last executing test programs: 1m21.045525364s ago: executing program 0 (id=1620): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}]]}, 0x34}}, 0x0) 1m20.247063593s ago: executing program 3 (id=1623): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x64, 0x7, 0x8, 0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1m17.181188215s ago: executing program 0 (id=1626): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, r1, 0x1c42, 0x800}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x4}}}]}, 0x34}}, 0x0) 1m17.159850057s ago: executing program 3 (id=1629): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 1m17.143316133s ago: executing program 2 (id=1630): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x17dc, &(0x7f0000000100)={0x0, 0xcb43, 0x8, 0x200fff, 0x5dd}, &(0x7f0000000300), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_STATUS(r1, 0x1a, 0x0, 0x1) 1m16.696451115s ago: executing program 3 (id=1632): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="5eeced8e46dc3f0adf33c9f7b986", 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m16.647541659s ago: executing program 2 (id=1634): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unshare(0x22020600) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4}, 0xe) 1m16.287954283s ago: executing program 3 (id=1636): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r0, &(0x7f00000015c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f00000005c0)="f789eace66865fc3e8b96118f55df7a99ef07b73a5eacf92cf34a7400e1bfb268d21df3ff99f6113a7ee9e09b53042560e5c88e616f5f9d1fb9fba8fbe19fcb30ae96b70a35bf0837536343a0a38265004224f7b474c4062e70db5c808554b95cbe7e5b5980b2321b2ef24f53d85c5f6c3f0d4606196af92fb5b6f61986414aeec0fb522ecba723955c06f7b92b723ebc5bbcdbee83895431cc26f689513e5101a9244743d09697006c95e0443aca6d569ff6faa5a008e9774cf3aa5d2178c37f69c9c3430dc3d103e64df8567ac8f8f446451a126d7db365dabc140913ae996742526c28666b152c845d9a9442aa6554d7abddf081f853e0c07890ca38bdf16e33c77e2937faa6a2f573167ad55e329fa80bf812d03acb421e940e0c6b4b87355168f7bcfaea25553018af5b31b90542bd9611d860e56f39d6a682dc15356259fa695fc6dafc2b87319621fe6ac56a4ad0dcb78314826e2a3a8b8ec748abed88f6c42a06db4b03441cbbac6963f212d7556759c42fa5a4857dd33b9f5e00aaa2232d50348fb392b3090b30de70e52995f9d1ca40d87cdc0e8b6699b148f3f61ebd23f05347dd6fc32e70ba9b613824f0db933cfccd1b99075c078e5a12856a1996a73232845447fd79068cff2686ba21a83092a2a984c413bd613d40244acaf9a5f06ff6cbc5f1dbf4d1b124852598235d7a9a16e99e04ae8507e3acb78693e927bd768c3b70bd98206fe5db09ad8d1d5ecc028c6d6edc8297c5f6d0f320f0c0a6ff3f7adbf190a69eab88c4bb4c25e49130e3c05f6d9679eff1fabb52168ddc5e132916c74eee4baf1e582da965a3669086dafbb6d0abd0e3487cfc703fa4d2e97dc31ff900c0f9c04c1ae4a6b345dc80ae0e88a3d477f68e90cc8e29166af4e54956f3ba40e0136f5e6e8e938371807ab19ebf942cd35cbea1f7226e4c25d82ca0dbf00fe0a42f71df174d43ae044843b4d875274dfbe0ae8b014fe02a84d37f26fcbdbeff36c8099b6b56a671f19916ecbd4bad8d73fda46f20033071657b1cfa6f6e59dd2a101ab51a58c2530726a681def3802ff7cdf2fb6b1252d6373157a4be6aad70ae7134655c2e7714dd23e02253269524e7fa9bdacd1753cd2cf6e7221f00404e62b2c0801c7199fc254715b101ace89f577b62a2a49c6354b36836fd695a3b649a1ac78a964d65b76b65883c03bb1f1b2faec44fe890eb9ac3e73e0ea002f66d83a14409c3424aa2df5cdee190935ac452df9dce4876203df89735886b0962d939a80f2dfc0e372e69188b0721c7d9297ab6c9f23a83c405ed6bf9da7879bbbfa404e2e0a061f7c886f6a4d423f0727e0aeebb00a65fe93136fb0c6dbbb3b02a8218ac5af4653202f1da4ac8eb2c535384a49b352ab967412414c677213d0f40408d08e53d90f86a075f5cd73b47db25dbb586b476635cb871b44aa6e526c0eff3264ead96cc4a77c702d484a18b863687fa88c2bf6ea3d12e73db1264e77add12510118c9f39e0deec53789d4c895145220140dd040bc64e5cb3785a7dd62ea6b5c5d23c729b1fb8810e2c10442f840031f22ab374dc3f9a08312feb84f2bccb3401eba1ae24e78b812b3309b0d61c2e01b673aeab6734b73764c1e5c7c84eb6af17b168303b2461289d82958ba670943299a09e94e14c50ab73bb41de906b77529d5222fd3e9777c7de2d4d63f5a5780975d5fdd10a1acab607467f42cf13377db2ac5e54d133f0db7a91ae66f98382110a978d91d8b9cf7e71391bca56d4376f3f309c3ce4cd8d1aec66526b569d29cff3f0017abdd2e32240028c74b288f555d849df1ba015100b569231c0c64bcd0a1a14fed86f6df5b3639c142508abd0e8185e41955d0957a4560886e0264fedac6b0212c0a64f3890bbf96e82e95bf247ce53e5692a3b38b8c4d167937fd6ab86e57b83629ffe92cdfb5a13ba1c396b147747ec9ae62a12d80b576154d6403c74f1aebc16ebf6b7faf34c230db4bd475b0ab73bc74a2988289275dbb451bec66dd941fa2e66875be49773183841ef1240ab420474f05803a82e34f6f2cf426664979bdc31b7ead5eaa7c92d7cc9cee08d4a110a227c380f98a52150b4ee154030599733c057b0bc6434004145938d1d0303e9587004be4b582ee356985dee7fa40e63d8d87c42a44db794edee2751de77fdfdf621f746424e708241949b9336e106e2afdeafb384c0d2324e6dc26f6c58cfc95b52f89f8a9960f24fda5b40f5199c6b0ad80a704ba40cc81c56d42b58be3bbfdc224646c52d5e2fadec3547164bb215b91b35b1567d633223d3a17f080f70bee847091c6fbf164572cb1e84b913a0a33dd7d8f8124f8a31a6d902a8664c867d4df5f7cae30a729098ad5efae0499be7bc468e98863ca0edf3b2e3f8738b3f16b4964e1e086911a8b747bc4221046b5eb7e0b48a6134d81ab8e9af9b77674f38490019436c001eb0790498f7cf9601f8bd7256336f74598ae81803a5c458e1c2c76fe5b8d95ae6c98ce7b628c0b7a3a27e39bd5469bf1470c1e604d4411cf63160166ff40a837a04f7e393a05a534dfbcf013bc1fd4995efc511a7d310e98d643681119f8fff51819847f0458077ef5c5b330cc81dfcd37bbca6ae92b0354938a7eea5978a380a5f3472f4fefa4bae3c399af42a680530eaa460742a9cee9592315a3045bcad0f94f2ea1f6f8923246f9657b4ffd0d25c2a6b7a77ee6dd172e1399be1309d68581012cd28f055d14f983ef4452f5a9f03e11381085141ae9c8050e681c6514b0d078073898e7e5806c2785394e0ec03c32563d3812856984c58f89d0ac6636c8c3a6f8f2aec0f68150b4f35f7d03d604d41be2ec2e052da4e3cc0089bde5c02e9353f3ad6c9129e99dcf12ef6409d71cdfe02ced7c8696bfaa7166e92c0fd98f30b6291296a38d8b7d262180145deb24ca780c0b1732da565581d4b394a5aa26ae5a4b327e8036a80c1258d32ce03c40093c62cd50e48846147cd5ff158204ce02a1419942d36be982211243149e541ccf84d5bc3d275f849a55d30e13679d988717f40f3ab0ba2d14471e00eb5068edf5e02b5598bc758ed7fc18ef73f9930c4ab04c6bb6c08093d7cb9430b2cd4a9317467e7f880ae90912cba843a0b5cb8cfb1cd48c91f9cf4c3569b8597d844b57e30db22f2929eef16ef0a827004a0024935f182583a3cf63c8a2fd0961c16ed9e32137238903896e6630146ffdbdaaff0e6ef1d28a229eec10a824ea1211afcf0dce823324a5452b44e723f4cffaaaf198545bf10f9cdd5c9b188cbf8f3f4d5b3acf4122da0d2881101d37c5b6d46fd63c6ac19b8800a2e9e23ca737ea8beb32d53fea858ec40e52c48300b450b29ea8e8c7b7c5495c5ec27df818ab35b1734bca21019eed64a2df0f93981193bcc5f45c3dce1fb1e26c3f318a699f2df7f0ec94d8326130494990707c6827f9db4580f77a6f2fbda03b7b548b3ce56143b6cac8152b2596ba25242e56b5fdb9564df0866e65ce5f2cc5dcdcac7aeafa3118da373114272650e3187f5b1cccb54865449701afa927bb5c25eac46bf8140d6fd2db4b06871c60caed87526110134856efeb0ff3b638d62882e24574776597ade910468f76f6a50c66e12f10415f36c2804704f71b1b0a25b152da2072039026dd47d58c7e76791192dc14e93915c5f8110223b1efe3c09e8936037cb4c98cd943f21f56ef90b5a586a5e2b6552daaba8e96d8dd4726b8adac11d76274be37cf6e9905a5345be00c0943e4d134ab1f30b3f1f333a8426ae020053123ac6f8ed1907c5848d5529c38c1b1064dfe34c82eaf46e01aa0f166e155a2d94f8518362b4ebd6a47b01435f64ff82a7a42677601b96c19be6e0902a3b74530a9ca9c0d731d856c2a92e5beb15022bfaa9e5287d99fe22b304ed7e08df76f8d5bf81d1e265b24b2674865ad3a241203b3efe1a719ba9317a6bd579cf492b92b9313ed6deb7e26697f7bc111ef3b5e9a99252d312498f5e4c31170b5f141d0a9788dd5aa8ea58df93420350a0b94a20af120bc13c4ca3c5ffb101245ecea35d92e5b0a749feb3239573af37d3ef4b95a736a62748be7a2e3f1e1023f91c63edadcc876dd79b85d290bf1fc7bd3f28345dc326f692967b2f4f6a4c1293c9711c0946073f87a6b8343160da56afbf03d3cf6da70df550dfb3df3c0e5f5761afe584e288a2ffaf3ef21659974ffc9b5d8b38da047a6ef0416653f910c6308644800c5b003eab1dbda7da89bd2abd1a35add423d8751f1cf4b437bec8551ede2ea8c4ec88653746e78249c608821710e73c7b555d3629f2dd583e214f891189eaf5ef91533a871d1cfbe4d4d677cc122f96f294c7a3b5e71dc8c27cea886febbd7d9858366360b5bca0a0bf97263de609ced763dd63aef15b73da26bdb812ff6691df3152e2be6900532d70770dd23743c96f9419351548aeb35ff80111c00114a3dc1e902005d9c2e226ae8861ea682e54f2c3c0f495dc0cd5434270c222d36cca3b7dfc29636613d4f637d2de2cc18bc0b09aa267c097c9f353309de33e43203a9f1b0675a13472d421d94869b8c2c0da4bd6bd334ae91dcbc788c5212abeb8d3b384be817157809bb998b71086c4c49194570cf44aeb3cf1e25eb06b2cbd6d47e89b1bc68e27e278418ce78be139ef9287a8380a4f2bb4e82d58dc7797723e7c35cdd8bfeb15c882d33f65afee100b929a1508b3561edeb8e2c46400b3416539339b559ed48e3ddf72f0d7d59e7117b8267d81b3fd5fd86fa48e3d9f06b4dedf8e5934bfc9603d82e86080915b5420a1cfde4cc47d679b7bbe02e94756fdcafcfbad6af7edf7ae45aa1b0a1f0576eabd362ff1a26a94380f133dbae7760773c6ddcf1d68dfeebca0174792107b6df31cdc473e3875072c1286f75b31acd01e1ea56042ec6574bb5e67026770d38ad8c87145424e331c62b2f232fc42851baf6ea7d34395cfcfbbae8be650836152f21596d97a5017ed86d00605ab4bdaf8e1cdd79c96949b02206d52bdb55f2a30913cb48fa811166edac1b550ec3fed911f73750f4a38ba8e1ecb42c4a7d912f5fd7656394746af2c7b1b7be4069535329118ed9a54b4d114c6b9419fee211be8ef3a5d0b1075bbc843749e3a46f5b4cd19dca5aee2b8fae4e12135ad1055b0edf05934eb8f5eb2a7b97ba438e9911a46490f332218d3e19a627f4f957ab6598694bc91c35020de0ac070c295a4790bc3f383166d9252582634d9ceaa64f7ce80d64a29ba33cc5a3b6296c6d400a510e2ffd34d2f29fca2765a5a82fd042e68f0998db2bf96573413271b5668142872e72db4e601664728f5ff88607b94e6aab470a23268c7d971dba5fff0fca97356cd1d2e939303deb72ac27c08d8e3d70c66b991687a03572b64f6739ef0a1f3a24b6b3158bb044a458943fc9afeb9a401ae6b6a4933439522d75ae55307e6d297cbc8b0fb15bbb99e30c835b433f58c5afac3266ffa8e9ea00d05a818f10a1bdf882fd7d578d19f9c9d41850185c6282fa460a184deb832e4aecd0e791225a8c7ee6926270caa7b737b298dbb09e7d8a226d8e3243cd66ef2c0524443b3962ef7bfbfc757e76224ae1bea32619a6b42ea227c190097218fb13196d9670c4a6aacac5f64a45e7afc2d98be4bf646665bf93083ceb199f4a7643df1195d6c455b2c32ed953b1cb6834fe359d23760881a9e5da564e4d7a4d0db600512c61a630aee1e7a4e7150d0a7c72e7bbc46830d25e04aeafa75d1cb79e5e33d4873640a8fa72b845ef1aa6668cbe7", 0x1000}, {&(0x7f0000000140)="06", 0x1}], 0x2}}], 0x1, 0x4000800) 1m16.000265604s ago: executing program 3 (id=1639): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@bridge_setlink={0x38, 0x13, 0xa2f, 0x70bd28, 0x25cfdbfd, {0x7, 0x0, 0x68, r1, 0x16258, 0x1104}, [@IFLA_LINKINFO={0x18, 0x1a, 0x0, 0x1, @vlan={{0x9}, {0x8, 0x4, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20}, 0x50) 1m15.668487165s ago: executing program 3 (id=1640): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000002c000083000040"]) 1m9.307826134s ago: executing program 2 (id=1656): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0x0) 1m9.260524453s ago: executing program 0 (id=1657): bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c51000/0x2000)=nil) 1m9.243385795s ago: executing program 0 (id=1660): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000300)="63ecedda41c3903803ed69d8d41f", 0x0, 0x0, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1m8.763715768s ago: executing program 0 (id=1663): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2600000012009761"], 0x26}}, 0x0) 1m8.357353853s ago: executing program 0 (id=1665): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000240)={0xc0, 0x0, 0x10000}) ioctl$KVM_RESET_DIRTY_RINGS(r1, 0xaec7) 1m7.135527411s ago: executing program 2 (id=1666): r0 = creat(&(0x7f0000000100)='./file0\x00', 0x96) close(r0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1m6.160839206s ago: executing program 2 (id=1667): r0 = socket(0x11, 0xa, 0x5) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @loopback}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendto$inet(r0, &(0x7f0000000000)="cf3a19d02404e49cf90a0a4363d1", 0x5ee, 0x800, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10) 1m1.612427368s ago: executing program 2 (id=1669): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a4000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004400000000b0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4008000) 1m0.567581647s ago: executing program 32 (id=1640): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000002c000083000040"]) 59.020134633s ago: executing program 1 (id=1674): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1, 0x840, 0x0, {}, {0x77359400}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"}}, 0x80}}, 0x0) 53.116015684s ago: executing program 33 (id=1665): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000240)={0xc0, 0x0, 0x10000}) ioctl$KVM_RESET_DIRTY_RINGS(r1, 0xaec7) 51.597197104s ago: executing program 1 (id=1681): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r0, &(0x7f00000007c0)={0x2020}, 0x20) 50.215067562s ago: executing program 1 (id=1682): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) 46.097342575s ago: executing program 34 (id=1669): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a4000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004400000000b0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4008000) 36.458961833s ago: executing program 1 (id=1685): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c000480280001800a0001006d617463680000001800028008000240000000010400030008000100746370000900010073797a30000000000900020073797a32"], 0x80}}, 0x4048014) socket(0x0, 0x3, 0x0) 29.024885706s ago: executing program 4 (id=1687): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000c1001000000000001c000000850000000e00000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 22.31264329s ago: executing program 1 (id=1688): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, &(0x7f00000003c0)=[{&(0x7f00000001c0)='f', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x2, 0x3, 0x80f8d6b5}, 0x10) 22.310924793s ago: executing program 1 (id=1689): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x34, r1, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_WME={0x4}]}]}, 0x34}}, 0x0) 17.325122031s ago: executing program 4 (id=1690): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) accept4(r0, &(0x7f0000000340)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x0, 0x80000) 17.30686601s ago: executing program 4 (id=1691): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000000240)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) shmget(0x2, 0x4000, 0x200, &(0x7f0000ffa000/0x4000)=nil) 16.652588455s ago: executing program 4 (id=1692): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82801, 0xf) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x9, 0x4000000000000ffd, 0x0, 0x0, 0x0, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}}) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1) 16.516854285s ago: executing program 4 (id=1693): r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_int(r0, 0x0, 0x1, &(0x7f0000000000)=0x3b1e, 0x4) 15.399277046s ago: executing program 4 (id=1694): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xffffff1f, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x821, 0x5}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 7.067399693s ago: executing program 35 (id=1689): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x34, r1, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_WME={0x4}]}]}, 0x34}}, 0x0) 0s ago: executing program 36 (id=1694): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xffffff1f, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x821, 0x5}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) kernel console output (not intermixed with test programs): expected cc 0x0c38 length: 249 > 2 [ 90.892040][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.926720][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.928352][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.935786][ T5158] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.974253][ T5158] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.974255][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.976127][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.977467][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.979770][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.982131][ T5850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.985371][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.002737][ T5158] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.994542][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 92.059425][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 92.142457][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 92.297168][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 92.425249][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 92.931812][ T5158] Bluetooth: hci1: command tx timeout [ 93.009896][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.011856][ T5158] Bluetooth: hci4: command tx timeout [ 93.011982][ T5158] Bluetooth: hci2: command tx timeout [ 93.012443][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.013070][ T5851] bridge_slave_0: entered allmulticast mode [ 93.016009][ T5851] bridge_slave_0: entered promiscuous mode [ 93.090323][ T5845] Bluetooth: hci0: command tx timeout [ 93.090592][ T5845] Bluetooth: hci3: command tx timeout [ 93.227001][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.227112][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.227295][ T5851] bridge_slave_1: entered allmulticast mode [ 93.229369][ T5851] bridge_slave_1: entered promiscuous mode [ 93.260323][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.260455][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.260632][ T5846] bridge_slave_0: entered allmulticast mode [ 93.263582][ T5846] bridge_slave_0: entered promiscuous mode [ 93.532075][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.532245][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.532926][ T5846] bridge_slave_1: entered allmulticast mode [ 93.535101][ T5846] bridge_slave_1: entered promiscuous mode [ 93.535974][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.536081][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.536190][ T5839] bridge_slave_0: entered allmulticast mode [ 93.538650][ T5839] bridge_slave_0: entered promiscuous mode [ 93.873981][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.874232][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.874450][ T5839] bridge_slave_1: entered allmulticast mode [ 93.877182][ T5839] bridge_slave_1: entered promiscuous mode [ 93.881883][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.883434][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.883562][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.883737][ T5838] bridge_slave_0: entered allmulticast mode [ 93.886665][ T5838] bridge_slave_0: entered promiscuous mode [ 94.131411][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.133375][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.133540][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.133780][ T5838] bridge_slave_1: entered allmulticast mode [ 94.135802][ T5838] bridge_slave_1: entered promiscuous mode [ 94.138038][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.138170][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.138350][ T5847] bridge_slave_0: entered allmulticast mode [ 94.145212][ T5847] bridge_slave_0: entered promiscuous mode [ 94.267132][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.485664][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.485770][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.485881][ T5847] bridge_slave_1: entered allmulticast mode [ 94.487420][ T5847] bridge_slave_1: entered promiscuous mode [ 94.496779][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.503903][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.804214][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.806160][ T5851] team0: Port device team_slave_0 added [ 94.810933][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.010415][ T5158] Bluetooth: hci1: command tx timeout [ 95.029569][ T5851] team0: Port device team_slave_1 added [ 95.038944][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.051779][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.054715][ T5846] team0: Port device team_slave_0 added [ 95.090343][ T5158] Bluetooth: hci2: command tx timeout [ 95.090381][ T5158] Bluetooth: hci4: command tx timeout [ 95.170282][ T5845] Bluetooth: hci3: command tx timeout [ 95.170316][ T5845] Bluetooth: hci0: command tx timeout [ 95.315540][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.317143][ T5846] team0: Port device team_slave_1 added [ 95.318906][ T5839] team0: Port device team_slave_0 added [ 95.803483][ T5839] team0: Port device team_slave_1 added [ 95.805495][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.805513][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.805538][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.818521][ T5838] team0: Port device team_slave_0 added [ 96.073560][ T5838] team0: Port device team_slave_1 added [ 96.074882][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.074893][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.074916][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.076809][ T5847] team0: Port device team_slave_0 added [ 96.078672][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.078681][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.078693][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.267397][ T5847] team0: Port device team_slave_1 added [ 96.268363][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.268375][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.268390][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.282413][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.282436][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.282461][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.484138][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.484155][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.484177][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.585037][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.585053][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.585077][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.768156][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.768171][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.768185][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.771297][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.771312][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.771335][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.976156][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.976171][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.976184][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.004401][ T5851] hsr_slave_0: entered promiscuous mode [ 97.005947][ T5851] hsr_slave_1: entered promiscuous mode [ 97.092093][ T5158] Bluetooth: hci1: command tx timeout [ 97.170296][ T5158] Bluetooth: hci4: command tx timeout [ 97.170335][ T5158] Bluetooth: hci2: command tx timeout [ 97.248931][ T5846] hsr_slave_0: entered promiscuous mode [ 97.251847][ T5845] Bluetooth: hci0: command tx timeout [ 97.251878][ T5845] Bluetooth: hci3: command tx timeout [ 97.265276][ T5846] hsr_slave_1: entered promiscuous mode [ 97.266347][ T5846] debugfs: 'hsr0' already exists in 'hsr' [ 97.266471][ T5846] Cannot create hsr debugfs directory [ 97.463332][ T5839] hsr_slave_0: entered promiscuous mode [ 97.464679][ T5839] hsr_slave_1: entered promiscuous mode [ 97.465807][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 97.465835][ T5839] Cannot create hsr debugfs directory [ 97.901324][ T5838] hsr_slave_0: entered promiscuous mode [ 97.902930][ T5838] hsr_slave_1: entered promiscuous mode [ 97.903967][ T5838] debugfs: 'hsr0' already exists in 'hsr' [ 97.903991][ T5838] Cannot create hsr debugfs directory [ 98.227456][ T5847] hsr_slave_0: entered promiscuous mode [ 98.229212][ T5847] hsr_slave_1: entered promiscuous mode [ 98.229773][ T5847] debugfs: 'hsr0' already exists in 'hsr' [ 98.229794][ T5847] Cannot create hsr debugfs directory [ 99.170286][ T5158] Bluetooth: hci1: command tx timeout [ 99.252451][ T5158] Bluetooth: hci2: command tx timeout [ 99.252488][ T5158] Bluetooth: hci4: command tx timeout [ 99.330339][ T5845] Bluetooth: hci3: command tx timeout [ 99.330372][ T5158] Bluetooth: hci0: command tx timeout [ 99.819943][ T5851] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 99.876680][ T5851] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 99.916365][ T5851] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 99.978109][ T5851] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 100.131008][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 100.171338][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 100.200918][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 100.275263][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 100.447065][ T5839] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 100.486915][ T5839] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 100.528331][ T5839] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 100.586818][ T5839] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 100.805990][ T5838] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.851791][ T5838] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.887867][ T5838] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.958391][ T5838] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 101.148776][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.175600][ T5847] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 101.216467][ T5847] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 101.259576][ T5847] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 101.294192][ T5847] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 101.404134][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.480691][ T3623] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.480924][ T3623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.556120][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.558680][ T3623] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.561711][ T3623] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.714248][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.740679][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.803937][ T3623] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.804324][ T3623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.869805][ T141] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.869899][ T141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.897275][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.939596][ T3599] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.939791][ T3599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.979594][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.006330][ T3599] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.006448][ T3599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.134803][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.212659][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.235715][ T1826] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.235944][ T1826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.310384][ T3538] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.310530][ T3538] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.424344][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.506355][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.506681][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.572936][ T3538] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.573118][ T3538] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.662016][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.117009][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.274277][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.524860][ T5846] veth0_vlan: entered promiscuous mode [ 103.584062][ T5846] veth1_vlan: entered promiscuous mode [ 103.644142][ T5839] veth0_vlan: entered promiscuous mode [ 103.650723][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.677731][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.723049][ T5851] veth0_vlan: entered promiscuous mode [ 103.725441][ T5839] veth1_vlan: entered promiscuous mode [ 103.776979][ T5851] veth1_vlan: entered promiscuous mode [ 103.823837][ T5846] veth0_macvtap: entered promiscuous mode [ 103.868477][ T5846] veth1_macvtap: entered promiscuous mode [ 103.964496][ T5839] veth0_macvtap: entered promiscuous mode [ 103.988804][ T5847] veth0_vlan: entered promiscuous mode [ 103.998893][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.028206][ T5839] veth1_macvtap: entered promiscuous mode [ 104.048701][ T5838] veth0_vlan: entered promiscuous mode [ 104.066489][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.068904][ T5851] veth0_macvtap: entered promiscuous mode [ 104.097773][ T5847] veth1_vlan: entered promiscuous mode [ 104.116772][ T3538] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.123042][ T5838] veth1_vlan: entered promiscuous mode [ 104.125184][ T5851] veth1_macvtap: entered promiscuous mode [ 104.135380][ T3538] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.155488][ T3538] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.169298][ T3538] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.197555][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.288479][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.395554][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.395630][ T3503] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.446045][ T3503] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.473111][ T3503] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.498515][ T3503] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.510823][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.649738][ T5847] veth0_macvtap: entered promiscuous mode [ 104.658973][ T3503] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.685214][ T5838] veth0_macvtap: entered promiscuous mode [ 104.686332][ T3503] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.757591][ T3503] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.784410][ T5847] veth1_macvtap: entered promiscuous mode [ 104.792559][ T1826] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.792587][ T1826] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.799963][ T3503] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.834574][ T5838] veth1_macvtap: entered promiscuous mode [ 105.099743][ T2754] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.099770][ T2754] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.143199][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.267106][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.271285][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.299846][ T141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.299871][ T141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.321936][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.383148][ T141] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.393390][ T141] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.416497][ T141] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.458601][ T141] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.460386][ T1826] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.460405][ T1826] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.521206][ T141] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.553886][ T141] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.556042][ T141] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.650788][ T141] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.716215][ T2754] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.716235][ T2754] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.874755][ T3599] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.874777][ T3599] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.371413][ T2754] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.371434][ T2754] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.654901][ T5974] input: syz0 as /devices/virtual/input/input5 [ 106.657929][ T3538] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.657955][ T3538] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.694235][ T5975] Driver unsupported XDP return value 0 on prog (id 2) dev N/A, expect packet loss! [ 106.966322][ T141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.966343][ T141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.259791][ T3503] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.259811][ T3503] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.928511][ T5990] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 108.535522][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 108.766923][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 108.824314][ T6003] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 108.825958][ T10] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 108.825990][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.070802][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 109.070823][ T10] pvrusb2: ********** [ 109.070829][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 109.070841][ T10] pvrusb2: Important functionality might not be entirely working. [ 109.070849][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 109.070859][ T10] pvrusb2: ********** [ 109.311921][ T2364] pvrusb2: Invalid write control endpoint [ 109.537801][ T5995] pvrusb2: Invalid write control endpoint [ 109.574931][ T5930] usb 2-1: USB disconnect, device number 2 [ 109.662322][ T2364] pvrusb2: Invalid write control endpoint [ 109.664640][ T2364] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 109.664652][ T2364] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 109.664659][ T2364] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 109.664668][ T2364] pvrusb2: Device being rendered inoperable [ 109.673069][ T2364] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 109.673131][ T2364] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 109.696153][ T2364] pvrusb2: Attached sub-driver cx25840 [ 109.696188][ T2364] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 109.696196][ T2364] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 112.083595][ T6071] mmap: syz.4.45 (6071) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 113.117302][ T6082] input: syz1 as /devices/virtual/input/input6 [ 113.508023][ T6095] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 113.990092][ T5929] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 114.077383][ T6106] netlink: 'syz.0.62': attribute type 1 has an invalid length. [ 114.147934][ T5929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.147985][ T5929] usb 4-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 114.148008][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.196253][ T5929] usb 4-1: config 0 descriptor?? [ 114.764643][ T5929] hid-rmi 0003:17EF:6085.0001: hidraw0: USB HID vff.fe Device [HID 17ef:6085] on usb-dummy_hcd.3-1/input0 [ 114.848606][ T5929] usb 4-1: USB disconnect, device number 2 [ 115.026776][ T6113] fido_id[6113]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 115.108631][ T6116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.66'. [ 115.108672][ T6116] netlink: 12 bytes leftover after parsing attributes in process `syz.0.66'. [ 115.251000][ T6116] Zero length message leads to an empty skb [ 115.251073][ T3538] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.253707][ T3538] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.253750][ T3538] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.253783][ T3538] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.696466][ T6125] netlink: 8 bytes leftover after parsing attributes in process `syz.4.71'. [ 116.570750][ T5929] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 116.794148][ T5929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 27750, setting to 64 [ 116.799551][ T5929] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 116.799582][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.799602][ T5929] usb 4-1: Product: syz [ 116.799624][ T5929] usb 4-1: Manufacturer: syz [ 116.799638][ T5929] usb 4-1: SerialNumber: syz [ 116.859821][ T5929] usb 4-1: config 0 descriptor?? [ 117.631866][ T5929] usb 4-1: USB disconnect, device number 3 [ 117.803807][ T5958] udevd[5958]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 118.061786][ T37] audit: type=1326 audit(1758235770.561:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6126 comm="syz.1.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a82beeba9 code=0x7ffc0000 [ 118.061834][ T37] audit: type=1326 audit(1758235770.581:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6126 comm="syz.1.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a82beeba9 code=0x7ffc0000 [ 118.799882][ T6150] netlink: 28 bytes leftover after parsing attributes in process `syz.3.79'. [ 119.407219][ T6164] warning: `syz.3.85' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 120.888754][ T6199] netlink: 'syz.1.99': attribute type 11 has an invalid length. [ 121.332810][ T6196] tap0: tun_chr_ioctl cmd 1074025677 [ 121.333079][ T6196] tap0: linktype set to 804 [ 121.590198][ T6206] cgroup: fork rejected by pids controller in /syz4 [ 122.511044][ T6494] process 'syz.4.114' launched '/dev/fd/3' with NULL argv: empty string added [ 122.904433][ T6500] veth0_to_bond: entered allmulticast mode [ 123.349112][ T6517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.120'. [ 123.349334][ T6517] netlink: 'syz.3.120': attribute type 5 has an invalid length. [ 125.190773][ T5916] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 125.251439][ T6558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.138'. [ 125.352291][ T5916] usb 1-1: Using ep0 maxpacket: 8 [ 125.382644][ T5916] usb 1-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=7a.1a [ 125.382673][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.382690][ T5916] usb 1-1: Product: syz [ 125.382703][ T5916] usb 1-1: Manufacturer: syz [ 125.382716][ T5916] usb 1-1: SerialNumber: syz [ 125.405964][ T5930] IPVS: starting estimator thread 0... [ 125.463163][ T5916] usb 1-1: config 0 descriptor?? [ 125.481200][ T5916] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 125.490984][ T6561] IPVS: using max 7 ests per chain, 16800 per kthread [ 125.654440][ T6565] netlink: 'syz.4.142': attribute type 1 has an invalid length. [ 125.654462][ T6565] netlink: 'syz.4.142': attribute type 2 has an invalid length. [ 125.675230][ T6565] netlink: 'syz.4.142': attribute type 1 has an invalid length. [ 125.675253][ T6565] netlink: 'syz.4.142': attribute type 2 has an invalid length. [ 125.692953][ T5916] gspca_sn9c2028: read1 error -32 [ 125.693749][ T5916] gspca_sn9c2028: read1 error -32 [ 125.922132][ T5929] usb 1-1: USB disconnect, device number 2 [ 126.340222][ T5840] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 126.402284][ T6581] nbd0: detected capacity change from 0 to 127 [ 126.425377][ T5158] block nbd0: Receive control failed (result -104) [ 126.506232][ T5840] usb 2-1: Using ep0 maxpacket: 8 [ 126.523613][ T5840] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 126.523649][ T5840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.523675][ T5840] usb 2-1: Product: syz [ 126.523690][ T5840] usb 2-1: Manufacturer: syz [ 126.523704][ T5840] usb 2-1: SerialNumber: syz [ 126.567966][ T5840] usb 2-1: config 0 descriptor?? [ 126.835869][ T5840] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 127.401124][ T6599] netlink: 'syz.3.156': attribute type 21 has an invalid length. [ 127.401252][ T6599] netlink: 132 bytes leftover after parsing attributes in process `syz.3.156'. [ 127.401295][ T6599] netlink: 'syz.3.156': attribute type 1 has an invalid length. [ 127.480098][ T5840] usb write operation failed. (-71) [ 127.587521][ T6602] netlink: 20 bytes leftover after parsing attributes in process `syz.4.158'. [ 127.609017][ T5840] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 127.631967][ T5840] dvbdev: DVB: registering new adapter (Terratec H7) [ 127.632116][ T5840] usb 2-1: media controller created [ 127.638264][ T5840] usb read operation failed. (-71) [ 127.643017][ T5840] usb write operation failed. (-71) [ 127.671277][ T5840] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 127.711331][ T5840] usb 2-1: USB disconnect, device number 3 [ 128.137992][ T6614] netlink: 'syz.4.163': attribute type 1 has an invalid length. [ 128.138016][ T6614] netlink: 'syz.4.163': attribute type 1 has an invalid length. [ 128.138027][ T6614] netlink: 160 bytes leftover after parsing attributes in process `syz.4.163'. [ 128.138058][ T6614] netlink: 'syz.4.163': attribute type 1 has an invalid length. [ 128.138070][ T6614] netlink: 12 bytes leftover after parsing attributes in process `syz.4.163'. [ 129.414083][ C1] vkms_vblank_simulate: vblank timer overrun [ 129.630716][ T6645] syz.0.178 (6645) used greatest stack depth: 16696 bytes left [ 130.916984][ T6676] netlink: 40 bytes leftover after parsing attributes in process `syz.4.191'. [ 131.844882][ T6700] program syz.2.201 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.440300][ T992] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 132.621087][ T992] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 132.621120][ T992] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.621140][ T992] usb 3-1: config 0 has no interface number 0 [ 132.627131][ T992] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 132.627162][ T992] usb 3-1: New USB device strings: Mfr=1, Product=26, SerialNumber=3 [ 132.627182][ T992] usb 3-1: Product: syz [ 132.627196][ T992] usb 3-1: Manufacturer: syz [ 132.627211][ T992] usb 3-1: SerialNumber: syz [ 132.670348][ T992] usb 3-1: config 0 descriptor?? [ 132.743489][ T992] uvcvideo 3-1:0.105: probe with driver uvcvideo failed with error -22 [ 132.853722][ T37] audit: type=1326 audit(1758235785.351:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6718 comm="syz.4.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb714ceeba9 code=0x7ffc0000 [ 132.853777][ T37] audit: type=1326 audit(1758235785.351:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6718 comm="syz.4.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb714ceeba9 code=0x7ffc0000 [ 132.862697][ T37] audit: type=1326 audit(1758235785.371:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6718 comm="syz.4.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fb714ceeba9 code=0x7ffc0000 [ 132.871525][ T37] audit: type=1326 audit(1758235785.391:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6718 comm="syz.4.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb714ceeba9 code=0x7ffc0000 [ 132.891715][ T37] audit: type=1326 audit(1758235785.411:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6718 comm="syz.4.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fb714ceeba9 code=0x7ffc0000 [ 132.891768][ T37] audit: type=1326 audit(1758235785.411:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6718 comm="syz.4.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb714ceeba9 code=0x7ffc0000 [ 132.891807][ T37] audit: type=1326 audit(1758235785.411:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6718 comm="syz.4.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7fb714ceeba9 code=0x7ffc0000 [ 132.891845][ T37] audit: type=1326 audit(1758235785.411:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6718 comm="syz.4.210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb714ceeba9 code=0x7ffc0000 [ 132.918263][ T992] usb 3-1: USB disconnect, device number 2 [ 133.374506][ T5929] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 133.434993][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.435097][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.535372][ T5929] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 133.535410][ T5929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.562695][ T5929] usb 1-1: config 0 descriptor?? [ 133.585930][ T5929] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 133.979908][ T5929] gspca_cpia1: usb_control_msg 03, error -71 [ 133.980513][ T5929] gspca_cpia1: usb_control_msg 01, error -71 [ 133.980527][ T5929] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 134.021495][ T5929] usb 1-1: USB disconnect, device number 3 [ 135.345159][ T6774] ======================================================= [ 135.345159][ T6774] WARNING: The mand mount option has been deprecated and [ 135.345159][ T6774] and is ignored by this kernel. Remove the mand [ 135.345159][ T6774] option from the mount to silence this warning. [ 135.345159][ T6774] ======================================================= [ 136.291344][ T6787] capability: warning: `syz.3.241' uses deprecated v2 capabilities in a way that may be insecure [ 136.315848][ T37] audit: type=1400 audit(1758235788.811:12): lsm=SMACK fn=smack_task_setpgid action=denied subject="w" object="_" requested=w pid=6786 comm="syz.3.241" opid=6786 ocomm="syz.3.241" [ 136.462936][ T6790] netlink: 16 bytes leftover after parsing attributes in process `syz.1.242'. [ 136.462972][ T6790] netlink: 16 bytes leftover after parsing attributes in process `syz.1.242'. [ 136.463030][ T6790] netlink: 712 bytes leftover after parsing attributes in process `syz.1.242'. [ 137.293623][ T6807] netlink: 136 bytes leftover after parsing attributes in process `syz.0.248'. [ 137.293874][ T6807] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 138.550229][ T5996] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 138.760739][ T5996] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 138.760769][ T5996] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.760789][ T5996] usb 4-1: Product: syz [ 138.760803][ T5996] usb 4-1: Manufacturer: syz [ 138.760816][ T5996] usb 4-1: SerialNumber: syz [ 138.784578][ T5996] usb 4-1: config 0 descriptor?? [ 138.823357][ T5996] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 004 [ 138.900258][ T5929] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 139.070200][ T5929] usb 1-1: Using ep0 maxpacket: 8 [ 139.104558][ T5929] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 139.104595][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.104614][ T5929] usb 1-1: Product: syz [ 139.104684][ T5929] usb 1-1: Manufacturer: syz [ 139.104697][ T5929] usb 1-1: SerialNumber: syz [ 139.184598][ T5929] usb 1-1: config 0 descriptor?? [ 139.232904][ T5996] (null): failure reading functionality [ 139.278018][ T5996] i2c i2c-1: connected i2c-tiny-usb device [ 139.412681][ T5929] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 139.472573][ T45] usb 4-1: USB disconnect, device number 4 [ 139.978316][ T37] audit: type=1326 audit(1758235792.491:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6849 comm="syz.1.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a82beeba9 code=0x7ffc0000 [ 139.988382][ T37] audit: type=1326 audit(1758235792.491:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6849 comm="syz.1.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f7a82beeba9 code=0x7ffc0000 [ 139.988441][ T37] audit: type=1326 audit(1758235792.491:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6849 comm="syz.1.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a82beeba9 code=0x7ffc0000 [ 139.995865][ T37] audit: type=1326 audit(1758235792.511:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6849 comm="syz.1.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a82beeba9 code=0x7ffc0000 [ 140.010792][ T5929] gspca_sunplus: reg_w_riv err -71 [ 140.010895][ T5929] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 140.100364][ T5929] usb 1-1: USB disconnect, device number 4 [ 140.390738][ T6862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.273'. [ 141.350143][ T5840] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 141.438340][ T5929] hid-generic 0000:0006:0007.0002: unknown main item tag 0x0 [ 141.438391][ T5929] hid-generic 0000:0006:0007.0002: unknown main item tag 0x0 [ 141.438416][ T5929] hid-generic 0000:0006:0007.0002: unknown main item tag 0x0 [ 141.438440][ T5929] hid-generic 0000:0006:0007.0002: unknown main item tag 0x0 [ 141.438464][ T5929] hid-generic 0000:0006:0007.0002: unknown main item tag 0x0 [ 141.438488][ T5929] hid-generic 0000:0006:0007.0002: unknown main item tag 0x0 [ 141.438512][ T5929] hid-generic 0000:0006:0007.0002: unknown main item tag 0x0 [ 141.438536][ T5929] hid-generic 0000:0006:0007.0002: unknown main item tag 0x0 [ 141.438560][ T5929] hid-generic 0000:0006:0007.0002: unknown main item tag 0x0 [ 141.438584][ T5929] hid-generic 0000:0006:0007.0002: unknown main item tag 0x0 [ 141.527638][ T5840] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 141.527673][ T5840] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 141.527716][ T5840] usb 1-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 141.527738][ T5840] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.608695][ T5840] usb 1-1: config 0 descriptor?? [ 141.608967][ T5929] hid-generic 0000:0006:0007.0002: hidraw0: HID v0.0b Device [syz1] on syz1 [ 141.610913][ T6897] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 142.086509][ T5840] playstation 0003:054C:0BA0.0003: hidraw0: USB HID v1.01 Device [HID 054c:0ba0] on usb-dummy_hcd.0-1/input0 [ 142.250480][ T5949] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 142.254215][ T5840] playstation 0003:054C:0BA0.0003: Invalid reportID received, expected 18 got 9 [ 142.254242][ T5840] playstation 0003:054C:0BA0.0003: Failed to retrieve DualShock4 pairing info: -22 [ 142.254293][ T5840] playstation 0003:054C:0BA0.0003: Failed to get MAC address from DualShock4 [ 142.254308][ T5840] playstation 0003:054C:0BA0.0003: Failed to create dualshock4. [ 142.310244][ T5840] playstation 0003:054C:0BA0.0003: probe with driver playstation failed with error -22 [ 142.401016][ T5949] usb 2-1: Using ep0 maxpacket: 32 [ 142.403626][ T5949] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.403658][ T5949] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.403696][ T5949] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 142.403719][ T5949] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.412996][ T5949] usb 2-1: config 0 descriptor?? [ 142.489430][ T5929] usb 1-1: USB disconnect, device number 5 [ 142.571590][ T6935] program syz.2.308 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.077866][ T5949] ft260 0003:0403:6030.0004: chip code: 6424 8183 [ 143.174286][ T45] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 143.279968][ T5949] ft260 0003:0403:6030.0004: failed to retrieve system status [ 143.280487][ T5949] ft260 0003:0403:6030.0004: probe with driver ft260 failed with error -71 [ 143.327865][ T5949] usb 2-1: USB disconnect, device number 4 [ 143.330257][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 143.346745][ T45] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 143.346773][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.346793][ T45] usb 4-1: Product: syz [ 143.346806][ T45] usb 4-1: Manufacturer: syz [ 143.346820][ T45] usb 4-1: SerialNumber: syz [ 143.432001][ T45] usb 4-1: config 0 descriptor?? [ 143.458351][ T45] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 144.250175][ T5929] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 144.268405][ T45] gspca_stk1135: reg_w 0x5 err -71 [ 144.269471][ T45] gspca_stk1135: serial bus timeout: status=0x00 [ 144.269484][ T45] gspca_stk1135: Sensor write failed [ 144.269512][ T45] gspca_stk1135: serial bus timeout: status=0x00 [ 144.269520][ T45] gspca_stk1135: Sensor write failed [ 144.269552][ T45] gspca_stk1135: serial bus timeout: status=0x00 [ 144.269561][ T45] gspca_stk1135: Sensor read failed [ 144.269589][ T45] gspca_stk1135: serial bus timeout: status=0x00 [ 144.269599][ T45] gspca_stk1135: Sensor read failed [ 144.269605][ T45] gspca_stk1135: Detected sensor type unknown (0x0) [ 144.269638][ T45] gspca_stk1135: serial bus timeout: status=0x00 [ 144.269647][ T45] gspca_stk1135: Sensor read failed [ 144.269674][ T45] gspca_stk1135: serial bus timeout: status=0x00 [ 144.269682][ T45] gspca_stk1135: Sensor read failed [ 144.269709][ T45] gspca_stk1135: serial bus timeout: status=0x00 [ 144.269718][ T45] gspca_stk1135: Sensor write failed [ 144.269744][ T45] gspca_stk1135: serial bus timeout: status=0x00 [ 144.269753][ T45] gspca_stk1135: Sensor write failed [ 144.269842][ T45] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 144.278767][ T45] usb 4-1: USB disconnect, device number 5 [ 144.507335][ T5929] usb 2-1: config 150 has an invalid interface number: 204 but max is 2 [ 144.507363][ T5929] usb 2-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 144.507384][ T5929] usb 2-1: config 150 has no interface number 0 [ 144.507429][ T5929] usb 2-1: config 150 interface 204 has no altsetting 0 [ 144.518847][ T5929] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 144.518877][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.518896][ T5929] usb 2-1: Product: syz [ 144.518909][ T5929] usb 2-1: Manufacturer: syz [ 144.518923][ T5929] usb 2-1: SerialNumber: syz [ 144.826226][ T5929] xr_serial 2-1:150.204: skipping garbage [ 144.826289][ T5929] xr_serial 2-1:150.204: xr_serial converter detected [ 145.340602][ T5996] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 145.425241][ T5929] xr_serial ttyUSB0: Failed to set reg 0x0d: -71 [ 145.425303][ T5929] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 145.429835][ T6978] mkiss: ax0: crc mode is auto. [ 145.465620][ T5929] usb 2-1: USB disconnect, device number 5 [ 145.469535][ T5929] xr_serial 2-1:150.204: device disconnected [ 145.500224][ T5996] usb 4-1: Using ep0 maxpacket: 32 [ 145.503079][ T5996] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.503111][ T5996] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.503150][ T5996] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 145.503173][ T5996] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.508588][ T5996] usb 4-1: config 0 descriptor?? [ 145.568415][ T5996] hub 4-1:0.0: USB hub found [ 145.775442][ T5996] hub 4-1:0.0: config failed, can't read hub descriptor (err -90) [ 145.998469][ T5996] usbhid 4-1:0.0: can't add hid device: -71 [ 145.998666][ T5996] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 146.064336][ T5996] usb 4-1: USB disconnect, device number 6 [ 146.372152][ T6995] netlink: 52 bytes leftover after parsing attributes in process `syz.1.336'. [ 146.372206][ T6995] netlink: 32 bytes leftover after parsing attributes in process `syz.1.336'. [ 146.980994][ T7012] netlink: 20 bytes leftover after parsing attributes in process `syz.1.343'. [ 147.427136][ T7031] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 147.440872][ T7031] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 147.960237][ T45] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 148.122857][ T45] usb 4-1: config 0 has an invalid interface number: 246 but max is 0 [ 148.122887][ T45] usb 4-1: config 0 has no interface number 0 [ 148.122919][ T45] usb 4-1: config 0 interface 246 has no altsetting 0 [ 148.122953][ T45] usb 4-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=f9.e3 [ 148.122975][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.142842][ T45] usb 4-1: config 0 descriptor?? [ 148.351814][ T45] usb 4-1: string descriptor 0 read error: -71 [ 148.486582][ T45] usb 4-1: USB disconnect, device number 7 [ 148.957443][ T37] audit: type=1326 audit(1758235801.471:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7058 comm="syz.0.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378113eba9 code=0x7ffc0000 [ 148.972366][ T37] audit: type=1326 audit(1758235801.491:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7058 comm="syz.0.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378113eba9 code=0x7ffc0000 [ 148.972435][ T37] audit: type=1326 audit(1758235801.491:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7058 comm="syz.0.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f378113eba9 code=0x7ffc0000 [ 149.290699][ T37] audit: type=1326 audit(1758235801.811:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7058 comm="syz.0.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378113eba9 code=0x7ffc0000 [ 149.290967][ T37] audit: type=1326 audit(1758235801.811:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7058 comm="syz.0.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378113eba9 code=0x7ffc0000 [ 149.510119][ T5929] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 149.673697][ T5929] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 149.673729][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.673748][ T5929] usb 4-1: Product: syz [ 149.673761][ T5929] usb 4-1: Manufacturer: syz [ 149.673775][ T5929] usb 4-1: SerialNumber: syz [ 149.723066][ T5929] usb 4-1: config 0 descriptor?? [ 149.986667][ T992] usb 4-1: USB disconnect, device number 8 [ 150.131361][ T37] audit: type=1326 audit(1758235802.651:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7081 comm="syz.0.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378113eba9 code=0x7ffc0000 [ 150.172724][ T37] audit: type=1326 audit(1758235802.651:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7081 comm="syz.0.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378113eba9 code=0x7ffc0000 [ 150.172770][ T37] audit: type=1326 audit(1758235802.691:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7081 comm="syz.0.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f378113eba9 code=0x7ffc0000 [ 150.172801][ T37] audit: type=1326 audit(1758235802.691:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7081 comm="syz.0.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378113eba9 code=0x7ffc0000 [ 150.172845][ T37] audit: type=1326 audit(1758235802.691:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7081 comm="syz.0.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f378113eba9 code=0x7ffc0000 [ 152.324767][ T5929] IPVS: starting estimator thread 0... [ 152.440313][ T7136] IPVS: using max 9 ests per chain, 21600 per kthread [ 153.240464][ T7159] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 154.440484][ T7187] netlink: 'syz.2.420': attribute type 9 has an invalid length. [ 154.440510][ T7187] netlink: 211988 bytes leftover after parsing attributes in process `syz.2.420'. [ 154.529432][ T7191] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 154.567762][ T7188] IPVS: stopping backup sync thread 7191 ... [ 154.742938][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 154.742958][ T37] audit: type=1326 audit(1758235807.261:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7196 comm="syz.2.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f94f15b5b67 code=0x7ffc0000 [ 154.746900][ T37] audit: type=1326 audit(1758235807.261:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7196 comm="syz.2.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f94f155ada9 code=0x7ffc0000 [ 154.746960][ T37] audit: type=1326 audit(1758235807.261:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7196 comm="syz.2.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f94f15b5b67 code=0x7ffc0000 [ 154.747094][ T37] audit: type=1326 audit(1758235807.261:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7196 comm="syz.2.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f94f155ada9 code=0x7ffc0000 [ 154.747133][ T37] audit: type=1326 audit(1758235807.261:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7196 comm="syz.2.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f94f15b5b67 code=0x7ffc0000 [ 154.747171][ T37] audit: type=1326 audit(1758235807.261:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7196 comm="syz.2.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f94f155ada9 code=0x7ffc0000 [ 154.747206][ T37] audit: type=1326 audit(1758235807.261:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7196 comm="syz.2.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f94f15b5b67 code=0x7ffc0000 [ 154.747244][ T37] audit: type=1326 audit(1758235807.261:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7196 comm="syz.2.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f94f155ada9 code=0x7ffc0000 [ 154.747282][ T37] audit: type=1326 audit(1758235807.261:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7196 comm="syz.2.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f94f15b5b67 code=0x7ffc0000 [ 154.747318][ T37] audit: type=1326 audit(1758235807.261:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7196 comm="syz.2.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f94f155ada9 code=0x7ffc0000 [ 156.123726][ T7241] bond0: option ad_select: unable to set because the bond device is up [ 156.490263][ T101] block nbd0: Possible stuck request ffff888024b87000: control (read@0,1024B). Runtime 30 seconds [ 156.491095][ T101] block nbd0: Possible stuck request ffff888024b871c0: control (read@1024,1024B). Runtime 30 seconds [ 156.491130][ T101] block nbd0: Possible stuck request ffff888024b87380: control (read@2048,1024B). Runtime 30 seconds [ 156.491158][ T101] block nbd0: Possible stuck request ffff888024b87540: control (read@3072,1024B). Runtime 30 seconds [ 157.271287][ T7278] program syz.3.466 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 157.524463][ T7287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.469'. [ 157.524843][ T7287] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 157.524879][ T7287] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 158.160257][ T5840] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 158.340341][ T5840] usb 1-1: Using ep0 maxpacket: 8 [ 158.346553][ T5840] usb 1-1: unable to get BOS descriptor or descriptor too short [ 158.348296][ T5840] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 158.348329][ T5840] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 158.348355][ T5840] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 158.348375][ T5840] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 158.348398][ T5840] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 158.348419][ T5840] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 158.348439][ T5840] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 158.352419][ T5840] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 158.352450][ T5840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.352468][ T5840] usb 1-1: Product: syz [ 158.352481][ T5840] usb 1-1: Manufacturer: syz [ 158.352494][ T5840] usb 1-1: SerialNumber: syz [ 158.392973][ T5840] usb 1-1: config 0 descriptor?? [ 158.399829][ T7308] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 158.478487][ T5840] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 159.139908][ T5840] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 159.287080][ T5840] usb 1-1: USB disconnect, device number 6 [ 160.028150][ T7368] vivid-002: disconnect [ 160.068294][ T7366] vivid-002: reconnect [ 161.228194][ T7405] netlink: 60 bytes leftover after parsing attributes in process `syz.4.513'. [ 161.412388][ T7410] sock: sock_timestamping_bind_phc: sock not bind to device [ 161.723935][ C1] vkms_vblank_simulate: vblank timer overrun [ 163.016806][ T7452] 9pnet_fd: Insufficient options for proto=fd [ 164.003726][ T7499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.539'. [ 166.438319][ T7552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.561'. [ 166.438373][ T7552] netlink: 16 bytes leftover after parsing attributes in process `syz.3.561'. [ 166.649289][ T7557] cifs: Unknown parameter 'no'‘a£Nð[G¶zob,erèèµ;%j¸¼ [ 166.649289][ T7557] ‡üzæ,€@q¬Ú÷ôÐåéJ#³"ŽÚh/.W1ȱ¨nNCº"†CÙ׈¡E)Ð8+€î¶á÷' [ 166.921019][ T7564] netlink: 64 bytes leftover after parsing attributes in process `syz.0.567'. [ 167.530413][ T5996] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 167.680242][ T5996] usb 4-1: Using ep0 maxpacket: 16 [ 167.686256][ T5996] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 167.686284][ T5996] usb 4-1: config 0 has no interface number 0 [ 167.688887][ T5996] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 167.688919][ T5996] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.688939][ T5996] usb 4-1: Product: syz [ 167.688954][ T5996] usb 4-1: Manufacturer: syz [ 167.688968][ T5996] usb 4-1: SerialNumber: syz [ 167.709125][ T5996] usb 4-1: config 0 descriptor?? [ 167.719013][ T7582] netlink: 80 bytes leftover after parsing attributes in process `syz.1.575'. [ 167.818614][ T5996] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 168.607467][ T5996] gspca_spca1528: reg_w err -71 [ 168.620207][ T5996] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 168.646456][ T5996] usb 4-1: USB disconnect, device number 9 [ 168.934341][ T37] kauditd_printk_skb: 29 callbacks suppressed [ 168.934363][ T37] audit: type=1326 audit(1758235821.441:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7609 comm="syz.2.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f15beba9 code=0x7ffc0000 [ 168.934689][ T37] audit: type=1326 audit(1758235821.451:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7609 comm="syz.2.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f15beba9 code=0x7ffc0000 [ 168.935793][ T37] audit: type=1326 audit(1758235821.451:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7609 comm="syz.2.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94f15beba9 code=0x7ffc0000 [ 168.990158][ T37] audit: type=1326 audit(1758235821.451:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7609 comm="syz.2.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f15beba9 code=0x7ffc0000 [ 168.990223][ T37] audit: type=1326 audit(1758235821.491:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7609 comm="syz.2.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94f15beba9 code=0x7ffc0000 [ 168.993759][ T37] audit: type=1326 audit(1758235821.511:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7609 comm="syz.2.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f15beba9 code=0x7ffc0000 [ 169.018833][ T37] audit: type=1326 audit(1758235821.531:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7609 comm="syz.2.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f15beba9 code=0x7ffc0000 [ 169.018897][ T37] audit: type=1326 audit(1758235821.531:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7609 comm="syz.2.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f94f15beba9 code=0x7ffc0000 [ 169.069765][ T7614] block nbd1: NBD_DISCONNECT [ 169.079636][ T37] audit: type=1326 audit(1758235821.591:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7609 comm="syz.2.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f15beba9 code=0x7ffc0000 [ 169.079700][ T37] audit: type=1326 audit(1758235821.591:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7609 comm="syz.2.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94f15beba9 code=0x7ffc0000 [ 171.869211][ T7656] netlink: 40 bytes leftover after parsing attributes in process `syz.2.606'. [ 171.990706][ T7654] netlink: 12 bytes leftover after parsing attributes in process `syz.3.605'. [ 171.990747][ T7654] netlink: 8 bytes leftover after parsing attributes in process `syz.3.605'. [ 172.270257][ T5916] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 172.429519][ T5916] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 172.456465][ T7672] netlink: 14 bytes leftover after parsing attributes in process `syz.1.614'. [ 172.475383][ T5916] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 172.475414][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.475528][ T5916] usb 1-1: Product: syz [ 172.475554][ T5916] usb 1-1: Manufacturer: syz [ 172.475568][ T5916] usb 1-1: SerialNumber: syz [ 172.526961][ T7672] hsr_slave_0: left promiscuous mode [ 172.570672][ T7672] hsr_slave_1: left promiscuous mode [ 172.809328][ T5916] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 172.969181][ T5996] usb 1-1: USB disconnect, device number 7 [ 172.996633][ T5996] usblp0: removed [ 173.309153][ T7695] netlink: 8 bytes leftover after parsing attributes in process `syz.3.624'. [ 173.309359][ T7695] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 173.309389][ T7695] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 173.830408][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 174.073064][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 174.073099][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 174.073126][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 174.076322][ T10] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 174.076354][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.076371][ T10] usb 2-1: Product: syz [ 174.076385][ T10] usb 2-1: Manufacturer: syz [ 174.076397][ T10] usb 2-1: SerialNumber: syz [ 174.126387][ T10] usb 2-1: config 0 descriptor?? [ 174.128088][ T7701] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 174.363455][ T10] powermate: unknown product id 0240 [ 174.363476][ T10] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 174.520722][ T10] input: Griffin SoundKnob as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input7 [ 174.906975][ C0] powermate: config urb returned -71 [ 174.907195][ C0] powermate: config urb returned -71 [ 174.907406][ C0] powermate: config urb returned -71 [ 174.913022][ T10] usb 2-1: USB disconnect, device number 6 [ 174.913110][ C0] powermate 2-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 175.408189][ T7720] veth0_to_team: entered promiscuous mode [ 175.438065][ T7726] syz.3.638 uses obsolete (PF_INET,SOCK_PACKET) [ 175.620808][ T5996] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 175.680602][ T992] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 175.773325][ T5996] usb 1-1: Using ep0 maxpacket: 16 [ 175.777095][ T5996] usb 1-1: unable to get BOS descriptor or descriptor too short [ 175.778782][ T5996] usb 1-1: config 9 has an invalid interface number: 48 but max is 0 [ 175.778808][ T5996] usb 1-1: config 9 has no interface number 0 [ 175.778841][ T5996] usb 1-1: config 9 interface 48 has no altsetting 0 [ 175.782713][ T5996] usb 1-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=f3.7b [ 175.782745][ T5996] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.782764][ T5996] usb 1-1: Product: syz [ 175.782778][ T5996] usb 1-1: Manufacturer: syz [ 175.782791][ T5996] usb 1-1: SerialNumber: syz [ 175.830170][ T992] usb 4-1: Using ep0 maxpacket: 16 [ 175.841351][ T992] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 175.841382][ T992] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 175.849610][ T992] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 175.849646][ T992] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.849666][ T992] usb 4-1: Product: syz [ 175.849680][ T992] usb 4-1: Manufacturer: syz [ 175.849694][ T992] usb 4-1: SerialNumber: syz [ 176.101805][ T5996] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 176.147591][ T7738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.644'. [ 176.201036][ T992] usb 4-1: 0:2 : does not exist [ 176.209522][ T992] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 176.280695][ T992] usb 4-1: USB disconnect, device number 10 [ 176.702876][ T5996] gspca_vc032x: reg_r err -71 [ 176.702917][ T5996] gspca_vc032x: I2c Bus Busy Wait 00 [ 176.702928][ T5996] gspca_vc032x: I2c Bus Busy Wait 00 [ 176.702936][ T5996] gspca_vc032x: I2c Bus Busy Wait 00 [ 176.702945][ T5996] gspca_vc032x: I2c Bus Busy Wait 00 [ 176.702953][ T5996] gspca_vc032x: I2c Bus Busy Wait 00 [ 176.702960][ T5996] gspca_vc032x: I2c Bus Busy Wait 00 [ 176.702966][ T5996] gspca_vc032x: I2c Bus Busy Wait 00 [ 176.702973][ T5996] gspca_vc032x: I2c Bus Busy Wait 00 [ 176.702981][ T5996] gspca_vc032x: I2c Bus Busy Wait 00 [ 176.702989][ T5996] gspca_vc032x: I2c Bus Busy Wait 00 [ 176.702996][ T5996] gspca_vc032x: I2c Bus Busy Wait 00 [ 176.703004][ T5996] gspca_vc032x: I2c Bus Busy Wait 00 [ 176.703012][ T5996] gspca_vc032x: I2c Bus Busy Wait 00 [ 176.703020][ T5996] gspca_vc032x: I2c Bus Busy Wait 00 [ 176.703026][ T5996] gspca_vc032x: I2c Bus Busy Wait 00 [ 176.703033][ T5996] gspca_vc032x: I2c Bus Busy Wait 00 [ 176.703039][ T5996] gspca_vc032x: I2c Bus Busy Wait 00 [ 176.704284][ T5996] gspca_vc032x: I2c Bus Busy Wait 00 [ 176.704295][ T5996] gspca_vc032x: I2c Bus Busy Wait 00 [ 176.704309][ T5996] gspca_vc032x: Unknown sensor... [ 176.704405][ T5996] vc032x 1-1:9.48: probe with driver vc032x failed with error -22 [ 176.735983][ T5996] usb 1-1: USB disconnect, device number 8 [ 177.671490][ T7759] netlink: 24 bytes leftover after parsing attributes in process `syz.3.652'. [ 177.740245][ T5916] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 177.901695][ T5916] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.901868][ T5916] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 177.901898][ T5916] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 177.901926][ T5916] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 177.901946][ T5916] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 177.905247][ T5916] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 177.905278][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 177.905297][ T5916] usb 1-1: Product: syz [ 177.905312][ T5916] usb 1-1: Manufacturer: syz [ 177.905326][ T5916] usb 1-1: SerialNumber: syz [ 178.053291][ T5916] usb 1-1: config 0 descriptor?? [ 178.300278][ T5916] radio-si470x 1-1:0.0: DeviceID=0xc8c8 ChipID=0xc500 [ 178.486202][ T5916] radio-si470x 1-1:0.0: software version 200, hardware version 200 [ 178.559195][ T7778] batman_adv: batadv0: Adding interface: vlan2 [ 178.559216][ T7778] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.559248][ T7778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.559267][ T7778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.559283][ T7778] batman_adv: batadv0: Interface activated: vlan2 [ 178.687354][ T5916] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 178.687532][ T5916] radio-si470x 1-1:0.0: submitting int urb failed (-90) [ 178.687976][ T5916] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 178.688334][ T5916] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -22 [ 178.741928][ T5916] usb 1-1: USB disconnect, device number 9 [ 181.050286][ T992] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 181.210450][ T992] usb 1-1: Using ep0 maxpacket: 32 [ 181.216252][ T992] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 181.216281][ T992] usb 1-1: config 0 has no interface number 0 [ 181.216336][ T992] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 181.216364][ T992] usb 1-1: config 0 interface 85 has no altsetting 0 [ 181.219550][ T992] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 181.219582][ T992] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.219601][ T992] usb 1-1: Product: syz [ 181.219615][ T992] usb 1-1: Manufacturer: syz [ 181.219626][ T992] usb 1-1: SerialNumber: syz [ 181.314138][ T992] usb 1-1: config 0 descriptor?? [ 182.104654][ T992] appletouch 1-1:0.85: Geyser mode initialized. [ 182.107635][ T992] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input8 [ 182.162889][ C0] appletouch 1-1:0.85: appletouch: OVERFLOW with data length 64, actual length is 64 [ 182.365829][ T992] usb 1-1: USB disconnect, device number 10 [ 182.480693][ T992] appletouch 1-1:0.85: input: appletouch disconnected [ 182.634827][ T7881] syz_tun: entered allmulticast mode [ 182.990308][ T7887] binder: 7885:7887 ioctl 40046205 0 returned -22 [ 184.590185][ T5996] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 184.740486][ T5996] usb 2-1: Using ep0 maxpacket: 8 [ 184.743972][ T5996] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.744009][ T5996] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 184.744062][ T5996] usb 2-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 184.744083][ T5996] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.754090][ T5996] usb 2-1: config 0 descriptor?? [ 184.887361][ T7927] netlink: 'syz.4.725': attribute type 9 has an invalid length. [ 185.186636][ T5996] hid_parser_main: 49 callbacks suppressed [ 185.186666][ T5996] hid-rmi 0003:06CB:81A7.0005: unknown main item tag 0x4 [ 185.186696][ T5996] hid-rmi 0003:06CB:81A7.0005: unknown main item tag 0x0 [ 185.186723][ T5996] hid-rmi 0003:06CB:81A7.0005: unknown main item tag 0x0 [ 185.186747][ T5996] hid-rmi 0003:06CB:81A7.0005: unknown main item tag 0x0 [ 185.186771][ T5996] hid-rmi 0003:06CB:81A7.0005: unbalanced collection at end of report description [ 185.222806][ T5996] hid-rmi 0003:06CB:81A7.0005: parse failed [ 185.222920][ T5996] hid-rmi 0003:06CB:81A7.0005: probe with driver hid-rmi failed with error -22 [ 185.421223][ T5996] usb 2-1: USB disconnect, device number 7 [ 185.656114][ T7939] netlink: 60 bytes leftover after parsing attributes in process `syz.3.730'. [ 185.658870][ T7938] netlink: 60 bytes leftover after parsing attributes in process `syz.3.730'. [ 185.683034][ T7938] netlink: 60 bytes leftover after parsing attributes in process `syz.3.730'. [ 186.403378][ T7955] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 186.446107][ T7955] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 186.446261][ T7955] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 186.446393][ T7955] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 186.446523][ T7955] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 186.446650][ T7955] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 186.447355][ T7955] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 186.447488][ T7955] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 186.447614][ T7955] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 186.447735][ T7955] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 186.581981][ T101] block nbd0: Possible stuck request ffff888024b87000: control (read@0,1024B). Runtime 60 seconds [ 186.582029][ T101] block nbd0: Possible stuck request ffff888024b871c0: control (read@1024,1024B). Runtime 60 seconds [ 186.582060][ T101] block nbd0: Possible stuck request ffff888024b87380: control (read@2048,1024B). Runtime 60 seconds [ 186.582090][ T101] block nbd0: Possible stuck request ffff888024b87540: control (read@3072,1024B). Runtime 60 seconds [ 187.580949][ T7968] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 187.621692][ T7968] bridge0: entered allmulticast mode [ 188.281479][ T7990] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 191.230227][ T5996] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 191.347922][ T8059] netlink: 'syz.1.783': attribute type 14 has an invalid length. [ 191.420602][ T5996] usb 3-1: Using ep0 maxpacket: 8 [ 191.423377][ T5996] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 191.449210][ T5996] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 191.449242][ T5996] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.449261][ T5996] usb 3-1: Product: syz [ 191.449273][ T5996] usb 3-1: Manufacturer: syz [ 191.449286][ T5996] usb 3-1: SerialNumber: syz [ 191.488054][ T5996] usb 3-1: config 0 descriptor?? [ 191.510451][ T8064] netlink: 4 bytes leftover after parsing attributes in process `syz.0.785'. [ 191.510477][ T8064] netlink: 4 bytes leftover after parsing attributes in process `syz.0.785'. [ 191.526027][ T5996] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 191.526105][ T5996] usb 3-1: setting power ON [ 191.526830][ T5996] dvb-usb: bulk message failed: -22 (2/0) [ 191.549136][ T5996] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 191.566148][ T5996] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 191.566223][ T5996] usb 3-1: media controller created [ 191.720743][ T8045] dvb-usb: bulk message failed: -22 (3/0) [ 191.720774][ T8045] dvb-usb: bulk message failed: -22 (4/0) [ 191.720788][ T8045] cxusb: i2c read failed [ 191.721397][ T8045] dvb-usb: bulk message failed: -22 (3/0) [ 191.721418][ T8045] dvb-usb: bulk message failed: -22 (3/0) [ 191.754762][ T5996] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 191.948745][ T5996] usb 3-1: selecting invalid altsetting 6 [ 191.948770][ T5996] usb 3-1: digital interface selection failed (-22) [ 191.948785][ T5996] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 191.962701][ T5996] usb 3-1: setting power OFF [ 191.963014][ T5996] dvb-usb: bulk message failed: -22 (2/0) [ 191.963031][ T5996] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 191.963042][ T5996] (NULL device *): no alternate interface [ 192.120173][ T5916] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 192.158815][ T5996] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 192.184917][ T5996] usb 3-1: USB disconnect, device number 3 [ 192.280508][ T5916] usb 2-1: Using ep0 maxpacket: 32 [ 192.286383][ T5916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.286416][ T5916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.286454][ T5916] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 192.286475][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.353411][ T5916] usb 2-1: config 0 descriptor?? [ 192.382759][ T5916] hub 2-1:0.0: USB hub found [ 192.571848][ T5916] hub 2-1:0.0: config failed, can't read hub descriptor (err -90) [ 192.992459][ T8090] netlink: 'syz.2.797': attribute type 1 has an invalid length. [ 192.992491][ T8090] netlink: 'syz.2.797': attribute type 1 has an invalid length. [ 192.992506][ T8090] netlink: 216 bytes leftover after parsing attributes in process `syz.2.797'. [ 193.054067][ T5916] hid-generic 0003:046D:C31C.0006: item fetching failed at offset 0/1 [ 193.054925][ T5916] hid-generic 0003:046D:C31C.0006: probe with driver hid-generic failed with error -22 [ 193.301048][ T10] usb 2-1: USB disconnect, device number 8 [ 193.382174][ T8103] overlayfs: failed to clone upperpath [ 194.858639][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.858717][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.230355][ T8165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.833'. [ 195.650075][ T8180] bridge0: entered promiscuous mode [ 195.656418][ T8180] macvlan2: entered promiscuous mode [ 197.536404][ T8210] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 197.536672][ T8210] pim6reg1: linktype set to 776 [ 197.870837][ T8217] [U] [ 197.870977][ T8217] [U] )½0 [ 197.871224][ T8217] [U] [ 197.871265][ T8217] [U] [ 197.871297][ T8217] [U] [ 197.871929][ T8217] [U] [ 197.871969][ T8217] [U] [ 197.872006][ T8217] [U] [ 197.872051][ T8217] [U] [ 197.872183][ T8217] [U] [ 197.872219][ T8217] [U] [ 197.872254][ T8217] [U] [ 197.874577][ T8216] [U] [ 200.105234][ T8263] macvlan0: entered promiscuous mode [ 200.177882][ T8263] netlink: 'syz.1.876': attribute type 2 has an invalid length. [ 201.429104][ T8300] netlink: 10 bytes leftover after parsing attributes in process `syz.2.892'. [ 201.999149][ T5840] hid-generic 00A0:0008:0003.0007: unknown main item tag 0x0 [ 201.999190][ T5840] hid-generic 00A0:0008:0003.0007: unknown main item tag 0x0 [ 201.999215][ T5840] hid-generic 00A0:0008:0003.0007: unknown main item tag 0x0 [ 201.999239][ T5840] hid-generic 00A0:0008:0003.0007: unknown main item tag 0x0 [ 201.999263][ T5840] hid-generic 00A0:0008:0003.0007: unknown main item tag 0x0 [ 201.999287][ T5840] hid-generic 00A0:0008:0003.0007: unknown main item tag 0x0 [ 201.999311][ T5840] hid-generic 00A0:0008:0003.0007: unknown main item tag 0x0 [ 201.999335][ T5840] hid-generic 00A0:0008:0003.0007: unknown main item tag 0x0 [ 201.999365][ T5840] hid-generic 00A0:0008:0003.0007: unknown main item tag 0x0 [ 201.999389][ T5840] hid-generic 00A0:0008:0003.0007: unknown main item tag 0x0 [ 202.020165][ T5996] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 202.106898][ T5840] hid-generic 00A0:0008:0003.0007: hidraw0: HID v0.05 Device [syz1] on syz0 [ 202.170132][ T5996] usb 2-1: Using ep0 maxpacket: 16 [ 202.172768][ T5996] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 202.172798][ T5996] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 202.177152][ T5996] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 202.177188][ T5996] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.177209][ T5996] usb 2-1: Product: syz [ 202.177224][ T5996] usb 2-1: Manufacturer: syz [ 202.177246][ T5996] usb 2-1: SerialNumber: syz [ 202.532304][ T5996] usb 2-1: 0:2 : does not exist [ 202.572542][ T5996] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 202.626427][ T5996] usb 2-1: USB disconnect, device number 9 [ 204.363158][ T8382] Bluetooth: MGMT ver 1.23 [ 204.725402][ T8391] sctp: [Deprecated]: syz.2.933 (pid 8391) Use of struct sctp_assoc_value in delayed_ack socket option. [ 204.725402][ T8391] Use struct sctp_sack_info instead [ 205.053488][ T8398] ALSA: mixer_oss: invalid index 40000 [ 205.129390][ T8390] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 205.129555][ T8390] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 205.247042][ T8390] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 205.307814][ T8406] netlink: 830 bytes leftover after parsing attributes in process `syz.0.940'. [ 205.348032][ T8390] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 205.348143][ T8390] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 205.424729][ T8390] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 205.532397][ T8390] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 205.532519][ T8390] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 205.569817][ T8414] overlay: filesystem on ./file0 not supported as upperdir [ 205.624447][ T8390] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 205.715274][ T8390] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 205.715426][ T8390] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 205.813778][ T8390] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 205.900697][ T8390] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 205.900792][ T8390] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 206.018063][ T8390] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 206.254262][ T8434] netlink: 4 bytes leftover after parsing attributes in process `syz.4.954'. [ 206.446633][ T5996] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 206.632229][ T5996] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 206.632362][ T5996] usb 4-1: config 0 has no interface number 0 [ 206.635934][ T5996] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 206.635967][ T5996] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.635987][ T5996] usb 4-1: Product: syz [ 206.636002][ T5996] usb 4-1: Manufacturer: syz [ 206.636016][ T5996] usb 4-1: SerialNumber: syz [ 206.659823][ T5996] usb 4-1: config 0 descriptor?? [ 206.907951][ T5996] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 206.935079][ T5996] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 206.935555][ T5996] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 206.935609][ T5996] usb 4-1: media controller created [ 207.131453][ T5996] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 207.181919][ T5158] Bluetooth: hci0: command 0x0c1a tx timeout [ 207.410157][ T5158] Bluetooth: hci1: command 0x0c1a tx timeout [ 207.552674][ T5996] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 207.570145][ T5158] Bluetooth: hci2: command 0x0c1a tx timeout [ 207.694701][ T5996] usb 4-1: USB disconnect, device number 11 [ 207.745931][ T5158] Bluetooth: hci4: command 0x0c1a tx timeout [ 207.974665][ T5158] Bluetooth: hci3: command 0x0c1a tx timeout [ 209.250472][ T5158] Bluetooth: hci0: command 0x0c1a tx timeout [ 209.490345][ T5158] Bluetooth: hci1: command 0x0c1a tx timeout [ 209.650449][ T5158] Bluetooth: hci2: command 0x0c1a tx timeout [ 209.810700][ T5158] Bluetooth: hci4: command 0x0c1a tx timeout [ 210.050245][ T5158] Bluetooth: hci3: command 0x0c1a tx timeout [ 210.276909][ T8509] 9pnet_fd: Insufficient options for proto=fd [ 210.626359][ T8513] netlink: 8 bytes leftover after parsing attributes in process `syz.4.990'. [ 210.626388][ T8513] netlink: 8 bytes leftover after parsing attributes in process `syz.4.990'. [ 210.871085][ T8525] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 211.162227][ T8532] netlink: 'syz.1.1000': attribute type 2 has an invalid length. [ 211.330625][ T5158] Bluetooth: hci0: command 0x0c1a tx timeout [ 211.570170][ T5845] Bluetooth: hci1: command 0x0c1a tx timeout [ 211.730220][ T5845] Bluetooth: hci2: command 0x0c1a tx timeout [ 211.892074][ T5845] Bluetooth: hci4: command 0x0c1a tx timeout [ 212.130270][ T5845] Bluetooth: hci3: command 0x0c1a tx timeout [ 212.304832][ T8562] veth0_to_bridge: entered promiscuous mode [ 212.306985][ T8561] veth0_to_bridge: left promiscuous mode [ 212.790295][ T8578] tap0: tun_chr_ioctl cmd 1074025681 [ 213.495254][ T5158] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 215.569306][ T37] audit: type=1326 audit(1758235868.081:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8657 comm="syz.4.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb714ceeba9 code=0x7ffc0000 [ 215.569373][ T37] audit: type=1326 audit(1758235868.081:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8657 comm="syz.4.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb714ceeba9 code=0x7ffc0000 [ 215.569409][ T37] audit: type=1326 audit(1758235868.081:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8657 comm="syz.4.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb714ceeba9 code=0x7ffc0000 [ 215.569445][ T37] audit: type=1326 audit(1758235868.081:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8657 comm="syz.4.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb714ceeba9 code=0x7ffc0000 [ 215.569483][ T37] audit: type=1326 audit(1758235868.081:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8657 comm="syz.4.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb714ceeba9 code=0x7ffc0000 [ 215.569523][ T37] audit: type=1326 audit(1758235868.081:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8657 comm="syz.4.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7fb714ceeba9 code=0x7ffc0000 [ 215.569561][ T37] audit: type=1326 audit(1758235868.081:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8657 comm="syz.4.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb714ceeba9 code=0x7ffc0000 [ 215.569597][ T37] audit: type=1326 audit(1758235868.081:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8657 comm="syz.4.1058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb714ceeba9 code=0x7ffc0000 [ 215.700368][ T5996] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 215.854100][ T5996] usb 1-1: config 0 has no interfaces? [ 215.854141][ T5996] usb 1-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 215.854162][ T5996] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.871297][ T5996] usb 1-1: config 0 descriptor?? [ 216.111445][ T8654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.111967][ T8654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.123552][ T5996] usb 1-1: USB disconnect, device number 11 [ 216.562537][ T45] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 216.572621][ T5996] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 216.664966][ T101] block nbd0: Possible stuck request ffff888024b87000: control (read@0,1024B). Runtime 90 seconds [ 216.665015][ T101] block nbd0: Possible stuck request ffff888024b871c0: control (read@1024,1024B). Runtime 90 seconds [ 216.665046][ T101] block nbd0: Possible stuck request ffff888024b87380: control (read@2048,1024B). Runtime 90 seconds [ 216.665075][ T101] block nbd0: Possible stuck request ffff888024b87540: control (read@3072,1024B). Runtime 90 seconds [ 216.720254][ T5996] usb 1-1: Using ep0 maxpacket: 8 [ 216.723084][ T5996] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 216.723109][ T5996] usb 1-1: config 0 has no interface number 0 [ 216.723158][ T5996] usb 1-1: config 0 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 216.723178][ T5996] usb 1-1: config 0 interface 1 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 216.723201][ T5996] usb 1-1: config 0 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 216.723221][ T5996] usb 1-1: config 0 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 216.723242][ T5996] usb 1-1: config 0 interface 1 has no altsetting 0 [ 216.723380][ T5996] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 216.723403][ T5996] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.737640][ T5996] usb 1-1: config 0 descriptor?? [ 216.820433][ T45] usb 3-1: Using ep0 maxpacket: 8 [ 216.869768][ T45] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 216.884498][ T45] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 216.884537][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.884555][ T45] usb 3-1: Product: syz [ 216.884569][ T45] usb 3-1: Manufacturer: syz [ 216.884582][ T45] usb 3-1: SerialNumber: syz [ 216.934728][ T45] usb 3-1: config 0 descriptor?? [ 216.968465][ T45] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 216.968533][ T45] usb 3-1: setting power ON [ 216.968552][ T45] dvb-usb: bulk message failed: -22 (2/0) [ 217.002075][ T5996] usb 1-1: USB disconnect, device number 12 [ 217.095180][ T45] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 217.114998][ T45] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 217.115067][ T45] usb 3-1: media controller created [ 217.188403][ T8678] dvb-usb: bulk message failed: -22 (3/0) [ 217.188434][ T8678] dvb-usb: bulk message failed: -22 (5/0) [ 217.199750][ T8678] dvb-usb: bulk message failed: -22 (3/0) [ 217.229090][ T45] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 217.299696][ T45] usb 3-1: selecting invalid altsetting 6 [ 217.299726][ T45] usb 3-1: digital interface selection failed (-22) [ 217.299741][ T45] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 217.333064][ T45] usb 3-1: setting power OFF [ 217.333092][ T45] dvb-usb: bulk message failed: -22 (2/0) [ 217.333109][ T45] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 217.333121][ T45] (NULL device *): no alternate interface [ 217.498663][ T45] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 217.535461][ T45] usb 3-1: USB disconnect, device number 4 [ 217.751346][ T8680] syz.1.1068 (8680): drop_caches: 2 [ 218.662064][ T45] IPVS: starting estimator thread 0... [ 218.722447][ T5996] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 218.770268][ T8721] IPVS: using max 8 ests per chain, 19200 per kthread [ 218.891659][ T5996] usb 1-1: Using ep0 maxpacket: 32 [ 218.902104][ T5996] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 218.902133][ T5996] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 218.902152][ T5996] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 218.902209][ T5996] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 218.902229][ T5996] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 218.902252][ T5996] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 218.902297][ T5996] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 218.902319][ T5996] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.916755][ T5996] usb 1-1: config 0 descriptor?? [ 219.168081][ T5996] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 219.365106][ T5996] usb 1-1: USB disconnect, device number 13 [ 219.412689][ T5996] usblp0: removed [ 220.277765][ T8759] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1102'. [ 220.850338][ T45] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 221.000442][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 221.003582][ T45] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 221.003611][ T45] usb 3-1: config 0 has no interface number 0 [ 221.003658][ T45] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 221.003683][ T45] usb 3-1: config 0 interface 196 has no altsetting 0 [ 221.006928][ T45] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 221.006957][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.006976][ T45] usb 3-1: Product: syz [ 221.006990][ T45] usb 3-1: Manufacturer: syz [ 221.007003][ T45] usb 3-1: SerialNumber: syz [ 221.088615][ T45] usb 3-1: config 0 descriptor?? [ 221.089639][ T8770] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 221.515278][ T45] ipheth 3-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 221.516005][ T45] ipheth 3-1:0.196: probe with driver ipheth failed with error -22 [ 221.737508][ T45] usb 3-1: USB disconnect, device number 5 [ 221.767705][ T5840] kernel write not supported for file /amidi2 (pid: 5840 comm: kworker/0:2) [ 221.853790][ T8801] tipc: Started in network mode [ 221.853823][ T8801] tipc: Node identity ac14140f, cluster identity 4711 [ 221.856155][ T8801] tipc: New replicast peer: 255.255.255.255 [ 221.886098][ T8801] tipc: Enabled bearer , priority 10 [ 221.887109][ T8801] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1122'. [ 221.887129][ T8801] tipc: Disabling bearer [ 222.800412][ T8830] netlink: 'syz.2.1136': attribute type 15 has an invalid length. [ 222.885840][ T8835] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1137'. [ 223.621191][ T8854] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1146'. [ 223.621265][ T8854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1146'. [ 224.170191][ T5996] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 224.330238][ T5996] usb 2-1: Using ep0 maxpacket: 16 [ 224.342867][ T5996] usb 2-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 224.342898][ T5996] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.342917][ T5996] usb 2-1: Product: syz [ 224.342931][ T5996] usb 2-1: Manufacturer: syz [ 224.342945][ T5996] usb 2-1: SerialNumber: syz [ 224.372208][ T5996] usb 2-1: config 0 descriptor?? [ 224.391948][ T5996] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 224.607448][ T5996] gp8psk: usb in 128 operation failed. [ 224.618174][ T5996] gp8psk: usb in 137 operation failed. [ 224.618196][ T5996] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 224.619296][ T5996] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 224.619358][ T5996] usb 2-1: media controller created [ 224.779412][ T5996] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 224.863981][ T45] kernel write not supported for file /snd/seq (pid: 45 comm: kworker/1:1) [ 224.912352][ T5996] gp8psk_fe: Frontend revision 1 attached [ 224.913088][ T5996] usb 2-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 224.914277][ T5996] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 225.403773][ T5996] gp8psk: usb in 137 operation failed. [ 225.403795][ T5996] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 225.403808][ T5996] gp8psk: found Genpix USB device pID = 201 (hex) [ 225.414234][ T5996] usb 2-1: USB disconnect, device number 10 [ 225.807233][ T5996] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 225.977326][ T8909] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1170'. [ 227.067387][ T8933] block nbd1: server does not support multiple connections per device. [ 227.069290][ T8933] block nbd1: shutting down sockets [ 227.974873][ T8963] ip6gretap1: entered allmulticast mode [ 228.227193][ T8973] syz_tun: entered allmulticast mode [ 228.228328][ T8971] syz_tun: left allmulticast mode [ 228.260315][ T5996] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 228.420076][ T5996] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 228.420109][ T5996] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 228.421958][ T5996] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 228.421987][ T5996] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 228.422005][ T5996] usb 1-1: SerialNumber: syz [ 228.673305][ T5996] usb 1-1: 0:2 : does not exist [ 228.676628][ T8982] netlink: 'syz.1.1205': attribute type 1 has an invalid length. [ 228.840837][ T5996] usb 1-1: USB disconnect, device number 14 [ 229.240292][ T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 229.400403][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 229.403486][ T10] usb 2-1: config 0 has an invalid interface number: 126 but max is 0 [ 229.403517][ T10] usb 2-1: config 0 has no interface number 0 [ 229.403592][ T10] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 229.403619][ T10] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 229.403643][ T10] usb 2-1: config 0 interface 126 has no altsetting 0 [ 229.412857][ T10] usb 2-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 229.412973][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.413001][ T10] usb 2-1: Product: syz [ 229.413015][ T10] usb 2-1: Manufacturer: syz [ 229.413029][ T10] usb 2-1: SerialNumber: syz [ 229.441634][ T10] usb 2-1: config 0 descriptor?? [ 229.445556][ T8986] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 229.446332][ T8986] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 229.909301][ T10] ir_usb 2-1:0.126: IR Dongle converter detected [ 230.200954][ T10] usb 2-1: IR Dongle converter now attached to ttyUSB0 [ 230.353244][ T5996] usb 2-1: USB disconnect, device number 11 [ 230.387189][ T5996] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 230.387894][ T5996] ir_usb 2-1:0.126: device disconnected [ 230.689392][ T37] audit: type=1326 audit(1758235883.191:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8997 comm="syz.0.1212" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f378113eba9 code=0x0 [ 230.840495][ T9014] netlink: 47 bytes leftover after parsing attributes in process `syz.3.1219'. [ 231.490264][ T5996] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 231.663966][ T5996] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 231.663995][ T5996] usb 2-1: config 0 has no interface number 0 [ 231.667552][ T5996] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 231.667583][ T5996] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.667603][ T5996] usb 2-1: Product: syz [ 231.667617][ T5996] usb 2-1: Manufacturer: syz [ 231.667631][ T5996] usb 2-1: SerialNumber: syz [ 231.682706][ T5996] usb 2-1: config 0 descriptor?? [ 231.912521][ T5996] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 231.931174][ T5996] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 231.931555][ T5996] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 231.931607][ T5996] usb 2-1: media controller created [ 232.045475][ T9048] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1234'. [ 232.046711][ T9048] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1234'. [ 232.059553][ T5996] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 232.160833][ T5996] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 232.357699][ T5996] usb 2-1: USB disconnect, device number 12 [ 233.183063][ T37] audit: type=1326 audit(1758235885.701:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9071 comm="syz.3.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febeb55eba9 code=0x7ffc0000 [ 233.183117][ T37] audit: type=1326 audit(1758235885.701:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9071 comm="syz.3.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febeb55eba9 code=0x7ffc0000 [ 233.186551][ T37] audit: type=1326 audit(1758235885.701:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9071 comm="syz.3.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7febeb55eba9 code=0x7ffc0000 [ 233.186817][ T37] audit: type=1326 audit(1758235885.701:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9071 comm="syz.3.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febeb55eba9 code=0x7ffc0000 [ 233.187062][ T37] audit: type=1326 audit(1758235885.701:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9071 comm="syz.3.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febeb55eba9 code=0x7ffc0000 [ 233.187614][ T37] audit: type=1326 audit(1758235885.701:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9071 comm="syz.3.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7febeb55eba9 code=0x7ffc0000 [ 233.187881][ T37] audit: type=1326 audit(1758235885.701:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9071 comm="syz.3.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febeb55eba9 code=0x7ffc0000 [ 233.188165][ T37] audit: type=1326 audit(1758235885.701:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9071 comm="syz.3.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febeb55eba9 code=0x7ffc0000 [ 233.217180][ T37] audit: type=1326 audit(1758235885.701:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9071 comm="syz.3.1246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7febeb55eba9 code=0x7ffc0000 [ 234.270255][ T5996] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 234.430298][ T5996] usb 2-1: Using ep0 maxpacket: 16 [ 234.432998][ T5996] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.433051][ T5996] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 234.433071][ T5996] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.443467][ T5996] usb 2-1: config 0 descriptor?? [ 234.898381][ T5996] mcp2221 0003:04D8:00DD.0008: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 235.331976][ T5916] usb 2-1: USB disconnect, device number 13 [ 236.658694][ T37] kauditd_printk_skb: 2 callbacks suppressed [ 236.658713][ T37] audit: type=1326 audit(1758235889.171:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9168 comm="syz.1.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a82beeba9 code=0x7ffc0000 [ 236.709583][ T37] audit: type=1326 audit(1758235889.171:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9168 comm="syz.1.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a82beeba9 code=0x7ffc0000 [ 236.750087][ T37] audit: type=1326 audit(1758235889.251:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9168 comm="syz.1.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7a82beeba9 code=0x7ffc0000 [ 236.763319][ T9169] netlink: 'syz.1.1288': attribute type 4 has an invalid length. [ 236.770270][ T37] audit: type=1326 audit(1758235889.281:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9168 comm="syz.1.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a82beeba9 code=0x7ffc0000 [ 236.770321][ T37] audit: type=1326 audit(1758235889.281:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9168 comm="syz.1.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7a82beeba9 code=0x7ffc0000 [ 236.770362][ T37] audit: type=1326 audit(1758235889.281:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9168 comm="syz.1.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a82beeba9 code=0x7ffc0000 [ 236.770399][ T37] audit: type=1326 audit(1758235889.281:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9168 comm="syz.1.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a82beeba9 code=0x7ffc0000 [ 237.314644][ T9181] gretap0: entered promiscuous mode [ 237.330330][ T9187] netlink: 31 bytes leftover after parsing attributes in process `syz.4.1294'. [ 237.714011][ T9197] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1301'. [ 237.714042][ T9197] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1301'. [ 238.241827][ T9215] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1309'. [ 239.577463][ T9249] kvm_intel: kvm [9248]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x5 [ 240.591559][ T9283] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1341'. [ 240.939419][ C1] net_ratelimit: 2679 callbacks suppressed [ 240.939451][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 241.182094][ T9307] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1351'. [ 241.182146][ T9307] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1351'. [ 241.667331][ T9317] block device autoloading is deprecated and will be removed. [ 242.181118][ T9341] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 243.883587][ T9399] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1394'. [ 244.124644][ T9404] ipvlan2: entered promiscuous mode [ 244.124702][ T9404] ipvlan2: entered allmulticast mode [ 244.124715][ T9404] macvlan1: entered allmulticast mode [ 244.124726][ T9404] veth1_vlan: entered allmulticast mode [ 244.130404][ T5949] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 244.281725][ T5949] usb 1-1: Using ep0 maxpacket: 8 [ 244.284451][ T5949] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 244.284516][ T5949] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 244.284543][ T5949] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 244.284564][ T5949] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 244.284586][ T5949] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 244.284607][ T5949] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 244.284650][ T5949] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 244.284671][ T5949] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.622856][ T5949] usb 1-1: GET_CAPABILITIES returned 0 [ 244.622907][ T5949] usbtmc 1-1:16.0: can't read capabilities [ 244.727767][ T9409] netlink: 'syz.3.1398': attribute type 3 has an invalid length. [ 244.882239][ T5949] usb 1-1: USB disconnect, device number 16 [ 245.128766][ T9417] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1402'. [ 245.530998][ T9430] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1408'. [ 246.693214][ T9470] ref_ctr_offset mismatch. inode: 0x5e8 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x4 [ 246.721591][ T5996] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 246.751795][ T101] block nbd0: Possible stuck request ffff888024b87000: control (read@0,1024B). Runtime 120 seconds [ 246.751848][ T101] block nbd0: Possible stuck request ffff888024b871c0: control (read@1024,1024B). Runtime 120 seconds [ 246.751878][ T101] block nbd0: Possible stuck request ffff888024b87380: control (read@2048,1024B). Runtime 120 seconds [ 246.751908][ T101] block nbd0: Possible stuck request ffff888024b87540: control (read@3072,1024B). Runtime 120 seconds [ 246.781859][ T9475] overlayfs: failed to clone upperpath [ 246.883364][ T5996] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 246.883395][ T5996] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 246.887892][ T5996] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 246.887922][ T5996] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.887943][ T5996] usb 4-1: Product: syz [ 246.887956][ T5996] usb 4-1: Manufacturer: syz [ 246.887969][ T5996] usb 4-1: SerialNumber: syz [ 247.128322][ T5996] usb 4-1: 0:2 : does not exist [ 247.143448][ T5996] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 247.155985][ T5996] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 247.246831][ T9483] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1432'. [ 247.283485][ T5996] usb 4-1: USB disconnect, device number 12 [ 247.474432][ T9489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1436'. [ 247.662059][ T9499] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 247.990512][ T9512] program syz.0.1446 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 248.545915][ T9534] bridge0: entered promiscuous mode [ 249.906145][ T9587] bond0: entered promiscuous mode [ 249.906699][ T9587] bond_slave_0: entered promiscuous mode [ 249.906981][ T9587] bond_slave_1: entered promiscuous mode [ 249.943067][ T9587] bond0: left promiscuous mode [ 249.943092][ T9587] bond_slave_0: left promiscuous mode [ 249.943539][ T9587] bond_slave_1: left promiscuous mode [ 249.951198][ T5996] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 250.110452][ T5996] usb 3-1: Using ep0 maxpacket: 8 [ 250.113504][ T5996] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 250.113535][ T5996] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.178655][ T5996] pvrusb2: Hardware description: Terratec Grabster AV400 [ 250.178677][ T5996] pvrusb2: ********** [ 250.178683][ T5996] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 250.178695][ T5996] pvrusb2: Important functionality might not be entirely working. [ 250.178703][ T5996] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 250.178714][ T5996] pvrusb2: ********** [ 250.383917][ T2364] pvrusb2: Invalid write control endpoint [ 250.548861][ T2364] pvrusb2: Invalid write control endpoint [ 250.548876][ T2364] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 250.548885][ T2364] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 250.548892][ T2364] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 250.548901][ T2364] pvrusb2: Device being rendered inoperable [ 250.550492][ T2364] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 250.550641][ T2364] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 250.555087][ T2364] pvrusb2: Attached sub-driver cx25840 [ 250.555102][ T2364] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 250.555111][ T2364] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 250.594164][ T9582] pvrusb2: Attempted to execute control transfer when device not ok [ 250.596269][ T5840] usb 3-1: USB disconnect, device number 6 [ 251.210154][ T45] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 251.326836][ T9631] vivid-006: disconnect [ 251.327446][ T9631] vivid-006: reconnect [ 251.360192][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 251.362597][ T45] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 251.362631][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 251.366643][ T45] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 251.366675][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.366703][ T45] usb 2-1: Product: syz [ 251.366717][ T45] usb 2-1: Manufacturer: syz [ 251.366730][ T45] usb 2-1: SerialNumber: syz [ 251.442240][ T45] usb 2-1: config 0 descriptor?? [ 251.471393][ T45] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 251.471439][ T45] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 252.076704][ T45] em28xx 2-1:0.0: chip ID is em28174 [ 252.288822][ T45] usb 2-1: USB disconnect, device number 14 [ 252.301096][ T45] em28xx 2-1:0.0: Disconnecting em28xx [ 252.349892][ T45] em28xx 2-1:0.0: Freeing device [ 252.484796][ T9653] fuse: Bad value for 'fd' [ 253.041957][ T45] kernel write not supported for file /input/mouse0 (pid: 45 comm: kworker/1:1) [ 255.270249][ T5949] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 255.431830][ T5949] usb 3-1: unable to get BOS descriptor or descriptor too short [ 255.432822][ T5949] usb 3-1: not running at top speed; connect to a high speed hub [ 255.434236][ T5949] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 255.434260][ T5949] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 255.502494][ T5949] usb 3-1: string descriptor 0 read error: -22 [ 255.502650][ T5949] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 255.502673][ T5949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.551111][ T5949] usb 3-1: 0:2 : does not exist [ 255.752036][ T9763] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 256.299889][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.307163][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.381378][ T5949] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 256.393031][ T5949] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 256.481239][ T5949] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 256.490900][ T5949] usb 3-1: USB disconnect, device number 7 [ 257.648673][ T9838] program syz.2.1577 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 257.725110][ T9824] cgroup: fork rejected by pids controller in /syz1 [ 258.815473][ T9897] vlan0: entered promiscuous mode [ 258.951462][ T9897] team0: Port device vlan0 added [ 258.975942][ T9900] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.329235][ T9916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1602'. [ 259.329261][ T9916] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 259.459498][ T9920] dummy0: entered promiscuous mode [ 259.820379][ T9927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1607'. [ 260.049006][ T5158] Bluetooth: hci0: Unable to find connection for big 0x00 [ 265.420042][ C0] sched: DL replenish lagged too much [ 267.898819][T10013] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1646'. [ 268.385054][T10018] netlink: 'syz.4.1648': attribute type 1 has an invalid length. [ 268.385085][T10018] netlink: 'syz.4.1648': attribute type 2 has an invalid length. [ 268.415547][T10019] program syz.1.1649 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 269.701975][ T992] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 269.860383][ T992] usb 2-1: Using ep0 maxpacket: 32 [ 269.863280][ T992] usb 2-1: config 0 has an invalid interface number: 126 but max is 0 [ 269.863310][ T992] usb 2-1: config 0 has no interface number 0 [ 269.863360][ T992] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 269.863384][ T992] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 269.863409][ T992] usb 2-1: config 0 interface 126 has no altsetting 0 [ 269.945571][ T992] usb 2-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 269.945601][ T992] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.945621][ T992] usb 2-1: Product: syz [ 269.945634][ T992] usb 2-1: Manufacturer: syz [ 269.945648][ T992] usb 2-1: SerialNumber: syz [ 269.986770][ T992] usb 2-1: config 0 descriptor?? [ 269.987979][T10030] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 269.988185][T10030] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 270.448982][ T992] ir_usb 2-1:0.126: IR Dongle converter detected [ 270.679539][ T992] usb 2-1: IRDA class descriptor not found, device not bound [ 270.912444][ T45] usb 2-1: USB disconnect, device number 15 [ 271.682565][T10032] team_slave_0: entered promiscuous mode [ 271.682659][T10032] team_slave_1: entered promiscuous mode [ 277.145318][ T101] block nbd0: Possible stuck request ffff888024b87000: control (read@0,1024B). Runtime 150 seconds [ 277.145371][ T101] block nbd0: Possible stuck request ffff888024b871c0: control (read@1024,1024B). Runtime 150 seconds [ 277.145402][ T101] block nbd0: Possible stuck request ffff888024b87380: control (read@2048,1024B). Runtime 150 seconds [ 277.145433][ T101] block nbd0: Possible stuck request ffff888024b87540: control (read@3072,1024B). Runtime 150 seconds [ 280.313455][T10061] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1669'. [ 282.259477][ T5845] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 282.287656][ T5845] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 282.289280][ T5845] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 282.306182][ T5845] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 282.307044][ T5845] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 283.706732][T10070] chnl_net:caif_netlink_parms(): no params data found [ 284.371777][ T5845] Bluetooth: hci5: command tx timeout [ 286.454065][ T5845] Bluetooth: hci5: command tx timeout [ 288.530329][ T5845] Bluetooth: hci5: command tx timeout [ 289.553166][ T5158] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 289.580633][ T5158] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 289.582976][ T5158] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 289.584175][ T5158] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 289.584972][ T5158] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 290.610447][ T5845] Bluetooth: hci5: command tx timeout [ 291.730565][ T5845] Bluetooth: hci6: command tx timeout [ 293.810447][ T5845] Bluetooth: hci6: command tx timeout [ 295.891258][ T5845] Bluetooth: hci6: command tx timeout [ 296.592059][ T5158] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 296.636895][ T5158] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 296.647512][ T5158] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 296.675581][ T5158] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 296.676537][ T5158] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 297.970355][ T5158] Bluetooth: hci6: command tx timeout [ 299.970755][ T5158] Bluetooth: hci7: command tx timeout [ 302.050458][ T5158] Bluetooth: hci7: command tx timeout [ 304.130631][ T5158] Bluetooth: hci7: command tx timeout [ 306.210901][ T5158] Bluetooth: hci7: command tx timeout [ 307.649448][ T101] block nbd0: Possible stuck request ffff888024b87000: control (read@0,1024B). Runtime 180 seconds [ 307.649483][ T101] block nbd0: Possible stuck request ffff888024b871c0: control (read@1024,1024B). Runtime 180 seconds [ 307.649500][ T101] block nbd0: Possible stuck request ffff888024b87380: control (read@2048,1024B). Runtime 180 seconds [ 307.649516][ T101] block nbd0: Possible stuck request ffff888024b87540: control (read@3072,1024B). Runtime 180 seconds [ 317.737091][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.737171][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.770283][T10061] syz_tun (unregistering): left allmulticast mode [ 335.625258][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 335.629518][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 335.645715][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 335.673776][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 335.674580][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 337.730434][ T5845] Bluetooth: hci2: command tx timeout [ 338.676884][ T101] block nbd0: Possible stuck request ffff888024b87000: control (read@0,1024B). Runtime 210 seconds [ 338.676939][ T101] block nbd0: Possible stuck request ffff888024b871c0: control (read@1024,1024B). Runtime 210 seconds [ 338.676969][ T101] block nbd0: Possible stuck request ffff888024b87380: control (read@2048,1024B). Runtime 210 seconds [ 338.676999][ T101] block nbd0: Possible stuck request ffff888024b87540: control (read@3072,1024B). Runtime 210 seconds [ 339.820409][ T5845] Bluetooth: hci2: command tx timeout [ 341.890265][ T5845] Bluetooth: hci2: command tx timeout [ 343.002228][ T5158] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 343.028307][ T5158] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 343.029736][ T5158] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 343.047451][ T5158] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 343.048285][ T5158] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 343.192052][ T5158] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 343.215442][ T5158] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 343.217357][ T5158] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 343.219466][ T5158] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 343.242880][ T5158] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 343.970435][ T5158] Bluetooth: hci2: command tx timeout [ 345.090474][ T5158] Bluetooth: hci8: command tx timeout [ 345.330645][ T5158] Bluetooth: hci9: command tx timeout [ 347.170573][ T5845] Bluetooth: hci8: command tx timeout [ 347.411016][ T5158] Bluetooth: hci9: command tx timeout [ 349.260592][ T5158] Bluetooth: hci8: command tx timeout [ 349.490463][ T5158] Bluetooth: hci9: command tx timeout [ 350.115694][ T5845] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 350.142456][ T5845] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 350.144522][ T5845] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 350.145705][ T5845] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 350.146504][ T5845] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 351.087252][T10131] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 351.332764][ T5158] Bluetooth: hci8: command tx timeout [ 351.570559][ T5158] Bluetooth: hci9: command tx timeout [ 352.294298][ T5158] Bluetooth: hci10: command tx timeout [ 354.370482][ T5158] Bluetooth: hci10: command tx timeout [ 356.460428][ T5158] Bluetooth: hci10: command tx timeout [ 357.081878][ T5845] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 357.089896][ T5845] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 357.119502][ T5845] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 357.247910][ T5845] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 357.281253][ T5845] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 358.530496][ T5845] Bluetooth: hci10: command tx timeout [ 359.410520][ T5845] Bluetooth: hci11: command tx timeout [ 361.494347][ T5845] Bluetooth: hci11: command tx timeout [ 363.570366][ T5845] Bluetooth: hci11: command tx timeout [ 365.650771][ T5845] Bluetooth: hci11: command tx timeout [ 369.848642][ T101] block nbd0: Possible stuck request ffff888024b87000: control (read@0,1024B). Runtime 240 seconds [ 369.848693][ T101] block nbd0: Possible stuck request ffff888024b871c0: control (read@1024,1024B). Runtime 240 seconds [ 369.848724][ T101] block nbd0: Possible stuck request ffff888024b87380: control (read@2048,1024B). Runtime 240 seconds [ 369.848753][ T101] block nbd0: Possible stuck request ffff888024b87540: control (read@3072,1024B). Runtime 240 seconds [ 379.179780][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.179859][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 396.159498][ T5158] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 396.195685][ T5158] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 396.198586][ T5158] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 396.223709][ T5158] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 396.224585][ T5158] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 398.290550][ T5158] Bluetooth: hci1: command tx timeout [ 400.370392][ T5158] Bluetooth: hci1: command tx timeout [ 402.450552][ T5158] Bluetooth: hci1: command tx timeout [ 402.540314][ T101] block nbd0: Possible stuck request ffff888024b87000: control (read@0,1024B). Runtime 270 seconds [ 402.540369][ T101] block nbd0: Possible stuck request ffff888024b871c0: control (read@1024,1024B). Runtime 270 seconds [ 402.540399][ T101] block nbd0: Possible stuck request ffff888024b87380: control (read@2048,1024B). Runtime 270 seconds [ 402.540430][ T101] block nbd0: Possible stuck request ffff888024b87540: control (read@3072,1024B). Runtime 270 seconds [ 403.606213][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 403.648692][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 403.680461][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 403.682992][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 403.685580][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 403.811929][ T5845] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 403.834082][ T5845] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 403.835634][ T5845] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 403.837418][ T5845] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 403.838915][ T5845] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 404.530615][ T5845] Bluetooth: hci1: command tx timeout [ 405.810494][ T5845] Bluetooth: hci4: command tx timeout [ 405.970522][ T5845] Bluetooth: hci5: command tx timeout [ 407.890423][ T5845] Bluetooth: hci4: command tx timeout [ 408.050400][ T5845] Bluetooth: hci5: command tx timeout [ 409.970890][ T5158] Bluetooth: hci4: command tx timeout [ 410.130301][ T5158] Bluetooth: hci5: command tx timeout [ 410.702572][T10160] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 410.739315][T10160] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 410.755191][T10160] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 410.757129][T10160] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 410.758042][T10160] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 411.810763][ T38] INFO: task syz.3.1640:9999 blocked for more than 143 seconds. [ 411.810795][ T38] Not tainted syzkaller #0 [ 411.810805][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 411.810817][ T38] task:syz.3.1640 state:D stack:25000 pid:9999 tgid:9999 ppid:5847 task_flags:0x400040 flags:0x00004004 [ 411.810874][ T38] Call Trace: [ 411.810880][ T38] [ 411.810895][ T38] __schedule+0x16f3/0x4c20 [ 411.810961][ T38] ? __lock_acquire+0xab9/0xd20 [ 411.810987][ T38] ? __pfx___schedule+0x10/0x10 [ 411.811027][ T38] ? schedule+0x91/0x360 [ 411.811054][ T38] schedule+0x165/0x360 [ 411.811079][ T38] schedule_timeout+0x9a/0x270 [ 411.811103][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 411.811138][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 411.811162][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 411.811185][ T38] ? wait_for_completion+0x267/0x5d0 [ 411.811211][ T38] wait_for_completion+0x2bf/0x5d0 [ 411.811249][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 411.811275][ T38] ? __raw_spin_lock_init+0x45/0x100 [ 411.811305][ T38] rcu_barrier+0x463/0x570 [ 411.811337][ T38] kvm_mmu_uninit_vm+0x53/0x90 [ 411.811358][ T38] kvm_arch_destroy_vm+0x23d/0x280 [ 411.811384][ T38] kvm_put_kvm+0xf8e/0x1670 [ 411.811414][ T38] ? __pfx_kvm_vm_release+0x10/0x10 [ 411.811437][ T38] kvm_vm_release+0x46/0x50 [ 411.811457][ T38] __fput+0x458/0xa80 [ 411.811489][ T38] task_work_run+0x1d4/0x260 [ 411.811512][ T38] ? __pfx_task_work_run+0x10/0x10 [ 411.811545][ T38] ? exit_to_user_mode_loop+0x40/0x110 [ 411.811572][ T38] exit_to_user_mode_loop+0xec/0x110 [ 411.811595][ T38] do_syscall_64+0x2bd/0x3b0 [ 411.811612][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 411.811635][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.811654][ T38] ? clear_bhb_loop+0x60/0xb0 [ 411.811676][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.811694][ T38] RIP: 0033:0x7febeb55eba9 [ 411.811715][ T38] RSP: 002b:00007ffdf18ba958 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 411.811735][ T38] RAX: 0000000000000000 RBX: 0000000000040ed5 RCX: 00007febeb55eba9 [ 411.811748][ T38] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 411.811760][ T38] RBP: 00007febeb7a7da0 R08: 0000000000000001 R09: 00000004f18bac4f [ 411.811772][ T38] R10: 0000001b30b20000 R11: 0000000000000246 R12: 00007febeb7a5fac [ 411.811785][ T38] R13: 00007febeb7a5fa0 R14: ffffffffffffffff R15: 00007ffdf18baa70 [ 411.811818][ T38] [ 411.811845][ T38] [ 411.811845][ T38] Showing all locks held in the system: [ 411.811854][ T38] 2 locks held by kworker/0:0/9: [ 411.811866][ T38] 2 locks held by ksoftirqd/0/15: [ 411.811877][ T38] 2 locks held by ktimers/0/16: [ 411.811887][ T38] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 411.811933][ T38] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 411.811979][ T38] 7 locks held by rcuc/0/20: [ 411.811992][ T38] 1 lock held by khungtaskd/38: [ 411.812002][ T38] #0: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 411.812052][ T38] 3 locks held by kworker/u8:5/141: [ 411.812063][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 411.812108][ T38] #1: ffffc90003a47bc0 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 411.812153][ T38] #2: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 411.812217][ T38] 2 locks held by getty/5600: [ 411.812227][ T38] #0: ffff88823bf640a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 411.812278][ T38] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 411.812322][ T38] 3 locks held by kworker/u9:4/5845: [ 411.812332][ T38] #0: ffff88802e49e138 ((wq_completion)hci6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 411.812398][ T38] #1: ffffc90004bf7bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 411.812456][ T38] #2: ffff888029c0ce80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 411.812506][ T38] 3 locks held by kworker/1:4/5916: [ 411.812517][ T38] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 411.812567][ T38] #1: ffffc90005837bc0 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 411.812612][ T38] #2: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 411.812656][ T38] 3 locks held by kworker/1:6/5966: [ 411.812667][ T38] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 411.812711][ T38] #1: ffffc90005a37bc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 411.812755][ T38] #2: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 411.812800][ T38] 1 lock held by udevd/5967: [ 411.812810][ T38] #0: ffff888024af24c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0 [ 411.812856][ T38] 3 locks held by kworker/u8:35/9712: [ 411.812866][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 411.812911][ T38] #1: ffffc9000cb97bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 411.812955][ T38] #2: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 411.812998][ T38] 3 locks held by kworker/u8:41/9719: [ 411.813008][ T38] #0: ffff88814d3e8138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 411.813055][ T38] #1: ffffc9000cae7bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 411.813100][ T38] #2: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 411.813147][ T38] 1 lock held by syz.3.1640/9999: [ 411.813158][ T38] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 411.813200][ T38] 1 lock held by syz.0.1665/10051: [ 411.813210][ T38] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 411.813252][ T38] 1 lock held by syz.2.1669/10061: [ 411.813263][ T38] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 411.813304][ T38] 1 lock held by syz-executor/10070: [ 411.813314][ T38] #0: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 411.813362][ T38] 2 locks held by syz-executor/10088: [ 411.813372][ T38] #0: ffffffff8ecc6840 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 411.813417][ T38] #1: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: ipmr_net_exit_batch+0x20/0x90 [ 411.813461][ T38] 2 locks held by syz-executor/10096: [ 411.813471][ T38] #0: ffffffff8ecc6840 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 411.813511][ T38] #1: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 411.813559][ T38] 1 lock held by syz.1.1689/10118: [ 411.813569][ T38] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 411.813609][ T38] 1 lock held by syz.4.1694/10131: [ 411.813619][ T38] #0: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 411.813665][ T38] 2 locks held by syz-executor/10134: [ 411.813675][ T38] #0: ffffffff8ecc6840 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 411.813719][ T38] #1: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x990 [ 411.813765][ T38] 2 locks held by syz-executor/10138: [ 411.813775][ T38] #0: ffffffff8ecc6840 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 411.813818][ T38] #1: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x990 [ 411.813864][ T38] 2 locks held by syz-executor/10140: [ 411.813875][ T38] #0: ffffffff8ecc6840 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 411.813920][ T38] #1: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x990 [ 411.813966][ T38] 2 locks held by syz-executor/10143: [ 411.813976][ T38] #0: ffffffff8ecc6840 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 411.814019][ T38] #1: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2ab/0x800 [ 411.814066][ T38] 1 lock held by syz-executor/10147: [ 411.814076][ T38] #0: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 411.814120][ T38] 1 lock held by syz-executor/10150: [ 411.814130][ T38] #0: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 411.814173][ T38] 1 lock held by syz-executor/10154: [ 411.814184][ T38] #0: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 411.814224][ T38] 1 lock held by syz-executor/10156: [ 411.814232][ T38] #0: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 411.814265][ T38] 1 lock held by syz-executor/10159: [ 411.814274][ T38] #0: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 411.814311][ T38] [ 411.814315][ T38] ============================================= [ 411.814315][ T38] [ 411.814337][ T38] NMI backtrace for cpu 1 [ 411.814364][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 411.814393][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 411.814404][ T38] Call Trace: [ 411.814411][ T38] [ 411.814418][ T38] dump_stack_lvl+0x189/0x250 [ 411.814450][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 411.814472][ T38] ? __pfx__printk+0x10/0x10 [ 411.814504][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 411.814539][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 411.814563][ T38] ? __pfx__printk+0x10/0x10 [ 411.814586][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 411.814608][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 411.814633][ T38] watchdog+0xf93/0xfe0 [ 411.814660][ T38] ? watchdog+0x1de/0xfe0 [ 411.814687][ T38] kthread+0x70e/0x8a0 [ 411.814714][ T38] ? __pfx_watchdog+0x10/0x10 [ 411.814733][ T38] ? __pfx_kthread+0x10/0x10 [ 411.814762][ T38] ? __pfx_kthread+0x10/0x10 [ 411.814786][ T38] ret_from_fork+0x436/0x7d0 [ 411.814811][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 411.814838][ T38] ? __switch_to_asm+0x39/0x70 [ 411.814854][ T38] ? __switch_to_asm+0x33/0x70 [ 411.814869][ T38] ? __pfx_kthread+0x10/0x10 [ 411.814893][ T38] ret_from_fork_asm+0x1a/0x30 [ 411.814926][ T38] [ 411.814933][ T38] Sending NMI from CPU 1 to CPUs 0: [ 411.814961][ C0] NMI backtrace for cpu 0 [ 411.814974][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 411.814992][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 411.815001][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x2f/0x80 [ 411.815021][ C0] Code: 8b 04 24 65 48 8b 0c 25 08 40 f6 91 65 8b 35 d8 d1 37 10 81 e6 00 00 ff 00 ba 00 01 00 00 23 91 0c 0b 00 00 89 d7 09 f7 74 11 <85> f6 75 39 85 d2 74 35 83 b9 d4 15 00 00 00 74 2c 8b 91 b0 15 00 [ 411.815034][ C0] RSP: 0018:ffffc90000156958 EFLAGS: 00000206 [ 411.815049][ C0] RAX: ffffffff8966b928 RBX: 00000000311414ac RCX: ffff88801ae85940 [ 411.815060][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 411.815070][ C0] RBP: ffffc90000156a38 R08: 0000000000000000 R09: 0000000000000100 [ 411.815081][ C0] R10: 0000000000000100 R11: 0000000000000005 R12: 0000000000000000 [ 411.815090][ C0] R13: 1ffff11006e75959 R14: ffff8880373acac8 R15: 0000000000000001 [ 411.815101][ C0] FS: 0000000000000000(0000) GS:ffff8881268bc000(0000) knlGS:0000000000000000 [ 411.815114][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 411.815125][ C0] CR2: 00005555832e1588 CR3: 000000000d7a6000 CR4: 00000000003526f0 [ 411.815139][ C0] Call Trace: [ 411.815146][ C0] [ 411.815151][ C0] find_exception+0xd8/0xa20 [ 411.815170][ C0] ? __pfx_find_exception+0x10/0x10 [ 411.815185][ C0] ? fib_lookup+0x76/0x440 [ 411.815204][ C0] ip_route_output_key_hash_rcu+0xfbe/0x23e0 [ 411.815225][ C0] ? ip_route_output_key_hash+0xde/0x2e0 [ 411.815241][ C0] ip_route_output_key_hash+0x1b9/0x2e0 [ 411.815256][ C0] ? __lock_acquire+0xab9/0xd20 [ 411.815275][ C0] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 411.815300][ C0] ? ip_route_me_harder+0x4ad/0x1030 [ 411.815322][ C0] ip_route_output_flow+0x2a/0x150 [ 411.815335][ C0] ? ip_route_me_harder+0x6c0/0x1030 [ 411.815353][ C0] ip_route_me_harder+0x6d2/0x1030 [ 411.815375][ C0] ? __pfx_ip_route_me_harder+0x10/0x10 [ 411.815407][ C0] synproxy_send_tcp+0x359/0x6c0 [ 411.815431][ C0] synproxy_send_client_synack+0x8bb/0xe20 [ 411.815458][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 411.815477][ C0] ? synproxy_pernet+0x1f8/0x270 [ 411.815492][ C0] ? synproxy_pernet+0x45/0x270 [ 411.815511][ C0] nft_synproxy_eval_v4+0x36e/0x560 [ 411.815529][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 411.815546][ C0] ? nf_ip_checksum+0x13c/0x510 [ 411.815564][ C0] nft_synproxy_do_eval+0x345/0x570 [ 411.815579][ C0] ? unwind_next_frame+0xa5/0x2390 [ 411.815600][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 411.815624][ C0] nft_do_chain+0x40c/0x1920 [ 411.815647][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 411.815661][ C0] ? rcu_qs+0xc4/0x170 [ 411.815695][ C0] ? try_to_take_rt_mutex+0x840/0xb00 [ 411.815717][ C0] nft_do_chain_inet+0x25d/0x340 [ 411.815732][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 411.815747][ C0] ? __lock_acquire+0xab9/0xd20 [ 411.815769][ C0] ? NF_HOOK+0x9a/0x3a0 [ 411.815787][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 411.815802][ C0] nf_hook_slow+0xc2/0x220 [ 411.815824][ C0] NF_HOOK+0x206/0x3a0 [ 411.815842][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 411.815860][ C0] ? NF_HOOK+0x9a/0x3a0 [ 411.815876][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 411.815892][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 411.815911][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 411.815930][ C0] ? skb_dst+0x4f/0xd0 [ 411.815947][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 411.815967][ C0] NF_HOOK+0x30c/0x3a0 [ 411.815985][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 411.816002][ C0] ? NF_HOOK+0x9a/0x3a0 [ 411.816018][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 411.816036][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 411.816059][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 411.816075][ C0] __netif_receive_skb+0x143/0x380 [ 411.816093][ C0] ? rt_spin_unlock+0x65/0x80 [ 411.816112][ C0] ? process_backlog+0x27b/0x900 [ 411.816129][ C0] process_backlog+0x31e/0x900 [ 411.816153][ C0] __napi_poll+0xb3/0x540 [ 411.816171][ C0] net_rx_action+0x707/0xe00 [ 411.816188][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 411.816216][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 411.816252][ C0] handle_softirqs+0x22f/0x710 [ 411.816274][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 411.816302][ C0] run_ktimerd+0xcf/0x190 [ 411.816319][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 411.816336][ C0] ? schedule+0x91/0x360 [ 411.816357][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 411.816373][ C0] smpboot_thread_fn+0x53f/0xa60 [ 411.816391][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 411.816412][ C0] kthread+0x70e/0x8a0 [ 411.816431][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 411.816448][ C0] ? __pfx_kthread+0x10/0x10 [ 411.816469][ C0] ? __pfx_kthread+0x10/0x10 [ 411.816488][ C0] ret_from_fork+0x436/0x7d0 [ 411.816507][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 411.816527][ C0] ? __switch_to_asm+0x39/0x70 [ 411.816540][ C0] ? __switch_to_asm+0x33/0x70 [ 411.816553][ C0] ? __pfx_kthread+0x10/0x10 [ 411.816572][ C0] ret_from_fork_asm+0x1a/0x30 [ 411.816594][ C0] [ 411.816962][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 411.816977][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 411.816997][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 411.817007][ T38] Call Trace: [ 411.817014][ T38] [ 411.817021][ T38] dump_stack_lvl+0x99/0x250 [ 411.817046][ T38] ? __asan_memcpy+0x40/0x70 [ 411.817066][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 411.817089][ T38] ? __pfx__printk+0x10/0x10 [ 411.817120][ T38] vpanic+0x281/0x750 [ 411.817146][ T38] ? __pfx_vpanic+0x10/0x10 [ 411.817167][ T38] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 411.817186][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 411.817221][ T38] panic+0xb9/0xc0 [ 411.817243][ T38] ? __pfx_panic+0x10/0x10 [ 411.817269][ T38] ? irq_work_queue+0xc3/0x140 [ 411.817295][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 411.817319][ T38] watchdog+0xfd2/0xfe0 [ 411.817345][ T38] ? watchdog+0x1de/0xfe0 [ 411.817372][ T38] kthread+0x70e/0x8a0 [ 411.817399][ T38] ? __pfx_watchdog+0x10/0x10 [ 411.817418][ T38] ? __pfx_kthread+0x10/0x10 [ 411.817446][ T38] ? __pfx_kthread+0x10/0x10 [ 411.817469][ T38] ret_from_fork+0x436/0x7d0 [ 411.817493][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 411.817521][ T38] ? __switch_to_asm+0x39/0x70 [ 411.817543][ T38] ? __switch_to_asm+0x33/0x70 [ 411.817559][ T38] ? __pfx_kthread+0x10/0x10 [ 411.817584][ T38] ret_from_fork_asm+0x1a/0x30 [ 411.817616][ T38] [ 411.817961][ T38] Kernel Offset: disabled