200000, 'id1\x00', 'timer1\x00', 0x0, 0x81, 0x1, 0x4, 0x10000000}) syz_open_dev$dri(0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x1, 0x4800003e, r3, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x103bff, 0x111) 39.72558118s ago: executing program 2 (id=485): r0 = io_uring_setup(0x4822, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xbd}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 38.264815767s ago: executing program 4 (id=486): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = open(&(0x7f0000000000)='./file0\x00', 0x1607c0, 0x78e22799f4a46ffe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) fcntl$setlease(r4, 0x400, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480)=0x17fe, 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4c, 0xf3, 0x8, [0x0, 0x0, 0x0, 0xc, 0x5, 0x0, 0x0, 0x40000002]}}) fcntl$setlease(r4, 0x400, 0x0) 36.550879198s ago: executing program 3 (id=487): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x1100, 0x0, 0x3, 0x6, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x1c, 0xe, 0x1, 0x0, [{@empty, 0x1f82}, {@broadcast, 0x9}, {@local, 0x8c}]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 30.754647949s ago: executing program 4 (id=488): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x8070bd2a, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x12cfff}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x48}}, 0x0) 29.835452024s ago: executing program 1 (id=489): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000000000000ff000040"]) 29.834707869s ago: executing program 2 (id=490): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000240)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e", @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x5b24, 0x0) 29.792127865s ago: executing program 3 (id=491): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001400010026bd7000f8dbdf250a2000ff", @ANYRES32=r2, @ANYBLOB="080008000306000014000200ff"], 0x34}, 0x1, 0x0, 0x0, 0x4c051}, 0x4) 29.246712716s ago: executing program 0 (id=492): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)=0x20) syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) write$dsp(r0, &(0x7f0000000140)="755a5398d512d39077459e67ee110daaf0413bc745ef85b89f2141d513969bd8", 0xffaa) 27.91926733s ago: executing program 2 (id=493): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="070000000000000000000800000008000300", @ANYRES32=r2], 0x1c}}, 0x0) 26.138558615s ago: executing program 0 (id=494): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000001b80)=@arm64) 18.129432163s ago: executing program 4 (id=495): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, 0x0) 16.880679551s ago: executing program 3 (id=496): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, 0x0, 0x0, 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x20000041) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x8) listen(r4, 0x80000001) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) 14.993402842s ago: executing program 32 (id=489): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000000000000ff000040"]) 14.395410425s ago: executing program 3 (id=498): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)={0x30, r1, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="ca17439c9c3b"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x80}]}, 0x30}, 0x1, 0x0, 0x0, 0x20018055}, 0x40040) 13.520332629s ago: executing program 33 (id=493): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="070000000000000000000800000008000300", @ANYRES32=r2], 0x1c}}, 0x0) 11.53329371s ago: executing program 34 (id=494): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000001b80)=@arm64) 3.494832409s ago: executing program 35 (id=495): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, 0x0) 0s ago: executing program 36 (id=498): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)={0x30, r1, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="ca17439c9c3b"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x80}]}, 0x30}, 0x1, 0x0, 0x0, 0x20018055}, 0x40040) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.72' (ED25519) to the list of known hosts. [ 87.891524][ T5825] cgroup: Unknown subsys name 'net' [ 88.121443][ T5825] cgroup: Unknown subsys name 'cpuset' [ 88.195830][ T5825] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 90.197985][ T5825] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.377626][ T101] cfg80211: failed to load regulatory.db [ 93.340313][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.349025][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.356209][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.356881][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.358415][ T5853] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.359449][ T5853] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 93.364109][ T5854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.364680][ T5854] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.367150][ T5855] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.369930][ T5855] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.386507][ T5853] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.395278][ T5853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.405673][ T5853] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.428182][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.448122][ T5854] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 93.449853][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 93.451002][ T5854] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 93.453486][ T5854] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 93.457592][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 93.459254][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.460426][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.555751][ T5855] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.560080][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.560609][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.573106][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.393073][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 94.567398][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 94.934753][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 95.073795][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 95.083382][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 95.210411][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.210601][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.212661][ T5840] bridge_slave_0: entered allmulticast mode [ 95.231474][ T5840] bridge_slave_0: entered promiscuous mode [ 95.429619][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.429775][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.430363][ T5840] bridge_slave_1: entered allmulticast mode [ 95.433329][ T5840] bridge_slave_1: entered promiscuous mode [ 95.536950][ T5156] Bluetooth: hci3: command tx timeout [ 95.615132][ T5848] Bluetooth: hci4: command tx timeout [ 95.615325][ T5848] Bluetooth: hci2: command tx timeout [ 95.615543][ T5156] Bluetooth: hci1: command tx timeout [ 95.695069][ T5156] Bluetooth: hci0: command tx timeout [ 95.815296][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.815435][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.816410][ T5839] bridge_slave_0: entered allmulticast mode [ 95.819409][ T5839] bridge_slave_0: entered promiscuous mode [ 95.963567][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.963710][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.964283][ T5839] bridge_slave_1: entered allmulticast mode [ 95.988346][ T5839] bridge_slave_1: entered promiscuous mode [ 96.020155][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.211599][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.575996][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.576191][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.576356][ T5838] bridge_slave_0: entered allmulticast mode [ 96.578309][ T5838] bridge_slave_0: entered promiscuous mode [ 96.586849][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.916552][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.916782][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.916976][ T5838] bridge_slave_1: entered allmulticast mode [ 96.919972][ T5838] bridge_slave_1: entered promiscuous mode [ 96.924299][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.924551][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.924668][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.927256][ T5842] bridge_slave_0: entered allmulticast mode [ 96.930568][ T5842] bridge_slave_0: entered promiscuous mode [ 96.945144][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.945306][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.945574][ T5837] bridge_slave_0: entered allmulticast mode [ 96.949190][ T5837] bridge_slave_0: entered promiscuous mode [ 96.988642][ T5840] team0: Port device team_slave_0 added [ 97.146716][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.146863][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.147055][ T5842] bridge_slave_1: entered allmulticast mode [ 97.150049][ T5842] bridge_slave_1: entered promiscuous mode [ 97.151610][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.151752][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.151932][ T5837] bridge_slave_1: entered allmulticast mode [ 97.156268][ T5837] bridge_slave_1: entered promiscuous mode [ 97.166562][ T5840] team0: Port device team_slave_1 added [ 97.530832][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.533298][ T5839] team0: Port device team_slave_0 added [ 97.615151][ T5156] Bluetooth: hci3: command tx timeout [ 97.695236][ T5156] Bluetooth: hci1: command tx timeout [ 97.695268][ T5156] Bluetooth: hci2: command tx timeout [ 97.695289][ T5156] Bluetooth: hci4: command tx timeout [ 97.775048][ T5841] Bluetooth: hci0: command tx timeout [ 97.797170][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.799808][ T5839] team0: Port device team_slave_1 added [ 97.804702][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.973239][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.974556][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.974572][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.974594][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.183663][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.187822][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.188867][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.188883][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.188914][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.629110][ T5838] team0: Port device team_slave_0 added [ 98.630487][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.630501][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.630530][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.840158][ T5838] team0: Port device team_slave_1 added [ 98.841298][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.841315][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.841335][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.843939][ T5842] team0: Port device team_slave_0 added [ 98.968991][ T5837] team0: Port device team_slave_0 added [ 99.092955][ T5842] team0: Port device team_slave_1 added [ 99.207115][ T5837] team0: Port device team_slave_1 added [ 99.537796][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.537814][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.537843][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.641204][ T5840] hsr_slave_0: entered promiscuous mode [ 99.642382][ T5840] hsr_slave_1: entered promiscuous mode [ 99.696486][ T5841] Bluetooth: hci3: command tx timeout [ 99.738641][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.738660][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.738689][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.775058][ T5841] Bluetooth: hci4: command tx timeout [ 99.775092][ T5841] Bluetooth: hci2: command tx timeout [ 99.775116][ T5841] Bluetooth: hci1: command tx timeout [ 99.855075][ T5848] Bluetooth: hci0: command tx timeout [ 99.857524][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.857542][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.857569][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.860429][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.860444][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.860472][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.998844][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.998863][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.998891][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.001346][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.001363][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.001390][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.132020][ T5839] hsr_slave_0: entered promiscuous mode [ 100.133047][ T5839] hsr_slave_1: entered promiscuous mode [ 100.146789][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 100.146914][ T5839] Cannot create hsr debugfs directory [ 100.684008][ T5838] hsr_slave_0: entered promiscuous mode [ 100.686115][ T5838] hsr_slave_1: entered promiscuous mode [ 100.687230][ T5838] debugfs: 'hsr0' already exists in 'hsr' [ 100.687259][ T5838] Cannot create hsr debugfs directory [ 100.984183][ T5842] hsr_slave_0: entered promiscuous mode [ 100.986737][ T5842] hsr_slave_1: entered promiscuous mode [ 100.987758][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 100.987787][ T5842] Cannot create hsr debugfs directory [ 101.000465][ T5837] hsr_slave_0: entered promiscuous mode [ 101.002020][ T5837] hsr_slave_1: entered promiscuous mode [ 101.003042][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 101.003070][ T5837] Cannot create hsr debugfs directory [ 101.775200][ T5848] Bluetooth: hci3: command tx timeout [ 101.855028][ T5848] Bluetooth: hci1: command tx timeout [ 101.855064][ T5848] Bluetooth: hci2: command tx timeout [ 101.855088][ T5848] Bluetooth: hci4: command tx timeout [ 101.934934][ T5841] Bluetooth: hci0: command tx timeout [ 102.727742][ T5840] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 102.768835][ T5840] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 102.831048][ T5840] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 102.870836][ T5840] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 102.984928][ T5839] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 103.023490][ T5839] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 103.053319][ T5839] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 103.094012][ T5839] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 103.255477][ T5838] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.305333][ T5838] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.353202][ T5838] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.399724][ T5838] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.593550][ T5842] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 103.646830][ T5842] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 103.703988][ T5842] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 103.761171][ T5842] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 103.946352][ T5837] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 104.004061][ T5837] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 104.053690][ T5837] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 104.101431][ T5837] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 104.141130][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.282085][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.290417][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.351758][ T3014] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.352566][ T3014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.429455][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.429608][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.462074][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.527464][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.549187][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.550646][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.614122][ T3014] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.614240][ T3014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.697431][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.754696][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.768151][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.768314][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.828042][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.828540][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.957507][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.986881][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.039474][ T1433] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.040294][ T1433] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.120902][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.121057][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.162873][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.228902][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.229625][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.300155][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.300281][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.507897][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.157151][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.293441][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.532661][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.536301][ T5839] veth0_vlan: entered promiscuous mode [ 106.641518][ T5839] veth1_vlan: entered promiscuous mode [ 106.674590][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.714555][ T5838] veth0_vlan: entered promiscuous mode [ 106.789770][ T5838] veth1_vlan: entered promiscuous mode [ 106.828318][ T5840] veth0_vlan: entered promiscuous mode [ 106.903877][ T5842] veth0_vlan: entered promiscuous mode [ 106.907893][ T5840] veth1_vlan: entered promiscuous mode [ 106.911218][ T5839] veth0_macvtap: entered promiscuous mode [ 106.953699][ T5839] veth1_macvtap: entered promiscuous mode [ 106.999646][ T5842] veth1_vlan: entered promiscuous mode [ 107.031701][ T5837] veth0_vlan: entered promiscuous mode [ 107.052572][ T5838] veth0_macvtap: entered promiscuous mode [ 107.080648][ T5838] veth1_macvtap: entered promiscuous mode [ 107.088354][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.112280][ T5837] veth1_vlan: entered promiscuous mode [ 107.141458][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.179688][ T5840] veth0_macvtap: entered promiscuous mode [ 107.201083][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.218028][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.223061][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.254910][ T57] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.256408][ T5840] veth1_macvtap: entered promiscuous mode [ 107.264285][ T67] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.298602][ T5842] veth0_macvtap: entered promiscuous mode [ 107.320331][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.399730][ T5842] veth1_macvtap: entered promiscuous mode [ 107.420726][ T67] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.423633][ T67] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.501906][ T67] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.517706][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.520841][ T67] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.606290][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.609724][ T5837] veth0_macvtap: entered promiscuous mode [ 107.693752][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.694495][ T5837] veth1_macvtap: entered promiscuous mode [ 107.792005][ T67] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.827479][ T67] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.832438][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.841350][ T67] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.920602][ T1395] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.920632][ T1395] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.941980][ T67] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.049943][ T69] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.070006][ T69] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.090592][ T69] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.109343][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.154985][ T69] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.185914][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.185936][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.270194][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.424068][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.424090][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.514993][ T57] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.537353][ T57] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.547824][ T57] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.598832][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.598855][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.637588][ T57] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.720094][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.720112][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.042035][ T3014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.042060][ T3014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.162749][ T3014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.162773][ T3014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.267113][ T5962] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 109.456428][ T3014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.456450][ T3014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.623528][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.623551][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.748726][ T3014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.748750][ T3014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.209714][ T5972] Zero length message leads to an empty skb [ 111.205457][ T5989] netlink: 76 bytes leftover after parsing attributes in process `syz.0.13'. [ 112.831273][ T5997] misc userio: Begin command sent, but we're already running [ 113.538757][ T5930] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 113.704998][ T5930] usb 4-1: Using ep0 maxpacket: 16 [ 113.715467][ T5930] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.715498][ T5930] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 113.756654][ T5930] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 113.756687][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.756707][ T5930] usb 4-1: Product: syz [ 113.756722][ T5930] usb 4-1: Manufacturer: syz [ 113.756737][ T5930] usb 4-1: SerialNumber: syz [ 114.035878][ T6008] mkiss: ax0: crc mode is auto. [ 114.152147][ T5930] usb 4-1: 0:2 : does not exist [ 114.170452][ T5930] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 114.365023][ T5849] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 114.774860][ T5849] usb 1-1: Using ep0 maxpacket: 32 [ 114.786500][ T5849] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 114.786531][ T5849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.943297][ T5930] usb 4-1: USB disconnect, device number 2 [ 115.036960][ T5849] usb 1-1: config 0 descriptor?? [ 115.124113][ T5849] gspca_main: sq930x-2.14.0 probing 041e:403c [ 115.805057][ T5849] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 115.805181][ T5849] sq930x 1-1:0.0: probe with driver sq930x failed with error -71 [ 115.845006][ T5849] usb 1-1: USB disconnect, device number 2 [ 115.851348][ T5901] udevd[5901]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 115.856552][ T10] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 115.965410][ T6038] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 116.052189][ T10] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 116.052219][ T10] usb 3-1: config 0 has no interface number 0 [ 116.052270][ T10] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 116.052293][ T10] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 116.052319][ T10] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 116.052345][ T10] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 116.052371][ T10] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 116.052398][ T10] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 116.052442][ T10] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 116.052465][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.098972][ T10] usb 3-1: config 0 descriptor?? [ 116.441229][ T6034] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 116.443986][ T6034] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 116.494877][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.504879][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.514829][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.522190][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.544821][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.554862][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.564825][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.574822][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.584816][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.594819][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.920641][ T6038] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 116.920674][ T6038] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.920693][ T6038] usb 2-1: Product: syz [ 116.920707][ T6038] usb 2-1: Manufacturer: syz [ 116.920721][ T6038] usb 2-1: SerialNumber: syz [ 117.060564][ T10] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 117.174199][ T10] usb 3-1: USB disconnect, device number 2 [ 117.400921][ T10] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 117.574666][ T6052] netlink: 20 bytes leftover after parsing attributes in process `syz.3.32'. [ 117.755007][ T5928] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 117.927804][ T5928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.927840][ T5928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.927882][ T5928] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 117.927908][ T5928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.941864][ T6038] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 117.941965][ T6038] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 117.943517][ T6038] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 118.013704][ T5928] usb 5-1: config 0 descriptor?? [ 118.051729][ T6038] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 118.155385][ T6038] usb 2-1: USB disconnect, device number 2 [ 118.441800][ T6068] netlink: 20 bytes leftover after parsing attributes in process `syz.2.41'. [ 118.707421][ T5928] cp2112 0003:10C4:EA90.0001: item fetching failed at offset 5/7 [ 118.708240][ T5928] cp2112 0003:10C4:EA90.0001: parse failed [ 118.708373][ T5928] cp2112 0003:10C4:EA90.0001: probe with driver cp2112 failed with error -22 [ 119.689993][ T6038] usb 5-1: USB disconnect, device number 2 [ 119.821160][ T5928] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 119.997421][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 119.997457][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.039837][ T5928] usb 2-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 120.039871][ T5928] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 120.039892][ T5928] usb 2-1: Manufacturer: syz [ 120.108003][ T5928] usb 2-1: config 0 descriptor?? [ 120.632706][ T5928] cougar 0003:060B:700A.0002: unknown main item tag 0x0 [ 120.632779][ T5928] cougar 0003:060B:700A.0002: unknown main item tag 0x0 [ 120.632806][ T5928] cougar 0003:060B:700A.0002: unknown main item tag 0x0 [ 120.632832][ T5928] cougar 0003:060B:700A.0002: unknown main item tag 0x0 [ 120.632858][ T5928] cougar 0003:060B:700A.0002: unknown main item tag 0x0 [ 120.682850][ T5928] cougar 0003:060B:700A.0002: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 120.822146][ T5917] usb 2-1: USB disconnect, device number 3 [ 121.107006][ T6095] fido_id[6095]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 121.729612][ T6105] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 121.778163][ T6105] cramfs: wrong magic [ 122.635272][ T6113] pimreg: tun_chr_ioctl cmd 1074025677 [ 122.635464][ T6113] pimreg: linktype set to 512 [ 122.685714][ T37] audit: type=1326 audit(1757944658.284:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6112 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5173aaeba9 code=0x7ffc0000 [ 122.685772][ T37] audit: type=1326 audit(1757944658.314:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6112 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5173aaeba9 code=0x7ffc0000 [ 122.691841][ T37] audit: type=1326 audit(1757944658.324:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6112 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f5173aaeba9 code=0x7ffc0000 [ 122.691896][ T37] audit: type=1326 audit(1757944658.324:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6112 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5173aaeba9 code=0x7ffc0000 [ 122.691943][ T37] audit: type=1326 audit(1757944658.324:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6112 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5173aaeba9 code=0x7ffc0000 [ 122.691990][ T37] audit: type=1326 audit(1757944658.324:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6112 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f5173aaeba9 code=0x7ffc0000 [ 122.692036][ T37] audit: type=1326 audit(1757945426.337:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6112 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5173aaeba9 code=0x7ffc0000 [ 122.692082][ T37] audit: type=1326 audit(1757945426.337:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6112 comm="syz.4.59" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5173aaeba9 code=0x7ffc0000 [ 122.991948][ T5908] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 123.054225][ T6118] netlink: 28 bytes leftover after parsing attributes in process `syz.3.60'. [ 123.103268][ T6124] loop7: detected capacity change from 0 to 7 [ 123.132225][ T6046] Dev loop7: unable to read RDB block 7 [ 123.132278][ T6046] loop7: AHDI p1 p2 [ 123.132316][ T6046] loop7: partition table partially beyond EOD, truncated [ 123.152030][ T5908] usb 2-1: Using ep0 maxpacket: 16 [ 123.163114][ T5908] usb 2-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 123.163145][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.163166][ T5908] usb 2-1: Product: syz [ 123.163181][ T5908] usb 2-1: Manufacturer: syz [ 123.163196][ T5908] usb 2-1: SerialNumber: syz [ 123.191964][ T6046] loop7: p1 start 1702000233 is beyond EOD, truncated [ 123.215799][ T5908] usb 2-1: config 0 descriptor?? [ 123.242873][ T6124] Dev loop7: unable to read RDB block 7 [ 123.242910][ T6124] loop7: AHDI p1 p2 [ 123.242943][ T6124] loop7: partition table partially beyond EOD, truncated [ 123.243302][ T6124] loop7: p1 start 1702000233 is beyond EOD, truncated [ 123.267771][ T5908] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 123.457377][ T5908] gp8psk: usb in 128 operation failed. [ 123.472346][ T5908] gp8psk: usb in 137 operation failed. [ 123.472380][ T5908] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 123.475067][ T5908] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 123.475173][ T5908] usb 2-1: media controller created [ 123.540851][ T5908] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 123.619496][ T6123] netlink: 136 bytes leftover after parsing attributes in process `syz.2.64'. [ 123.619521][ T6123] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 123.629541][ T5908] gp8psk_fe: Frontend revision 1 attached [ 123.630024][ T5908] usb 2-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 123.630637][ T5908] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 123.953452][ T5908] gp8psk: usb in 137 operation failed. [ 123.953473][ T5908] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 123.953487][ T5908] gp8psk: found Genpix USB device pID = 201 (hex) [ 123.992228][ T5908] usb 2-1: USB disconnect, device number 4 [ 124.369705][ T5917] hid-generic 0005:046D:5505.0003: unknown main item tag 0x0 [ 124.369742][ T5917] hid-generic 0005:046D:5505.0003: unknown main item tag 0x0 [ 124.369769][ T5917] hid-generic 0005:046D:5505.0003: item fetching failed at offset 2/3 [ 124.370585][ T5917] hid-generic 0005:046D:5505.0003: probe with driver hid-generic failed with error -22 [ 124.453178][ T5908] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 124.795679][ T6154] Context (ID=0x0) not attached to queue pair (handle=0x1:0xfffffffa) [ 125.071523][ T5908] kernel write not supported for file /amidi2 (pid: 5908 comm: kworker/1:4) [ 125.238924][ T6164] warning: `syz.1.81' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 125.987819][ C1] vkms_vblank_simulate: vblank timer overrun [ 126.007554][ T5849] kernel write not supported for file /comedi4 (pid: 5849 comm: kworker/1:3) [ 126.197767][ C1] vkms_vblank_simulate: vblank timer overrun [ 126.596180][ C1] vkms_vblank_simulate: vblank timer overrun [ 126.842049][ C1] vkms_vblank_simulate: vblank timer overrun [ 127.218601][ T992] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 127.244705][ T6189] erspan0: entered promiscuous mode [ 127.376267][ T992] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 127.376304][ T992] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.379448][ T992] usb 5-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 127.379478][ T992] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 127.379500][ T992] usb 5-1: Manufacturer: syz [ 127.444497][ T992] usb 5-1: config 0 descriptor?? [ 127.678073][ T6196] syz.3.95 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 128.131135][ T6201] program syz.3.96 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 128.334525][ C1] vkms_vblank_simulate: vblank timer overrun [ 128.358747][ T992] cougar 0003:060B:700A.0004: unknown main item tag 0x0 [ 128.358791][ T992] cougar 0003:060B:700A.0004: unknown main item tag 0x0 [ 128.358820][ T992] cougar 0003:060B:700A.0004: unknown main item tag 0x0 [ 128.358847][ T992] cougar 0003:060B:700A.0004: unknown main item tag 0x0 [ 128.358875][ T992] cougar 0003:060B:700A.0004: unknown main item tag 0x0 [ 128.677600][ T6205] netlink: 16 bytes leftover after parsing attributes in process `syz.1.98'. [ 128.699436][ C1] vkms_vblank_simulate: vblank timer overrun [ 128.706081][ T992] cougar 0003:060B:700A.0004: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 128.774133][ T992] usb 5-1: USB disconnect, device number 3 [ 129.062758][ T6211] block device autoloading is deprecated and will be removed. [ 129.531146][ T6218] fido_id[6218]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 130.381536][ T992] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 130.543467][ T992] usb 2-1: Using ep0 maxpacket: 8 [ 130.546926][ T992] usb 2-1: unable to get BOS descriptor or descriptor too short [ 130.550751][ T992] usb 2-1: config 4 interface 0 has no altsetting 0 [ 130.582185][ T992] usb 2-1: string descriptor 0 read error: -22 [ 130.587809][ T992] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 130.587841][ T992] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 130.727824][ T992] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 130.895251][ T992] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 130.896060][ T992] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 130.896121][ T992] usb 2-1: media controller created [ 131.045139][ T992] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 131.341871][ T6257] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 132.623916][ T992] zl10353_read_register: readreg error (reg=127, ret==0) [ 133.172340][ T5917] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 133.222404][ T992] usb 2-1: USB disconnect, device number 5 [ 133.568346][ T5917] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 133.568382][ T5917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 133.568411][ T5917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 133.568435][ T5917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 133.568463][ T5917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 133.909231][ T5917] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 133.909262][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.909283][ T5917] usb 5-1: Product: syz [ 133.909298][ T5917] usb 5-1: Manufacturer: syz [ 133.909312][ T5917] usb 5-1: SerialNumber: syz [ 133.996043][ T5917] usb 5-1: config 0 descriptor?? [ 134.424304][ T5917] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 134.424370][ T5917] input input6: Device does not respond to id packet M [ 134.425485][ T5917] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 134.425532][ T5917] input input6: Device does not respond to id packet P [ 134.425992][ T5917] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 134.426041][ T5917] input input6: Device does not respond to id packet B [ 134.426504][ T5917] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 134.426551][ T5917] input input6: Device does not respond to id packet N [ 134.427211][ T5917] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 134.427690][ T5917] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 134.431309][ T5917] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 134.431852][ T5917] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 134.432366][ T5917] iforce 5-1:0.0: usb_submit_urb failed -90 [ 134.432802][ T5917] iforce 5-1:0.0: usb_submit_urb failed -90 [ 134.476989][ T5917] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input6 [ 134.497594][ T992] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 134.670329][ T5917] usb 5-1: USB disconnect, device number 4 [ 134.705916][ T992] usb 2-1: Using ep0 maxpacket: 32 [ 134.708516][ T992] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.708551][ T992] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.708594][ T992] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 134.708619][ T992] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.775539][ T992] usb 2-1: config 0 descriptor?? [ 134.790131][ T992] hub 2-1:0.0: USB hub found [ 134.991227][ T992] hub 2-1:0.0: config failed, can't read hub descriptor (err -90) [ 135.189760][ T992] usbhid 2-1:0.0: can't add hid device: -71 [ 135.189883][ T992] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 135.270748][ T992] usb 2-1: USB disconnect, device number 6 [ 135.366867][ T6292] capability: warning: `syz.4.126' uses deprecated v2 capabilities in a way that may be insecure [ 135.927105][ C1] vkms_vblank_simulate: vblank timer overrun [ 136.271708][ C1] vkms_vblank_simulate: vblank timer overrun [ 136.503306][ C1] vkms_vblank_simulate: vblank timer overrun [ 136.665410][ C1] vkms_vblank_simulate: vblank timer overrun [ 137.036024][ C1] vkms_vblank_simulate: vblank timer overrun [ 137.692971][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.693058][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.388987][ C1] vkms_vblank_simulate: vblank timer overrun [ 138.738835][ C1] vkms_vblank_simulate: vblank timer overrun [ 139.551583][ C1] vkms_vblank_simulate: vblank timer overrun [ 139.701917][ C1] vkms_vblank_simulate: vblank timer overrun [ 140.818112][ T5917] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 140.963172][ T5917] usb 1-1: Using ep0 maxpacket: 8 [ 140.965943][ T5917] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 140.965980][ T5917] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 140.966007][ T5917] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 140.966033][ T5917] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 140.966080][ T5917] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 140.966104][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.146357][ C1] vkms_vblank_simulate: vblank timer overrun [ 141.358205][ C1] vkms_vblank_simulate: vblank timer overrun [ 141.801416][ C1] vkms_vblank_simulate: vblank timer overrun [ 142.166620][ T5917] usb 1-1: GET_CAPABILITIES returned 0 [ 142.166676][ T5917] usbtmc 1-1:16.0: can't read capabilities [ 142.366518][ T6350] netlink: 'syz.2.143': attribute type 2 has an invalid length. [ 142.366544][ T6350] netlink: 152 bytes leftover after parsing attributes in process `syz.2.143'. [ 143.147415][ T5917] usb 1-1: USB disconnect, device number 3 [ 146.982649][ T992] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 147.106531][ T5917] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 147.249145][ T5917] usb 4-1: Using ep0 maxpacket: 16 [ 147.251872][ T5917] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.251906][ T5917] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.251930][ T5917] usb 4-1: config 0 interface 0 has no altsetting 0 [ 147.251967][ T5917] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 147.251991][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.322541][ T5917] usb 4-1: config 0 descriptor?? [ 147.401543][ T992] usb 5-1: Using ep0 maxpacket: 8 [ 147.417433][ T992] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 147.417480][ T992] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 147.417529][ T992] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 147.417559][ T992] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 147.417584][ T992] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 147.417607][ T992] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 147.417633][ T992] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 147.417661][ T992] usb 5-1: config 168 interface 0 has no altsetting 0 [ 147.419394][ T992] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 147.419438][ T992] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 147.419482][ T992] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 147.419512][ T992] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 147.419540][ T992] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 147.419567][ T992] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 147.419646][ T992] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 147.419674][ T992] usb 5-1: config 168 interface 0 has no altsetting 0 [ 147.444973][ T992] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 147.445025][ T992] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 147.446128][ T992] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 147.446215][ T992] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 147.446297][ T992] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 147.446379][ T992] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 147.446462][ T992] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 147.446546][ T992] usb 5-1: config 168 interface 0 has no altsetting 0 [ 148.053661][ T992] usb 5-1: string descriptor 0 read error: -22 [ 148.053829][ T992] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 148.053855][ T992] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.414052][ T992] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 148.467737][ T992] usb 5-1: USB disconnect, device number 5 [ 148.676116][ T5917] hid (null): report_id 0 is invalid [ 148.676181][ T5917] hid (null): invalid report_count -737697329 [ 149.054842][ T992] usb 4-1: USB disconnect, device number 3 [ 152.171316][ T6409] netlink: 136 bytes leftover after parsing attributes in process `syz.4.161'. [ 152.171346][ T6409] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 152.659508][ T5917] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 153.145294][ T5917] usb 1-1: Using ep0 maxpacket: 8 [ 154.006067][ T5917] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 154.006100][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.006114][ T5917] usb 1-1: Product: syz [ 154.006124][ T5917] usb 1-1: Manufacturer: syz [ 154.006134][ T5917] usb 1-1: SerialNumber: syz [ 154.061640][ T5917] usb 1-1: config 0 descriptor?? [ 154.333529][ T5917] gspca_main: sq930x-2.14.0 probing 2770:930c [ 155.167837][ T5917] gspca_sq930x: reg_r 001f failed -110 [ 155.167948][ T5917] sq930x 1-1:0.0: probe with driver sq930x failed with error -110 [ 155.538319][ T31] usb 1-1: USB disconnect, device number 4 [ 163.314195][ T5947] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 164.111270][ T5947] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.111301][ T5947] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 164.140242][ T5947] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 164.140273][ T5947] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.140293][ T5947] usb 4-1: Product: syz [ 164.140308][ T5947] usb 4-1: Manufacturer: syz [ 164.140322][ T5947] usb 4-1: SerialNumber: syz [ 165.052747][ T5947] usb 4-1: 0:2 : does not exist [ 165.456347][ T5947] usb 4-1: USB disconnect, device number 4 [ 165.601468][ T6046] udevd[6046]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 166.326758][ T37] audit: type=1326 audit(1757945472.134:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6514 comm="syz.3.195" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1b69d0eba9 code=0x0 [ 167.166428][ C0] vkms_vblank_simulate: vblank timer overrun [ 167.475861][ C0] vkms_vblank_simulate: vblank timer overrun [ 167.594286][ C0] vkms_vblank_simulate: vblank timer overrun [ 168.519965][ C0] vkms_vblank_simulate: vblank timer overrun [ 169.010524][ C0] vkms_vblank_simulate: vblank timer overrun [ 169.923253][ C0] vkms_vblank_simulate: vblank timer overrun [ 170.603918][ T5917] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 170.758476][ T5917] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 170.758512][ T5917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 170.758539][ T5917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 170.758564][ T5917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 170.758591][ T5917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 170.761761][ T5917] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 170.761791][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.761812][ T5917] usb 1-1: Product: syz [ 170.761827][ T5917] usb 1-1: Manufacturer: syz [ 170.761843][ T5917] usb 1-1: SerialNumber: syz [ 170.882229][ T5917] usb 1-1: config 0 descriptor?? [ 171.296546][ T5917] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 171.296602][ T5917] input input7: Device does not respond to id packet M [ 171.297094][ T5917] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 171.297142][ T5917] input input7: Device does not respond to id packet P [ 171.297591][ T5917] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 171.297637][ T5917] input input7: Device does not respond to id packet B [ 171.347870][ T5917] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 171.347926][ T5917] input input7: Device does not respond to id packet N [ 171.349568][ T5917] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 171.350091][ T5917] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 171.353305][ T5917] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 171.353805][ T5917] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 171.353860][ T5917] iforce 1-1:0.0: usb_submit_urb failed -90 [ 171.353891][ T5917] iforce 1-1:0.0: usb_submit_urb failed -90 [ 171.418329][ T5917] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input7 [ 172.176515][ T5917] usb 1-1: USB disconnect, device number 5 [ 174.003718][ C1] vkms_vblank_simulate: vblank timer overrun [ 174.208345][ C1] vkms_vblank_simulate: vblank timer overrun [ 174.397247][ C1] vkms_vblank_simulate: vblank timer overrun [ 174.640770][ C1] vkms_vblank_simulate: vblank timer overrun [ 175.338391][ C1] vkms_vblank_simulate: vblank timer overrun [ 175.708966][ C1] vkms_vblank_simulate: vblank timer overrun [ 176.180077][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 176.346631][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 176.358453][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 176.358496][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 176.358525][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 176.358553][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 176.358613][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 176.358638][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.741224][ T10] usb 2-1: GET_CAPABILITIES returned 0 [ 176.741277][ T10] usbtmc 2-1:16.0: can't read capabilities [ 176.942892][ T5947] usb 2-1: USB disconnect, device number 7 [ 177.181893][ C1] vkms_vblank_simulate: vblank timer overrun [ 177.599575][ C1] vkms_vblank_simulate: vblank timer overrun [ 178.091778][ C1] vkms_vblank_simulate: vblank timer overrun [ 178.145963][ C1] vkms_vblank_simulate: vblank timer overrun [ 178.352971][ C1] vkms_vblank_simulate: vblank timer overrun [ 178.975214][ T45] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 179.081318][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 179.126512][ T45] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 179.126548][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 179.126577][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 179.126602][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 179.126629][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 179.182223][ T45] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 179.182254][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.182275][ T45] usb 4-1: Product: syz [ 179.182290][ T45] usb 4-1: Manufacturer: syz [ 179.182304][ T45] usb 4-1: SerialNumber: syz [ 179.221917][ T45] usb 4-1: config 0 descriptor?? [ 179.245211][ T10] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 179.245250][ T10] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 179.245294][ T10] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 179.245319][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.301806][ T6642] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 179.330272][ T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 179.630679][ T45] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 179.630730][ T45] input input8: Device does not respond to id packet M [ 179.631225][ T45] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 179.631270][ T45] input input8: Device does not respond to id packet P [ 179.631786][ T45] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 179.631832][ T45] input input8: Device does not respond to id packet B [ 179.649093][ T45] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 179.649146][ T45] input input8: Device does not respond to id packet N [ 179.658745][ T45] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 179.672954][ T45] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 179.680671][ T45] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 179.686208][ T45] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 179.686269][ T45] iforce 4-1:0.0: usb_submit_urb failed -90 [ 179.686306][ T45] iforce 4-1:0.0: usb_submit_urb failed -90 [ 179.742116][ T45] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input8 [ 179.804968][ T10] usb 1-1: USB disconnect, device number 6 [ 179.928500][ T45] usb 4-1: USB disconnect, device number 5 [ 181.518450][ T45] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 181.719083][ T45] usb 4-1: Using ep0 maxpacket: 8 [ 182.360923][ T45] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 182.360956][ T45] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 182.360982][ T45] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 182.361007][ T45] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 182.361052][ T45] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 182.361076][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.474096][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 182.631439][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 182.634746][ T10] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 182.634796][ T10] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 182.634841][ T10] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 182.634873][ T10] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 182.634902][ T10] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 182.634935][ T10] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 182.634966][ T10] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 182.634995][ T10] usb 3-1: config 168 interface 0 has no altsetting 0 [ 182.636836][ T10] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 182.636877][ T10] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 182.637002][ T10] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 182.637032][ T10] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 182.637063][ T10] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 182.637093][ T10] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 182.637122][ T10] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 182.637155][ T10] usb 3-1: config 168 interface 0 has no altsetting 0 [ 182.893214][ T10] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 182.893266][ T10] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 182.893323][ T10] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 182.893353][ T10] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 182.893380][ T10] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 182.893409][ T10] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 182.893438][ T10] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 182.893468][ T10] usb 3-1: config 168 interface 0 has no altsetting 0 [ 183.112572][ T10] usb 3-1: string descriptor 0 read error: -22 [ 183.112740][ T10] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 183.112767][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.179848][ T45] usb 4-1: GET_CAPABILITIES returned 0 [ 183.179898][ T45] usbtmc 4-1:16.0: can't read capabilities [ 183.254320][ T10] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 183.399338][ T5917] usb 4-1: USB disconnect, device number 6 [ 183.426233][ T45] usb 3-1: USB disconnect, device number 3 [ 183.452864][ T5841] Bluetooth: hci4: link tx timeout [ 183.453168][ T5841] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 183.472125][ T5848] Bluetooth: hci4: link tx timeout [ 183.472144][ T5848] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 183.472350][ T5848] Bluetooth: hci4: link tx timeout [ 183.472363][ T5848] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 183.472445][ T5848] Bluetooth: hci4: link tx timeout [ 183.472457][ T5848] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 183.472537][ T5848] Bluetooth: hci4: link tx timeout [ 183.472549][ T5848] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 183.472632][ T5848] Bluetooth: hci4: link tx timeout [ 183.472644][ T5848] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 183.472721][ T5848] Bluetooth: hci4: link tx timeout [ 183.472733][ T5848] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 183.472818][ T5848] Bluetooth: hci4: link tx timeout [ 183.472831][ T5848] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 183.472909][ T5848] Bluetooth: hci4: link tx timeout [ 183.472921][ T5848] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 183.473002][ T5848] Bluetooth: hci4: link tx timeout [ 183.473014][ T5848] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 183.473088][ T5848] Bluetooth: hci4: link tx timeout [ 183.473099][ T5848] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 184.345176][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 184.501246][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 184.921342][ T10] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 184.921377][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.921399][ T10] usb 5-1: Product: syz [ 184.921415][ T10] usb 5-1: Manufacturer: syz [ 184.921430][ T10] usb 5-1: SerialNumber: syz [ 184.962859][ T10] usb 5-1: config 0 descriptor?? [ 184.980822][ T10] gspca_main: se401-2.14.0 probing 047d:5003 [ 185.368886][ T5848] Bluetooth: hci4: command 0x0406 tx timeout [ 185.610408][ T10] input: se401 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input9 [ 186.665831][ T10] usb 5-1: USB disconnect, device number 6 [ 187.142913][ T37] audit: type=1326 audit(1757945493.994:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6707 comm="syz.3.254" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1b69d0eba9 code=0x0 [ 187.745867][ T6722] Illegal XDP return value 4294967294 on prog (id 24) dev N/A, expect packet loss! [ 187.976528][ T5947] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 188.041633][ T6728] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 188.369887][ T5947] usb 5-1: Using ep0 maxpacket: 8 [ 188.372331][ T5947] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 188.372354][ T5947] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 188.372402][ T5947] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 188.372426][ T5947] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 188.372465][ T5947] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 188.372485][ T5947] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.391776][ T5947] hub 5-1:1.0: bad descriptor, ignoring hub [ 188.391824][ T5947] hub 5-1:1.0: probe with driver hub failed with error -5 [ 188.393070][ T5947] cdc_wdm 5-1:1.0: skipping garbage [ 188.393092][ T5947] cdc_wdm 5-1:1.0: skipping garbage [ 188.422075][ T5947] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 188.422108][ T5947] cdc_wdm 5-1:1.0: Unknown control protocol [ 189.142782][ T5947] usb 5-1: USB disconnect, device number 7 [ 189.811590][ T5917] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 189.861962][ T5917] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz0 [ 196.373881][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.373939][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.415859][ T45] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 198.254803][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 198.410092][ T45] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 198.410120][ T45] usb 1-1: config 0 has no interface number 0 [ 198.410170][ T45] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 198.410197][ T45] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 198.461303][ T45] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 198.461332][ T45] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 198.461354][ T45] usb 1-1: Product: syz [ 198.461368][ T45] usb 1-1: SerialNumber: syz [ 198.471098][ T45] usb 1-1: config 0 descriptor?? [ 198.502375][ T45] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 198.522997][ T45] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input10 [ 199.014178][ T5849] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 199.044444][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 199.048858][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 199.049115][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 199.049356][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 199.049381][ T101] usb 1-1: USB disconnect, device number 7 [ 199.049379][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 199.669414][ T5849] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.669453][ T5849] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.669495][ T5849] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 199.669520][ T5849] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.849192][ T6823] block nbd0: shutting down sockets [ 200.067887][ T5849] usb 5-1: config 0 descriptor?? [ 200.175781][ T5849] usb 5-1: can't set config #0, error -71 [ 200.316251][ T101] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 200.359996][ T5849] usb 5-1: USB disconnect, device number 8 [ 200.443367][ T6837] tap0: tun_chr_ioctl cmd 1074025681 [ 201.950633][ T6857] netlink: 12 bytes leftover after parsing attributes in process `syz.0.303'. [ 206.429664][ T6861] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 207.329884][ T6861] usb 3-1: Using ep0 maxpacket: 32 [ 207.334479][ T6861] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 207.334511][ T6861] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.370747][ T6861] usb 3-1: config 0 descriptor?? [ 207.706540][ T6861] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 208.456476][ T6861] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 208.457749][ T6861] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 208.457810][ T6861] usb 3-1: media controller created [ 208.532651][ T6861] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 208.587684][ T6861] az6027: usb out operation failed. (-71) [ 208.588118][ T6861] az6027: usb out operation failed. (-71) [ 208.588134][ T6861] stb0899_attach: Driver disabled by Kconfig [ 208.588144][ T6861] az6027: no front-end attached [ 208.588144][ T6861] [ 208.594176][ T6861] az6027: usb out operation failed. (-71) [ 208.594195][ T6861] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 208.638123][ T6861] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input11 [ 208.658401][ T6861] dvb-usb: schedule remote query interval to 400 msecs. [ 208.658424][ T6861] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 208.683071][ T6861] usb 3-1: USB disconnect, device number 4 [ 210.167427][ T6861] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 211.296076][ T6918] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 211.332667][ T6861] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 211.978579][ T6861] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.978610][ T6861] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 211.980197][ T6861] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 211.980225][ T6861] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 211.980246][ T6861] usb 3-1: SerialNumber: syz [ 212.499614][ T101] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 212.607648][ T6861] usb 3-1: 0:2 : does not exist [ 212.635343][ T101] usb 1-1: Using ep0 maxpacket: 32 [ 212.638076][ T101] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 212.638106][ T101] usb 1-1: config 0 has no interface number 0 [ 212.638162][ T101] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 212.638192][ T101] usb 1-1: config 0 interface 85 has no altsetting 0 [ 213.254269][ T5854] Bluetooth: hci0: command 0x0406 tx timeout [ 213.256205][ T5855] Bluetooth: hci3: command 0x0406 tx timeout [ 213.256244][ T5855] Bluetooth: hci2: command 0x0406 tx timeout [ 213.256272][ T5855] Bluetooth: hci1: command 0x0406 tx timeout [ 213.342590][ T101] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 213.342626][ T101] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.342661][ T101] usb 1-1: Product: syz [ 213.342676][ T101] usb 1-1: Manufacturer: syz [ 213.342691][ T101] usb 1-1: SerialNumber: syz [ 213.457643][ T101] usb 1-1: config 0 descriptor?? [ 213.618233][ T6861] usb 3-1: USB disconnect, device number 5 [ 214.128952][ T101] appletouch 1-1:0.85: Geyser mode initialized. [ 214.135286][ T101] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input12 [ 214.216612][ T6077] udevd[6077]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 214.368784][ T101] usb 1-1: USB disconnect, device number 8 [ 214.368947][ C1] appletouch 1-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 214.640819][ T101] appletouch 1-1:0.85: input: appletouch disconnected [ 214.784768][ T6956] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 214.968805][ T5917] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 215.374718][ C0] vkms_vblank_simulate: vblank timer overrun [ 215.399682][ T5917] usb 2-1: config 0 has an invalid interface number: 246 but max is 0 [ 215.399712][ T5917] usb 2-1: config 0 has no interface number 0 [ 215.399749][ T5917] usb 2-1: config 0 interface 246 has no altsetting 0 [ 215.399784][ T5917] usb 2-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=f9.e3 [ 215.399809][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.600225][ C0] vkms_vblank_simulate: vblank timer overrun [ 216.609792][ T5917] usb 2-1: config 0 descriptor?? [ 216.829098][ T5917] usb 2-1: string descriptor 0 read error: -71 [ 216.889359][ T5917] usb 2-1: USB disconnect, device number 8 [ 216.922081][ T6971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.344'. [ 217.008848][ T6976] netlink: 'syz.2.345': attribute type 13 has an invalid length. [ 217.008908][ T6976] macvtap0: entered promiscuous mode [ 217.045835][ T6976] macvtap0: refused to change device tx_queue_len [ 217.108135][ T6046] udevd[6046]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.246/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 217.111482][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 217.159789][ T6861] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 217.279309][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 217.281846][ T10] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 217.281873][ T10] usb 5-1: config 0 has no interface number 0 [ 217.304944][ T10] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 217.304977][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.304998][ T10] usb 5-1: Product: syz [ 217.305013][ T10] usb 5-1: Manufacturer: syz [ 217.305027][ T10] usb 5-1: SerialNumber: syz [ 217.323050][ T6861] usb 4-1: Using ep0 maxpacket: 32 [ 217.328212][ T6861] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 217.328249][ T6861] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.351921][ T6861] usb 4-1: config 0 descriptor?? [ 217.401007][ T10] usb 5-1: config 0 descriptor?? [ 217.406472][ T10] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 217.610191][ T6861] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 217.629418][ T6861] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 217.645245][ T6861] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 217.645309][ T6861] usb 4-1: media controller created [ 217.804759][ T10] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 217.846694][ T10] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 217.892340][ T6861] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 218.025012][ T6861] az6027: usb out operation failed. (-71) [ 218.028534][ T6861] az6027: usb out operation failed. (-71) [ 218.028556][ T6861] stb0899_attach: Driver disabled by Kconfig [ 218.028568][ T6861] az6027: no front-end attached [ 218.028568][ T6861] [ 218.033103][ T6861] az6027: usb out operation failed. (-71) [ 218.033125][ T6861] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 218.087345][ T6861] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input13 [ 218.097857][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 218.109214][ T5908] usb 5-1: USB disconnect, device number 9 [ 218.128258][ T6861] dvb-usb: schedule remote query interval to 400 msecs. [ 218.128285][ T6861] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 218.283068][ T6861] usb 4-1: USB disconnect, device number 7 [ 218.353288][ T5908] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 218.453588][ T5908] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 218.486312][ T5908] quatech2 5-1:0.51: device disconnected [ 219.158458][ C0] vkms_vblank_simulate: vblank timer overrun [ 219.386170][ C0] vkms_vblank_simulate: vblank timer overrun [ 219.695445][ C0] vkms_vblank_simulate: vblank timer overrun [ 219.940630][ T6861] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 220.136268][ T7009] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 220.245270][ T6861] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 220.372426][ T7016] netlink: 4 bytes leftover after parsing attributes in process `syz.2.360'. [ 220.397732][ T6861] usb 4-1: Using ep0 maxpacket: 8 [ 220.400168][ T6861] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 220.400203][ T6861] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 220.400230][ T6861] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 220.400256][ T6861] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 220.400302][ T6861] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 220.400326][ T6861] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.711481][ T6861] usb 4-1: GET_CAPABILITIES returned 0 [ 220.711532][ T6861] usbtmc 4-1:16.0: can't read capabilities [ 220.958913][ T5849] usb 4-1: USB disconnect, device number 8 [ 221.045739][ T7016] netlink: 4 bytes leftover after parsing attributes in process `syz.2.360'. [ 222.455140][ T101] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 222.603555][ T101] usb 4-1: Using ep0 maxpacket: 8 [ 222.606380][ T101] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 222.606413][ T101] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.229704][ T101] pvrusb2: Hardware description: Terratec Grabster AV400 [ 223.229726][ T101] pvrusb2: ********** [ 223.229734][ T101] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 223.229747][ T101] pvrusb2: Important functionality might not be entirely working. [ 223.229757][ T101] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 223.229769][ T101] pvrusb2: ********** [ 223.590824][ T2371] pvrusb2: Invalid write control endpoint [ 223.813886][ T5917] usb 4-1: USB disconnect, device number 9 [ 224.003943][ T2371] pvrusb2: Invalid write control endpoint [ 224.003961][ T2371] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 224.003972][ T2371] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 224.003980][ T2371] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 224.003991][ T2371] pvrusb2: Device being rendered inoperable [ 224.026782][ T2371] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 224.026867][ T2371] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 224.044215][ T2371] pvrusb2: Attached sub-driver cx25840 [ 224.044235][ T2371] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 224.044248][ T2371] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 225.201442][ T5156] Bluetooth: hci1: Unable to find connection for big 0x00 [ 226.844220][ T7096] bridge0: entered promiscuous mode [ 226.855239][ T7096] macsec1: entered allmulticast mode [ 226.855262][ T7096] bridge0: entered allmulticast mode [ 229.226946][ T101] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 229.274294][ T5917] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 229.370630][ T101] usb 2-1: Using ep0 maxpacket: 8 [ 229.373798][ T101] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 229.373837][ T101] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 229.373864][ T101] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 229.373889][ T101] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 229.373935][ T101] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 229.373958][ T101] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.417269][ T5917] usb 5-1: Using ep0 maxpacket: 16 [ 229.455975][ T5917] usb 5-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 229.456006][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.456027][ T5917] usb 5-1: Product: syz [ 229.456041][ T5917] usb 5-1: Manufacturer: syz [ 229.456056][ T5917] usb 5-1: SerialNumber: syz [ 229.547959][ T5917] usb 5-1: config 0 descriptor?? [ 229.592477][ T5917] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 229.723888][ T101] usb 2-1: GET_CAPABILITIES returned 0 [ 229.724019][ T101] usbtmc 2-1:16.0: can't read capabilities [ 229.797251][ T5917] gp8psk: usb in 128 operation failed. [ 229.803982][ T5917] gp8psk: usb in 137 operation failed. [ 229.804003][ T5917] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 229.808264][ T5917] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 229.808314][ T5917] usb 5-1: media controller created [ 229.895033][ T5917] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 229.959457][ T101] usb 2-1: USB disconnect, device number 9 [ 229.973782][ T5917] gp8psk_fe: Frontend revision 1 attached [ 229.973846][ T5917] usb 5-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 229.974122][ T5917] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 230.297412][ T5917] gp8psk: usb in 137 operation failed. [ 230.297433][ T5917] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 230.297447][ T5917] gp8psk: found Genpix USB device pID = 201 (hex) [ 230.354494][ T5917] usb 5-1: USB disconnect, device number 10 [ 230.642602][ T5917] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 230.970933][ T101] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 231.097346][ T6038] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 231.115689][ T101] usb 3-1: Using ep0 maxpacket: 8 [ 231.118319][ T101] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 231.203427][ T101] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 231.203460][ T101] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.203482][ T101] usb 3-1: Product: syz [ 231.203497][ T101] usb 3-1: Manufacturer: syz [ 231.203511][ T101] usb 3-1: SerialNumber: syz [ 231.262889][ T6038] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 231.262917][ T6038] usb 4-1: config 0 has no interface number 0 [ 231.263477][ T101] usb 3-1: config 0 descriptor?? [ 231.293781][ T6038] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 231.293815][ T6038] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.293836][ T6038] usb 4-1: Product: syz [ 231.293851][ T6038] usb 4-1: Manufacturer: syz [ 231.293867][ T6038] usb 4-1: SerialNumber: syz [ 231.306357][ T101] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 231.306545][ T101] usb 3-1: setting power ON [ 231.307265][ T101] dvb-usb: bulk message failed: -22 (2/0) [ 231.363669][ T6038] usb 4-1: config 0 descriptor?? [ 231.382164][ T101] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 231.405207][ T101] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 231.405280][ T101] usb 3-1: media controller created [ 231.505200][ T101] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 231.536465][ T7151] dvb-usb: bulk message failed: -22 (3/0) [ 231.536496][ T7151] dvb-usb: bulk message failed: -22 (3/0) [ 231.560113][ T7151] cxusb: i2c rd: len=159 is too big! [ 231.560113][ T7151] [ 231.625010][ T6038] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 231.645817][ T101] usb 3-1: selecting invalid altsetting 6 [ 231.645843][ T101] usb 3-1: digital interface selection failed (-22) [ 231.645859][ T101] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 231.668470][ T6038] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 231.669022][ T6038] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 231.669076][ T6038] usb 4-1: media controller created [ 231.703907][ T101] usb 3-1: setting power OFF [ 231.704172][ T101] dvb-usb: bulk message failed: -22 (2/0) [ 231.704192][ T101] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 231.704206][ T101] (NULL device *): no alternate interface [ 231.810555][ T6038] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 231.823824][ T7153] dvb-usb: bulk message failed: -22 (3/0) [ 231.885480][ T6038] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 231.926220][ T37] audit: type=1400 audit(1757945541.009:12): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=7160 comm="syz.1.415" dest=20002 netif=wpan0 [ 231.927154][ T101] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 231.972216][ T101] usb 3-1: USB disconnect, device number 6 [ 232.120293][ T6038] usb 4-1: USB disconnect, device number 10 [ 237.446778][ T101] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 237.628169][ T101] usb 1-1: Using ep0 maxpacket: 8 [ 237.639739][ T101] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 237.639759][ T101] usb 1-1: config 0 has no interface number 0 [ 237.639792][ T101] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 237.639822][ T101] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 237.639838][ T101] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.693286][ T101] usb 1-1: config 0 descriptor?? [ 237.733221][ T101] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 237.916472][ T101] usb 1-1: USB disconnect, device number 9 [ 239.060966][ T5928] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 240.552606][ T5928] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.552641][ T5928] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.552683][ T5928] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 240.552707][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.581283][ T5928] usb 3-1: config 0 descriptor?? [ 241.055557][ T5928] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 241.131526][ T5928] cp2112 0003:10C4:EA90.0007: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 241.246865][ T5826] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 241.256347][ T5928] cp2112 0003:10C4:EA90.0007: Part Number: 0x82 Device Version: 0xFE [ 241.378031][ T7258] netlink: 16 bytes leftover after parsing attributes in process `syz.3.450'. [ 241.378054][ T7258] netlink: 64 bytes leftover after parsing attributes in process `syz.3.450'. [ 241.378075][ T7258] netlink: 16 bytes leftover after parsing attributes in process `syz.3.450'. [ 241.408880][ T5826] usb 1-1: Using ep0 maxpacket: 16 [ 241.428924][ T5826] usb 1-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 241.428955][ T5826] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.428976][ T5826] usb 1-1: Product: syz [ 241.428992][ T5826] usb 1-1: Manufacturer: syz [ 241.429015][ T5826] usb 1-1: SerialNumber: syz [ 241.670190][ T5928] cp2112 0003:10C4:EA90.0007: error requesting SMBus config [ 241.678064][ T5928] cp2112 0003:10C4:EA90.0007: probe with driver cp2112 failed with error -71 [ 241.721102][ T5826] usb 1-1: config 0 descriptor?? [ 242.098397][ T5928] usb 3-1: USB disconnect, device number 7 [ 242.277541][ T5826] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 242.525800][ T7263] syz.3.451 (7263) used greatest stack depth: 16696 bytes left [ 242.554286][ T5826] gp8psk: usb in 128 operation failed. [ 242.556924][ T5826] gp8psk: usb in 137 operation failed. [ 242.556954][ T5826] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 242.557975][ T5826] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 242.558036][ T5826] usb 1-1: media controller created [ 242.659512][ T5826] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 242.687383][ T7261] fido_id[7261]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 242.723444][ T5826] gp8psk_fe: Frontend revision 1 attached [ 242.723505][ T5826] usb 1-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 242.723802][ T5826] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 243.050016][ T5826] gp8psk: usb in 137 operation failed. [ 243.050037][ T5826] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 243.050049][ T5826] gp8psk: found Genpix USB device pID = 201 (hex) [ 243.091452][ T5826] usb 1-1: USB disconnect, device number 10 [ 243.275035][ T5826] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 243.691310][ T7276] overlayfs: failed to resolve './file1': -2 [ 244.384470][ T5156] Bluetooth: hci1: unexpected cc 0x2039 length: 2 > 1 [ 244.384523][ T5156] Bluetooth: hci1: unexpected event for opcode 0x2039 [ 244.858211][ T7301] af_packet: tpacket_rcv: packet too big, clamped from 64989 to 3944. macoff=96 [ 244.913926][ T5928] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 245.088631][ T7305] overlayfs: failed to resolve './file1': -2 [ 245.096089][ T5928] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 245.099781][ T5928] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 245.099848][ T5928] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 245.099879][ T5928] usb 4-1: config 0 interface 0 has no altsetting 0 [ 245.108677][ T5928] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 245.108747][ T5928] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 245.108779][ T5928] usb 4-1: config 0 interface 0 has no altsetting 0 [ 245.127594][ T5928] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 245.127669][ T5928] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 245.127703][ T5928] usb 4-1: config 0 interface 0 has no altsetting 0 [ 245.135001][ T5928] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 245.135075][ T5928] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 245.135109][ T5928] usb 4-1: config 0 interface 0 has no altsetting 0 [ 245.141633][ T5928] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 245.141725][ T5928] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 245.141758][ T5928] usb 4-1: config 0 interface 0 has no altsetting 0 [ 245.170014][ T5928] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 245.170088][ T5928] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 245.170119][ T5928] usb 4-1: config 0 interface 0 has no altsetting 0 [ 245.176699][ T5928] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 245.176782][ T5928] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 245.176814][ T5928] usb 4-1: config 0 interface 0 has no altsetting 0 [ 245.188787][ T5928] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 245.188870][ T5928] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 245.188902][ T5928] usb 4-1: config 0 interface 0 has no altsetting 0 [ 245.347390][ T5928] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 245.347414][ T5928] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 245.347429][ T5928] usb 4-1: Product: syz [ 245.347439][ T5928] usb 4-1: Manufacturer: syz [ 245.347449][ T5928] usb 4-1: SerialNumber: syz [ 245.421333][ T5928] usb 4-1: config 0 descriptor?? [ 245.531353][ T5928] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 245.714761][ T6038] usb 4-1: USB disconnect, device number 11 [ 245.732522][ T6038] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 245.867629][ T5826] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 246.009097][ T5826] usb 3-1: Using ep0 maxpacket: 16 [ 246.015186][ T5826] usb 3-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 246.015218][ T5826] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.015241][ T5826] usb 3-1: Product: syz [ 246.015256][ T5826] usb 3-1: Manufacturer: syz [ 246.015272][ T5826] usb 3-1: SerialNumber: syz [ 246.070893][ T5826] usb 3-1: config 0 descriptor?? [ 246.090568][ T5826] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 246.304557][ T5826] gp8psk: usb in 128 operation failed. [ 246.305383][ T5826] gp8psk: usb in 137 operation failed. [ 246.305399][ T5826] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 246.306453][ T5826] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 246.306511][ T5826] usb 3-1: media controller created [ 246.379183][ T5826] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 246.441700][ T5826] gp8psk_fe: Frontend revision 1 attached [ 246.441761][ T5826] usb 3-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 246.442341][ T5826] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 246.773362][ T5826] gp8psk: usb in 137 operation failed. [ 246.773383][ T5826] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 246.773397][ T5826] gp8psk: found Genpix USB device pID = 201 (hex) [ 246.809866][ T5826] usb 3-1: USB disconnect, device number 8 [ 247.012888][ T5826] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 254.715664][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 254.715749][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.162261][ T6038] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 258.314664][ T6038] usb 3-1: Using ep0 maxpacket: 8 [ 258.318037][ T6038] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 258.318160][ T6038] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 258.318188][ T6038] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 258.318216][ T6038] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 258.318241][ T6038] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 258.318287][ T6038] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 258.318311][ T6038] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.733898][ T6038] usb 3-1: GET_CAPABILITIES returned 0 [ 258.733952][ T6038] usbtmc 3-1:16.0: can't read capabilities [ 258.985517][ T6038] usb 3-1: USB disconnect, device number 9 [ 274.105775][ T5841] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 274.122629][ T5841] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 274.124310][ T5841] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 274.141786][ T5841] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 274.159271][ T5841] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 275.132436][ T5156] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 275.144045][ T5156] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 275.153727][ T5156] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 275.177443][ T5156] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 275.178734][ T5156] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 276.116152][ T5841] Bluetooth: hci5: command tx timeout [ 276.949027][ T5156] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 276.968260][ T5156] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 276.971765][ T5156] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 276.995090][ T5156] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 276.998440][ T5156] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 277.183418][ T5156] Bluetooth: hci6: command tx timeout [ 278.097791][ T5156] Bluetooth: hci5: command tx timeout [ 278.935764][ T5156] Bluetooth: hci7: command tx timeout [ 279.164416][ T5156] Bluetooth: hci6: command tx timeout [ 280.078836][ T5156] Bluetooth: hci5: command tx timeout [ 280.916960][ T5156] Bluetooth: hci7: command tx timeout [ 281.145616][ T5156] Bluetooth: hci6: command tx timeout [ 282.063369][ T5156] Bluetooth: hci5: command tx timeout [ 282.898216][ T5156] Bluetooth: hci7: command tx timeout [ 283.128397][ T5156] Bluetooth: hci6: command tx timeout [ 284.881915][ T5156] Bluetooth: hci7: command tx timeout [ 284.949576][ T5841] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 284.969989][ T5841] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 284.971289][ T5841] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 284.972595][ T5841] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 284.973455][ T5841] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 286.936479][ T5156] Bluetooth: hci8: command tx timeout [ 288.497544][ T5841] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 288.527282][ T5841] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 288.529615][ T5841] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 288.531490][ T5841] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 288.532456][ T5841] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 288.917517][ T5841] Bluetooth: hci8: command tx timeout [ 290.518065][ T5841] Bluetooth: hci9: command tx timeout [ 290.898640][ T5841] Bluetooth: hci8: command tx timeout [ 292.498916][ T5841] Bluetooth: hci9: command tx timeout [ 292.879534][ T5841] Bluetooth: hci8: command tx timeout [ 294.488025][ T5841] Bluetooth: hci9: command tx timeout [ 296.470701][ T5841] Bluetooth: hci9: command tx timeout [ 313.244053][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 313.244138][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 330.827564][ T5156] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 330.831150][ T5156] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 330.832387][ T5156] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 330.834017][ T5156] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 330.875605][ T5156] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 332.402006][ T5841] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 332.420480][ T5841] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 332.421802][ T5841] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 332.423196][ T5841] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 332.424443][ T5841] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 332.806768][ T5156] Bluetooth: hci10: command tx timeout [ 334.405063][ T5841] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 334.428544][ T5841] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 334.433916][ T5841] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 334.460348][ T5841] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 334.472841][ T5841] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 334.483074][ T5841] Bluetooth: hci11: command tx timeout [ 334.788279][ T5156] Bluetooth: hci10: command tx timeout [ 336.465893][ T5156] Bluetooth: hci12: command tx timeout [ 336.466397][ T5156] Bluetooth: hci11: command tx timeout [ 336.768691][ T5841] Bluetooth: hci10: command tx timeout [ 338.445434][ T5841] Bluetooth: hci11: command tx timeout [ 338.445471][ T5841] Bluetooth: hci12: command tx timeout [ 338.750114][ T5156] Bluetooth: hci10: command tx timeout [ 340.426498][ T5156] Bluetooth: hci12: command tx timeout [ 340.426535][ T5156] Bluetooth: hci11: command tx timeout [ 342.408047][ T5841] Bluetooth: hci12: command tx timeout [ 342.513958][ T5156] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 342.540495][ T5156] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 342.555353][ T5156] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 342.556966][ T5156] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 342.558393][ T5156] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 344.544237][ T5156] Bluetooth: hci13: command tx timeout [ 345.419303][ T5841] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 345.424205][ T5841] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 345.425449][ T5841] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 345.450974][ T5841] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 345.453136][ T5841] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 346.524357][ T5156] Bluetooth: hci13: command tx timeout [ 347.436511][ T5156] Bluetooth: hci14: command tx timeout [ 348.507540][ T5156] Bluetooth: hci13: command tx timeout [ 349.417578][ T5156] Bluetooth: hci14: command tx timeout [ 350.484317][ T5156] Bluetooth: hci13: command tx timeout [ 351.400102][ T5156] Bluetooth: hci14: command tx timeout [ 353.387609][ T5156] Bluetooth: hci14: command tx timeout [ 371.147770][ T7440] chnl_net:caif_netlink_parms(): no params data found [ 371.313060][ T7454] chnl_net:caif_netlink_parms(): no params data found [ 371.368869][ T7434] chnl_net:caif_netlink_parms(): no params data found [ 371.761649][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 371.761739][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 388.974975][ T5841] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 388.994242][ T5841] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 388.995602][ T5841] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 388.996994][ T5841] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 389.031181][ T5841] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 390.103111][ T59] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 390.123737][ T59] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 390.139842][ T59] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 390.141792][ T59] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 390.142763][ T59] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 392.610178][ T5848] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 392.630349][ T5848] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 392.632264][ T5848] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 392.634179][ T5848] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 392.635049][ T5848] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 399.863923][ T7448] chnl_net:caif_netlink_parms(): no params data found [ 399.923423][ T7440] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg1": -EINTR [ 400.119205][ T7443] chnl_net:caif_netlink_parms(): no params data found [ 400.532921][ T5846] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 400.584111][ T5846] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 400.586892][ T5846] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 400.589027][ T5846] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 400.589937][ T5846] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 401.621426][ T38] INFO: task syz.1.489:7365 blocked for more than 143 seconds. [ 401.621458][ T38] Not tainted syzkaller #0 [ 401.621470][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disabl[ 401.621470][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 401.621484][ T38] task:syz.1.489 state:D stack:25128 pid:7365 tgid:7365 ppid:5837 task_flags:0x400040 flags:0x00004006 [ 401.621806][ T38] Call Trace: [ 401.621816][ T38] [ 401.621832][ T38] __schedule+0x16f3/0x4c20 [ 401.621904][ T38] ? __lock_acquire+0xab9/0xd20 [ 401.621936][ T38] ? __pfx___schedule+0x10/0x10 [ 401.621987][ T38] ? schedule+0x91/0x360 [ 401.622021][ T38] schedule+0x165/0x360 [ 401.622054][ T38] schedule_timeout+0x9a/0x270 [ 401.622084][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 401.622128][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 401.622161][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 401.622191][ T38] ? wait_for_completion+0x267/0x5d0 [ 401.622226][ T38] wait_for_completion+0x2bf/0x5d0 [ 401.622273][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 401.622307][ T38] ? __raw_spin_lock_init+0x45/0x100 [ 401.622344][ T38] rcu_barrier+0x463/0x570 [ 401.622397][ T38] kvm_mmu_uninit_vm+0x53/0x90 [ 401.622422][ T38] kvm_arch_destroy_vm+0x23d/0x280 [ 401.622454][ T38] kvm_put_kvm+0xf8e/0x1670 [ 401.622492][ T38] ? __pfx_kvm_vm_release+0x10/0x10 [ 401.622523][ T38] kvm_vm_release+0x46/0x50 [ 401.622550][ T38] __fput+0x45b/0xa80 [ 401.622587][ T38] task_work_run+0x1d4/0x260 [ 401.622614][ T38] ? __pfx_task_work_run+0x10/0x10 [ 401.622643][ T38] ? exit_to_user_mode_loop+0x40/0x110 [ 401.622677][ T38] exit_to_user_mode_loop+0xec/0x110 [ 401.622707][ T38] do_syscall_64+0x2bd/0x3b0 [ 401.622727][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 401.622768][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.622790][ T38] ? clear_bhb_loop+0x60/0xb0 [ 401.622817][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.622846][ T38] RIP: 0033:0x7f9d1425eba9 [ 401.622870][ T38] RSP: 002b:00007ffd050a0bc8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 401.622893][ T38] RAX: 0000000000000000 RBX: 00007f9d144a7da0 RCX: 00007f9d1425eba9 [ 401.622908][ T38] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 401.622921][ T38] RBP: 00007f9d144a7da0 R08: 00000000000040cc R09: 00000004050a0ebf [ 401.622936][ T38] R10: 00000000005f9524 R11: 0000000000000246 R12: 0000000000040b20 [ 401.622950][ T38] R13: 00007f9d144a6090 R14: ffffffffffffffff R15: 00007ffd050a0ce0 [ 401.622987][ T38] [ 401.622998][ T38] INFO: task syz.0.494:7377 blocked for more than 143 seconds. [ 401.623013][ T38] Not tainted syzkaller #0 [ 401.623024][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 401.623034][ T38] task:syz.0.494 state:D stack:25128 pid:7377 tgid:7377 ppid:5838 task_flags:0x400040 flags:0x00004006 [ 401.623096][ T38] Call Trace: [ 401.623103][ T38] [ 401.623117][ T38] __schedule+0x16f3/0x4c20 [ 401.650309][ T38] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 401.650363][ T38] ? __pfx___schedule+0x10/0x10 [ 401.650431][ T38] rt_mutex_schedule+0x77/0xf0 [ 401.650454][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 401.650497][ T38] ? rt_mutex_slowlock_block+0x351/0x6d0 [ 401.650529][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 401.650559][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 401.650587][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 401.650627][ T38] ? rcu_barrier+0x4c/0x570 [ 401.650658][ T38] ? rt_mutex_slowunlock+0x493/0x8a0 [ 401.650690][ T38] ? rcu_barrier+0x4c/0x570 [ 401.650710][ T38] mutex_lock_nested+0x16a/0x1d0 [ 401.650736][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 401.650768][ T38] rcu_barrier+0x4c/0x570 [ 401.650803][ T38] kvm_mmu_uninit_vm+0x53/0x90 [ 401.650828][ T38] kvm_arch_destroy_vm+0x23d/0x280 [ 401.650859][ T38] kvm_put_kvm+0xf8e/0x1670 [ 401.650897][ T38] ? __pfx_kvm_vm_release+0x10/0x10 [ 401.650927][ T38] kvm_vm_release+0x46/0x50 [ 401.650955][ T38] __fput+0x45b/0xa80 [ 401.650991][ T38] task_work_run+0x1d4/0x260 [ 401.651018][ T38] ? __pfx_task_work_run+0x10/0x10 [ 401.651047][ T38] ? exit_to_user_mode_loop+0x40/0x110 [ 401.651082][ T38] exit_to_user_mode_loop+0xec/0x110 [ 401.651112][ T38] do_syscall_64+0x2bd/0x3b0 [ 401.651134][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.651156][ T38] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 401.651179][ T38] ? clear_bhb_loop+0x60/0xb0 [ 401.651207][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.651229][ T38] RIP: 0033:0x7f8a9eeeeba9 [ 401.651247][ T38] RSP: 002b:00007ffda0d8b7a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 401.651272][ T38] RAX: 0000000000000000 RBX: 000000000004163f RCX: 00007f8a9eeeeba9 [ 401.651287][ T38] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 401.651300][ T38] RBP: 00007f8a9f137da0 R08: 0000000000000001 R09: 00000004a0d8ba9f [ 401.651314][ T38] R10: 0000001b30720000 R11: 0000000000000246 R12: 00007f8a9f135fac [ 401.651329][ T38] R13: 00007f8a9f135fa0 R14: ffffffffffffffff R15: 00007ffda0d8b8c0 [ 401.651366][ T38] [ 401.651421][ T38] [ 401.651421][ T38] Showing all locks held in the system: [ 401.651433][ T38] 4 locks held by pr/legacy/17: [ 401.651449][ T38] 1 lock held by khungtaskd/38: [ 401.651461][ T38] #0: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 401.651517][ T38] 4 locks held by kworker/u9:0/59: [ 401.651529][ T38] #0: ffff888027824138 ((wq_completion)hci16#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 401.651592][ T38] #1: ffffc9000125fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 401.651648][ T38] #2: ffff88808adb80a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 401.651704][ T38] #3: ffffffff8ee3b0d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 401.651772][ T38] 2 locks held by kworker/u8:9/1415: [ 401.651798][ T38] 4 locks held by kworker/u9:1/5156: [ 401.651810][ T38] #0: ffff88807fe50138 ((wq_completion)hci15#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 401.651871][ T38] #1: ffffc9000f9c7bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 401.651927][ T38] #2: ffff8880869400a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 401.651981][ T38] #3: ffffffff8ee3b0d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 401.652037][ T38] 3 locks held by klogd/5196: [ 401.652050][ T38] 2 locks held by getty/5596: [ 401.652062][ T38] #0: ffff88823bf7c8a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 401.652126][ T38] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 401.652184][ T38] 3 locks held by syz-executor/5825: [ 401.652196][ T38] #0: ffff8880262251c8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x19f/0x3d0 [ 401.652245][ T38] #1: ffff888033ee4600 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1f7/0x1190 [ 401.652307][ T38] #2: ffff888033f62bb0 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f87/0x21c0 [ 401.652364][ T38] 4 locks held by kworker/u9:2/5841: [ 401.652376][ T38] #0: ffff88805d064138 ((wq_completion)hci17#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 401.652445][ T38] #1: ffffc90004dffbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 401.652502][ T38] #2: ffff88806da4c0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 401.652556][ T38] #3: ffffffff8ee3b0d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 401.652612][ T38] 4 locks held by kworker/u9:4/5848: [ 401.652624][ T38] #0: ffff88803da64138 ((wq_completion)hci18#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 401.652686][ T38] #1: ffffc90004e5fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 401.652742][ T38] #2: ffff88806e5940a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 401.652795][ T38] #3: ffffffff8ee3b0d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 401.652859][ T38] 3 locks held by kworker/u8:15/7000: [ 401.652871][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 401.652928][ T38] #1: ffffc9000f697bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 401.652983][ T38] #2: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 401.653036][ T38] 1 lock held by syz.1.489/7365: [ 401.653047][ T38] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 401.653099][ T38] 2 locks held by syz.2.493/7376: [ 401.653111][ T38] #0: ffffffff8ed39600 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 401.653160][ T38] #1: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 401.653211][ T38] 1 lock held by syz.0.494/7377: [ 401.653223][ T38] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 401.653273][ T38] 9 locks held by kworker/1:10/7379: [ 401.653286][ T38] 2 locks held by kworker/1:12/7381: [ 401.653298][ T38] 1 lock held by syz.4.495/7384: [ 401.653310][ T38] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 401.653361][ T38] 2 locks held by syz.3.498/7407: [ 401.653373][ T38] #0: ffff88803d0a0e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 401.653437][ T38] #1: ffff88803d0a00a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 401.653497][ T38] 3 locks held by syz-executor/7409: [ 401.653509][ T38] #0: ffff88805bd58e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 401.653563][ T38] #1: ffff88805bd580a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 401.653622][ T38] #2: ffffffff8ee3b0d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 401.653674][ T38] 4 locks held by syz-executor/7413: [ 401.653685][ T38] #0: ffff88803b458e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 401.653740][ T38] #1: ffff88803b4580a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 401.653799][ T38] #2: ffffffff8ee3b0d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 401.653849][ T38] #3: ffff888027614b58 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 401.653916][ T38] 3 locks held by syz-executor/7416: [ 401.653928][ T38] #0: ffff88805f178e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 401.653983][ T38] #1: ffff88805f1780a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 401.654042][ T38] #2: ffffffff8ee3b0d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 401.654109][ T38] 3 locks held by syz-executor/7420: [ 401.654122][ T38] #0: ffff888060258e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 401.654176][ T38] #1: ffff8880602580a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 401.654234][ T38] #2: ffffffff8ee3b0d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 401.654273][ T38] 3 locks held by syz-executor/7426: [ 401.654282][ T38] #0: ffff8880360e4e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 401.654321][ T38] #1: ffff8880360e40a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 401.654364][ T38] #2: ffffffff8ee3b0d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 401.654433][ T38] 2 locks held by syz-executor/7454: [ 401.654455][ T38] #0: ffffffff8e43b760 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 401.654561][ T38] #1: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 401.654647][ T38] 2 locks held by syz-executor/7534: [ 401.654670][ T38] #0: ffffffff8ecc6700 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 401.654753][ T38] #1: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 401.654880][ T38] 2 locks held by syz-executor/7538: [ 401.654906][ T38] #0: ffffffff8ecc6700 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 401.654964][ T38] #1: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 401.655036][ T38] 1 lock held by syz-executor/7541: [ 401.655046][ T38] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 401.655092][ T38] 1 lock held by syz-executor/7549: [ 401.655102][ T38] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 401.655145][ T38] [ 401.655150][ T38] ============================================= [ 401.655150][ T38] [ 401.655169][ T38] NMI backtrace for cpu 0 [ 401.655195][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 401.655219][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 401.655229][ T38] Call Trace: [ 401.655238][ T38] [ 401.655245][ T38] dump_stack_lvl+0x189/0x250 [ 401.655277][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 401.655305][ T38] ? __pfx__printk+0x10/0x10 [ 401.655340][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 401.655366][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 401.655400][ T38] ? __pfx__printk+0x10/0x10 [ 401.655421][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 401.655444][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 401.655468][ T38] watchdog+0xf93/0xfe0 [ 401.655497][ T38] ? watchdog+0x1de/0xfe0 [ 401.655525][ T38] kthread+0x70e/0x8a0 [ 401.655556][ T38] ? __pfx_watchdog+0x10/0x10 [ 401.655579][ T38] ? __pfx_kthread+0x10/0x10 [ 401.655611][ T38] ? __pfx_kthread+0x10/0x10 [ 401.655639][ T38] ret_from_fork+0x439/0x7d0 [ 401.655666][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 401.655698][ T38] ? __switch_to_asm+0x39/0x70 [ 401.655715][ T38] ? __switch_to_asm+0x33/0x70 [ 401.655733][ T38] ? __pfx_kthread+0x10/0x10 [ 401.655763][ T38] ret_from_fork_asm+0x1a/0x30 [ 401.655800][ T38] [ 401.655808][ T38] Sending NMI from CPU 0 to CPUs 1: [ 401.655848][ C1] NMI backtrace for cpu 1 [ 401.655865][ C1] CPU: 1 UID: 0 PID: 7379 Comm: kworker/1:10 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 401.655887][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 401.655900][ C1] Workqueue: wg-crypt-wg2 wg_packet_tx_worker [ 401.655927][ C1] RIP: 0010:lock_is_held_type+0x11c/0x190 [ 401.655957][ C1] Code: 48 c7 c7 8b ad 21 8d e8 92 16 00 00 b8 ff ff ff ff 65 0f c1 05 f5 8a ff 06 83 f8 01 75 44 48 c7 04 24 00 00 00 00 9c 8f 04 24 04 24 00 02 00 00 75 4c 41 f7 c4 00 02 00 00 74 01 fb 65 48 8b [ 401.655972][ C1] RSP: 0018:ffffc9001cf1e670 EFLAGS: 00000046 [ 401.655987][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 45141cd4c7d48400 [ 401.655999][ C1] RDX: 0000000000000100 RSI: ffffffff8d21ad8b RDI: ffffffff8b621600 [ 401.656012][ C1] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000100 [ 401.656024][ C1] R10: ffffc9001cf1e7e0 R11: fffff520039e3d02 R12: 0000000000000246 [ 401.656036][ C1] R13: ffff88801e3a8000 R14: ffffffff8ecd35f8 R15: 0000000000000009 [ 401.656049][ C1] FS: 0000000000000000(0000) GS:ffff8881269bc000(0000) knlGS:0000000000000000 [ 401.656064][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 401.656076][ C1] CR2: 00007fcc6aae6d00 CR3: 0000000086c1e000 CR4: 00000000003526f0 [ 401.656092][ C1] Call Trace: [ 401.656099][ C1] [ 401.656109][ C1] lockdep_rtnl_is_held+0x1b/0x40 [ 401.656129][ C1] fib_lookup+0x17e/0x440 [ 401.656155][ C1] ? fib_lookup+0x76/0x440 [ 401.656173][ C1] ip_route_output_key_hash_rcu+0x31b/0x23e0 [ 401.656198][ C1] ? ip_route_output_key_hash+0xde/0x2e0 [ 401.656217][ C1] ? ip_route_output_key_hash+0xde/0x2e0 [ 401.656237][ C1] ip_route_output_key_hash+0x1b9/0x2e0 [ 401.656256][ C1] ? __lock_acquire+0xab9/0xd20 [ 401.656281][ C1] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 401.656305][ C1] ? ip_route_me_harder+0x4ad/0x1030 [ 401.656331][ C1] ip_route_output_flow+0x2a/0x150 [ 401.656347][ C1] ? ip_route_me_harder+0x6c0/0x1030 [ 401.656370][ C1] ip_route_me_harder+0x6d2/0x1030 [ 401.656399][ C1] ? __pfx_ip_route_me_harder+0x10/0x10 [ 401.656437][ C1] synproxy_send_tcp+0x359/0x6c0 [ 401.656469][ C1] synproxy_send_client_synack+0x8bb/0xe20 [ 401.656505][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 401.656532][ C1] ? nft_tunnel_get_reduce+0x548/0x640 [ 401.656557][ C1] ? synproxy_pernet+0x45/0x270 [ 401.656579][ C1] nft_synproxy_eval_v4+0x36e/0x560 [ 401.656602][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 401.656623][ C1] ? nf_ip_checksum+0x13c/0x510 [ 401.656644][ C1] nft_synproxy_do_eval+0x345/0x570 [ 401.656667][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 401.656687][ C1] ? NF_HOOK+0x315/0x3a0 [ 401.656718][ C1] nft_do_chain+0x409/0x1920 [ 401.656735][ C1] ? skb_dst+0x4f/0xd0 [ 401.656760][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 401.656787][ C1] ? NF_HOOK+0x309/0x3a0 [ 401.656812][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 401.656829][ C1] ? NF_HOOK+0x9a/0x3a0 [ 401.656865][ C1] ? process_backlog+0x27b/0x900 [ 401.656896][ C1] nft_do_chain_inet+0x25d/0x340 [ 401.656915][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 401.656933][ C1] ? __lock_acquire+0xab9/0xd20 [ 401.656962][ C1] ? NF_HOOK+0x9a/0x3a0 [ 401.656986][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 401.657006][ C1] nf_hook_slow+0xc5/0x220 [ 401.657034][ C1] NF_HOOK+0x206/0x3a0 [ 401.657059][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 401.657110][ C1] ? NF_HOOK+0x9a/0x3a0 [ 401.657142][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 401.657165][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 401.657193][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 401.657219][ C1] ? skb_dst+0x4f/0xd0 [ 401.657244][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 401.657270][ C1] NF_HOOK+0x309/0x3a0 [ 401.657295][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 401.657320][ C1] ? NF_HOOK+0x9a/0x3a0 [ 401.657343][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 401.657369][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 401.657401][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 401.657424][ C1] __netif_receive_skb+0x143/0x380 [ 401.657446][ C1] ? rt_spin_unlock+0x65/0x80 [ 401.657471][ C1] ? process_backlog+0x27b/0x900 [ 401.657494][ C1] process_backlog+0x31e/0x900 [ 401.657524][ C1] __napi_poll+0xb3/0x540 [ 401.657549][ C1] net_rx_action+0x707/0xe00 [ 401.657584][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 401.657610][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 401.657641][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 401.657667][ C1] handle_softirqs+0x22f/0x710 [ 401.657696][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 401.657724][ C1] __local_bh_enable_ip+0x179/0x270 [ 401.657747][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 401.657772][ C1] ? mod_peer_timer+0x21/0x260 [ 401.657793][ C1] ? mod_peer_timer+0x21/0x260 [ 401.657815][ C1] ? mod_peer_timer+0x20c/0x260 [ 401.657839][ C1] wg_packet_tx_worker+0x16b/0x7c0 [ 401.657864][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 401.657891][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 401.657916][ C1] process_scheduled_works+0xade/0x17b0 [ 401.657955][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 401.657987][ C1] worker_thread+0x8a0/0xda0 [ 401.658025][ C1] kthread+0x70e/0x8a0 [ 401.658053][ C1] ? __pfx_worker_thread+0x10/0x10 [ 401.658076][ C1] ? __pfx_kthread+0x10/0x10 [ 401.658106][ C1] ? __pfx_kthread+0x10/0x10 [ 401.658140][ C1] ret_from_fork+0x439/0x7d0 [ 401.658165][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 401.658192][ C1] ? __switch_to_asm+0x39/0x70 [ 401.658208][ C1] ? __switch_to_asm+0x33/0x70 [ 401.658224][ C1] ? __pfx_kthread+0x10/0x10 [ 401.658251][ C1] ret_from_fork_asm+0x1a/0x30 [ 401.658278][ C1] [ 401.658854][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 401.658872][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 401.658896][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 401.658908][ T38] Call Trace: [ 401.658917][ T38] [ 401.658926][ T38] dump_stack_lvl+0x99/0x250 [ 401.658960][ T38] ? __asan_memcpy+0x40/0x70 [ 401.658984][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 401.659016][ T38] ? __pfx__printk+0x10/0x10 [ 401.659054][ T38] vpanic+0x281/0x750 [ 401.659089][ T38] ? __pfx_vpanic+0x10/0x10 [ 401.659118][ T38] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 401.659140][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 401.659185][ T38] panic+0xb9/0xc0 [ 401.659216][ T38] ? __pfx_panic+0x10/0x10 [ 401.659250][ T38] ? irq_work_queue+0xc3/0x140 [ 401.659283][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 401.659314][ T38] watchdog+0xfd2/0xfe0 [ 401.659348][ T38] ? watchdog+0x1de/0xfe0 [ 401.659390][ T38] kthread+0x70e/0x8a0 [ 401.659426][ T38] ? __pfx_watchdog+0x10/0x10 [ 401.659453][ T38] ? __pfx_kthread+0x10/0x10 [ 401.659492][ T38] ? __pfx_kthread+0x10/0x10 [ 401.659526][ T38] ret_from_fork+0x439/0x7d0 [ 401.659559][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 401.659593][ T38] ? __switch_to_asm+0x39/0x70 [ 401.659613][ T38] ? __switch_to_asm+0x33/0x70 [ 401.659632][ T38] ? __pfx_kthread+0x10/0x10 [ 401.659671][ T38] ret_from_fork_asm+0x1a/0x30 [ 401.659703][ T38] [ 401.660081][ T38] Kernel Offset: disabled