last executing test programs: 1m29.757141245s ago: executing program 0 (id=526): r0 = gettid() sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) tkill(r0, 0x11) 1m29.565653514s ago: executing program 0 (id=528): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000a3013528e0c30c499aa3a0c2"], 0x0}, 0x0) 1m27.708980723s ago: executing program 0 (id=539): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f00000005c0)=[{0x2, 0x7, 0x7f, 0x1, @time={0x40, 0xe69}, {0xe}, {0x7, 0x9}, @ext={0x0, 0x0}}, {0x5, 0x6a, 0xf7, 0x2, @time={0xb, 0x5d}, {0x9e, 0x66}, {0x52, 0x5}, @result={0xb4c, 0x8}}], 0x38) 1m27.444058574s ago: executing program 0 (id=541): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$nfs(&(0x7f00000001c0)='..\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x85000, 0x0) mount$nfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 1m27.356375607s ago: executing program 0 (id=543): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 1m26.261710973s ago: executing program 0 (id=555): unshare(0xa000200) semtimedop(0x0, &(0x7f0000000000)=[{0x2, 0x40, 0x1800}], 0x1, 0x0) unshare(0x20060400) 1m25.927971749s ago: executing program 32 (id=555): unshare(0xa000200) semtimedop(0x0, &(0x7f0000000000)=[{0x2, 0x40, 0x1800}], 0x1, 0x0) unshare(0x20060400) 43.626814274s ago: executing program 2 (id=1074): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff014}, {0x6}]}, 0x10) 43.285462484s ago: executing program 2 (id=1079): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x46, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x38, 0x0, 0x0, 0x2, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0xc2, 0x1, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x4, 0xd}, @mss={0x2, 0x4, 0x5df4}, @sack={0x5, 0x2}]}}}}}}}, 0x0) 43.269249686s ago: executing program 1 (id=1080): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005000c000100000208000600480a000005000b"], 0x44}, 0x1, 0x0, 0x0, 0x200000c0}, 0x800) 42.805677138s ago: executing program 1 (id=1083): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}, @snprintf={{}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 42.581298942s ago: executing program 2 (id=1086): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) 41.920239298s ago: executing program 1 (id=1088): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r1, 0x1, 0x4, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6erspan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x20}}]}]}, 0x50}}, 0x0) 41.454616679s ago: executing program 1 (id=1091): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000780)={0x14, r1, 0x1, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x200008c1}, 0x800) 41.345622451s ago: executing program 5 (id=1093): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x24004800) 40.737011979s ago: executing program 1 (id=1095): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x3e, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 38.664724361s ago: executing program 1 (id=1100): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000002800)={0x6, 0xd000, 0x4, 0xffffffffffffffff, 0x8d9879915c3d6d02}) 37.560453191s ago: executing program 2 (id=1101): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000002340)={0xa, 0x4e20, 0xc212, @local, 0x7}, 0x1c) getsockopt$sock_buf(r0, 0x1, 0x19, 0xfffffffffffffffd, &(0x7f0000003080)=0x7a) 37.130941474s ago: executing program 2 (id=1103): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)={0x34, 0x0, [{0x86956090991702cc, 0x91, &(0x7f0000001e80)=""/133}, {0x0, 0xfffffffffffffdd3, &(0x7f0000000500)=""/10}]}) 30.943132856s ago: executing program 5 (id=1108): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_OFFSET={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x4000) 28.119460327s ago: executing program 2 (id=1110): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1) ioctl$TCSETS(r0, 0x89f0, &(0x7f0000000100)={0xfffffffc, 0x0, 0x0, 0x0, 0x15, "5dee0000005940000000000f00"}) 23.127674116s ago: executing program 33 (id=1100): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000002800)={0x6, 0xd000, 0x4, 0xffffffffffffffff, 0x8d9879915c3d6d02}) 23.087787219s ago: executing program 4 (id=1114): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_EXPR={0x2c, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x85}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x83}]}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x9c}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000000101040000000000000000020000002400018014000180080001000000000008000200ac1414000c0002800500010000000000240002800c00028005000100000000001400018008000100e0000002080002000000000008000740000000003c00188008000000000000000800024000000000080001"], 0xa0}}, 0x0) 22.819055055s ago: executing program 4 (id=1115): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) setuid(0xee00) ioctl$VT_DISALLOCATE(r0, 0x5608) 22.377750528s ago: executing program 4 (id=1116): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000040000850000008200000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 22.195034586s ago: executing program 4 (id=1117): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14, r0, 0x1, 0x270bd2c, 0x5, {0x5}}, 0x14}}, 0x0) 21.992076543s ago: executing program 4 (id=1118): r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x50009405, 0x0) 21.801453403s ago: executing program 4 (id=1119): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x2c, r0, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0xffffffffffffff4c}]}, 0x2c}}, 0x0) 19.760380549s ago: executing program 5 (id=1121): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) 19.462561869s ago: executing program 3 (id=1122): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="000000001000000008"]) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) 19.434968373s ago: executing program 5 (id=1123): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000300)={{0x6, @default}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @null]}, 0x48) sendto$netrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 19.149364498s ago: executing program 5 (id=1124): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000000)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000300)="aa1d484e24310300000c5b00f7c08bfcd111fbdf23ea32db0e0321d5bc27bd8063fc7a0689fff2a41cfbf0e90dcaf022b8491bd3fdca1743", 0x38}], 0x2) 18.877669957s ago: executing program 5 (id=1125): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988fe0f00002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 16.109467461s ago: executing program 3 (id=1126): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000080)=0x9, 0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 15.897230147s ago: executing program 3 (id=1127): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001a00010000000000fbc8df250a808000000001"], 0x1c}, 0x1, 0x0, 0x0, 0x8008090}, 0x0) 15.694507735s ago: executing program 3 (id=1128): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x500, 0x2d0, 0x1, 0x0, 0xdd9f83, 0x1, 0x9, 0x1, 0x2, 0x5, 0x722, 0x13, 0x7, 0x7f, 0x0, 0xb763599953cb093f, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) 15.478946126s ago: executing program 3 (id=1129): setresuid(0x0, 0xee01, 0x0) mlockall(0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09b38, 0xffffffffffffffff, 0xfffff000) 15.299488952s ago: executing program 3 (id=1130): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@rose={'rose', 0x0}, 0x10) ioctl$sock_netdev_private(r0, 0x89fb, &(0x7f0000000000)) 12.984662605s ago: executing program 34 (id=1110): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1) ioctl$TCSETS(r0, 0x89f0, &(0x7f0000000100)={0xfffffffc, 0x0, 0x0, 0x0, 0x15, "5dee0000005940000000000f00"}) 6.496997272s ago: executing program 35 (id=1119): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x2c, r0, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0xffffffffffffff4c}]}, 0x2c}}, 0x0) 3.46045653s ago: executing program 36 (id=1125): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988fe0f00002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 0s ago: executing program 37 (id=1130): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@rose={'rose', 0x0}, 0x10) ioctl$sock_netdev_private(r0, 0x89fb, &(0x7f0000000000)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.149' (ED25519) to the list of known hosts. [ 81.121895][ T5825] cgroup: Unknown subsys name 'net' [ 81.364030][ T5825] cgroup: Unknown subsys name 'cpuset' [ 81.419817][ T5825] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.264425][ T5825] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.076399][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.093313][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.094336][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.095154][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.097423][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.098508][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.098816][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.101091][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.172161][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.174868][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.207281][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.216978][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.217905][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.242124][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.243854][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.301094][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.303347][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.307257][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.307585][ T5155] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.313099][ T5155] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.313917][ T5155] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.315339][ T5155] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.316119][ T5155] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.320929][ T5155] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.324679][ T5155] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.937716][ T31] cfg80211: failed to load regulatory.db [ 87.065378][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 87.446781][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 87.453486][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 87.458190][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 87.626740][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 87.961666][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.962731][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.963098][ T5836] bridge_slave_0: entered allmulticast mode [ 87.964705][ T5836] bridge_slave_0: entered promiscuous mode [ 88.036370][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.036469][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.036600][ T5836] bridge_slave_1: entered allmulticast mode [ 88.038053][ T5836] bridge_slave_1: entered promiscuous mode [ 88.201788][ T5844] Bluetooth: hci0: command tx timeout [ 88.280193][ T5844] Bluetooth: hci2: command tx timeout [ 88.281101][ T5844] Bluetooth: hci1: command tx timeout [ 88.439433][ T5839] Bluetooth: hci3: command tx timeout [ 88.440236][ T5844] Bluetooth: hci4: command tx timeout [ 88.582989][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.808125][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.808360][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.808523][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.808842][ T5840] bridge_slave_0: entered allmulticast mode [ 88.812861][ T5840] bridge_slave_0: entered promiscuous mode [ 88.829588][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.829770][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.829986][ T5843] bridge_slave_0: entered allmulticast mode [ 88.832612][ T5843] bridge_slave_0: entered promiscuous mode [ 88.837217][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.837345][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.837538][ T5848] bridge_slave_0: entered allmulticast mode [ 88.851133][ T5848] bridge_slave_0: entered promiscuous mode [ 89.031515][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.031615][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.031730][ T5840] bridge_slave_1: entered allmulticast mode [ 89.033242][ T5840] bridge_slave_1: entered promiscuous mode [ 89.034393][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.034510][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.034659][ T5843] bridge_slave_1: entered allmulticast mode [ 89.036104][ T5843] bridge_slave_1: entered promiscuous mode [ 89.037980][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.038082][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.038191][ T5848] bridge_slave_1: entered allmulticast mode [ 89.045481][ T5848] bridge_slave_1: entered promiscuous mode [ 89.480936][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.481077][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.481272][ T5847] bridge_slave_0: entered allmulticast mode [ 89.482976][ T5847] bridge_slave_0: entered promiscuous mode [ 89.486864][ T5836] team0: Port device team_slave_0 added [ 89.712685][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.712822][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.713343][ T5847] bridge_slave_1: entered allmulticast mode [ 89.716197][ T5847] bridge_slave_1: entered promiscuous mode [ 89.719073][ T5836] team0: Port device team_slave_1 added [ 89.724940][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.731652][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.737178][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.903042][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.905183][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.907378][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.280579][ T5844] Bluetooth: hci0: command tx timeout [ 90.307127][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.308362][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.308373][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.308386][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.359337][ T5839] Bluetooth: hci2: command tx timeout [ 90.359428][ T5844] Bluetooth: hci1: command tx timeout [ 90.519390][ T5839] Bluetooth: hci3: command tx timeout [ 90.519492][ T5844] Bluetooth: hci4: command tx timeout [ 90.545518][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.546888][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.546901][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.546925][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.555795][ T5843] team0: Port device team_slave_0 added [ 90.757679][ T5840] team0: Port device team_slave_0 added [ 90.765326][ T5848] team0: Port device team_slave_0 added [ 90.843311][ T5843] team0: Port device team_slave_1 added [ 90.845059][ T5840] team0: Port device team_slave_1 added [ 90.847601][ T5848] team0: Port device team_slave_1 added [ 91.171735][ T5847] team0: Port device team_slave_0 added [ 91.391800][ T5847] team0: Port device team_slave_1 added [ 91.460781][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.460796][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.460818][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.462138][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.462150][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.462172][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.463463][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.463476][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.463497][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.670746][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.670761][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.670784][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.671789][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.671800][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.671812][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.673002][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.673012][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.673024][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.867926][ T5836] hsr_slave_0: entered promiscuous mode [ 91.868928][ T5836] hsr_slave_1: entered promiscuous mode [ 91.902488][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.902503][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.902526][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.912691][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.912706][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.912729][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.359513][ T5844] Bluetooth: hci0: command tx timeout [ 92.439459][ T5839] Bluetooth: hci2: command tx timeout [ 92.439547][ T5844] Bluetooth: hci1: command tx timeout [ 92.501796][ T5843] hsr_slave_0: entered promiscuous mode [ 92.502551][ T5843] hsr_slave_1: entered promiscuous mode [ 92.503421][ T5843] debugfs: 'hsr0' already exists in 'hsr' [ 92.503500][ T5843] Cannot create hsr debugfs directory [ 92.508597][ T5840] hsr_slave_0: entered promiscuous mode [ 92.510720][ T5840] hsr_slave_1: entered promiscuous mode [ 92.511558][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 92.511579][ T5840] Cannot create hsr debugfs directory [ 92.530979][ T5848] hsr_slave_0: entered promiscuous mode [ 92.532980][ T5848] hsr_slave_1: entered promiscuous mode [ 92.534166][ T5848] debugfs: 'hsr0' already exists in 'hsr' [ 92.534188][ T5848] Cannot create hsr debugfs directory [ 92.599533][ T5839] Bluetooth: hci3: command tx timeout [ 92.599624][ T5844] Bluetooth: hci4: command tx timeout [ 92.853496][ T5847] hsr_slave_0: entered promiscuous mode [ 92.854305][ T5847] hsr_slave_1: entered promiscuous mode [ 92.854793][ T5847] debugfs: 'hsr0' already exists in 'hsr' [ 92.854815][ T5847] Cannot create hsr debugfs directory [ 94.364956][ T5836] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.393910][ T5836] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.427987][ T5836] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.440006][ T5844] Bluetooth: hci0: command tx timeout [ 94.465406][ T5836] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.520107][ T5839] Bluetooth: hci2: command tx timeout [ 94.520151][ T5844] Bluetooth: hci1: command tx timeout [ 94.602057][ T5843] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.648879][ T5843] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.667939][ T5843] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.679431][ T5839] Bluetooth: hci3: command tx timeout [ 94.679475][ T5844] Bluetooth: hci4: command tx timeout [ 94.726428][ T5843] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.906795][ T5840] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.957112][ T5840] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.990200][ T5840] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 95.050867][ T5840] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.202108][ T5848] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.245972][ T5848] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.287330][ T5848] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.326715][ T5848] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.486945][ T5847] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.528602][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.547803][ T5847] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.596548][ T5847] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.633623][ T5847] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.748599][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.816232][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.816718][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.837141][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.878465][ T164] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.878956][ T164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.978889][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.039396][ T164] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.039533][ T164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.044943][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.094595][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.094814][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.185181][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.203473][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.235235][ T3535] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.235486][ T3535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.308595][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.308756][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.379141][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.441238][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.465413][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.469497][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.528486][ T164] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.528636][ T164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.651726][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.722791][ T164] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.723483][ T164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.787447][ T3535] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.787609][ T3535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.884998][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.124822][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.352825][ T5836] veth0_vlan: entered promiscuous mode [ 97.417000][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.520148][ T5836] veth1_vlan: entered promiscuous mode [ 97.557617][ T5843] veth0_vlan: entered promiscuous mode [ 97.644730][ T5843] veth1_vlan: entered promiscuous mode [ 97.729685][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.775021][ T5836] veth0_macvtap: entered promiscuous mode [ 97.827179][ T5836] veth1_macvtap: entered promiscuous mode [ 97.872970][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.934414][ T5843] veth0_macvtap: entered promiscuous mode [ 97.958349][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.976880][ T5843] veth1_macvtap: entered promiscuous mode [ 98.000655][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.057021][ T4504] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.072378][ T4504] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.078244][ T5848] veth0_vlan: entered promiscuous mode [ 98.088988][ T4504] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.097250][ T4504] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.118527][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.198903][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.210550][ T5848] veth1_vlan: entered promiscuous mode [ 98.303555][ T5847] veth0_vlan: entered promiscuous mode [ 98.325069][ T164] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.395717][ T164] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.412612][ T164] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.413579][ T5840] veth0_vlan: entered promiscuous mode [ 98.436592][ T164] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.458325][ T5847] veth1_vlan: entered promiscuous mode [ 98.561187][ T5840] veth1_vlan: entered promiscuous mode [ 98.618633][ T164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.618661][ T164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.783008][ T5848] veth0_macvtap: entered promiscuous mode [ 98.838073][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.838093][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.876777][ T5848] veth1_macvtap: entered promiscuous mode [ 98.938847][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.938865][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.983736][ T5847] veth0_macvtap: entered promiscuous mode [ 99.041488][ T5847] veth1_macvtap: entered promiscuous mode [ 99.046293][ T5840] veth0_macvtap: entered promiscuous mode [ 99.086797][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.096927][ T3614] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.096943][ T3614] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.097774][ T5840] veth1_macvtap: entered promiscuous mode [ 99.145950][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.216810][ T43] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.219108][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.225256][ T43] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.240666][ T43] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.245686][ T43] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.263797][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.351248][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.365071][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.524305][ T4504] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.538380][ T4504] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.591918][ T43] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.648223][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.657664][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.688340][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.846792][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.912528][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.941667][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.941687][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.141553][ T31] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 100.234987][ T4504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.235008][ T4504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.287045][ T5969] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10'. [ 100.327194][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 100.350738][ T31] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.350769][ T31] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.350790][ T31] usb 2-1: config 0 interface 0 has no altsetting 0 [ 100.350825][ T31] usb 2-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 100.350846][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.495033][ T31] usb 2-1: config 0 descriptor?? [ 100.543369][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.543389][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.886743][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.886761][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.967005][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 100.967045][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 100.967071][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 100.967095][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 100.967119][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 100.967142][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 100.967165][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 100.967189][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 100.967214][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 100.967240][ T31] kye 0003:0458:0138.0001: unknown main item tag 0x0 [ 101.044664][ T31] kye 0003:0458:0138.0001: collection stack underflow [ 101.044696][ T31] kye 0003:0458:0138.0001: item 0 0 0 12 parsing failed [ 101.045618][ T31] kye 0003:0458:0138.0001: parse failed [ 101.045689][ T31] kye 0003:0458:0138.0001: probe with driver kye failed with error -22 [ 101.162476][ T31] usb 2-1: USB disconnect, device number 2 [ 101.206242][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.206261][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.326346][ T3535] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.326367][ T3535] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.733770][ T6004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24'. [ 103.258762][ T6018] batman_adv: batadv0: Adding interface: gretap1 [ 103.258786][ T6018] batman_adv: batadv0: Interface activated: gretap1 [ 104.149409][ T1231] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 104.251298][ T6038] autofs: Bad value for 'fd' [ 104.323311][ T1231] usb 4-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 104.323343][ T1231] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.342599][ T1231] usb 4-1: config 0 descriptor?? [ 104.615338][ T1231] kaweth 4-1:0.0: Firmware present in device. [ 104.790368][ T1231] kaweth 4-1:0.0: Statistics collection: 0 [ 104.790391][ T1231] kaweth 4-1:0.0: Multicast filter limit: 0 [ 104.790403][ T1231] kaweth 4-1:0.0: MTU: 0 [ 104.790413][ T1231] kaweth 4-1:0.0: Read MAC address 00:00:00:00:00:00 [ 104.984936][ T1231] kaweth 4-1:0.0: probe with driver kaweth failed with error -5 [ 105.018866][ T1231] usb 4-1: USB disconnect, device number 2 [ 105.379941][ T5926] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 105.479892][ T31] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 105.539369][ T5926] usb 1-1: Using ep0 maxpacket: 16 [ 105.555726][ T5926] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 105.555754][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 105.555773][ T5926] usb 1-1: Product: syz [ 105.555786][ T5926] usb 1-1: Manufacturer: syz [ 105.555800][ T5926] usb 1-1: SerialNumber: syz [ 105.594623][ T5926] usb 1-1: config 0 descriptor?? [ 105.624102][ T6068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.51'. [ 105.625311][ T6068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.51'. [ 105.625662][ T6068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.51'. [ 105.626303][ T6068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.51'. [ 105.659256][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 105.665523][ T31] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 105.665556][ T31] usb 5-1: config 0 interface 0 has no altsetting 0 [ 105.665592][ T31] usb 5-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 105.665614][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.739596][ T31] usb 5-1: config 0 descriptor?? [ 105.770610][ T5993] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 105.925254][ T5993] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 105.925304][ T5993] usb 3-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 105.925325][ T5993] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.937444][ T5993] usb 3-1: config 0 descriptor?? [ 106.043745][ T5926] usb 1-1: USB disconnect, device number 2 [ 106.215974][ T31] uclogic 0003:5543:0042.0002: unbalanced delimiter at end of report description [ 106.216687][ T31] uclogic 0003:5543:0042.0002: parse failed [ 106.216781][ T31] uclogic 0003:5543:0042.0002: probe with driver uclogic failed with error -22 [ 106.365404][ T6065] udevd[6065]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 106.463077][ T5926] usb 5-1: USB disconnect, device number 2 [ 106.580318][ T5993] logitech 0003:046D:CA03.0003: unbalanced delimiter at end of report description [ 106.581107][ T5993] logitech 0003:046D:CA03.0003: parse failed [ 106.581206][ T5993] logitech 0003:046D:CA03.0003: probe with driver logitech failed with error -22 [ 106.702891][ T5993] usb 3-1: USB disconnect, device number 2 [ 107.429349][ T5993] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 107.451089][ T6104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.67'. [ 107.594236][ T5993] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 107.594266][ T5993] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.594285][ T5993] usb 5-1: Product: syz [ 107.594299][ T5993] usb 5-1: Manufacturer: syz [ 107.594312][ T5993] usb 5-1: SerialNumber: syz [ 107.621425][ T5993] usb 5-1: config 0 descriptor?? [ 107.652930][ T5993] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 003 [ 107.719313][ T5850] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 107.755472][ T6111] capability: warning: `syz.2.73' uses deprecated v2 capabilities in a way that may be insecure [ 107.869682][ T5850] usb 4-1: Using ep0 maxpacket: 16 [ 107.874315][ T5850] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 107.874347][ T5850] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 107.874384][ T5850] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 107.874409][ T5850] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 107.935566][ T5850] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 107.935595][ T5850] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.935613][ T5850] usb 4-1: Product: syz [ 107.935626][ T5850] usb 4-1: Manufacturer: syz [ 107.935639][ T5850] usb 4-1: SerialNumber: syz [ 108.068457][ T6116] warning: `syz.0.75' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 108.248911][ T6118] mmap: syz.2.74 (6118): VmData 37400576 exceed data ulimit 5. Update limits or use boot option ignore_rlimit_data. [ 108.348852][ T5993] i2c i2c-1: failure reading functionality [ 108.382045][ T5993] i2c i2c-1: connected i2c-tiny-usb device [ 108.421900][ T5850] usb 4-1: USB disconnect, device number 3 [ 108.482237][ T5993] usb 5-1: USB disconnect, device number 3 [ 108.852809][ T5906] udevd[5906]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 109.157267][ T6144] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 109.379302][ T5993] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 109.539313][ T5850] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 109.548689][ T5993] usb 2-1: config 0 has an invalid interface number: 30 but max is 0 [ 109.548715][ T5993] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 109.548732][ T5993] usb 2-1: config 0 has no interface number 0 [ 109.548775][ T5993] usb 2-1: config 0 interface 30 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 109.548799][ T5993] usb 2-1: config 0 interface 30 has no altsetting 0 [ 109.548832][ T5993] usb 2-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice=74.47 [ 109.548853][ T5993] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.606488][ T5993] usb 2-1: config 0 descriptor?? [ 109.675864][ T5993] usb 2-1: unknown interface protocol 0x41, assuming v1 [ 109.675888][ T5993] usb 2-1: 30:2 : does not exist [ 109.711678][ T5850] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 109.711731][ T5850] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.713255][ T5850] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 109.713283][ T5850] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 109.713302][ T5850] usb 5-1: Manufacturer: syz [ 109.932853][ T5850] usb 5-1: config 0 descriptor?? [ 110.078362][ T5993] usb 2-1: USB disconnect, device number 3 [ 110.109378][ T5850] rc_core: IR keymap rc-hauppauge not found [ 110.109397][ T5850] Registered IR keymap rc-empty [ 110.236916][ T5850] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 110.239346][ T5898] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 110.268384][ T5850] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input5 [ 110.393498][ T5898] usb 4-1: config 162 has an invalid interface number: 79 but max is 1 [ 110.393534][ T5898] usb 4-1: config 162 has an invalid interface number: 183 but max is 1 [ 110.393554][ T5898] usb 4-1: config 162 has no interface number 0 [ 110.393569][ T5898] usb 4-1: config 162 has no interface number 1 [ 110.393628][ T5898] usb 4-1: config 162 interface 79 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 110.393668][ T5898] usb 4-1: config 162 interface 183 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 110.393690][ T5898] usb 4-1: config 162 interface 183 altsetting 1 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 110.393715][ T5898] usb 4-1: config 162 interface 183 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 110.393740][ T5898] usb 4-1: config 162 interface 183 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 110.393763][ T5898] usb 4-1: config 162 interface 183 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 64 [ 110.393788][ T5898] usb 4-1: config 162 interface 183 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 110.393813][ T5898] usb 4-1: config 162 interface 79 has no altsetting 0 [ 110.393829][ T5898] usb 4-1: config 162 interface 183 has no altsetting 0 [ 110.481985][ T5898] usb 4-1: New USB device found, idVendor=056e, idProduct=5004, bcdDevice=db.d1 [ 110.482015][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.482034][ T5898] usb 4-1: Product: syz [ 110.482047][ T5898] usb 4-1: Manufacturer: syz [ 110.482060][ T5898] usb 4-1: SerialNumber: syz [ 110.823762][ T5850] usb 5-1: USB disconnect, device number 4 [ 110.911448][ T5898] pl2303 4-1:162.79: required endpoints missing [ 110.941260][ T5898] pl2303 4-1:162.183: pl2303 converter detected [ 110.963226][ T5898] pl2303 4-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 110.967184][ T5898] pl2303 4-1:162.183: pl2303_vendor_write - failed to write [0404]: -71 [ 110.967582][ T5898] pl2303 4-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 110.967954][ T5898] pl2303 4-1:162.183: pl2303_vendor_read - failed to read [8383]: -71 [ 110.973412][ T5898] pl2303 4-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 110.973830][ T5898] pl2303 4-1:162.183: pl2303_vendor_write - failed to write [0404]: -71 [ 110.974243][ T5898] pl2303 4-1:162.183: pl2303_vendor_read - failed to read [8484]: -71 [ 110.974651][ T5898] pl2303 4-1:162.183: pl2303_vendor_read - failed to read [8383]: -71 [ 110.975116][ T5898] pl2303 4-1:162.183: pl2303_vendor_write - failed to write [0000]: -71 [ 110.975524][ T5898] pl2303 4-1:162.183: pl2303_vendor_write - failed to write [0001]: -71 [ 110.975929][ T5898] pl2303 4-1:162.183: pl2303_vendor_write - failed to write [0002]: -71 [ 111.018322][ T5898] usb 4-1: pl2303 converter now attached to ttyUSB0 [ 111.092373][ T5898] usb 4-1: USB disconnect, device number 4 [ 111.305984][ T6182] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 111.306495][ T5898] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 111.340225][ T6183] netlink: 20 bytes leftover after parsing attributes in process `syz.2.105'. [ 111.340730][ T6183] 8021q: VLANs not supported on gre0 [ 111.366858][ T5898] pl2303 4-1:162.183: device disconnected [ 111.684693][ T37] audit: type=1326 audit(1758798360.793:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6191 comm="syz.1.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b2765eec9 code=0x7ffc0000 [ 111.684748][ T37] audit: type=1326 audit(1758798360.793:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6191 comm="syz.1.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b2765eec9 code=0x7ffc0000 [ 111.735634][ T37] audit: type=1326 audit(1758798360.843:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6191 comm="syz.1.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f7b2765eec9 code=0x7ffc0000 [ 111.735688][ T37] audit: type=1326 audit(1758798360.843:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6191 comm="syz.1.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b2765eec9 code=0x7ffc0000 [ 111.735725][ T37] audit: type=1326 audit(1758798360.843:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6191 comm="syz.1.110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b2765eec9 code=0x7ffc0000 [ 112.108941][ T6201] netlink: 104 bytes leftover after parsing attributes in process `syz.4.113'. [ 112.629472][ T5850] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 112.781653][ T5850] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 112.781685][ T5850] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 112.781712][ T5850] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 112.781734][ T5850] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 112.781756][ T5850] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 112.786113][ T5850] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 112.786141][ T5850] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.786158][ T5850] usb 5-1: Product: syz [ 112.786169][ T5850] usb 5-1: Manufacturer: syz [ 112.786182][ T5850] usb 5-1: SerialNumber: syz [ 112.894235][ T5850] usb 5-1: config 0 descriptor?? [ 113.276569][ T6236] capability: warning: `syz.1.129' uses 32-bit capabilities (legacy support in use) [ 113.310191][ T5850] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 113.310257][ T5850] input input6: Device does not respond to id packet M [ 113.310697][ T5850] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 113.310741][ T5850] input input6: Device does not respond to id packet P [ 113.311291][ T5850] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 113.311331][ T5850] input input6: Device does not respond to id packet B [ 113.311747][ T5850] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 113.311790][ T5850] input input6: Device does not respond to id packet N [ 113.312221][ T5850] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 113.312737][ T5850] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 113.313164][ T5850] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 113.313596][ T5850] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 113.313965][ T5850] iforce 5-1:0.0: usb_submit_urb failed -90 [ 113.314331][ T5850] iforce 5-1:0.0: usb_submit_urb failed -90 [ 113.317885][ T5850] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input6 [ 113.474239][ T5850] usb 5-1: USB disconnect, device number 5 [ 113.567998][ T6239] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 113.901240][ T6248] netlink: 72 bytes leftover after parsing attributes in process `syz.2.134'. [ 114.768778][ T6276] use of bytesused == 0 is deprecated and will be removed in the future, [ 114.768794][ T6276] use the actual size instead. [ 114.857317][ T6278] netlink: 'syz.1.149': attribute type 2 has an invalid length. [ 114.857339][ T6278] netlink: 16 bytes leftover after parsing attributes in process `syz.1.149'. [ 115.098312][ T6286] netlink: 32 bytes leftover after parsing attributes in process `syz.2.153'. [ 115.989569][ T5850] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 115.999626][ T5993] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 116.141973][ T5850] usb 2-1: Using ep0 maxpacket: 32 [ 116.148870][ T5850] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.148902][ T5850] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.148940][ T5850] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 116.148962][ T5850] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.158105][ T5993] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 116.158133][ T5993] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.158151][ T5993] usb 1-1: Product: syz [ 116.158164][ T5993] usb 1-1: Manufacturer: syz [ 116.158178][ T5993] usb 1-1: SerialNumber: syz [ 116.202921][ T5993] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 116.312541][ T5850] usb 2-1: config 0 descriptor?? [ 116.395299][ T5850] hub 2-1:0.0: USB hub found [ 116.410484][ T5931] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 116.603421][ T5850] hub 2-1:0.0: config failed, can't read hub descriptor (err -90) [ 116.779534][ T5993] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 116.817184][ T5850] usbhid 2-1:0.0: can't add hid device: -71 [ 116.817310][ T5850] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 116.872353][ T5850] usb 2-1: USB disconnect, device number 4 [ 116.944011][ T5993] usb 3-1: Using ep0 maxpacket: 8 [ 116.981436][ T5993] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 116.981723][ T5993] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.981743][ T5993] usb 3-1: Product: syz [ 116.981757][ T5993] usb 3-1: Manufacturer: syz [ 116.981771][ T5993] usb 3-1: SerialNumber: syz [ 117.046773][ T5993] usb 3-1: config 0 descriptor?? [ 117.198975][ T5850] usb 1-1: USB disconnect, device number 3 [ 117.276233][ T5993] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 117.722978][ T5993] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 117.737772][ T5993] usb 3-1: USB disconnect, device number 3 [ 117.813715][ T5931] usb 1-1: Service connection timeout for: 256 [ 117.813738][ T5931] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 117.818985][ T5931] ath9k_htc: Failed to initialize the device [ 117.844900][ T5850] usb 1-1: ath9k_htc: USB layer deinitialized [ 118.303785][ T6353] program syz.1.185 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 118.309353][ T6353] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 118.584902][ T6363] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 119.594106][ T6392] netlink: 16 bytes leftover after parsing attributes in process `syz.2.203'. [ 119.679345][ T31] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 119.830049][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 119.832977][ T31] usb 4-1: unable to get BOS descriptor or descriptor too short [ 119.836139][ T31] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 119.836169][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 119.836195][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 119.836217][ T31] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 119.836256][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 119.836277][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 119.836295][ T31] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 119.934348][ T31] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 119.934375][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.934392][ T31] usb 4-1: Product: syz [ 119.934405][ T31] usb 4-1: Manufacturer: syz [ 119.934418][ T31] usb 4-1: SerialNumber: syz [ 119.973555][ T31] usb 4-1: config 0 descriptor?? [ 119.993745][ T6389] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 120.018737][ T31] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 120.261255][ T5898] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 120.331061][ T31] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 120.360424][ T31] usb 4-1: USB disconnect, device number 5 [ 120.429297][ T5898] usb 5-1: Using ep0 maxpacket: 32 [ 120.435752][ T5898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.435783][ T5898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.435822][ T5898] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 120.435845][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.549779][ T5898] usb 5-1: config 0 descriptor?? [ 120.577512][ T5898] hub 5-1:0.0: USB hub found [ 120.728523][ T6137] udevd[6137]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 120.831482][ T5898] hub 5-1:0.0: 29 ports detected [ 120.839107][ T5898] hub 5-1:0.0: insufficient power available to use all downstream ports [ 121.184894][ T6436] netlink: 16 bytes leftover after parsing attributes in process `syz.3.221'. [ 121.186370][ T6436] netlink: 16 bytes leftover after parsing attributes in process `syz.3.221'. [ 121.458079][ T5898] usb 5-1: USB disconnect, device number 6 [ 121.825569][ T5850] hid_parser_main: 643 callbacks suppressed [ 121.825592][ T5850] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 121.825621][ T5850] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 121.825644][ T5850] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 121.825668][ T5850] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 121.825691][ T5850] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 121.825715][ T5850] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 121.825738][ T5850] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 121.825761][ T5850] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 121.825785][ T5850] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 121.825808][ T5850] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 121.936585][ T5850] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz0 [ 122.721132][ T5925] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 122.903328][ T5925] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.903361][ T5925] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.903381][ T5925] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 122.903423][ T5925] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 122.903446][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.965223][ T5925] usb 4-1: config 0 descriptor?? [ 123.305393][ T6484] fido_id[6484]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 123.600769][ T5925] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 123.627220][ T5925] usb 4-1: USB disconnect, device number 6 [ 124.075524][ T6500] fido_id[6500]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 124.734746][ T6526] program syz.2.262 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 124.969282][ T5850] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 125.122181][ T5850] usb 4-1: Using ep0 maxpacket: 16 [ 125.124774][ T5850] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.124798][ T5850] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 125.143887][ T5850] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 125.143914][ T5850] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.143933][ T5850] usb 4-1: Product: syz [ 125.143947][ T5850] usb 4-1: Manufacturer: syz [ 125.143961][ T5850] usb 4-1: SerialNumber: syz [ 125.173683][ T6536] kAFS: unable to lookup cell 'sÕ§K²ùyyµ¬ [ 125.173683][ T6536] [ 125.173683][ T6536] =6%ñ©*°;¾eÕܲ5ô;ZÑ*ëÜd{ªÀ¿iElÝZS—j—­UF/»øk!ªb…tF\_·Üvf£Vn¯D…ìPʳ¤ý´PÑB1Ú%ÐA)X¥ã‰\YT"8ÏŽŽµd²J_¿.ÖÁÐé5d×#ãÛœÒh»Gp6è"±5ͺô*§ÛÒ,‚š°âI—ÚémÞíIæ-(WÕAž?”¨¹WÏZ)nÑ[ÿ®qG jnÚ‡%(„J-ô%ؘccʵÌÎÅ{|ê6ZØÉûçËA–5Îkó@¥aÀ­’+o­éSŽT;ÅÞò¨]5«Ò !œG3ƒ{âÁK¤ÓÓ,' [ 125.461068][ T5850] usb 4-1: 0:2 : does not exist [ 125.479867][ T5850] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 125.546525][ T5850] usb 4-1: USB disconnect, device number 7 [ 125.734948][ T6135] udevd[6135]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 126.067941][ T6554] netlink: 16 bytes leftover after parsing attributes in process `syz.2.276'. [ 126.485850][ T6564] comedi comedi3: 8255: I/O port conflict (0x40404f26,4) [ 126.485913][ T6564] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 126.485961][ T6564] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 126.486073][ T6564] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 126.486120][ T6564] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 127.001565][ T6575] netlink: 32 bytes leftover after parsing attributes in process `syz.2.287'. [ 127.749881][ T6596] netlink: 16 bytes leftover after parsing attributes in process `syz.3.295'. [ 127.829387][ T5898] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 127.876322][ T6465] syz.1.236 (6465): drop_caches: 1 [ 127.983792][ T5898] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 127.983824][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.013355][ T5898] usb 5-1: config 0 descriptor?? [ 128.032789][ T5898] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 128.431281][ T5898] gspca_cpia1: usb_control_msg 03, error -32 [ 128.431866][ T5898] gspca_cpia1: usb_control_msg 03, error -71 [ 128.432268][ T5898] gspca_cpia1: usb_control_msg 01, error -71 [ 128.432281][ T5898] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 128.509205][ T5898] usb 5-1: USB disconnect, device number 7 [ 128.535402][ T5925] IPVS: starting estimator thread 0... [ 128.596238][ T6611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.300'. [ 128.623617][ T6610] IPVS: using max 7 ests per chain, 16800 per kthread [ 128.749143][ T6614] netlink: 256 bytes leftover after parsing attributes in process `syz.3.304'. [ 128.749401][ T5850] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 128.913534][ T5850] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 128.913567][ T5850] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.913589][ T5850] usb 2-1: config 0 interface 0 has no altsetting 0 [ 128.913622][ T5850] usb 2-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 128.913643][ T5850] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.982001][ T5850] usb 2-1: config 0 descriptor?? [ 129.493076][ T5850] lenovo 0003:17EF:60EE.0006: hidraw0: USB HID v0.01 Device [HID 17ef:60ee] on usb-dummy_hcd.1-1/input0 [ 129.645125][ T5850] lenovo 0003:17EF:60EE.0006: Failed to switch middle button: -71 [ 129.645666][ T5850] lenovo 0003:17EF:60EE.0006: Fn-lock setting failed: -71 [ 129.646248][ T5850] lenovo 0003:17EF:60EE.0006: Sensitivity setting failed: -71 [ 129.695502][ T5850] usb 2-1: USB disconnect, device number 5 [ 129.803385][ T6645] netlink: 'syz.0.317': attribute type 1 has an invalid length. [ 129.803427][ T6645] nbd: couldn't find device at index -492516727 [ 130.403188][ T6649] fido_id[6649]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 130.777298][ T5925] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 130.920628][ T5925] usb 2-1: Using ep0 maxpacket: 16 [ 130.923012][ T5925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.923042][ T5925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.923064][ T5925] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 130.923104][ T5925] usb 2-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 130.923126][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.002349][ T5925] usb 2-1: config 0 descriptor?? [ 131.520478][ T5925] hid-multitouch 0003:0457:07DA.0007: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.1-1/input0 [ 131.663419][ T5926] usb 2-1: USB disconnect, device number 6 [ 131.836256][ T6694] fido_id[6694]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 132.262395][ T6705] netlink: 72 bytes leftover after parsing attributes in process `syz.0.345'. [ 133.015405][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.015486][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.311511][ T37] audit: type=1326 audit(1758798382.403:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6734 comm="syz.4.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56dbfeec9 code=0x7ffc0000 [ 133.311559][ T37] audit: type=1326 audit(1758798382.403:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6734 comm="syz.4.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56dbfeec9 code=0x7ffc0000 [ 133.326857][ T37] audit: type=1326 audit(1758798382.433:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6734 comm="syz.4.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fa56dbfeec9 code=0x7ffc0000 [ 133.326908][ T37] audit: type=1326 audit(1758798382.433:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6734 comm="syz.4.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56dbfeec9 code=0x7ffc0000 [ 133.326952][ T37] audit: type=1326 audit(1758798382.433:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6734 comm="syz.4.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56dbfeec9 code=0x7ffc0000 [ 133.337512][ T37] audit: type=1326 audit(1758798382.443:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6734 comm="syz.4.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7fa56dbfeec9 code=0x7ffc0000 [ 133.337559][ T37] audit: type=1326 audit(1758798382.443:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6734 comm="syz.4.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56dbfeec9 code=0x7ffc0000 [ 133.337596][ T37] audit: type=1326 audit(1758798382.443:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6734 comm="syz.4.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56dbfeec9 code=0x7ffc0000 [ 133.747256][ T6747] Driver unsupported XDP return value 0 on prog (id 25) dev N/A, expect packet loss! [ 134.019309][ T5850] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 134.169279][ T5850] usb 2-1: Using ep0 maxpacket: 32 [ 134.172184][ T5850] usb 2-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 134.172208][ T5850] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 134.172223][ T5850] usb 2-1: config 5 has 1 interface, different from the descriptor's value: 2 [ 134.172273][ T5850] usb 2-1: config 5 interface 0 altsetting 255 endpoint 0xD has invalid wMaxPacketSize 0 [ 134.172296][ T5850] usb 2-1: config 5 interface 0 altsetting 255 has a duplicate endpoint with address 0x9, skipping [ 134.172317][ T5850] usb 2-1: config 5 interface 0 altsetting 255 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 134.172341][ T5850] usb 2-1: config 5 interface 0 altsetting 255 endpoint 0x84 has invalid wMaxPacketSize 0 [ 134.172362][ T5850] usb 2-1: config 5 interface 0 has no altsetting 0 [ 134.261512][ T5850] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=9f.21 [ 134.261540][ T5850] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.261559][ T5850] usb 2-1: Product: syz [ 134.261571][ T5850] usb 2-1: Manufacturer: syz [ 134.261583][ T5850] usb 2-1: SerialNumber: syz [ 134.627270][ T5850] usb 2-1: USB disconnect, device number 7 [ 134.832661][ T6770] netlink: 24 bytes leftover after parsing attributes in process `syz.4.374'. [ 134.835334][ T6770] IPVS: Error connecting to the multicast addr [ 135.438968][ T6792] overlayfs: workdir and upperdir must be separate subtrees [ 135.601614][ T5898] IPVS: starting estimator thread 0... [ 135.602276][ T6795] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 135.680807][ T6798] program syz.2.388 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 135.699403][ T6796] IPVS: using max 8 ests per chain, 19200 per kthread [ 135.981262][ T6812] netlink: 'syz.4.395': attribute type 1 has an invalid length. [ 137.223377][ T6848] process 'syz.1.413' launched './file0' with NULL argv: empty string added [ 138.339293][ T6827] mmap: syz.2.403 (6827) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 138.491350][ T6876] netlink: 48 bytes leftover after parsing attributes in process `syz.0.425'. [ 139.879735][ T6923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.449'. [ 139.879759][ T6923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.449'. [ 139.879782][ T6923] netlink: 'syz.1.449': attribute type 14 has an invalid length. [ 139.993129][ T6927] netlink: 12 bytes leftover after parsing attributes in process `syz.0.451'. [ 139.993157][ T6927] netlink: 12 bytes leftover after parsing attributes in process `syz.0.451'. [ 140.238773][ T6936] /dev/nullb0: Can't open blockdev [ 140.769374][ T5993] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 140.919363][ T5993] usb 2-1: Using ep0 maxpacket: 8 [ 140.923345][ T5993] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.923379][ T5993] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.923401][ T5993] usb 2-1: config 0 interface 0 has no altsetting 0 [ 140.923444][ T5993] usb 2-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00 [ 140.923466][ T5993] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.960038][ T5898] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 140.974570][ T5993] usb 2-1: config 0 descriptor?? [ 141.164134][ T5898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 141.164242][ T5898] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0a0f, bcdDevice= 0.00 [ 141.164264][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.276113][ T5898] usb 4-1: config 0 descriptor?? [ 141.429469][ T6964] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 141.429695][ T6964] macsec1: entered allmulticast mode [ 141.429714][ T6964] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 141.639358][ T5993] a4tech 0003:09DA:000A.0008: hidraw0: USB HID v0.00 Device [HID 09da:000a] on usb-dummy_hcd.1-1/input0 [ 141.715852][ T5993] usb 2-1: USB disconnect, device number 8 [ 141.787462][ T5898] hid-corsair-void 0003:1B1C:0A0F.0009: item fetching failed at offset 0/3 [ 141.788238][ T5898] hid-corsair-void 0003:1B1C:0A0F.0009: parse failed (reason: -22) [ 141.788355][ T5898] hid-corsair-void 0003:1B1C:0A0F.0009: probe with driver hid-corsair-void failed with error -22 [ 142.029986][ T1231] usb 4-1: USB disconnect, device number 8 [ 142.367586][ T6987] fido_id[6987]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 142.821819][ T7005] Bluetooth: MGMT ver 1.23 [ 143.019920][ T5898] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 143.176375][ T5898] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 143.176422][ T5898] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 143.176461][ T5898] usb 2-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 143.176482][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.198338][ T5898] usb 2-1: config 0 descriptor?? [ 143.286825][ T7017] mkiss: ax0: crc mode is auto. [ 143.705461][ T5898] kye 0003:0458:0138.000A: hidraw0: USB HID v0.00 Device [HID 0458:0138] on usb-dummy_hcd.1-1/input0 [ 143.894471][ T5993] usb 2-1: USB disconnect, device number 9 [ 143.972524][ T7029] fido_id[7029]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 145.669629][ T5993] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 145.819378][ T5993] usb 4-1: Using ep0 maxpacket: 16 [ 145.824700][ T5993] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.824730][ T5993] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.824768][ T5993] usb 4-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 145.824788][ T5993] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.837537][ T5993] usb 4-1: config 0 descriptor?? [ 146.205546][ T7097] netlink: 24 bytes leftover after parsing attributes in process `syz.4.525'. [ 146.256817][ T5993] gt683r_led 0003:1770:FF00.000B: unbalanced delimiter at end of report description [ 146.257592][ T5993] gt683r_led 0003:1770:FF00.000B: hid parsing failed [ 146.257692][ T5993] gt683r_led 0003:1770:FF00.000B: probe with driver gt683r_led failed with error -22 [ 146.466279][ T5898] usb 4-1: USB disconnect, device number 9 [ 146.629392][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 146.769295][ T5850] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 146.781648][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 146.781680][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 146.781705][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 146.781725][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 146.781765][ T10] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 146.781785][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.790715][ T10] usb 1-1: config 0 descriptor?? [ 146.943398][ T5850] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.943446][ T5850] usb 2-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 146.943467][ T5850] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.959277][ T5925] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 146.993113][ T5850] usb 2-1: config 0 descriptor?? [ 147.121752][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.121858][ T5925] usb 3-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 147.121880][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.181365][ T5925] usb 3-1: config 0 descriptor?? [ 147.236811][ T10] hid_parser_main: 75 callbacks suppressed [ 147.236835][ T10] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 147.301251][ T10] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 147.531487][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 147.536367][ T5850] zeroplus 0003:0C12:0005.000D: report_id 0 is invalid [ 147.536390][ T5850] zeroplus 0003:0C12:0005.000D: item 0 0 1 8 parsing failed [ 147.562848][ T5850] zeroplus 0003:0C12:0005.000D: parse failed [ 147.562926][ T5850] zeroplus 0003:0C12:0005.000D: probe with driver zeroplus failed with error -22 [ 147.676127][ T5925] nintendo 0003:057E:200E.000E: unknown main item tag 0x0 [ 147.676166][ T5925] nintendo 0003:057E:200E.000E: unknown main item tag 0x0 [ 147.676192][ T5925] nintendo 0003:057E:200E.000E: unknown main item tag 0x0 [ 147.676217][ T5925] nintendo 0003:057E:200E.000E: unknown main item tag 0x0 [ 147.676242][ T5925] nintendo 0003:057E:200E.000E: unknown main item tag 0x0 [ 147.679383][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 147.687255][ T10] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 147.687312][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 147.687338][ T10] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 147.687361][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 147.687384][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 147.692137][ T10] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 147.692193][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 147.692219][ T10] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 147.692242][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 147.692265][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 147.698431][ T10] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 147.698492][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 147.698519][ T10] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 147.698542][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 147.698566][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 147.707321][ T5898] usb 2-1: USB disconnect, device number 10 [ 147.724074][ T10] usb 5-1: string descriptor 0 read error: -22 [ 147.724220][ T10] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 147.724242][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.908154][ T5993] usb 1-1: USB disconnect, device number 4 [ 147.926872][ T5925] nintendo 0003:057E:200E.000E: hidraw1: USB HID v80.00 Device [HID 057e:200e] on usb-dummy_hcd.2-1/input0 [ 147.935901][ T10] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 148.027044][ T7124] netlink: 48 bytes leftover after parsing attributes in process `syz.3.538'. [ 148.041431][ T5925] nintendo 0003:057E:200E.000E: Failed charging grip handshake [ 148.041454][ T5925] nintendo 0003:057E:200E.000E: Failed to initialize controller; ret=-110 [ 148.132993][ T10] usb 5-1: USB disconnect, device number 8 [ 148.195337][ T7127] sg_write: data in/out 28/10 bytes for SCSI command 0x5d-- guessing data in; [ 148.195337][ T7127] program syz.0.539 not setting count and/or reply_len properly [ 148.200575][ T5925] nintendo 0003:057E:200E.000E: probe - fail = -110 [ 148.200727][ T5925] nintendo 0003:057E:200E.000E: probe with driver nintendo failed with error -110 [ 148.375453][ T5925] usb 3-1: USB disconnect, device number 4 [ 148.989704][ T7143] netlink: 8 bytes leftover after parsing attributes in process `syz.3.547'. [ 149.265023][ T7151] QAT: Invalid ioctl 1075883590 [ 149.265158][ T7151] QAT: Invalid ioctl 1075883590 [ 149.265250][ T7151] QAT: Invalid ioctl 1075883590 [ 149.265335][ T7151] QAT: Invalid ioctl 1075883590 [ 149.265440][ T7151] QAT: Invalid ioctl 1075883590 [ 149.265525][ T7151] QAT: Invalid ioctl 1075883590 [ 149.265607][ T7151] QAT: Invalid ioctl 1075883590 [ 149.265694][ T7151] QAT: Invalid ioctl 1075883590 [ 149.265779][ T7151] QAT: Invalid ioctl 1075883590 [ 149.265907][ T7151] QAT: Invalid ioctl 1075883590 [ 149.462594][ T7148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.551'. [ 150.184205][ T7167] Bluetooth: MGMT ver 1.23 [ 150.405053][ T7174] binder: 7173:7174 ioctl c00c620f 200000000500 returned -22 [ 150.458848][ T7175] netlink: 16 bytes leftover after parsing attributes in process `syz.1.564'. [ 151.014521][ T7187] netlink: 56 bytes leftover after parsing attributes in process `syz.3.571'. [ 151.014681][ T7187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.571'. [ 151.050057][ T7189] netlink: 12 bytes leftover after parsing attributes in process `syz.1.572'. [ 151.407069][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 151.428157][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 151.437179][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 151.442839][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 151.443736][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 152.078858][ T7220] Invalid source name [ 152.078876][ T7220] UBIFS error (pid: 7220): cannot open "usrquota", error -22 [ 152.189679][ T7225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.587'. [ 152.305893][ T5993] kernel write not supported for file /244/uid_map (pid: 5993 comm: kworker/0:6) [ 152.867751][ T7200] chnl_net:caif_netlink_parms(): no params data found [ 153.479475][ T5844] Bluetooth: hci4: command tx timeout [ 153.971355][ T7200] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.973194][ T7200] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.973447][ T7200] bridge_slave_0: entered allmulticast mode [ 154.012228][ T7200] bridge_slave_0: entered promiscuous mode [ 154.026922][ T7200] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.027075][ T7200] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.027313][ T7200] bridge_slave_1: entered allmulticast mode [ 154.071773][ T7200] bridge_slave_1: entered promiscuous mode [ 154.137988][ T7259] comedi comedi0: reset error (fatal) [ 154.434747][ T7200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.456547][ T7200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.881860][ T7200] team0: Port device team_slave_0 added [ 154.885451][ T7200] team0: Port device team_slave_1 added [ 155.248897][ T7200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.248912][ T7200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.248936][ T7200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.318925][ T7200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.318940][ T7200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.318962][ T7200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.559348][ T5844] Bluetooth: hci4: command tx timeout [ 155.698890][ T7200] hsr_slave_0: entered promiscuous mode [ 155.710462][ T7200] hsr_slave_1: entered promiscuous mode [ 155.711278][ T7200] debugfs: 'hsr0' already exists in 'hsr' [ 155.711300][ T7200] Cannot create hsr debugfs directory [ 155.859480][ T5850] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 156.011781][ T5850] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 156.011810][ T5850] usb 4-1: config 0 has no interface number 0 [ 156.011841][ T5850] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 156.011881][ T5850] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 156.011907][ T5850] usb 4-1: config 0 interface 255 has no altsetting 0 [ 156.011939][ T5850] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 156.011961][ T5850] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.082711][ T5850] usb 4-1: config 0 descriptor?? [ 156.096363][ T5850] ums-realtek 4-1:0.255: USB Mass Storage device detected [ 156.290009][ T31] usb 4-1: USB disconnect, device number 10 [ 157.560769][ T7369] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 157.649402][ T5844] Bluetooth: hci4: command tx timeout [ 157.818372][ T7200] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 157.886107][ T7200] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 157.943781][ T7200] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 157.989309][ T5993] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 158.038315][ T7200] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 158.157376][ T5993] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 158.157425][ T5993] usb 5-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 158.157447][ T5993] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.226860][ T5993] usb 5-1: config 0 descriptor?? [ 158.227698][ T7373] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 158.668265][ T5993] belkin 0003:050D:3201.000F: unbalanced collection at end of report description [ 158.669080][ T5993] belkin 0003:050D:3201.000F: parse failed [ 158.669143][ T5993] belkin 0003:050D:3201.000F: probe with driver belkin failed with error -22 [ 158.835098][ T7200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.850775][ T7401] netlink: 'syz.3.667': attribute type 2 has an invalid length. [ 158.895942][ T5850] usb 5-1: USB disconnect, device number 9 [ 158.925201][ T7402] hub 9-0:1.0: USB hub found [ 158.948236][ T7200] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.956983][ T7402] hub 9-0:1.0: 1 port detected [ 158.986161][ T164] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.986313][ T164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.083425][ T3535] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.083640][ T3535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.719403][ T5844] Bluetooth: hci4: command tx timeout [ 159.730959][ T7421] netlink: 8 bytes leftover after parsing attributes in process `syz.2.676'. [ 159.819449][ T5850] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 159.977119][ T5850] usb 2-1: Using ep0 maxpacket: 8 [ 159.987502][ T5850] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.987546][ T5850] usb 2-1: New USB device found, idVendor=044f, idProduct=b654, bcdDevice= 0.00 [ 159.987567][ T5850] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.026971][ T5850] usb 2-1: config 0 descriptor?? [ 160.310413][ T7200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.494845][ T5850] thrustmaster 0003:044F:B654.0010: item fetching failed at offset 0/2 [ 160.500737][ T5850] thrustmaster 0003:044F:B654.0010: parse failed [ 160.500811][ T5850] thrustmaster 0003:044F:B654.0010: probe with driver thrustmaster failed with error -22 [ 160.659026][ T10] usb 2-1: USB disconnect, device number 11 [ 161.123446][ T37] audit: type=1326 audit(1758798410.233:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7452 comm="syz.3.687" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc42e37eec9 code=0x0 [ 161.267261][ T7200] veth0_vlan: entered promiscuous mode [ 161.311522][ T7200] veth1_vlan: entered promiscuous mode [ 161.488517][ T7200] veth0_macvtap: entered promiscuous mode [ 161.562651][ T7200] veth1_macvtap: entered promiscuous mode [ 161.727238][ T7200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.788137][ T7200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.846398][ T4504] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.861783][ T4504] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.867052][ T4504] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.895069][ T4504] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.413676][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.413697][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.606920][ T164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.606941][ T164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.299393][ T5993] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 163.449380][ T5993] usb 5-1: Using ep0 maxpacket: 32 [ 163.453200][ T5993] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 163.453226][ T5993] usb 5-1: config 0 has no interface number 0 [ 163.457790][ T5993] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 163.457819][ T5993] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.457838][ T5993] usb 5-1: Product: syz [ 163.457851][ T5993] usb 5-1: Manufacturer: syz [ 163.457865][ T5993] usb 5-1: SerialNumber: syz [ 163.528665][ T5993] usb 5-1: config 0 descriptor?? [ 163.547000][ T5993] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 163.547037][ T5993] usb 5-1: selecting invalid altsetting 1 [ 163.547052][ T5993] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 163.595398][ T5993] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 163.596477][ T5993] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 163.596565][ T5993] usb 5-1: media controller created [ 163.659692][ T5993] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 164.231019][ T7533] xt_limit: Overflow, try lower: 324382443/4200216956 [ 164.760433][ T5993] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 164.760525][ T5993] zl10353_read_register: readreg error (reg=127, ret==-110) [ 164.818453][ T7503] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 164.905426][ T7546] netlink: 12 bytes leftover after parsing attributes in process `syz.2.728'. [ 165.126222][ T5993] usb 5-1: USB disconnect, device number 10 [ 165.320003][ T7553] pim6reg: entered allmulticast mode [ 165.323661][ T7556] pim6reg: left allmulticast mode [ 165.920417][ T7577] netlink: 165 bytes leftover after parsing attributes in process `syz.1.743'. [ 167.198350][ T7622] xt_HMARK: spi-set and port-set can't be combined [ 167.538279][ T7630] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 168.039362][ T5850] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 168.208837][ T5850] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.208868][ T5850] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.208905][ T5850] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 168.208927][ T5850] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.259319][ T31] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 168.285829][ T5850] usb 4-1: config 0 descriptor?? [ 168.440268][ T31] usb 6-1: Using ep0 maxpacket: 16 [ 168.448205][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.448237][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.448327][ T31] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 168.448350][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.522461][ T31] usb 6-1: config 0 descriptor?? [ 168.760079][ T5850] arvo 0003:1E7D:30D4.0011: unknown main item tag 0x0 [ 168.760717][ T5850] arvo 0003:1E7D:30D4.0011: unknown main item tag 0x0 [ 168.760748][ T5850] arvo 0003:1E7D:30D4.0011: unknown main item tag 0x0 [ 168.760773][ T5850] arvo 0003:1E7D:30D4.0011: unknown main item tag 0x0 [ 168.760798][ T5850] arvo 0003:1E7D:30D4.0011: unknown main item tag 0x0 [ 168.761583][ T5850] arvo 0003:1E7D:30D4.0011: unknown main item tag 0x0 [ 168.761611][ T5850] arvo 0003:1E7D:30D4.0011: unknown main item tag 0x0 [ 168.846477][ T5850] arvo 0003:1E7D:30D4.0011: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0 [ 168.933941][ T5850] arvo 0003:1E7D:30D4.0011: couldn't init struct arvo_device [ 168.933996][ T5850] arvo 0003:1E7D:30D4.0011: couldn't install keyboard [ 168.964283][ T5850] arvo 0003:1E7D:30D4.0011: probe with driver arvo failed with error -71 [ 168.992448][ T5850] usb 4-1: USB disconnect, device number 11 [ 168.999923][ T31] corsair 0003:1B1C:1B02.0012: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.5-1/input0 [ 169.169436][ T31] corsair 0003:1B1C:1B02.0012: Failed to get K90 initial state (error -71). [ 169.214632][ T31] usb 6-1: USB disconnect, device number 2 [ 169.256949][ T7668] fido_id[7668]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 169.453896][ T7673] fido_id[7673]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 170.236883][ T7698] netlink: 8 bytes leftover after parsing attributes in process `syz.5.798'. [ 170.389055][ T37] audit: type=1400 audit(1758798419.493:16): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=7705 comm="syz.5.802" src=1 dest=20000 netif=wpan0 [ 170.399319][ T5993] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 170.549349][ T5993] usb 4-1: Using ep0 maxpacket: 8 [ 170.555210][ T5993] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 170.555237][ T5993] usb 4-1: config 179 has no interface number 0 [ 170.555300][ T5993] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 170.555326][ T5993] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 170.555352][ T5993] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 170.555377][ T5993] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 170.555402][ T5993] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 170.555451][ T5993] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 170.555473][ T5993] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.575815][ T7697] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 170.908781][ T7697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.926169][ T7697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.188428][ T5850] usb 4-1: USB disconnect, device number 12 [ 171.188439][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 171.188755][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 171.704089][ T7735] netlink: 'syz.5.816': attribute type 10 has an invalid length. [ 172.099655][ T5830] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 172.251104][ T5830] usb 5-1: Using ep0 maxpacket: 32 [ 172.254955][ T5830] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.258027][ T5830] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 172.258053][ T5830] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.258072][ T5830] usb 5-1: Product: syz [ 172.258085][ T5830] usb 5-1: Manufacturer: syz [ 172.258098][ T5830] usb 5-1: SerialNumber: syz [ 172.267230][ T5830] usb 5-1: config 0 descriptor?? [ 172.297420][ T5830] cdc_ether 5-1:0.0: skipping garbage [ 172.297446][ T5830] usb 5-1: bad CDC descriptors [ 172.318568][ T5830] usb 5-1: unsupported MDLM descriptors [ 172.515006][ T5830] usb 5-1: USB disconnect, device number 11 [ 172.703378][ T7770] netlink: 8 bytes leftover after parsing attributes in process `syz.2.834'. [ 173.209360][ T5830] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 173.383632][ T5830] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 173.383681][ T5830] usb 3-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 173.383703][ T5830] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.395444][ T5830] usb 3-1: config 0 descriptor?? [ 173.427186][ T5993] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 173.569979][ T5993] usb 2-1: Using ep0 maxpacket: 32 [ 173.572479][ T5993] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.572508][ T5993] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.572544][ T5993] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 173.572566][ T5993] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.642084][ T5993] usb 2-1: config 0 descriptor?? [ 173.658547][ T5993] hub 2-1:0.0: USB hub found [ 173.857599][ T5830] elecom 0003:056E:00FC.0013: unknown main item tag 0x0 [ 173.857639][ T5830] elecom 0003:056E:00FC.0013: unknown main item tag 0x0 [ 173.857663][ T5830] elecom 0003:056E:00FC.0013: unknown main item tag 0x0 [ 173.857687][ T5830] elecom 0003:056E:00FC.0013: unknown main item tag 0x0 [ 173.857712][ T5830] elecom 0003:056E:00FC.0013: unknown main item tag 0x0 [ 173.911388][ T5830] elecom 0003:056E:00FC.0013: hidraw0: USB HID vff.fe Device [HID 056e:00fc] on usb-dummy_hcd.2-1/input0 [ 173.932649][ T5993] hub 2-1:0.0: config failed, hub has too many ports! (err -19) [ 174.045144][ T31] usb 3-1: USB disconnect, device number 5 [ 174.150926][ T5993] usbhid 2-1:0.0: can't add hid device: -71 [ 174.151051][ T5993] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 174.195182][ T5993] usb 2-1: USB disconnect, device number 12 [ 174.265788][ T7800] fido_id[7800]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 174.455005][ T7807] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 174.554656][ T7810] overlayfs: missing 'workdir' [ 174.862270][ T7820] lo speed is unknown, defaulting to 1000 [ 174.862387][ T7820] lo speed is unknown, defaulting to 1000 [ 174.909625][ T31] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 174.919715][ T5844] Bluetooth: hci4: command tx timeout [ 174.935944][ T7821] wireguard: wg2: Could not create IPv4 socket [ 174.951007][ T7820] lo speed is unknown, defaulting to 1000 [ 174.997672][ T7820] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 175.056734][ T7820] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 175.071472][ T31] usb 6-1: Using ep0 maxpacket: 16 [ 175.074716][ T31] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.074834][ T31] usb 6-1: config 0 interface 0 has no altsetting 0 [ 175.074869][ T31] usb 6-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 175.074891][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.116818][ T31] usb 6-1: config 0 descriptor?? [ 175.360320][ T7820] lo speed is unknown, defaulting to 1000 [ 175.404107][ T7820] lo speed is unknown, defaulting to 1000 [ 175.421944][ T7820] lo speed is unknown, defaulting to 1000 [ 175.483524][ T7820] lo speed is unknown, defaulting to 1000 [ 175.504922][ T7820] lo speed is unknown, defaulting to 1000 [ 175.508060][ T7820] lo speed is unknown, defaulting to 1000 [ 175.547494][ T31] kye 0003:0458:0087.0014: unknown main item tag 0x0 [ 175.547531][ T31] kye 0003:0458:0087.0014: unknown main item tag 0x0 [ 175.569310][ T31] kye 0003:0458:0087.0014: unknown main item tag 0x0 [ 175.569356][ T31] kye 0003:0458:0087.0014: unknown main item tag 0x0 [ 175.569382][ T31] kye 0003:0458:0087.0014: unknown main item tag 0x0 [ 175.577667][ T7832] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 175.609729][ T31] kye 0003:0458:0087.0014: hidraw0: USB HID v0.05 Device [HID 0458:0087] on usb-dummy_hcd.5-1/input0 [ 175.648558][ T7835] netlink: 'syz.4.865': attribute type 9 has an invalid length. [ 175.725083][ T7837] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 175.789390][ T5925] usb 6-1: USB disconnect, device number 3 [ 175.817844][ T7838] fido_id[7838]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 175.952728][ T7840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.869'. [ 175.952752][ T7840] netlink: 12 bytes leftover after parsing attributes in process `syz.4.869'. [ 176.164575][ T7848] netlink: 24 bytes leftover after parsing attributes in process `syz.4.871'. [ 176.269375][ T5850] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 176.432295][ T5850] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 176.432346][ T5850] usb 2-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 176.432369][ T5850] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.465421][ T5850] usb 2-1: config 0 descriptor?? [ 176.817658][ T7863] netlink: 24 bytes leftover after parsing attributes in process `syz.4.878'. [ 176.939916][ T5850] greenasia 0003:0E8F:0012.0015: hidraw0: USB HID v0.00 Device [HID 0e8f:0012] on usb-dummy_hcd.1-1/input0 [ 176.939949][ T5850] greenasia 0003:0E8F:0012.0015: no inputs found [ 177.098851][ T10] usb 2-1: USB disconnect, device number 13 [ 177.127293][ T7871] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 177.219834][ T7868] fido_id[7868]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 177.793732][ T7879] syz.5.886 (7879) used greatest stack depth: 18216 bytes left [ 177.955557][ T7890] netlink: 8 bytes leftover after parsing attributes in process `syz.3.891'. [ 177.955580][ T7890] netlink: 4 bytes leftover after parsing attributes in process `syz.3.891'. [ 177.955605][ T7890] netlink: 'syz.3.891': attribute type 11 has an invalid length. [ 177.955619][ T7890] netlink: 'syz.3.891': attribute type 13 has an invalid length. [ 178.082085][ T7894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.895'. [ 178.782676][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 178.939379][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 178.959365][ T10] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 178.959394][ T10] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 178.959413][ T10] usb 4-1: Product: syz [ 178.959427][ T10] usb 4-1: Manufacturer: syz [ 178.959441][ T10] usb 4-1: SerialNumber: syz [ 179.009362][ T10] usb 4-1: config 0 descriptor?? [ 179.336604][ T10] usb 4-1: USB disconnect, device number 13 [ 179.393702][ T5906] udevd[5906]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 179.482540][ T5850] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 179.633460][ T5850] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 179.633491][ T5850] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.644139][ T5850] usb 3-1: config 0 descriptor?? [ 179.665820][ T31] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 179.838200][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1022, setting to 64 [ 179.838303][ T31] usb 5-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 179.838325][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.856765][ T31] usb 5-1: config 0 descriptor?? [ 179.872827][ T7936] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 179.901218][ T5850] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 179.999302][ T5993] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 180.107417][ T5850] [drm:udl_init] *ERROR* Selecting channel failed [ 180.149509][ T5993] usb 2-1: Using ep0 maxpacket: 8 [ 180.155428][ T5993] usb 2-1: unable to get BOS descriptor or descriptor too short [ 180.157786][ T5993] usb 2-1: config 4 interface 0 has no altsetting 0 [ 180.197778][ T5993] usb 2-1: string descriptor 0 read error: -22 [ 180.197928][ T5993] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 180.197952][ T5993] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.284004][ T5993] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 180.355162][ T5993] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 180.355585][ T5993] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 180.355632][ T5993] usb 2-1: media controller created [ 180.373660][ T5850] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 180.373684][ T5850] [drm] Initialized udl on minor 2 [ 180.428319][ T31] uclogic 0003:5543:0003.0016: hidraw0: USB HID v4.01 Device [HID 5543:0003] on usb-dummy_hcd.4-1/input0 [ 180.442747][ T5850] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 180.445879][ T5850] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 180.498438][ T5993] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 180.539502][ T31] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 180.568058][ T5850] usb 3-1: USB disconnect, device number 6 [ 180.584817][ T31] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 180.602775][ T5830] usb 5-1: USB disconnect, device number 12 [ 180.603388][ T5993] zl10353_read_register: readreg error (reg=127, ret==0) [ 180.731339][ T7949] fido_id[7949]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 180.774912][ T5993] usb 2-1: USB disconnect, device number 14 [ 181.400807][ T7969] netlink: 8 bytes leftover after parsing attributes in process `syz.5.930'. [ 181.833825][ T7983] nbd: must specify a size in bytes for the device [ 181.999372][ T5850] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 182.159485][ T5850] usb 2-1: Using ep0 maxpacket: 32 [ 182.167643][ T5850] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 182.167670][ T5850] usb 2-1: config 0 has no interface number 0 [ 182.190926][ T5850] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 182.190955][ T5850] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.190974][ T5850] usb 2-1: Product: syz [ 182.190987][ T5850] usb 2-1: Manufacturer: syz [ 182.191001][ T5850] usb 2-1: SerialNumber: syz [ 182.241417][ T5850] usb 2-1: config 0 descriptor?? [ 182.272720][ T5850] smsc95xx v2.0.0 [ 182.528943][ T8000] netlink: 'syz.2.943': attribute type 1 has an invalid length. [ 182.903312][ T5850] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 182.903341][ T5850] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 182.904003][ T5850] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 182.904284][ T5850] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 182.964237][ T5850] usb 2-1: USB disconnect, device number 15 [ 183.173792][ T8020] netlink: 'syz.4.952': attribute type 1 has an invalid length. [ 183.173813][ T8020] netlink: 4 bytes leftover after parsing attributes in process `syz.4.952'. [ 183.467949][ T8023] netlink: 348 bytes leftover after parsing attributes in process `syz.2.953'. [ 184.500408][ T8062] netlink: 20 bytes leftover after parsing attributes in process `syz.3.972'. [ 184.648555][ T8069] netlink: 24 bytes leftover after parsing attributes in process `syz.4.977'. [ 185.049328][ T31] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 185.205004][ T31] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 185.205038][ T31] usb 2-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 185.205063][ T31] usb 2-1: config 0 interface 0 has no altsetting 0 [ 185.205095][ T31] usb 2-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 185.205117][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.239581][ T31] usb 2-1: config 0 descriptor?? [ 185.730069][ T31] holtek 0003:1241:5015.0017: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.1-1/input0 [ 185.730117][ T31] holtek 0003:1241:5015.0017: no inputs found [ 185.914207][ T5993] usb 2-1: USB disconnect, device number 16 [ 186.066048][ T8109] fido_id[8109]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 186.069454][ T31] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 186.119587][ T5850] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 186.138215][ T8112] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 186.138249][ T8112] CIFS: Unable to determine destination address [ 186.269681][ T5850] usb 5-1: Using ep0 maxpacket: 16 [ 186.277103][ T5850] usb 5-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 186.277132][ T5850] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.277151][ T5850] usb 5-1: Product: syz [ 186.277165][ T5850] usb 5-1: Manufacturer: syz [ 186.277179][ T5850] usb 5-1: SerialNumber: syz [ 186.280389][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.280431][ T31] usb 6-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 186.280453][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.325526][ T5850] usb 5-1: config 0 descriptor?? [ 186.374923][ T31] usb 6-1: config 0 descriptor?? [ 186.408260][ T5850] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 186.467289][ T8118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.998'. [ 186.467312][ T8118] netlink: 12 bytes leftover after parsing attributes in process `syz.2.998'. [ 186.627087][ T5850] gspca_sn9c2028: read1 error -32 [ 186.709841][ T8120] tipc: Started in network mode [ 186.709873][ T8120] tipc: Node identity fec0ffffffffffff0000000000000001, cluster identity 4711 [ 186.709927][ T8120] tipc: Enabling of bearer rejected, failed to enable media [ 186.861144][ T5850] gspca_sn9c2028: read1 error -71 [ 186.861300][ T5850] sn9c2028 5-1:0.0: probe with driver sn9c2028 failed with error -71 [ 186.896701][ T5850] usb 5-1: USB disconnect, device number 13 [ 186.996080][ T31] razer 0003:1532:010E.0018: failed to enable macro keys: -71 [ 187.008590][ T31] razer 0003:1532:010E.0018: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.5-1/input0 [ 187.019029][ T31] usb 6-1: USB disconnect, device number 4 [ 187.395707][ T8134] fido_id[8134]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 187.925571][ T8155] tipc: Started in network mode [ 187.925601][ T8155] tipc: Node identity 0ec2723aa935, cluster identity 4711 [ 187.927165][ T8155] tipc: Enabled bearer , priority 0 [ 188.252180][ T31] hid-generic 0000:0004:0000.0019: unknown main item tag 0x0 [ 188.252216][ T31] hid-generic 0000:0004:0000.0019: unknown main item tag 0x0 [ 188.252240][ T31] hid-generic 0000:0004:0000.0019: unknown main item tag 0x0 [ 188.306949][ T31] hid-generic 0000:0004:0000.0019: hidraw0: HID v0.00 Device [syz0] on syz0 [ 188.520230][ T8176] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1025'. [ 188.609552][ T8174] fido_id[8174]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 189.042501][ T1231] tipc: Node number set to 2818011706 [ 189.132847][ T8200] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1037'. [ 189.552812][ T8206] netlink: 'syz.3.1038': attribute type 322 has an invalid length. [ 189.930912][ T8212] nbd: socks must be embedded in a SOCK_ITEM attr [ 190.180244][ T5830] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 190.368965][ T5830] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 190.371998][ T5830] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 190.372027][ T5830] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.372047][ T5830] usb 6-1: Product: syz [ 190.372061][ T5830] usb 6-1: Manufacturer: syz [ 190.372075][ T5830] usb 6-1: SerialNumber: syz [ 190.421802][ T5830] usb 6-1: config 0 descriptor?? [ 190.989923][ T1231] usb 6-1: USB disconnect, device number 5 [ 191.989326][ T31] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 192.116894][ T8278] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1073'. [ 192.157294][ T31] usb 6-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55 [ 192.157323][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.157340][ T31] usb 6-1: Product: syz [ 192.157353][ T31] usb 6-1: Manufacturer: syz [ 192.157365][ T31] usb 6-1: SerialNumber: syz [ 192.205824][ T31] usb 6-1: config 0 descriptor?? [ 192.219026][ T31] gspca_main: sonixb-2.14.0 probing 0c45:60a8 [ 192.642246][ T31] input: sonixb as /devices/platform/dummy_hcd.5/usb6/6-1/input/input8 [ 192.712799][ T8292] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1081'. [ 192.803372][ C1] vkms_vblank_simulate: vblank timer overrun [ 192.832531][ C1] vkms_vblank_simulate: vblank timer overrun [ 192.837261][ T5898] usb 6-1: USB disconnect, device number 6 [ 192.859760][ C1] vkms_vblank_simulate: vblank timer overrun [ 192.892366][ C1] vkms_vblank_simulate: vblank timer overrun [ 192.926032][ C1] vkms_vblank_simulate: vblank timer overrun [ 192.957608][ C1] vkms_vblank_simulate: vblank timer overrun [ 193.008408][ C1] vkms_vblank_simulate: vblank timer overrun [ 193.040330][ C1] vkms_vblank_simulate: vblank timer overrun [ 193.071335][ C1] vkms_vblank_simulate: vblank timer overrun [ 193.108446][ C1] vkms_vblank_simulate: vblank timer overrun [ 193.139598][ C1] vkms_vblank_simulate: vblank timer overrun [ 193.172669][ C1] vkms_vblank_simulate: vblank timer overrun [ 193.208008][ C1] vkms_vblank_simulate: vblank timer overrun [ 193.240563][ C1] vkms_vblank_simulate: vblank timer overrun [ 193.272738][ C1] vkms_vblank_simulate: vblank timer overrun [ 193.306391][ C1] vkms_vblank_simulate: vblank timer overrun [ 193.345784][ C1] vkms_vblank_simulate: vblank timer overrun [ 193.373785][ C1] vkms_vblank_simulate: vblank timer overrun [ 193.408453][ C1] vkms_vblank_simulate: vblank timer overrun [ 193.441836][ C1] vkms_vblank_simulate: vblank timer overrun [ 193.472601][ C1] vkms_vblank_simulate: vblank timer overrun [ 193.504414][ C1] vkms_vblank_simulate: vblank timer overrun [ 193.534290][ T37] audit: type=1804 audit(1758798442.603:17): pid=8300 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.1084" name="/newroot/223/cgroup.controllers" dev="tmpfs" ino=1145 res=1 errno=0 [ 193.562572][ C1] vkms_vblank_simulate: vblank timer overrun [ 193.597052][ C1] vkms_vblank_simulate: vblank timer overrun [ 193.635212][ C1] vkms_vblank_simulate: vblank timer overrun [ 193.670041][ C1] vkms_vblank_simulate: vblank timer overrun [ 193.695029][ T37] audit: type=1800 audit(1758798442.733:18): pid=8300 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.1084" name="cgroup.controllers" dev="tmpfs" ino=1145 res=0 errno=0 [ 193.703925][ C1] vkms_vblank_simulate: vblank timer overrun [ 193.725869][ C1] vkms_vblank_simulate: vblank timer overrun [ 193.758213][ C1] vkms_vblank_simulate: vblank timer overrun [ 193.841246][ C1] vkms_vblank_simulate: vblank timer overrun [ 193.873682][ C1] vkms_vblank_simulate: vblank timer overrun [ 193.906119][ C1] vkms_vblank_simulate: vblank timer overrun [ 193.938177][ C1] vkms_vblank_simulate: vblank timer overrun [ 193.981819][ C1] vkms_vblank_simulate: vblank timer overrun [ 194.017142][ C1] vkms_vblank_simulate: vblank timer overrun [ 194.050385][ C1] vkms_vblank_simulate: vblank timer overrun [ 194.080672][ C1] vkms_vblank_simulate: vblank timer overrun [ 194.111290][ C1] vkms_vblank_simulate: vblank timer overrun [ 194.145407][ C1] vkms_vblank_simulate: vblank timer overrun [ 194.180770][ C1] vkms_vblank_simulate: vblank timer overrun [ 194.212137][ C1] vkms_vblank_simulate: vblank timer overrun [ 194.246471][ C1] vkms_vblank_simulate: vblank timer overrun [ 194.279405][ C1] vkms_vblank_simulate: vblank timer overrun [ 194.311209][ C1] vkms_vblank_simulate: vblank timer overrun [ 194.343492][ C1] vkms_vblank_simulate: vblank timer overrun [ 194.374302][ C1] vkms_vblank_simulate: vblank timer overrun [ 194.407132][ C1] vkms_vblank_simulate: vblank timer overrun [ 194.450819][ C1] vkms_vblank_simulate: vblank timer overrun [ 194.472373][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.472448][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.486207][ C1] vkms_vblank_simulate: vblank timer overrun [ 194.516954][ C1] vkms_vblank_simulate: vblank timer overrun [ 194.539394][ T37] audit: type=1326 audit(1758798443.643:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8313 comm="syz.3.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc42e37eec9 code=0x7fc00000 [ 194.539442][ T37] audit: type=1326 audit(1758798443.643:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8313 comm="syz.3.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc42e37eec9 code=0x7fc00000 [ 194.539479][ T37] audit: type=1326 audit(1758798443.643:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8313 comm="syz.3.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc42e37eec9 code=0x7fc00000 [ 194.541191][ T37] audit: type=1326 audit(1758798443.643:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8313 comm="syz.3.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc42e37eec9 code=0x7fc00000 [ 194.541239][ T37] audit: type=1326 audit(1758798443.653:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8313 comm="syz.3.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc42e37eec9 code=0x7fc00000 [ 194.541267][ T37] audit: type=1326 audit(1758798443.653:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8313 comm="syz.3.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc42e37eec9 code=0x7fc00000 [ 194.541301][ T37] audit: type=1326 audit(1758798443.653:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8313 comm="syz.3.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc42e37eec9 code=0x7fc00000 [ 194.541335][ T37] audit: type=1326 audit(1758798443.653:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8313 comm="syz.3.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc42e37eec9 code=0x7fc00000 [ 194.558483][ C1] vkms_vblank_simulate: vblank timer overrun [ 194.588549][ C1] vkms_vblank_simulate: vblank timer overrun [ 194.633672][ C1] vkms_vblank_simulate: vblank timer overrun [ 194.666911][ C1] vkms_vblank_simulate: vblank timer overrun [ 194.697797][ C1] vkms_vblank_simulate: vblank timer overrun [ 194.732042][ C1] vkms_vblank_simulate: vblank timer overrun [ 195.827903][ C1] vkms_vblank_simulate: vblank timer overrun [ 195.862430][ C1] vkms_vblank_simulate: vblank timer overrun [ 195.922138][ C1] vkms_vblank_simulate: vblank timer overrun [ 195.954387][ C1] vkms_vblank_simulate: vblank timer overrun [ 196.034500][ C1] vkms_vblank_simulate: vblank timer overrun [ 196.066536][ C1] vkms_vblank_simulate: vblank timer overrun [ 196.099720][ C1] vkms_vblank_simulate: vblank timer overrun [ 196.129297][ C1] vkms_vblank_simulate: vblank timer overrun [ 196.160961][ C1] vkms_vblank_simulate: vblank timer overrun [ 196.194810][ C1] vkms_vblank_simulate: vblank timer overrun [ 196.226458][ C1] vkms_vblank_simulate: vblank timer overrun [ 196.258385][ C1] vkms_vblank_simulate: vblank timer overrun [ 196.291690][ C1] vkms_vblank_simulate: vblank timer overrun [ 196.322805][ C1] vkms_vblank_simulate: vblank timer overrun [ 196.370979][ C1] vkms_vblank_simulate: vblank timer overrun [ 196.418619][ C1] vkms_vblank_simulate: vblank timer overrun [ 196.452088][ C1] vkms_vblank_simulate: vblank timer overrun [ 196.485175][ C1] vkms_vblank_simulate: vblank timer overrun [ 196.514768][ C1] vkms_vblank_simulate: vblank timer overrun [ 196.551284][ C1] vkms_vblank_simulate: vblank timer overrun [ 196.582652][ C1] vkms_vblank_simulate: vblank timer overrun [ 196.613753][ C1] vkms_vblank_simulate: vblank timer overrun [ 196.641637][ C1] vkms_vblank_simulate: vblank timer overrun [ 196.674874][ C1] vkms_vblank_simulate: vblank timer overrun [ 196.707035][ C1] vkms_vblank_simulate: vblank timer overrun [ 196.741401][ C1] vkms_vblank_simulate: vblank timer overrun [ 196.789180][ C1] sched: DL replenish lagged too much [ 196.805263][ C1] vkms_vblank_simulate: vblank timer overrun [ 196.838931][ C1] vkms_vblank_simulate: vblank timer overrun [ 196.873046][ C1] vkms_vblank_simulate: vblank timer overrun [ 196.908211][ C1] vkms_vblank_simulate: vblank timer overrun [ 196.990956][ T5993] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 197.154578][ T5993] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.154623][ T5993] usb 5-1: New USB device found, idVendor=04b3, idProduct=3100, bcdDevice= 0.00 [ 197.154645][ T5993] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.238029][ T5993] usb 5-1: config 0 descriptor?? [ 197.770496][ T5993] lenovo 0003:04B3:3100.001A: hidraw0: USB HID v0.00 Device [HID 04b3:3100] on usb-dummy_hcd.4-1/input0 [ 197.933330][ T5993] usb 5-1: USB disconnect, device number 14 [ 198.182070][ T8339] fido_id[8339]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 211.897974][ T5839] Bluetooth: hci1: command 0x0406 tx timeout [ 212.850025][ T8387] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1114'. [ 214.515987][ T5842] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 214.543509][ T5842] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 214.545084][ T5842] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 214.548112][ T5842] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 214.559319][ T5842] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 214.603637][ T5842] Bluetooth: hci0: command 0x0406 tx timeout [ 214.603678][ T5842] Bluetooth: hci2: command 0x0406 tx timeout [ 214.603702][ T5842] Bluetooth: hci3: command 0x0406 tx timeout [ 216.503323][ T8409] program syz.3.1122 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 216.581471][ T8412] program syz.3.1122 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 216.789745][ T8414] sg_write: data in/out 209152/4 bytes for SCSI command 0x89-- guessing data in; [ 216.789745][ T8414] program syz.5.1124 not setting count and/or reply_len properly [ 217.016351][ T8416] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1125'. [ 219.014245][ T8412] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 224.123090][ T8440] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 224.144525][ T8440] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 224.165686][ T8440] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 224.168535][ T8440] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 224.188317][ T8440] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 230.252858][ T8440] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 230.290898][ T8440] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 230.294736][ T8440] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 230.298031][ T8440] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 230.326627][ T8440] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 233.234464][ T5842] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 233.257095][ T5842] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 233.258977][ T5842] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 233.277532][ T5842] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 233.278828][ T5842] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 233.422334][ T8401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1119'. [ 233.509724][ T8416] vlan3: entered promiscuous mode [ 233.509747][ T8416] gretap0: entered promiscuous mode [ 236.853388][ T5842] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 236.879554][ T5842] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 236.881724][ T5842] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 236.884762][ T5842] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 236.885548][ T5842] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 242.506217][ T8403] Bluetooth: hci6: command tx timeout [ 242.508956][ T8440] Bluetooth: hci7: command tx timeout [ 243.882303][ T8452] lo speed is unknown, defaulting to 1000 [ 243.986645][ T8399] lo speed is unknown, defaulting to 1000 [ 243.996079][ T8438] lo speed is unknown, defaulting to 1000 [ 244.002162][ T8456] lo speed is unknown, defaulting to 1000 [ 244.004995][ T8461] lo speed is unknown, defaulting to 1000 [ 244.521162][ T8440] Bluetooth: hci8: command tx timeout [ 244.521747][ T8440] Bluetooth: hci6: command tx timeout [ 244.521911][ T8440] Bluetooth: hci5: command tx timeout [ 244.599457][ T5839] Bluetooth: hci9: command tx timeout [ 244.600037][ T5839] Bluetooth: hci7: command tx timeout [ 246.605739][ T8440] Bluetooth: hci5: command tx timeout [ 246.605773][ T8440] Bluetooth: hci6: command tx timeout [ 246.605793][ T8440] Bluetooth: hci8: command tx timeout [ 246.679463][ T5839] Bluetooth: hci7: command tx timeout [ 246.679495][ T5839] Bluetooth: hci9: command tx timeout [ 246.755633][ T8452] chnl_net:caif_netlink_parms(): no params data found [ 246.912484][ T8456] chnl_net:caif_netlink_parms(): no params data found [ 246.993538][ T8461] chnl_net:caif_netlink_parms(): no params data found [ 248.679471][ T8440] Bluetooth: hci6: command tx timeout [ 248.679503][ T8440] Bluetooth: hci5: command tx timeout [ 248.680766][ T59] Bluetooth: hci8: command tx timeout [ 248.759461][ T5839] Bluetooth: hci7: command tx timeout [ 248.759506][ T59] Bluetooth: hci9: command tx timeout [ 250.763250][ T59] Bluetooth: hci8: command tx timeout [ 250.763289][ T59] Bluetooth: hci5: command tx timeout [ 250.843830][ T5839] Bluetooth: hci9: command tx timeout [ 255.918708][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.918803][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 273.691425][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 273.719710][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 273.722711][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 273.723938][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 273.724750][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 275.882580][ T5839] Bluetooth: hci1: command tx timeout [ 277.959453][ T5839] Bluetooth: hci1: command tx timeout [ 280.039640][ T5839] Bluetooth: hci1: command tx timeout [ 282.119651][ T5839] Bluetooth: hci1: command tx timeout [ 287.053936][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 287.097841][ T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 287.107968][ T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 287.118709][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 287.132107][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 289.159715][ T5839] Bluetooth: hci2: command tx timeout [ 291.249418][ T5839] Bluetooth: hci2: command tx timeout [ 291.306267][ T59] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 291.331481][ T59] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 291.333404][ T59] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 291.339455][ T59] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 291.375877][ T59] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 293.319391][ T59] Bluetooth: hci2: command tx timeout [ 293.409483][ T59] Bluetooth: hci10: command tx timeout [ 294.158631][ T5839] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 294.193387][ T5839] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 294.195114][ T5839] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 294.196239][ T5839] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 294.197729][ T5839] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 295.401958][ T59] Bluetooth: hci2: command tx timeout [ 295.479648][ T59] Bluetooth: hci10: command tx timeout [ 296.288559][ T59] Bluetooth: hci11: command tx timeout [ 297.278105][ T5839] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 297.307715][ T5839] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 297.329640][ T5839] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 297.330926][ T5839] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 297.331785][ T5839] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 297.559483][ T59] Bluetooth: hci10: command tx timeout [ 298.359571][ T59] Bluetooth: hci11: command tx timeout [ 299.399557][ T59] Bluetooth: hci12: command tx timeout [ 299.653977][ T59] Bluetooth: hci10: command tx timeout [ 300.439464][ T59] Bluetooth: hci11: command tx timeout [ 301.479515][ T59] Bluetooth: hci12: command tx timeout [ 302.519576][ T59] Bluetooth: hci11: command tx timeout [ 303.559473][ T59] Bluetooth: hci12: command tx timeout [ 305.639546][ T59] Bluetooth: hci12: command tx timeout [ 317.086112][ T5839] Bluetooth: hci4: command 0x0406 tx timeout [ 317.908798][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.908878][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 334.239137][ T5839] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 334.248673][ T5839] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 334.266724][ T5839] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 334.267887][ T5839] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 334.312939][ T5839] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 336.290551][ T8452] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR [ 336.350265][ T8399] chnl_net:caif_netlink_parms(): no params data found [ 336.372882][ T5839] Bluetooth: hci13: command tx timeout [ 338.439657][ T5839] Bluetooth: hci13: command tx timeout [ 340.519447][ T5839] Bluetooth: hci13: command tx timeout [ 342.599513][ T5839] Bluetooth: hci13: command tx timeout [ 344.970996][ T59] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 345.000628][ T59] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 345.002220][ T59] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 345.003382][ T59] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 345.043967][ T59] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 347.080186][ T5839] Bluetooth: hci14: command tx timeout [ 347.399817][ T38] INFO: task syz.1.1100:8336 blocked for more than 143 seconds. [ 347.399845][ T38] Not tainted syzkaller #0 [ 347.399855][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 347.399867][ T38] task:syz.1.1100 state:D stack:23688 pid:8336 tgid:8336 ppid:5836 task_flags:0x400040 flags:0x00004006 [ 347.399927][ T38] Call Trace: [ 347.399934][ T38] [ 347.399947][ T38] __schedule+0x16f3/0x4c20 [ 347.400001][ T38] ? __lock_acquire+0xab9/0xd20 [ 347.400025][ T38] ? __pfx___schedule+0x10/0x10 [ 347.400065][ T38] ? schedule+0x91/0x360 [ 347.400091][ T38] schedule+0x165/0x360 [ 347.400116][ T38] schedule_timeout+0x9a/0x270 [ 347.400139][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 347.400174][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 347.400198][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 347.400219][ T38] ? wait_for_completion+0x267/0x5d0 [ 347.400244][ T38] wait_for_completion+0x2bf/0x5d0 [ 347.400281][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 347.400306][ T38] ? __raw_spin_lock_init+0x45/0x100 [ 347.400336][ T38] rcu_barrier+0x463/0x570 [ 347.400366][ T38] kvm_mmu_uninit_vm+0x53/0x90 [ 347.400385][ T38] kvm_arch_destroy_vm+0x23d/0x280 [ 347.400409][ T38] kvm_put_kvm+0xf8e/0x1670 [ 347.400438][ T38] ? __pfx_kvm_vm_release+0x10/0x10 [ 347.400460][ T38] kvm_vm_release+0x46/0x50 [ 347.400487][ T38] __fput+0x45b/0xa80 [ 347.400516][ T38] task_work_run+0x1d4/0x260 [ 347.400538][ T38] ? __pfx_task_work_run+0x10/0x10 [ 347.400562][ T38] ? exit_to_user_mode_loop+0x40/0x110 [ 347.400588][ T38] exit_to_user_mode_loop+0xec/0x110 [ 347.400610][ T38] do_syscall_64+0x2bd/0x3b0 [ 347.400627][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 347.400649][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.400667][ T38] ? clear_bhb_loop+0x60/0xb0 [ 347.400689][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.400710][ T38] RIP: 0033:0x7f7b2765eec9 [ 347.400730][ T38] RSP: 002b:00007ffd3dff77e8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 347.400748][ T38] RAX: 0000000000000000 RBX: 00007f7b278b7da0 RCX: 00007f7b2765eec9 [ 347.400761][ T38] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 347.400772][ T38] RBP: 00007f7b278b7da0 R08: 00000000000010a0 R09: 000000033dff7adf [ 347.400784][ T38] R10: 00000000005fc494 R11: 0000000000000246 R12: 0000000000030572 [ 347.400796][ T38] R13: 00007f7b278b6090 R14: ffffffffffffffff R15: 00007ffd3dff7900 [ 347.400826][ T38] [ 347.400860][ T38] [ 347.400860][ T38] Showing all locks held in the system: [ 347.400869][ T38] 2 locks held by rcuc/1/28: [ 347.400879][ T38] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 347.400925][ T38] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 347.400969][ T38] 8 locks held by ktimers/1/29: [ 347.400979][ T38] 2 locks held by ksoftirqd/1/30: [ 347.400989][ T38] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 347.401032][ T38] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 347.401076][ T38] 4 locks held by kworker/1:0/31: [ 347.401086][ T38] #0: ffff888059e6b538 ((wq_completion)wg-crypt-wg0#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 347.401134][ T38] #1: ffffc90000a5fbc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 347.401178][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 347.401221][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 347.401265][ T38] 1 lock held by khungtaskd/38: [ 347.401275][ T38] #0: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 347.401320][ T38] 3 locks held by kworker/u8:4/70: [ 347.401330][ T38] #0: ffff88814cf97938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 347.401375][ T38] #1: ffffc9000153fbc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 347.401421][ T38] #2: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 347.401475][ T38] 3 locks held by kworker/u8:6/164: [ 347.401492][ T38] 3 locks held by kworker/u8:8/1507: [ 347.401502][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 347.401547][ T38] #1: ffffc9000553fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 347.401591][ T38] #2: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 347.401647][ T38] 2 locks held by getty/5599: [ 347.401657][ T38] #0: ffff88823bf440a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 347.401706][ T38] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 347.401759][ T38] 2 locks held by kworker/1:7/8334: [ 347.401769][ T38] 1 lock held by syz.1.1100/8336: [ 347.401779][ T38] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 347.401822][ T38] 3 locks held by syz.2.1110/8364: [ 347.401831][ T38] #0: ffff888038ec30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_release+0x5c/0x200 [ 347.401872][ T38] #1: ffff888038ec40a0 (&tty->ldisc_sem/1){+.+.}-{0:0}, at: tty_ldisc_release+0x80/0x200 [ 347.401917][ T38] #2: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 347.401958][ T38] 1 lock held by syz.4.1119/8401: [ 347.401968][ T38] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 347.402010][ T38] 2 locks held by syz.5.1125/8416: [ 347.402020][ T38] #0: ffffffff8f1f3d30 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 347.402070][ T38] #1: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 347.402111][ T38] 4 locks held by kworker/1:11/8417: [ 347.402121][ T38] #0: ffff888059e6a538 ((wq_completion)wg-crypt-wg0#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 347.402170][ T38] #1: ffffc90003a97bc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 347.402216][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 347.402258][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 347.402302][ T38] 1 lock held by syz.3.1130/8427: [ 347.402312][ T38] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 347.402359][ T38] 2 locks held by syz-executor/8456: [ 347.402369][ T38] #0: ffffffff8e43b9e0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 347.402419][ T38] #1: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 347.402464][ T38] 2 locks held by syz-executor/8461: [ 347.402480][ T38] #0: ffffffff8e43b9e0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 347.402530][ T38] #1: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 347.402575][ T38] 2 locks held by kworker/1:20/8492: [ 347.402586][ T38] 4 locks held by kworker/1:21/8493: [ 347.402597][ T38] 1 lock held by syz-executor/8499: [ 347.402606][ T38] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 347.402649][ T38] 1 lock held by syz-executor/8507: [ 347.402659][ T38] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 347.402700][ T38] 1 lock held by syz-executor/8513: [ 347.402710][ T38] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 347.402751][ T38] 1 lock held by syz-executor/8518: [ 347.402761][ T38] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 347.402803][ T38] 1 lock held by syz-executor/8521: [ 347.402813][ T38] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 347.402855][ T38] 1 lock held by syz-executor/8531: [ 347.402865][ T38] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 347.402907][ T38] 1 lock held by syz-executor/8537: [ 347.402917][ T38] #0: ffffffff8ecd3938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 347.402959][ T38] [ 347.402963][ T38] ============================================= [ 347.402963][ T38] [ 347.402979][ T38] NMI backtrace for cpu 0 [ 347.402998][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 347.403017][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 347.403027][ T38] Call Trace: [ 347.403033][ T38] [ 347.403039][ T38] dump_stack_lvl+0x189/0x250 [ 347.403067][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 347.403089][ T38] ? __pfx__printk+0x10/0x10 [ 347.403118][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 347.403142][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 347.403165][ T38] ? __pfx__printk+0x10/0x10 [ 347.403188][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 347.403211][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 347.403236][ T38] watchdog+0xf93/0xfe0 [ 347.403262][ T38] ? watchdog+0x1de/0xfe0 [ 347.403289][ T38] kthread+0x70e/0x8a0 [ 347.403314][ T38] ? __pfx_watchdog+0x10/0x10 [ 347.403335][ T38] ? __pfx_kthread+0x10/0x10 [ 347.403362][ T38] ? __pfx_kthread+0x10/0x10 [ 347.403386][ T38] ret_from_fork+0x436/0x7d0 [ 347.403410][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 347.403437][ T38] ? __switch_to_asm+0x39/0x70 [ 347.403452][ T38] ? __switch_to_asm+0x33/0x70 [ 347.403467][ T38] ? __pfx_kthread+0x10/0x10 [ 347.403497][ T38] ret_from_fork_asm+0x1a/0x30 [ 347.403529][ T38] [ 347.403535][ T38] Sending NMI from CPU 0 to CPUs 1: [ 347.403563][ C1] NMI backtrace for cpu 1 [ 347.403577][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 347.403594][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 347.403603][ C1] RIP: 0010:debug_lockdep_rcu_enabled+0x2a/0x40 [ 347.403626][ C1] Code: f3 0f 1e fa 31 c0 83 3d 97 4b 26 04 00 74 1e 83 3d 8a 5b 26 04 00 74 15 65 48 8b 0c 25 08 40 f6 91 31 c0 83 b9 1c 0b 00 00 00 <0f> 94 c0 e9 ce a7 03 00 cc cc cc cc cc cc cc cc cc cc cc cc cc cc [ 347.403639][ C1] RSP: 0018:ffffc90000a3f588 EFLAGS: 00000246 [ 347.403652][ C1] RAX: 0000000000000000 RBX: ffff88805e2f1a20 RCX: ffff88801ca89dc0 [ 347.403664][ C1] RDX: ffff88801ca8a200 RSI: ffffffff8d21af85 RDI: ffffffff8b621680 [ 347.403675][ C1] RBP: ffffc90000a3f690 R08: 0000000000000000 R09: ffffffff8af95c4b [ 347.403686][ C1] R10: 0000000000000000 R11: fffffbfff1e3ac67 R12: ffff888026592b40 [ 347.403697][ C1] R13: dffffc0000000000 R14: ffff888026592b40 R15: ffff888026592bb0 [ 347.403709][ C1] FS: 0000000000000000(0000) GS:ffff8881269bc000(0000) knlGS:0000000000000000 [ 347.403728][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 347.403739][ C1] CR2: 00007ffd817d6f19 CR3: 000000000d7a6000 CR4: 00000000003526f0 [ 347.403753][ C1] Call Trace: [ 347.403759][ C1] [ 347.403764][ C1] rt_spin_unlock+0x20/0x80 [ 347.403782][ C1] ieee80211_rx_irqsafe+0x55/0xd0 [ 347.403802][ C1] mac80211_hwsim_rx+0x279/0x630 [ 347.403820][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x164/0x180 [ 347.403840][ C1] ? __pfx_mac80211_hwsim_rx+0x10/0x10 [ 347.403861][ C1] mac80211_hwsim_tx_frame_no_nl+0xd46/0x11c0 [ 347.403885][ C1] ? ktime_get_with_offset+0x8c/0x2a0 [ 347.403903][ C1] ? __pfx_mac80211_hwsim_tx_frame_no_nl+0x10/0x10 [ 347.403929][ C1] ? mac80211_hwsim_monitor_rx+0x1d7/0x880 [ 347.403951][ C1] mac80211_hwsim_tx_frame+0x1b5/0x200 [ 347.403968][ C1] mac80211_hwsim_beacon_tx+0x3f0/0x860 [ 347.403983][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 347.404001][ C1] __iterate_interfaces+0x2a8/0x590 [ 347.404016][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 347.404032][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 347.404047][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 347.404062][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 347.404080][ C1] mac80211_hwsim_beacon+0xbb/0x1c0 [ 347.404097][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 347.404114][ C1] __hrtimer_run_queues+0x54f/0xd40 [ 347.404142][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 347.404160][ C1] ? ktime_get_update_offsets_now+0x3ab/0x3d0 [ 347.404181][ C1] hrtimer_run_softirq+0x1a3/0x2e0 [ 347.404196][ C1] handle_softirqs+0x22f/0x710 [ 347.404217][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 347.404238][ C1] run_ktimerd+0xcf/0x190 [ 347.404255][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 347.404273][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 347.404290][ C1] ? smpboot_thread_fn+0x5f4/0xa60 [ 347.404306][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 347.404321][ C1] smpboot_thread_fn+0x53f/0xa60 [ 347.404338][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 347.404358][ C1] kthread+0x70e/0x8a0 [ 347.404377][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 347.404393][ C1] ? __pfx_kthread+0x10/0x10 [ 347.404413][ C1] ? __pfx_kthread+0x10/0x10 [ 347.404432][ C1] ret_from_fork+0x436/0x7d0 [ 347.404449][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 347.404469][ C1] ? __switch_to_asm+0x39/0x70 [ 347.404482][ C1] ? __switch_to_asm+0x33/0x70 [ 347.404494][ C1] ? __pfx_kthread+0x10/0x10 [ 347.404513][ C1] ret_from_fork_asm+0x1a/0x30 [ 347.404534][ C1] [ 347.404561][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 347.404575][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 347.404594][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 347.404604][ T38] Call Trace: [ 347.404611][ T38] [ 347.404618][ T38] dump_stack_lvl+0x99/0x250 [ 347.404641][ T38] ? __asan_memcpy+0x40/0x70 [ 347.404662][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 347.404684][ T38] ? __pfx__printk+0x10/0x10 [ 347.404715][ T38] vpanic+0x281/0x750 [ 347.404740][ T38] ? __pfx_vpanic+0x10/0x10 [ 347.404760][ T38] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 347.404778][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 347.404811][ T38] panic+0xb9/0xc0 [ 347.404833][ T38] ? __pfx_panic+0x10/0x10 [ 347.404858][ T38] ? irq_work_queue+0xc3/0x140 [ 347.404883][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 347.404906][ T38] watchdog+0xfd2/0xfe0 [ 347.404933][ T38] ? watchdog+0x1de/0xfe0 [ 347.404959][ T38] kthread+0x70e/0x8a0 [ 347.404985][ T38] ? __pfx_watchdog+0x10/0x10 [ 347.405004][ T38] ? __pfx_kthread+0x10/0x10 [ 347.405032][ T38] ? __pfx_kthread+0x10/0x10 [ 347.405056][ T38] ret_from_fork+0x436/0x7d0 [ 347.405080][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 347.405107][ T38] ? __switch_to_asm+0x39/0x70 [ 347.405122][ T38] ? __switch_to_asm+0x33/0x70 [ 347.405137][ T38] ? __pfx_kthread+0x10/0x10 [ 347.405161][ T38] ret_from_fork_asm+0x1a/0x30 [ 347.405189][ T38] [ 347.405460][ T38] Kernel Offset: disabled