last executing test programs: 46.845959038s ago: executing program 4 (id=797): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xe) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/244, 0xf4}], 0x1) 46.283515198s ago: executing program 4 (id=802): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b00)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x3}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x64, 0x2, {{0x7fff, 0x7f, 0x192, 0xf, 0x7fff, 0x205}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x8, 0x8, 0xb, 0x8004, 0x5}}]}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x8000000001, 0x0, 0x0, 0x1bb, 0x4}}]}}}]}, 0x94}}, 0x4000) 45.937546386s ago: executing program 4 (id=806): unshare(0x2040400) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0xc00, 0x0) fsync(r0) 45.581624867s ago: executing program 4 (id=811): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x401, 0xfffffffe, 0x0, 0xffffffff}, 0x10) close(r0) 45.241592087s ago: executing program 4 (id=816): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) process_madvise(0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, 0x0) 44.479552684s ago: executing program 4 (id=820): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}, @NFTA_MATCH_INFO={0xe, 0x3, "7acc6338a90000b03bd9"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x4}]}], {0x14}}, 0x90}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 39.660502262s ago: executing program 1 (id=843): r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004400)={&(0x7f0000004380)={0x30, r0, 0x20d, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}]}, 0x30}}, 0x4000) 39.425246404s ago: executing program 1 (id=844): r0 = fsopen(&(0x7f0000007a00)='sysfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbM:', 0x0) 39.217510225s ago: executing program 1 (id=845): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4c1d, 0x659, @empty, 0x100}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000), 0x4) 38.975108802s ago: executing program 1 (id=846): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x54, 0x24, 0xf0b, 0x70bd26, 0x1, {0x60, 0x0, 0x0, r1, {0x0, 0xb}, {0xfff1, 0xffff}, {0x3, 0xd}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x2a, 0x7, 0x400, 0x0, 0x6, 0x7fffffff}}, {0x4}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008000}, 0x2004c0c0) 34.717658939s ago: executing program 1 (id=848): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x500, 0x1, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) 29.68994679s ago: executing program 0 (id=863): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x149c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 28.933027265s ago: executing program 32 (id=820): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}, @NFTA_MATCH_INFO={0xe, 0x3, "7acc6338a90000b03bd9"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x4}]}], {0x14}}, 0x90}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 28.249672106s ago: executing program 3 (id=867): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x400000001, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback={0xffffffffffff0000}}, {0xa, 0x0, 0xfffffffe, @empty}, r1}}, 0x48) 28.041425134s ago: executing program 3 (id=868): r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x68, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x4005, 0x1, {0x1, @win={{}, 0x0, 0xfffffff8, 0x0, 0x0, 0x0}}}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000140)=0x1) 27.827574473s ago: executing program 3 (id=869): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000840)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)='q', 0x1) 27.443983057s ago: executing program 3 (id=870): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x7}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) 22.72995975s ago: executing program 3 (id=872): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x3a1800, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) flock(r0, 0x6) 22.590367509s ago: executing program 1 (id=873): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg(r0, &(0x7f0000000540)={0x1, {&(0x7f0000000080)=""/60, 0xfffffffffffffc77, 0x0, 0x3, 0x2}}, 0x48) 22.219311072s ago: executing program 3 (id=875): unshare(0x22020400) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, 0x0, 0x0) 20.070096208s ago: executing program 2 (id=880): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000013c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300007e000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe80, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 19.763748743s ago: executing program 0 (id=881): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) 19.650025505s ago: executing program 2 (id=882): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) 19.352029558s ago: executing program 0 (id=883): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x7}, 0x8) close_range(r0, r0, 0x0) 19.18943387s ago: executing program 2 (id=884): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100)) 18.985917662s ago: executing program 0 (id=885): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000200), 0x4) 18.809579965s ago: executing program 2 (id=886): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r0 = getpid() ioprio_set$pid(0x1, r0, 0x4004) 18.559089519s ago: executing program 0 (id=887): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x0, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x80, &(0x7f0000000800)={[], [{@smackfshat={'smackfshat', 0x3d, '.'}}]}) 18.552024419s ago: executing program 2 (id=888): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x42, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000300)={0x60, 0x0, 0x0, {{0x3, 0x4, 0x3d5, 0x4, 0x7, 0x1, 0xdb3, 0x84a6}}}, 0x60) 18.272966635s ago: executing program 2 (id=889): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback={0x0, 0x7ffffffe}}, 0x1c) 17.97418508s ago: executing program 0 (id=890): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x6c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4, 0x0, @loopback={0xff00000000000000}}}, {0x12, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) 7.427846649s ago: executing program 33 (id=873): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg(r0, &(0x7f0000000540)={0x1, {&(0x7f0000000080)=""/60, 0xfffffffffffffc77, 0x0, 0x3, 0x2}}, 0x48) 6.90744144s ago: executing program 34 (id=875): unshare(0x22020400) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, 0x0, 0x0) 761.68158ms ago: executing program 35 (id=889): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback={0x0, 0x7ffffffe}}, 0x1c) 0s ago: executing program 36 (id=890): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x6c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4, 0x0, @loopback={0xff00000000000000}}}, {0x12, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.25' (ED25519) to the list of known hosts. [ 84.388075][ T5828] cgroup: Unknown subsys name 'net' [ 84.639641][ T5828] cgroup: Unknown subsys name 'cpuset' [ 84.714681][ T5828] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.674808][ T5828] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.009209][ T31] cfg80211: failed to load regulatory.db [ 91.139399][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.142162][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.144232][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.152663][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.154366][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.215421][ T5158] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.219814][ T5158] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.220865][ T5158] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.250390][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.251333][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.256382][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.271013][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.271862][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.273088][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.277191][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.290496][ T5851] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.291919][ T5851] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.292659][ T5851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.293807][ T5851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.312297][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.351101][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.356233][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.357012][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.358584][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.359443][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 92.132903][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 92.460686][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 92.537775][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 92.548412][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 92.756825][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 93.051984][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.053094][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.053459][ T5839] bridge_slave_0: entered allmulticast mode [ 93.071803][ T5839] bridge_slave_0: entered promiscuous mode [ 93.133032][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.133139][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.133467][ T5839] bridge_slave_1: entered allmulticast mode [ 93.149834][ T5839] bridge_slave_1: entered promiscuous mode [ 93.165624][ T5158] Bluetooth: hci0: command tx timeout [ 93.324917][ T5158] Bluetooth: hci3: command tx timeout [ 93.325034][ T5158] Bluetooth: hci2: command tx timeout [ 93.325110][ T5158] Bluetooth: hci1: command tx timeout [ 93.404116][ T5841] Bluetooth: hci4: command tx timeout [ 93.805771][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.805938][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.806139][ T5843] bridge_slave_0: entered allmulticast mode [ 93.809454][ T5843] bridge_slave_0: entered promiscuous mode [ 93.818851][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.988160][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.067231][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.067405][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.067610][ T5843] bridge_slave_1: entered allmulticast mode [ 94.070900][ T5843] bridge_slave_1: entered promiscuous mode [ 94.073596][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.073756][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.074950][ T5844] bridge_slave_0: entered allmulticast mode [ 94.077761][ T5844] bridge_slave_0: entered promiscuous mode [ 94.079957][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.080094][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.080649][ T5842] bridge_slave_0: entered allmulticast mode [ 94.083384][ T5842] bridge_slave_0: entered promiscuous mode [ 94.345750][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.345928][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.346131][ T5844] bridge_slave_1: entered allmulticast mode [ 94.349333][ T5844] bridge_slave_1: entered promiscuous mode [ 94.352062][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.352230][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.352348][ T5842] bridge_slave_1: entered allmulticast mode [ 94.369642][ T5842] bridge_slave_1: entered promiscuous mode [ 94.510090][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.510207][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.510563][ T5845] bridge_slave_0: entered allmulticast mode [ 94.512292][ T5845] bridge_slave_0: entered promiscuous mode [ 94.719437][ T5839] team0: Port device team_slave_0 added [ 94.720564][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.720727][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.720928][ T5845] bridge_slave_1: entered allmulticast mode [ 94.723404][ T5845] bridge_slave_1: entered promiscuous mode [ 94.743017][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.888325][ T5839] team0: Port device team_slave_1 added [ 94.980383][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.987117][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.990891][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.244014][ T5841] Bluetooth: hci0: command tx timeout [ 95.249769][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.254934][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.351600][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.404179][ T5841] Bluetooth: hci1: command tx timeout [ 95.404230][ T5841] Bluetooth: hci2: command tx timeout [ 95.404406][ T5158] Bluetooth: hci3: command tx timeout [ 95.484159][ T5158] Bluetooth: hci4: command tx timeout [ 95.598310][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.598329][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.598359][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.607074][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.821152][ T5843] team0: Port device team_slave_0 added [ 95.967931][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.967949][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.967976][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.059075][ T5843] team0: Port device team_slave_1 added [ 96.061899][ T5844] team0: Port device team_slave_0 added [ 96.067339][ T5842] team0: Port device team_slave_0 added [ 96.206677][ T5842] team0: Port device team_slave_1 added [ 96.208642][ T5844] team0: Port device team_slave_1 added [ 96.212735][ T5845] team0: Port device team_slave_0 added [ 96.469833][ T5845] team0: Port device team_slave_1 added [ 96.471610][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.471625][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.471653][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.826649][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.826667][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.826695][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.828431][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.828445][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.828471][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.831411][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.831424][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.831450][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.237769][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.237788][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.237816][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.240215][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.240228][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.240254][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.263304][ T5839] hsr_slave_0: entered promiscuous mode [ 97.265580][ T5839] hsr_slave_1: entered promiscuous mode [ 97.268628][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.268642][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.268664][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.306932][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.306949][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.306971][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.323953][ T5158] Bluetooth: hci0: command tx timeout [ 97.492064][ T5851] Bluetooth: hci2: command tx timeout [ 97.492099][ T5851] Bluetooth: hci1: command tx timeout [ 97.492232][ T5158] Bluetooth: hci3: command tx timeout [ 97.564186][ T5841] Bluetooth: hci4: command tx timeout [ 97.829855][ T5843] hsr_slave_0: entered promiscuous mode [ 97.830931][ T5843] hsr_slave_1: entered promiscuous mode [ 97.831623][ T5843] debugfs: 'hsr0' already exists in 'hsr' [ 97.831697][ T5843] Cannot create hsr debugfs directory [ 98.115974][ T5844] hsr_slave_0: entered promiscuous mode [ 98.117586][ T5844] hsr_slave_1: entered promiscuous mode [ 98.118711][ T5844] debugfs: 'hsr0' already exists in 'hsr' [ 98.118737][ T5844] Cannot create hsr debugfs directory [ 98.143528][ T5842] hsr_slave_0: entered promiscuous mode [ 98.145598][ T5842] hsr_slave_1: entered promiscuous mode [ 98.146450][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 98.146473][ T5842] Cannot create hsr debugfs directory [ 98.396443][ T5845] hsr_slave_0: entered promiscuous mode [ 98.397342][ T5845] hsr_slave_1: entered promiscuous mode [ 98.398165][ T5845] debugfs: 'hsr0' already exists in 'hsr' [ 98.398190][ T5845] Cannot create hsr debugfs directory [ 99.409645][ T5841] Bluetooth: hci0: command tx timeout [ 99.564209][ T5841] Bluetooth: hci3: command tx timeout [ 99.564243][ T5841] Bluetooth: hci1: command tx timeout [ 99.564266][ T5841] Bluetooth: hci2: command tx timeout [ 99.644428][ T5158] Bluetooth: hci4: command tx timeout [ 100.070330][ T5839] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.142118][ T5839] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.160020][ T5839] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.224360][ T5839] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.356249][ T5843] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 100.407945][ T5843] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 100.454650][ T5843] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 100.510775][ T5843] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 100.688934][ T5844] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 100.749498][ T5844] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 100.786440][ T5844] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 100.851743][ T5844] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 101.094062][ T5842] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 101.134471][ T5842] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 101.194086][ T5842] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 101.263631][ T5842] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 101.482652][ T5845] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 101.527882][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.540857][ T5845] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 101.568847][ T5845] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 101.610221][ T5845] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 101.735607][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.804939][ T1126] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.805425][ T1126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.832400][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.869912][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.870071][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.981273][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.999309][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.066885][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.067139][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.137556][ T1126] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.137804][ T1126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.179257][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.239821][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.240066][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.255984][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.296526][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.296759][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.470730][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.541090][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.575929][ T1126] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.576105][ T1126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.650822][ T978] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.651063][ T978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.755567][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.809755][ T1126] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.810900][ T1126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.859261][ T3606] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.859443][ T3606] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.897662][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.307326][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.410941][ T5839] veth0_vlan: entered promiscuous mode [ 103.490619][ T5839] veth1_vlan: entered promiscuous mode [ 103.619491][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.777012][ T5843] veth0_vlan: entered promiscuous mode [ 103.830240][ T5839] veth0_macvtap: entered promiscuous mode [ 103.857089][ T5843] veth1_vlan: entered promiscuous mode [ 103.887138][ T5839] veth1_macvtap: entered promiscuous mode [ 103.981558][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.073348][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.140208][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.158416][ T5843] veth0_macvtap: entered promiscuous mode [ 104.214775][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.216528][ T1126] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.226535][ T1126] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.232299][ T1126] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.235874][ T5843] veth1_macvtap: entered promiscuous mode [ 104.246322][ T1126] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.457926][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.557589][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.559790][ T5842] veth0_vlan: entered promiscuous mode [ 104.645959][ T978] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.671172][ T978] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.715517][ T978] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.719930][ T5842] veth1_vlan: entered promiscuous mode [ 104.761546][ T978] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.774106][ T5844] veth0_vlan: entered promiscuous mode [ 104.780660][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.780680][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.790806][ T5845] veth0_vlan: entered promiscuous mode [ 104.977555][ T5844] veth1_vlan: entered promiscuous mode [ 104.996704][ T5845] veth1_vlan: entered promiscuous mode [ 105.058468][ T3606] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.058489][ T3606] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.253373][ T5842] veth0_macvtap: entered promiscuous mode [ 105.270746][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.270792][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.330474][ T5842] veth1_macvtap: entered promiscuous mode [ 105.468888][ T3606] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.468911][ T3606] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.519810][ T5844] veth0_macvtap: entered promiscuous mode [ 105.526915][ T5845] veth0_macvtap: entered promiscuous mode [ 105.589159][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.591911][ T5844] veth1_macvtap: entered promiscuous mode [ 105.632347][ T5845] veth1_macvtap: entered promiscuous mode [ 105.659012][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.733493][ T3589] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.747773][ T3589] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.751552][ T978] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.763788][ T978] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.791376][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.799424][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.062386][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.066173][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.192608][ T3606] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.198409][ T3606] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.202227][ T978] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.278764][ T5966] capability: warning: `syz.0.8' uses deprecated v2 capabilities in a way that may be insecure [ 106.279452][ T978] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.348760][ T978] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.358559][ T978] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.400485][ T978] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.464479][ T978] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.117441][ T3589] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.117466][ T3589] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.398738][ T978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.398762][ T978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.452585][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.452608][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.573257][ T3589] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.573276][ T3589] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.892136][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.892159][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.062416][ T5979] warning: `syz.2.13' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 108.132664][ T978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.132686][ T978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.377037][ T5986] [U]  [ 108.377096][ T5986] [U] K{ [ 108.377685][ T5986] [U] T 1ŠFFˊ`GJǘGO/MC [ 108.414409][ T5986] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 108.415478][ T5986] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 108.446503][ T5983] mkiss: ax0: crc mode is auto. [ 108.450340][ T5986] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 108.513210][ T5986] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 108.538995][ T5986] [U] T_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 108.540678][ T5986] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 108.543373][ T5986] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`ƦMX"\ [ 108.638421][ T5986] [U] {; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 108.649141][ T5986] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 108.649352][ T5986] [U] 22Ʃ۩X?0;3U [ 108.696617][ T5986] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 108.697562][ T5986] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 108.698295][ T5986] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 108.704435][ T5986] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 108.705788][ T5986] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 108.705848][ T5986] [U] EC [ 108.718623][ T5986] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 108.780899][ T5985] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 108.893671][ T5992] loop4: detected capacity change from 0 to 524255232 [ 110.464320][ T5935] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 110.662607][ T6023] program syz.3.29 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 110.663267][ T5935] usb 2-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 110.663321][ T5935] usb 2-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=3f.e0 [ 110.663339][ T5935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.902990][ T5935] usb 2-1: probing VID:PID(2201:012C) [ 110.998938][ T5935] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs [ 110.999056][ T5935] vub300 2-1:64.0: probe with driver vub300 failed with error -22 [ 111.104853][ T5921] usb 2-1: USB disconnect, device number 2 [ 111.530547][ T6037] syz.2.33 (6037) used greatest stack depth: 18568 bytes left [ 111.984738][ T6049] netlink: 256 bytes leftover after parsing attributes in process `syz.1.39'. [ 111.984764][ T6049] netlink: 80 bytes leftover after parsing attributes in process `syz.1.39'. [ 112.104105][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 112.270732][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.270762][ T10] usb 3-1: config 0 has no interfaces? [ 112.276206][ T10] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 112.276238][ T10] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 112.276257][ T10] usb 3-1: Product: syz [ 112.276270][ T10] usb 3-1: Manufacturer: syz [ 112.329920][ T10] usb 3-1: config 0 descriptor?? [ 112.677019][ T5913] usb 3-1: USB disconnect, device number 2 [ 113.866946][ T6091] netlink: 48 bytes leftover after parsing attributes in process `syz.0.55'. [ 114.344452][ T6101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.59'. [ 114.344480][ T6101] netlink: 12 bytes leftover after parsing attributes in process `syz.2.59'. [ 114.774064][ T37] audit: type=1326 audit(1756835438.127:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6111 comm="syz.4.64" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f989df7ebe9 code=0x0 [ 115.220058][ T6127] process 'syz.2.72' launched '/dev/fd/3' with NULL argv: empty string added [ 115.311654][ T6130] netlink: 'syz.1.73': attribute type 30 has an invalid length. [ 115.808205][ T6138] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 116.410539][ T6151] Zero length message leads to an empty skb [ 116.417663][ T57] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.417712][ T57] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.417746][ T57] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.417777][ T57] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.212245][ T6173] netlink: 4 bytes leftover after parsing attributes in process `syz.1.93'. [ 118.550923][ T6206] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 119.283636][ T6220] netlink: 20 bytes leftover after parsing attributes in process `syz.4.114'. [ 120.127395][ T6245] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 120.144450][ T31] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 120.304229][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 120.312301][ T31] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 120.312337][ T31] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 120.312356][ T31] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 120.388657][ T31] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 120.388690][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.388709][ T31] usb 5-1: Product: syz [ 120.388722][ T31] usb 5-1: Manufacturer: syz [ 120.388736][ T31] usb 5-1: SerialNumber: syz [ 120.724847][ T31] usb 5-1: 0:2 : does not exist [ 120.893458][ T31] usb 5-1: USB disconnect, device number 2 [ 121.004919][ T5892] udevd[5892]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 121.092987][ T6264] sctp: [Deprecated]: syz.3.133 (pid 6264) Use of int in maxseg socket option. [ 121.092987][ T6264] Use struct sctp_assoc_value instead [ 121.578933][ T31] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 121.734710][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 121.737774][ T31] usb 4-1: config 0 has an invalid interface number: 29 but max is 0 [ 121.737801][ T31] usb 4-1: config 0 has no interface number 0 [ 121.737836][ T31] usb 4-1: config 0 interface 29 has no altsetting 0 [ 121.741227][ T31] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 121.741253][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.741271][ T31] usb 4-1: Product: syz [ 121.741282][ T31] usb 4-1: Manufacturer: syz [ 121.741293][ T31] usb 4-1: SerialNumber: syz [ 121.834968][ T31] usb 4-1: config 0 descriptor?? [ 122.079340][ T31] peak_usb 4-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 122.287073][ T31] peak_usb 4-1:0.29 can0: sending command failure: -8 [ 122.287167][ T31] peak_usb 4-1:0.29 can0: sending command failure: -8 [ 122.287288][ T31] peak_usb 4-1:0.29 can0: sending command failure: -8 [ 122.581090][ T31] peak_usb 4-1:0.29: probe with driver peak_usb failed with error -8 [ 122.616263][ T31] usb 4-1: USB disconnect, device number 2 [ 123.050014][ T6304] devpts: Bad value for 'max' [ 123.669057][ T6318] [U]  [ 123.669116][ T6318] [U] K{ [ 123.669721][ T6318] [U] T 1ŠFFˊ`GJǘGO/MC [ 123.701466][ T6318] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 123.702891][ T6318] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 123.710086][ T6318] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 123.725786][ T6318] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 123.726220][ T6316] syz.2.154 (6316) used greatest stack depth: 17960 bytes left [ 123.743132][ T6318] [U] T_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 123.750427][ T6318] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 123.759222][ T6318] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`ƦMX"\ [ 123.814350][ T6318] [U] {; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 123.824405][ T6318] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 123.824609][ T6318] [U] 22Ʃ۩X?0;3U [ 123.860806][ T6318] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 123.861746][ T6318] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 123.872773][ T6318] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 123.873212][ T6318] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 123.874663][ T6318] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 123.874723][ T6318] [U] EC [ 123.885474][ T6318] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 123.979430][ T6315] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 127.054514][ T6401] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 127.699282][ T5913] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 127.864236][ T5913] usb 2-1: Using ep0 maxpacket: 32 [ 127.869049][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.869084][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.869125][ T5913] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 127.869147][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.887504][ T5913] usb 2-1: config 0 descriptor?? [ 128.064038][ T5914] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 128.215068][ T5914] usb 5-1: Using ep0 maxpacket: 8 [ 128.218223][ T5914] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 128.218276][ T5914] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 128.218301][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.269249][ T5914] usb 5-1: config 0 descriptor?? [ 128.305279][ T6435] netlink: 56 bytes leftover after parsing attributes in process `syz.0.209'. [ 128.371617][ T5913] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 128.371661][ T5913] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 128.371686][ T5913] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 128.371710][ T5913] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 128.371735][ T5913] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 128.371759][ T5913] savu 0003:1E7D:2D5A.0001: unbalanced collection at end of report description [ 128.372771][ T5913] savu 0003:1E7D:2D5A.0001: parse failed [ 128.372845][ T5913] savu 0003:1E7D:2D5A.0001: probe with driver savu failed with error -22 [ 128.734695][ T31] usb 2-1: USB disconnect, device number 3 [ 128.770276][ T5914] corsair 0003:1B1C:1B09.0002: unbalanced delimiter at end of report description [ 128.771248][ T5914] corsair 0003:1B1C:1B09.0002: parse failed [ 128.771365][ T5914] corsair 0003:1B1C:1B09.0002: probe with driver corsair failed with error -22 [ 128.945693][ T5914] usb 5-1: USB disconnect, device number 3 [ 129.351023][ T6460] netlink: 16 bytes leftover after parsing attributes in process `syz.0.218'. [ 129.367126][ T6460] netlink: 16 bytes leftover after parsing attributes in process `syz.0.218'. [ 129.946012][ T6480] netlink: 'syz.4.229': attribute type 5 has an invalid length. [ 130.248451][ T6488] netlink: 'syz.4.233': attribute type 6 has an invalid length. [ 130.656035][ T6501] mmap: syz.3.239 (6501) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 130.737744][ T6503] tipc: Started in network mode [ 130.737778][ T6503] tipc: Node identity 00000000000000000040000000000001, cluster identity 4711 [ 130.737841][ T6503] tipc: Enabling of bearer rejected, failed to enable media [ 130.904787][ T6511] sctp: [Deprecated]: syz.4.243 (pid 6511) Use of int in maxseg socket option. [ 130.904787][ T6511] Use struct sctp_assoc_value instead [ 131.105668][ T5914] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 131.194966][ C1] vkms_vblank_simulate: vblank timer overrun [ 131.296117][ T5914] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 131.296146][ T5914] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.296164][ T5914] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 131.296184][ T5914] usb 3-1: config 1 has no interface number 1 [ 131.296305][ T5914] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 131.345636][ T6520] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 131.364184][ T5914] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 131.364219][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.364239][ T5914] usb 3-1: Product: syz [ 131.364253][ T5914] usb 3-1: Manufacturer: syz [ 131.364267][ T5914] usb 3-1: SerialNumber: syz [ 131.432561][ T6523] overlayfs: failed to resolve './file1': -2 [ 131.654844][ T5914] usb 3-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 131.654911][ T5914] usb 3-1: MIDIStreaming interface descriptor not found [ 131.799112][ T5914] usb 3-1: USB disconnect, device number 3 [ 131.827475][ T6528] netlink: 8 bytes leftover after parsing attributes in process `syz.3.250'. [ 132.186655][ T5988] udevd[5988]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 132.211254][ T6533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.253'. [ 132.506255][ T5913] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 132.506795][ T6541] ======================================================= [ 132.506795][ T6541] WARNING: The mand mount option has been deprecated and [ 132.506795][ T6541] and is ignored by this kernel. Remove the mand [ 132.506795][ T6541] option from the mount to silence this warning. [ 132.506795][ T6541] ======================================================= [ 132.674359][ T5913] usb 2-1: Using ep0 maxpacket: 8 [ 132.690250][ T5913] usb 2-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 132.690282][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.690302][ T5913] usb 2-1: Product: syz [ 132.690317][ T5913] usb 2-1: Manufacturer: syz [ 132.690331][ T5913] usb 2-1: SerialNumber: syz [ 132.910502][ T6552] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 132.981699][ T6553] [U] . [ 133.105746][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.106101][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.172447][ T5913] mxuport 2-1:254.0: mxuport_recv_ctrl_urb - short read (0 / 4) [ 133.172571][ T5913] mxuport 2-1:254.0: probe with driver mxuport failed with error -5 [ 133.295360][ T5225] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 133.295399][ T5225] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 133.295424][ T5225] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 133.380257][ T5225] hid-generic 0000:0004:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 133.385755][ T5921] usb 2-1: USB disconnect, device number 4 [ 133.493506][ T6565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.269'. [ 133.493532][ T6565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.269'. [ 133.493557][ T6565] netlink: 'syz.2.269': attribute type 14 has an invalid length. [ 133.876980][ T6566] fido_id[6566]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 134.227849][ T6586] nbd: must specify a device to reconfigure [ 134.261866][ T6590] netlink: 79 bytes leftover after parsing attributes in process `syz.0.277'. [ 134.262010][ T6590] netlink: 79 bytes leftover after parsing attributes in process `syz.0.277'. [ 134.812484][ T6605] netlink: 'syz.2.287': attribute type 12 has an invalid length. [ 134.812509][ T6605] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.287'. [ 135.228690][ T6613] netlink: 80 bytes leftover after parsing attributes in process `syz.1.289'. [ 135.228717][ T6613] netlink: 16 bytes leftover after parsing attributes in process `syz.1.289'. [ 135.228730][ T6613] tipc: MTU too low for tipc bearer [ 135.353991][ T37] audit: type=1326 audit(1756835458.707:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6615 comm="syz.4.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f989df7ebe9 code=0x7ffc0000 [ 135.354055][ T37] audit: type=1326 audit(1756835458.707:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6615 comm="syz.4.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f989df7ebe9 code=0x7ffc0000 [ 135.411805][ T37] audit: type=1326 audit(1756835458.767:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6615 comm="syz.4.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f989df7ebe9 code=0x7ffc0000 [ 135.424197][ T37] audit: type=1326 audit(1756835458.767:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6615 comm="syz.4.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f989df7ebe9 code=0x7ffc0000 [ 135.424255][ T37] audit: type=1326 audit(1756835458.767:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6615 comm="syz.4.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f989df7ebe9 code=0x7ffc0000 [ 135.488672][ T6623] netlink: 84 bytes leftover after parsing attributes in process `syz.3.294'. [ 135.824609][ T37] audit: type=1326 audit(1756835459.177:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6630 comm="syz.3.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73b730ebe9 code=0x7ffc0000 [ 135.825003][ T37] audit: type=1326 audit(1756835459.187:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6630 comm="syz.3.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73b730ebe9 code=0x7ffc0000 [ 135.858266][ T37] audit: type=1326 audit(1756835459.217:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6630 comm="syz.3.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f73b730ebe9 code=0x7ffc0000 [ 135.858319][ T37] audit: type=1326 audit(1756835459.217:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6630 comm="syz.3.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73b730ebe9 code=0x7ffc0000 [ 135.858358][ T37] audit: type=1326 audit(1756835459.217:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6630 comm="syz.3.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73b730ebe9 code=0x7ffc0000 [ 135.905666][ T6636] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 136.516946][ T6652] Bluetooth: MGMT ver 1.23 [ 136.983213][ T6668] netlink: 8 bytes leftover after parsing attributes in process `syz.4.318'. [ 136.983456][ T6668] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 136.983487][ T6668] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 137.293137][ T6679] capability: warning: `syz.1.321' uses 32-bit capabilities (legacy support in use) [ 137.764022][ T5913] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 137.920223][ T5913] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 137.920254][ T5913] usb 1-1: config 0 has no interface number 0 [ 137.920306][ T5913] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.920332][ T5913] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.920373][ T5913] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 137.920396][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.995794][ T5913] usb 1-1: config 0 descriptor?? [ 138.071856][ T6698] netlink: 4 bytes leftover after parsing attributes in process `syz.3.331'. [ 138.539318][ T5913] uclogic 0003:256C:006D.0004: hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.0-1/input1 [ 138.694882][ T5913] usb 1-1: USB disconnect, device number 2 [ 138.762749][ T6708] fido_id[6708]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 139.037926][ T6720] netlink: 'syz.4.341': attribute type 3 has an invalid length. [ 139.037950][ T6720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.341'. [ 139.215403][ T5914] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 139.388753][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.388789][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.388831][ T5914] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 139.388855][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.412026][ T5914] usb 3-1: config 0 descriptor?? [ 139.872583][ T5914] kone 0003:1E7D:2CED.0005: unknown main item tag 0x4 [ 139.971748][ T5914] kone 0003:1E7D:2CED.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.2-1/input0 [ 140.094558][ T5922] usb 3-1: USB disconnect, device number 4 [ 140.232955][ T6744] fido_id[6744]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 140.490512][ T6750] netlink: 100 bytes leftover after parsing attributes in process `syz.4.354'. [ 141.086193][ T6765] vxcan1: MTU too low for tipc bearer [ 141.086236][ T6765] tipc: Enabling of bearer rejected, failed to enable media [ 142.034066][ T5225] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 142.187079][ T5225] usb 1-1: config 0 has an invalid interface number: 29 but max is 0 [ 142.187111][ T5225] usb 1-1: config 0 has no interface number 0 [ 142.187147][ T5225] usb 1-1: config 0 interface 29 has no altsetting 0 [ 142.190395][ T5225] usb 1-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 142.190423][ T5225] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.190443][ T5225] usb 1-1: Product: syz [ 142.190457][ T5225] usb 1-1: Manufacturer: syz [ 142.190471][ T5225] usb 1-1: SerialNumber: syz [ 142.253530][ T5225] usb 1-1: config 0 descriptor?? [ 142.497419][ T5225] peak_usb 1-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 142.654088][ T5922] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 142.705853][ T5225] peak_usb 1-1:0.29 can0: sending command failure: -22 [ 142.705880][ T5225] peak_usb 1-1:0.29 can0: sending command failure: -22 [ 142.705898][ T5225] peak_usb 1-1:0.29 can0: sending command failure: -22 [ 142.812468][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.812504][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.812546][ T5922] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 142.812569][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.897488][ T5922] usb 2-1: config 0 descriptor?? [ 143.089333][ T5225] peak_usb 1-1:0.29: probe with driver peak_usb failed with error -22 [ 143.199866][ T5225] usb 1-1: USB disconnect, device number 3 [ 143.503321][ T6806] loop6: detected capacity change from 0 to 7 [ 143.533802][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 143.534033][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 143.545386][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 143.545422][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 143.564856][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 143.564950][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 143.567089][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 143.567116][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 143.567604][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 143.567628][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 143.567864][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 143.567886][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 143.568193][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 143.568215][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 143.568303][ T6806] ldm_validate_partition_table(): Disk read failed. [ 143.568452][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 143.568475][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 143.568690][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 143.568712][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 143.568974][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 143.568997][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 143.569475][ T6806] Dev loop6: unable to read RDB block 0 [ 143.572250][ T6806] loop6: unable to read partition table [ 143.572497][ T6806] loop6: partition table beyond EOD, truncated [ 143.572526][ T6806] loop_reread_partitions: partition scan of loop6 (被x() failed (rc=-5) [ 143.771570][ T5922] hid-steam 0003:28DE:1142.0006: unknown main item tag 0x0 [ 143.773537][ T5922] hid-steam 0003:28DE:1142.0006: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 143.874189][ T5922] hid-steam 0003:28DE:1142.0006: Steam wireless receiver connected [ 143.874522][ T5922] hid-steam 0003:28DE:1142.0006: No HID_FEATURE_REPORT submitted - nothing to read [ 143.909295][ T5922] hid-steam 0003:28DE:1142.0007: unknown main item tag 0x0 [ 143.939301][ T5922] hid-steam 0003:28DE:1142.0007: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 143.957843][ T5922] usb 2-1: USB disconnect, device number 5 [ 143.985326][ T5922] hid-steam 0003:28DE:1142.0006: Steam wireless receiver disconnected [ 144.032114][ T6812] netlink: 16 bytes leftover after parsing attributes in process `syz.0.384'. [ 144.457761][ T6815] fido_id[6815]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 145.947187][ T6862] netlink: 100 bytes leftover after parsing attributes in process `syz.4.409'. [ 146.469327][ T6878] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 146.469393][ T6878] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 146.469499][ T6878] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 146.469624][ T6878] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 146.469686][ T6878] comedi comedi3: 8255: I/O port conflict (0x5c952397,4) [ 146.469738][ T6878] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 146.469791][ T6878] comedi comedi3: 8255: I/O port conflict (0x400,4) [ 146.469844][ T6878] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 146.554113][ T5225] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 146.704002][ T5225] usb 1-1: Using ep0 maxpacket: 32 [ 146.707067][ T5225] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 146.707092][ T5225] usb 1-1: config 0 has no interface number 0 [ 146.716766][ T5225] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 146.716795][ T5225] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.716813][ T5225] usb 1-1: Product: syz [ 146.716834][ T5225] usb 1-1: Manufacturer: syz [ 146.716847][ T5225] usb 1-1: SerialNumber: syz [ 146.803324][ T5225] usb 1-1: config 0 descriptor?? [ 146.856817][ T5225] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 146.856847][ T5225] usb 1-1: selecting invalid altsetting 1 [ 146.856863][ T5225] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 146.943416][ T6887] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 146.963060][ T5225] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 146.997026][ T5225] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 146.997125][ T5225] usb 1-1: media controller created [ 147.200719][ T5225] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 147.389066][ T5225] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 147.389135][ T5225] zl10353_read_register: readreg error (reg=127, ret==-71) [ 147.396129][ T5225] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 147.710364][ T5225] usb 1-1: USB disconnect, device number 4 [ 148.374321][ T6914] netlink: 'syz.4.432': attribute type 29 has an invalid length. [ 148.777038][ T37] kauditd_printk_skb: 8 callbacks suppressed [ 148.777057][ T37] audit: type=1326 audit(1756835472.137:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6920 comm="syz.4.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f989df7ebe9 code=0x7ffc0000 [ 148.777407][ T37] audit: type=1326 audit(1756835472.137:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6920 comm="syz.4.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f989df7ebe9 code=0x7ffc0000 [ 148.837304][ T37] audit: type=1326 audit(1756835472.197:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6920 comm="syz.4.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f989df7ebe9 code=0x7ffc0000 [ 148.837358][ T37] audit: type=1326 audit(1756835472.197:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6920 comm="syz.4.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f989df7ebe9 code=0x7ffc0000 [ 148.837398][ T37] audit: type=1326 audit(1756835472.197:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6920 comm="syz.4.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f989df7ebe9 code=0x7ffc0000 [ 148.837436][ T37] audit: type=1326 audit(1756835472.197:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6920 comm="syz.4.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f989df7ebe9 code=0x7ffc0000 [ 148.837475][ T37] audit: type=1326 audit(1756835472.197:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6920 comm="syz.4.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f989df7ebe9 code=0x7ffc0000 [ 149.056932][ T6928] veth1_macvtap: left promiscuous mode [ 149.056968][ T6928] macsec0: entered promiscuous mode [ 149.154278][ T6928] veth1_macvtap: entered promiscuous mode [ 149.154761][ T6928] macsec0: left promiscuous mode [ 149.484498][ T37] audit: type=1400 audit(1756835472.837:28): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=6936 comm="syz.3.445" saddr=0.0.0.224 src=20000 daddr=224.0.0.1 dest=20000 netif=wpan0 [ 149.753564][ T6947] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 149.753564][ T6947] The task syz.4.446 (6947) triggered the difference, watch for misbehavior. [ 149.807352][ T37] audit: type=1326 audit(1756835473.167:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6944 comm="syz.3.449" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f73b730ebe9 code=0x0 [ 150.846717][ T6971] program syz.3.459 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 151.044448][ T5225] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 151.213464][ T5225] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 151.213497][ T5225] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.225925][ T5225] usb 1-1: config 0 descriptor?? [ 151.240348][ T6975] syz.3.462 (6975) used greatest stack depth: 16696 bytes left [ 151.277128][ T5225] cp210x 1-1:0.0: cp210x converter detected [ 151.349028][ T6982] netlink: 28 bytes leftover after parsing attributes in process `syz.3.466'. [ 151.735507][ T5225] usb 1-1: cp210x converter now attached to ttyUSB0 [ 151.877472][ T5922] usb 1-1: USB disconnect, device number 5 [ 151.906511][ T5922] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 152.024641][ T5922] cp210x 1-1:0.0: device disconnected [ 152.054101][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 152.207996][ T10] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 152.208032][ T10] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 152.208058][ T10] usb 3-1: config 1 interface 0 has no altsetting 0 [ 152.211617][ T10] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 152.211648][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.211668][ T10] usb 3-1: Product: syz [ 152.211683][ T10] usb 3-1: Manufacturer: syz [ 152.211698][ T10] usb 3-1: SerialNumber: syz [ 152.295815][ T6989] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 152.296155][ T6989] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 152.566470][ T5225] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 152.780372][ T5225] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 152.780406][ T5225] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.780426][ T5225] usb 2-1: Product: syz [ 152.780440][ T5225] usb 2-1: Manufacturer: syz [ 152.780453][ T5225] usb 2-1: SerialNumber: syz [ 152.799049][ T5225] usb 2-1: config 0 descriptor?? [ 152.947429][ T5225] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 153.126753][ T10] rtl8150 3-1:1.0: couldn't reset the device [ 153.127182][ T10] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 153.172385][ T10] usb 3-1: USB disconnect, device number 5 [ 153.251755][ T7011] netlink: 28 bytes leftover after parsing attributes in process `syz.3.479'. [ 153.251795][ T7011] netlink: 16 bytes leftover after parsing attributes in process `syz.3.479'. [ 153.562875][ T5225] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 153.562988][ T5225] sq905c 2-1:0.0: probe with driver sq905c failed with error -71 [ 153.623149][ T5225] usb 2-1: USB disconnect, device number 6 [ 154.134499][ T10] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 154.288316][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 154.288353][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.288395][ T10] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 154.288419][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.338288][ T10] usb 1-1: config 0 descriptor?? [ 154.802019][ T10] isku 0003:1E7D:319C.0008: unknown main item tag 0x0 [ 154.802057][ T10] isku 0003:1E7D:319C.0008: unknown main item tag 0x0 [ 154.838814][ T10] isku 0003:1E7D:319C.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.0-1/input0 [ 154.845874][ T5914] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 154.981504][ T10] isku 0003:1E7D:319C.0008: couldn't init struct isku_device [ 154.981567][ T10] isku 0003:1E7D:319C.0008: couldn't install keyboard [ 155.002187][ T10] isku 0003:1E7D:319C.0008: probe with driver isku failed with error -71 [ 155.012094][ T5914] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 155.012124][ T5914] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.012143][ T5914] usb 2-1: config 0 interface 0 has no altsetting 0 [ 155.012173][ T5914] usb 2-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 155.012193][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.124609][ T10] usb 1-1: USB disconnect, device number 6 [ 155.234955][ T5914] usb 2-1: config 0 descriptor?? [ 155.702161][ T5914] hid-alps 0003:044E:120B.0009: bogus close delimiter [ 155.702185][ T5914] hid-alps 0003:044E:120B.0009: item 0 0 2 10 parsing failed [ 155.703140][ T5914] hid-alps 0003:044E:120B.0009: parse failed [ 155.703254][ T5914] hid-alps 0003:044E:120B.0009: probe with driver hid-alps failed with error -22 [ 155.805303][ T7055] sp0: Synchronizing with TNC [ 155.846651][ T7054] [U] ` [ 155.945888][ T10] usb 2-1: USB disconnect, device number 7 [ 156.804016][ T1232] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 156.959822][ T1232] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 156.959856][ T1232] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 156.959881][ T1232] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 156.959937][ T1232] usb 4-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 156.959957][ T1232] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.037234][ T1232] usb 4-1: config 0 descriptor?? [ 157.038513][ T7075] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 157.496068][ T1232] aureal 0003:0755:2626.000A: unknown main item tag 0x0 [ 157.496106][ T1232] aureal 0003:0755:2626.000A: unknown main item tag 0x0 [ 157.496130][ T1232] aureal 0003:0755:2626.000A: unknown main item tag 0x0 [ 157.496155][ T1232] aureal 0003:0755:2626.000A: unknown main item tag 0x0 [ 157.496179][ T1232] aureal 0003:0755:2626.000A: unknown main item tag 0x0 [ 157.496203][ T1232] aureal 0003:0755:2626.000A: unknown main item tag 0x0 [ 157.496227][ T1232] aureal 0003:0755:2626.000A: unknown main item tag 0x0 [ 157.496251][ T1232] aureal 0003:0755:2626.000A: unknown main item tag 0x0 [ 157.582216][ T1232] aureal 0003:0755:2626.000A: hidraw0: USB HID v0.00 Device [HID 0755:2626] on usb-dummy_hcd.3-1/input0 [ 157.732869][ T10] usb 4-1: USB disconnect, device number 3 [ 157.913363][ T7106] fido_id[7106]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 158.164352][ T7118] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 158.495043][ T31] IPVS: starting estimator thread 0... [ 158.594420][ T7130] IPVS: using max 6 ests per chain, 14400 per kthread [ 158.644052][ T31] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 158.704497][ T7134] netlink: 4 bytes leftover after parsing attributes in process `syz.4.535'. [ 158.797805][ T31] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.797837][ T31] usb 3-1: config 0 interface 0 has no altsetting 0 [ 158.797875][ T31] usb 3-1: New USB device found, idVendor=056a, idProduct=0333, bcdDevice= 0.00 [ 158.797911][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.807701][ T31] usb 3-1: config 0 descriptor?? [ 159.356815][ T31] wacom 0003:056A:0333.000B: hidraw0: USB HID v0.00 Device [HID 056a:0333] on usb-dummy_hcd.2-1/input0 [ 159.521014][ T5225] usb 3-1: USB disconnect, device number 6 [ 160.150133][ T7158] sp0: Synchronizing with TNC [ 160.636906][ T31] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 160.724039][ T5225] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 160.806637][ T31] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 160.806704][ T31] usb 3-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 160.806731][ T31] usb 3-1: config 2 interface 0 has no altsetting 0 [ 160.813505][ T31] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 160.813536][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.813556][ T31] usb 3-1: Product: syz [ 160.813570][ T31] usb 3-1: Manufacturer: syz [ 160.813585][ T31] usb 3-1: SerialNumber: syz [ 160.887641][ T5225] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.887671][ T5225] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 160.887728][ T5225] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 160.887752][ T5225] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.009694][ T5225] usb 2-1: config 0 descriptor?? [ 161.090891][ T5225] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 161.092758][ T5225] dvb-usb: bulk message failed: -22 (3/0) [ 161.165506][ T5225] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 161.171485][ T5225] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 161.171550][ T5225] usb 2-1: media controller created [ 161.208702][ T5225] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 161.215622][ T31] ims_pcu 3-1:2.0: probe with driver ims_pcu failed with error -22 [ 161.243399][ T31] usb 3-1: USB disconnect, device number 7 [ 161.300318][ T5225] dvb-usb: bulk message failed: -22 (6/0) [ 161.300488][ T5225] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 161.346025][ T5225] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input8 [ 161.405134][ T5225] dvb-usb: schedule remote query interval to 150 msecs. [ 161.405161][ T5225] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 161.438198][ T5225] usb 2-1: USB disconnect, device number 8 [ 161.716366][ T5225] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 162.480137][ T37] audit: type=1326 audit(1756835485.817:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7212 comm="syz.3.571" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f73b730ebe9 code=0x0 [ 162.663498][ T7222] netlink: 12 bytes leftover after parsing attributes in process `syz.2.575'. [ 163.547113][ T7244] autofs: Bad value for 'fd' [ 163.547742][ T7245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.584'. [ 163.642826][ T7245] dummy0: entered promiscuous mode [ 163.680062][ T7245] dummy0: left promiscuous mode [ 163.860406][ T7256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.588'. [ 164.523462][ T7277] netlink: 'syz.0.600': attribute type 18 has an invalid length. [ 164.573234][ T3595] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.589565][ T3595] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.589618][ T3595] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.589671][ T3595] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 165.263986][ T5921] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 165.369055][ T7300] netlink: 8 bytes leftover after parsing attributes in process `syz.2.611'. [ 165.429416][ T5921] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 165.429458][ T5921] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 165.429482][ T5921] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 165.433644][ T5921] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 165.433673][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.433692][ T5921] usb 1-1: Product: syz [ 165.433707][ T5921] usb 1-1: Manufacturer: syz [ 165.433721][ T5921] usb 1-1: SerialNumber: syz [ 165.592812][ T5921] hub 1-1:1.0: bad descriptor, ignoring hub [ 165.592858][ T5921] hub 1-1:1.0: probe with driver hub failed with error -5 [ 165.782630][ T5921] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 165.910719][ T7307] pim6reg: entered allmulticast mode [ 165.937615][ T7309] pim6reg: left allmulticast mode [ 166.056672][ T7312] netlink: 152 bytes leftover after parsing attributes in process `syz.1.616'. [ 166.058579][ T7312] block nbd0: not configured, cannot reconfigure [ 166.064977][ T5935] usb 1-1: USB disconnect, device number 7 [ 166.096835][ T5935] usblp0: removed [ 166.668392][ T7324] syz.0.622 (7324): /proc/7322/oom_adj is deprecated, please use /proc/7322/oom_score_adj instead. [ 166.896319][ T7329] netlink: 87 bytes leftover after parsing attributes in process `syz.4.624'. [ 166.914271][ T7332] program syz.1.623 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 167.604641][ T7350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.634'. [ 167.604841][ T7350] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 167.604874][ T7350] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.604157][ T5158] Bluetooth: hci4: command tx timeout [ 169.159500][ T37] audit: type=1326 audit(1756835492.517:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7385 comm="syz.2.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa43096ebe9 code=0x7ffc0000 [ 169.159562][ T37] audit: type=1326 audit(1756835492.517:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7385 comm="syz.2.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa43096ebe9 code=0x7ffc0000 [ 169.172477][ T37] audit: type=1326 audit(1756835492.527:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7385 comm="syz.2.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7fa43096ebe9 code=0x7ffc0000 [ 169.173128][ T37] audit: type=1326 audit(1756835492.527:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7385 comm="syz.2.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa43096ebe9 code=0x7ffc0000 [ 169.176875][ T37] audit: type=1326 audit(1756835492.537:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7385 comm="syz.2.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7fa43096ebe9 code=0x7ffc0000 [ 169.177400][ T37] audit: type=1326 audit(1756835492.537:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7385 comm="syz.2.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa43096ebe9 code=0x7ffc0000 [ 169.186510][ T37] audit: type=1326 audit(1756835492.547:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7385 comm="syz.2.653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa43096ebe9 code=0x7ffc0000 [ 170.690256][ T37] audit: type=1326 audit(1756835494.047:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7419 comm="syz.1.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f421a17ebe9 code=0x7ffc0000 [ 170.690323][ T37] audit: type=1326 audit(1756835494.047:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7419 comm="syz.1.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f421a17ebe9 code=0x7ffc0000 [ 170.705514][ T37] audit: type=1326 audit(1756835494.067:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7419 comm="syz.1.669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f421a17ebe9 code=0x7ffc0000 [ 171.134208][ T5225] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 171.293970][ T5225] usb 4-1: Using ep0 maxpacket: 32 [ 171.296553][ T5225] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 171.296580][ T5225] usb 4-1: config 0 has no interface number 0 [ 171.305871][ T5225] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 171.305898][ T5225] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.305916][ T5225] usb 4-1: Product: syz [ 171.305928][ T5225] usb 4-1: Manufacturer: syz [ 171.305941][ T5225] usb 4-1: SerialNumber: syz [ 171.317805][ T5225] usb 4-1: config 0 descriptor?? [ 171.341973][ T5225] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 171.682056][ T5225] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 171.756646][ T5225] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 172.018887][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 172.027376][ T5921] usb 4-1: USB disconnect, device number 4 [ 172.073704][ T5921] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 172.121228][ T5921] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 172.145200][ T5921] quatech2 4-1:0.51: device disconnected [ 172.439522][ T7446] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 173.133988][ T5922] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 173.287129][ T5922] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.287186][ T5922] usb 3-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 173.287210][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.360240][ T5922] usb 3-1: config 0 descriptor?? [ 173.966766][ T5922] input: HID 28bd:0933 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28BD:0933.000C/input/input10 [ 174.233993][ T5922] uclogic 0003:28BD:0933.000C: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0933] on usb-dummy_hcd.2-1/input0 [ 174.314651][ T5922] usb 3-1: USB disconnect, device number 8 [ 174.735809][ T7477] fido_id[7477]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 175.564122][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 175.595943][ T7354] syz.4.637 (7354): drop_caches: 1 [ 175.726760][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 175.726790][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 175.730494][ T10] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 175.730522][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 175.730542][ T10] usb 4-1: SerialNumber: syz [ 175.992464][ T7511] netlink: 88 bytes leftover after parsing attributes in process `syz.1.711'. [ 176.000567][ T10] usb 4-1: 0:2 : does not exist [ 176.145066][ T10] usb 4-1: USB disconnect, device number 5 [ 176.163968][ T1232] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 176.271791][ T7518] netlink: 'syz.0.716': attribute type 1 has an invalid length. [ 176.330462][ T1232] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.330495][ T1232] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 176.330550][ T1232] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 176.330574][ T1232] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.406182][ T1232] usb 5-1: config 0 descriptor?? [ 176.512662][ T37] kauditd_printk_skb: 3 callbacks suppressed [ 176.512684][ T37] audit: type=1804 audit(1756835499.837:44): pid=7522 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.718" name="/newroot/153/cgroup.controllers" dev="tmpfs" ino=790 res=1 errno=0 [ 176.521613][ T5892] udevd[5892]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 176.536608][ T37] audit: type=1800 audit(1756835499.877:45): pid=7522 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.718" name="cgroup.controllers" dev="tmpfs" ino=790 res=0 errno=0 [ 176.868000][ T1232] kye 0003:0458:5011.000D: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 176.914385][ T1232] kye 0003:0458:5011.000D: hidraw0: USB HID vff.fe Device [HID 0458:5011] on usb-dummy_hcd.4-1/input0 [ 176.914421][ T1232] kye 0003:0458:5011.000D: tablet-enabling feature report not found [ 176.914436][ T1232] kye 0003:0458:5011.000D: tablet enabling failed [ 177.099682][ T10] usb 5-1: USB disconnect, device number 4 [ 177.323333][ T7539] rdma_op ffff88805d941a70 conn xmit_rdma 0000000000000000 [ 177.413290][ T7543] macsec1: entered promiscuous mode [ 177.413326][ T7543] macsec1: entered allmulticast mode [ 177.517274][ T5913] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 177.563717][ T7534] fido_id[7534]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 177.674102][ T5913] usb 3-1: Using ep0 maxpacket: 16 [ 177.676910][ T5913] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.676945][ T5913] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.676985][ T5913] usb 3-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 177.677009][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.706198][ T5913] usb 3-1: config 0 descriptor?? [ 178.148974][ T7555] rtc_cmos 00:00: Alarms can be up to one day in the future [ 178.217949][ T5913] gt683r_led 0003:1770:FF00.000E: unbalanced delimiter at end of report description [ 178.219490][ T5913] gt683r_led 0003:1770:FF00.000E: hid parsing failed [ 178.219613][ T5913] gt683r_led 0003:1770:FF00.000E: probe with driver gt683r_led failed with error -22 [ 178.390265][ T1232] usb 3-1: USB disconnect, device number 9 [ 178.472850][ T37] audit: type=1326 audit(1756835501.827:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7562 comm="syz.3.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73b730ebe9 code=0x7ffc0000 [ 178.512339][ T37] audit: type=1326 audit(1756835501.827:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7562 comm="syz.3.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73b730ebe9 code=0x7ffc0000 [ 178.524492][ T37] audit: type=1326 audit(1756835501.887:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7562 comm="syz.3.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f73b730ebe9 code=0x7ffc0000 [ 178.531288][ T37] audit: type=1326 audit(1756835501.887:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7562 comm="syz.3.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73b730ebe9 code=0x7ffc0000 [ 178.531338][ T37] audit: type=1326 audit(1756835501.887:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7562 comm="syz.3.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73b730ebe9 code=0x7ffc0000 [ 178.532649][ T37] audit: type=1326 audit(1756835501.887:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7562 comm="syz.3.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f73b730ebe9 code=0x7ffc0000 [ 178.532696][ T37] audit: type=1326 audit(1756835501.887:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7562 comm="syz.3.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73b730ebe9 code=0x7ffc0000 [ 178.532735][ T37] audit: type=1326 audit(1756835501.887:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7562 comm="syz.3.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73b730ebe9 code=0x7ffc0000 [ 178.745356][ T7568] netlink: 'syz.1.740': attribute type 2 has an invalid length. [ 178.745382][ T7568] netlink: 244 bytes leftover after parsing attributes in process `syz.1.740'. [ 179.543061][ T7587] syz.3.750 uses obsolete (PF_INET,SOCK_PACKET) [ 179.904172][ T1232] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 179.996100][ T5913] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 180.066977][ T1232] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.067013][ T1232] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.067036][ T1232] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 180.067080][ T1232] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 180.067104][ T1232] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.080317][ T1232] usb 3-1: config 0 descriptor?? [ 180.147394][ T5913] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 180.147432][ T5913] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 180.147460][ T5913] usb 5-1: config 0 interface 0 has no altsetting 0 [ 180.147495][ T5913] usb 5-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 180.147518][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.233297][ T5913] usb 5-1: config 0 descriptor?? [ 180.237517][ T7593] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 180.365231][ T7605] netlink: 'syz.1.759': attribute type 1 has an invalid length. [ 180.365264][ T7605] nbd: couldn't find device at index -492516727 [ 180.550443][ T1232] hid (null): bogus close delimiter [ 180.594318][ T1232] kye 0003:0458:5011.000F: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 180.610501][ T1232] kye 0003:0458:5011.000F: bogus close delimiter [ 180.610525][ T1232] kye 0003:0458:5011.000F: item 0 4 2 10 parsing failed [ 180.611456][ T1232] kye 0003:0458:5011.000F: parse failed [ 180.611533][ T1232] kye 0003:0458:5011.000F: probe with driver kye failed with error -22 [ 180.722057][ T5913] logitech 0003:046D:C24F.0010: unbalanced collection at end of report description [ 180.723051][ T5913] logitech 0003:046D:C24F.0010: parse failed [ 180.723178][ T5913] logitech 0003:046D:C24F.0010: probe with driver logitech failed with error -22 [ 180.783057][ T5935] usb 3-1: USB disconnect, device number 10 [ 180.950559][ T1232] usb 5-1: USB disconnect, device number 5 [ 181.296234][ T10] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 181.463928][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 181.463962][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.464001][ T10] usb 4-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 181.464022][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.507206][ T10] usb 4-1: config 0 descriptor?? [ 181.953299][ T10] hid-generic 0003:04F3:0754.0011: failed to start in urb: -90 [ 181.961695][ T5913] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 181.970863][ T10] hid-generic 0003:04F3:0754.0011: hidraw0: USB HID v1.01 Device [HID 04f3:0754] on usb-dummy_hcd.3-1/input0 [ 182.106543][ T5913] usb 1-1: config 4 has an invalid interface number: 231 but max is 0 [ 182.106574][ T5913] usb 1-1: config 4 has no interface number 0 [ 182.116813][ T5913] usb 1-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 182.116842][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.116860][ T5913] usb 1-1: Product: syz [ 182.116873][ T5913] usb 1-1: Manufacturer: syz [ 182.116885][ T5913] usb 1-1: SerialNumber: syz [ 182.183758][ T5913] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 182.201006][ T1232] usb 4-1: USB disconnect, device number 6 [ 182.337523][ T7638] fido_id[7638]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 182.652191][ T5913] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 182.652244][ T5913] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 182.867885][ T5913] usb 1-1: USB disconnect, device number 8 [ 182.981771][ T7654] netlink: 8 bytes leftover after parsing attributes in process `syz.3.782'. [ 182.981807][ T7654] netlink: 4 bytes leftover after parsing attributes in process `syz.3.782'. [ 183.771775][ T7678] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 184.989027][ T7707] netlink: 766 bytes leftover after parsing attributes in process `syz.1.807'. [ 185.344116][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 185.377757][ T37] audit: type=1800 audit(1756835508.737:54): pid=7721 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.814" name="bus" dev="tmpfs" ino=886 res=0 errno=0 [ 185.507028][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.507091][ T10] usb 4-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 185.507114][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.567060][ T10] usb 4-1: config 0 descriptor?? [ 186.076243][ T10] macally 0003:060B:0001.0012: item fetching failed at offset 0/2 [ 186.077278][ T10] macally 0003:060B:0001.0012: probe with driver macally failed with error -22 [ 186.254969][ T10] usb 4-1: USB disconnect, device number 7 [ 186.984868][ T7739] netlink: 4 bytes leftover after parsing attributes in process `syz.1.822'. [ 191.711889][ C1] sched: DL replenish lagged too much [ 196.243752][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.252685][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.574039][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 197.724027][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 197.727844][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.727896][ T10] usb 1-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 197.727919][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.788046][ T10] usb 1-1: config 0 descriptor?? [ 198.300933][ T10] hid_parser_main: 61 callbacks suppressed [ 198.300959][ T10] waltop 0003:172F:0501.0013: unknown main item tag 0x0 [ 198.300989][ T10] waltop 0003:172F:0501.0013: unknown main item tag 0x0 [ 198.301014][ T10] waltop 0003:172F:0501.0013: unknown main item tag 0x0 [ 198.301039][ T10] waltop 0003:172F:0501.0013: unknown main item tag 0x0 [ 198.301063][ T10] waltop 0003:172F:0501.0013: unknown main item tag 0x0 [ 198.383489][ T10] waltop 0003:172F:0501.0013: hidraw0: USB HID v0.08 Device [HID 172f:0501] on usb-dummy_hcd.0-1/input0 [ 198.525166][ T10] usb 1-1: USB disconnect, device number 9 [ 198.711788][ T7818] fido_id[7818]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 201.159402][ T7839] netlink: 4528 bytes leftover after parsing attributes in process `syz.0.863'. [ 201.159430][ T7839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.863'. [ 201.159450][ T7839] netlink: 4528 bytes leftover after parsing attributes in process `syz.0.863'. [ 204.992475][ T5841] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 205.013336][ T5841] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 205.021857][ T5841] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 205.056770][ T5841] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 205.063415][ T5841] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 206.148648][ T7853] chnl_net:caif_netlink_parms(): no params data found [ 207.164241][ T5158] Bluetooth: hci5: command tx timeout [ 209.244801][ T5158] Bluetooth: hci5: command tx timeout [ 211.324150][ T5158] Bluetooth: hci5: command tx timeout [ 213.404049][ T5158] Bluetooth: hci5: command tx timeout [ 217.084188][ T5841] Bluetooth: hci1: command 0x0406 tx timeout [ 217.084439][ T5841] Bluetooth: hci2: command 0x0406 tx timeout [ 225.151403][ T5841] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 225.165032][ T5841] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 225.171120][ T5841] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 225.256037][ T5841] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 225.257036][ T5841] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 225.773326][ T7914] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 225.805352][ T7914] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 225.810919][ T7914] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 225.812456][ T7914] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 225.813485][ T7914] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 229.482490][ T7903] netlink: 12 bytes leftover after parsing attributes in process `syz.0.890'. [ 229.482520][ T7903] tipc: Started in network mode [ 229.482545][ T7903] tipc: Node identity ff000000000000000000000000000001, cluster identity 4711 [ 229.482608][ T7903] tipc: Enabling of bearer rejected, failed to enable media [ 232.000452][ T5841] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 232.018233][ T5841] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 232.019513][ T5841] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 232.048441][ T5841] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 232.065558][ T5841] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 233.147258][ T7927] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 233.164449][ T7927] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 233.166681][ T7927] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 233.168970][ T7927] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 233.173684][ T7927] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 261.092791][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.092878][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.449484][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 263.470657][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 263.472889][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 263.489474][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 263.490424][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 286.037139][ T7927] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 286.053473][ T7927] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 286.062150][ T7927] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 286.084706][ T7927] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 286.085777][ T7927] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 286.357509][ T7925] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 286.376218][ T7925] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 286.377562][ T7925] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 286.379343][ T7925] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 286.383482][ T7925] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 291.897170][ T7960] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 291.937300][ T7960] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 291.941207][ T7960] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 291.942781][ T7960] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 291.944529][ T7960] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 292.678596][ T7966] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 292.700627][ T7966] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 292.702161][ T7966] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 292.719489][ T7966] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 292.721100][ T7966] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 306.012876][ T5841] Bluetooth: hci9: command tx timeout [ 307.965835][ T5841] Bluetooth: hci7: command tx timeout [ 307.966182][ T5841] Bluetooth: hci6: command tx timeout [ 308.044193][ T59] Bluetooth: hci9: command tx timeout [ 308.044510][ T59] Bluetooth: hci8: command tx timeout [ 310.050193][ T5841] Bluetooth: hci6: command tx timeout [ 310.050232][ T5841] Bluetooth: hci7: command tx timeout [ 310.124229][ T5841] Bluetooth: hci9: command tx timeout [ 310.125008][ T59] Bluetooth: hci8: command tx timeout [ 312.124499][ T5841] Bluetooth: hci6: command tx timeout [ 312.125686][ T59] Bluetooth: hci7: command tx timeout [ 312.204169][ T59] Bluetooth: hci8: command tx timeout [ 312.204207][ T59] Bluetooth: hci9: command tx timeout [ 314.204582][ T5841] Bluetooth: hci7: command tx timeout [ 314.204621][ T5841] Bluetooth: hci6: command tx timeout [ 314.295597][ T59] Bluetooth: hci8: command tx timeout [ 315.172648][ T7925] Bluetooth: hci11: command tx timeout [ 315.196712][ T7960] Bluetooth: hci12: command tx timeout [ 317.244184][ T5848] Bluetooth: hci12: command tx timeout [ 317.244503][ T5848] Bluetooth: hci0: command tx timeout [ 317.244663][ T5848] Bluetooth: hci10: command tx timeout [ 317.244770][ T5848] Bluetooth: hci11: command tx timeout [ 317.244845][ T5848] Bluetooth: hci3: command tx timeout [ 319.324326][ T5848] Bluetooth: hci3: command tx timeout [ 319.324364][ T5848] Bluetooth: hci11: command tx timeout [ 319.324385][ T5848] Bluetooth: hci10: command tx timeout [ 319.324407][ T5848] Bluetooth: hci0: command tx timeout [ 319.324430][ T5848] Bluetooth: hci12: command tx timeout [ 321.414005][ T5851] Bluetooth: hci12: command tx timeout [ 321.414044][ T5851] Bluetooth: hci10: command tx timeout [ 321.414067][ T5851] Bluetooth: hci11: command tx timeout [ 321.414090][ T5851] Bluetooth: hci3: command tx timeout [ 321.414307][ T5848] Bluetooth: hci0: command tx timeout [ 323.425537][ T7960] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 323.442835][ T7960] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 323.454705][ T7960] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 323.456688][ T7960] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 323.481643][ T7960] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 323.486932][ T5851] Bluetooth: hci0: command tx timeout [ 323.486967][ T5851] Bluetooth: hci3: command tx timeout [ 323.486990][ T5851] Bluetooth: hci10: command tx timeout [ 324.807035][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 324.807111][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 325.564163][ T5848] Bluetooth: hci1: command tx timeout [ 327.654997][ T7960] Bluetooth: hci1: command tx timeout [ 329.735086][ T59] Bluetooth: hci1: command tx timeout [ 329.737103][ T5848] Bluetooth: hci5: command 0x0406 tx timeout [ 331.806643][ T5848] Bluetooth: hci1: command tx timeout [ 346.081666][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 346.108337][ T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 346.111876][ T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 346.113284][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 346.137551][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 346.442112][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 346.464822][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 346.466211][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 346.467570][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 346.468498][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 348.204025][ T5848] Bluetooth: hci2: command tx timeout [ 348.525928][ T5848] Bluetooth: hci4: command tx timeout [ 350.285870][ T5848] Bluetooth: hci2: command tx timeout [ 350.604163][ T5848] Bluetooth: hci4: command tx timeout [ 352.095414][ T59] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 352.113151][ T59] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 352.136732][ T59] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 352.155793][ T59] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 352.156880][ T59] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 352.364209][ T59] Bluetooth: hci2: command tx timeout [ 352.686620][ T59] Bluetooth: hci4: command tx timeout [ 353.555795][ T5848] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 353.573091][ T5848] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 353.586366][ T5848] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 353.602101][ T5848] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 353.631408][ T5848] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 354.284231][ T59] Bluetooth: hci13: command tx timeout [ 354.444183][ T59] Bluetooth: hci2: command tx timeout [ 354.764258][ T59] Bluetooth: hci4: command tx timeout [ 355.724134][ T59] Bluetooth: hci14: command tx timeout [ 356.365974][ T59] Bluetooth: hci13: command tx timeout [ 357.804172][ T7960] Bluetooth: hci14: command tx timeout [ 358.444170][ T7960] Bluetooth: hci13: command tx timeout [ 359.884041][ T7960] Bluetooth: hci14: command tx timeout [ 360.524097][ T7960] Bluetooth: hci13: command tx timeout [ 361.963990][ T7960] Bluetooth: hci14: command tx timeout [ 370.699956][ T59] Bluetooth: hci8: command 0x0406 tx timeout [ 370.700289][ T59] Bluetooth: hci9: command 0x0406 tx timeout [ 370.700413][ T59] Bluetooth: hci6: command 0x0406 tx timeout [ 370.763914][ T7927] Bluetooth: hci7: command 0x0406 tx timeout [ 383.930921][ T59] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 383.953576][ T59] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 383.962408][ T59] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 383.999264][ T59] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 384.012097][ T59] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 389.099653][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 389.099752][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 406.718440][ T5848] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 406.741339][ T5848] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 406.742740][ T5848] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 406.796159][ T5848] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 406.826306][ T5848] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 407.029038][ T59] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 407.057173][ T59] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 407.058699][ T59] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 407.082008][ T59] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 407.092896][ T59] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 412.206951][ T59] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 412.229970][ T59] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 412.231338][ T59] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 412.249611][ T59] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 412.250597][ T59] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 413.632980][ T5841] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 413.655576][ T5841] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 413.657015][ T5841] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 413.681805][ T5841] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 413.683671][ T5841] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 432.135224][ T5158] Bluetooth: hci11: command 0x0406 tx timeout [ 432.135373][ T5158] Bluetooth: hci3: command 0x0406 tx timeout [ 432.135475][ T5158] Bluetooth: hci10: command 0x0406 tx timeout [ 432.604068][ T38] INFO: task syz-executor:7950 blocked for more than 143 seconds. [ 432.604097][ T38] Not tainted syzkaller #0 [ 432.604108][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 432.604118][ T38] task:syz-executor state:D stack:26952 pid:7950 tgid:7950 ppid:1 task_flags:0x400140 flags:0x00004004 [ 432.604188][ T38] Call Trace: [ 432.604196][ T38] [ 432.604212][ T38] __schedule+0x16f3/0x4c20 [ 432.604278][ T38] ? __pfx___schedule+0x10/0x10 [ 432.604328][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 432.604360][ T38] rt_mutex_schedule+0x77/0xf0 [ 432.604382][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 432.604404][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 432.604448][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 432.604474][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 432.604497][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 432.604517][ T38] ? __lock_acquire+0xab9/0xd20 [ 432.604557][ T38] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 432.604598][ T38] ? is_bpf_text_address+0x26/0x2b0 [ 432.604633][ T38] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 432.604765][ T38] mutex_lock_nested+0x16a/0x1d0 [ 432.604795][ T38] inet_rtm_newaddr+0x3b0/0x18b0 [ 432.604839][ T38] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 432.604893][ T38] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 432.604919][ T38] rtnetlink_rcv_msg+0x7cc/0xb70 [ 432.604940][ T38] ? __lock_acquire+0xab9/0xd20 [ 432.604969][ T38] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 432.604994][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 432.605040][ T38] netlink_rcv_skb+0x205/0x470 [ 432.605065][ T38] ? __lock_acquire+0xab9/0xd20 [ 432.605091][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 432.605119][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 432.605159][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 432.605195][ T38] netlink_unicast+0x843/0xa10 [ 432.605230][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 432.605256][ T38] ? netlink_sendmsg+0x642/0xb30 [ 432.605279][ T38] ? skb_put+0x11b/0x210 [ 432.605311][ T38] netlink_sendmsg+0x805/0xb30 [ 432.605349][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 432.605386][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 432.605407][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 432.605435][ T38] __sock_sendmsg+0x219/0x270 [ 432.605464][ T38] __sys_sendto+0x3c7/0x520 [ 432.605495][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 432.605555][ T38] ? exc_page_fault+0x76/0xf0 [ 432.605586][ T38] ? do_user_addr_fault+0xc8a/0x1390 [ 432.605618][ T38] __x64_sys_sendto+0xde/0x100 [ 432.605649][ T38] do_syscall_64+0xfa/0x3b0 [ 432.605684][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 432.605711][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.605732][ T38] ? clear_bhb_loop+0x60/0xb0 [ 432.605758][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.605779][ T38] RIP: 0033:0x7fa7c1c30a7c [ 432.605797][ T38] RSP: 002b:00007ffd7c8aa820 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 432.605820][ T38] RAX: ffffffffffffffda RBX: 00007fa7c2994620 RCX: 00007fa7c1c30a7c [ 432.605835][ T38] RDX: 0000000000000028 RSI: 00007fa7c2994670 RDI: 0000000000000003 [ 432.605848][ T38] RBP: 0000000000000000 R08: 00007ffd7c8aa874 R09: 000000000000000c [ 432.605861][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 432.605873][ T38] R13: 0000000000000000 R14: 00007fa7c2994670 R15: 0000000000000000 [ 432.605906][ T38] [ 432.605915][ T38] INFO: task syz-executor:7953 blocked for more than 143 seconds. [ 432.605929][ T38] Not tainted syzkaller #0 [ 432.605939][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 432.605949][ T38] task:syz-executor state:D stack:26600 pid:7953 tgid:7953 ppid:1 task_flags:0x400140 flags:0x00004004 [ 432.606011][ T38] Call Trace: [ 432.606018][ T38] [ 432.606032][ T38] __schedule+0x16f3/0x4c20 [ 432.606089][ T38] ? __pfx___schedule+0x10/0x10 [ 432.606137][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 432.606167][ T38] rt_mutex_schedule+0x77/0xf0 [ 432.606187][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 432.606209][ T38] ? task_blocks_on_rt_mute[ 432.606209][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 432.606253][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 432.606278][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 432.606301][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 432.606321][ T38] ? __lock_acquire+0xab9/0xd20 [ 432.606361][ T38] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 432.606401][ T38] ? is_bpf_text_address+0x26/0x2b0 [ 432.606435][ T38] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 432.606463][ T38] mutex_lock_nested+0x16a/0x1d0 [ 432.606492][ T38] inet_rtm_newaddr+0x3b0/0x18b0 [ 432.606535][ T38] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 432.606590][ T38] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 432.606621][ T38] rtnetlink_rcv_msg+0x7cc/0xb70 [ 432.606645][ T38] ? __lock_acquire+0xab9/0xd20 [ 432.606682][ T38] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 432.606706][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 432.606752][ T38] netlink_rcv_skb+0x205/0x470 [ 432.606775][ T38] ? __lock_acquire+0xab9/0xd20 [ 432.606802][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 432.606830][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 432.606870][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 432.606904][ T38] netlink_unicast+0x843/0xa10 [ 432.606938][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 432.606964][ T38] ? netlink_sendmsg+0x642/0xb30 [ 432.606987][ T38] ? skb_put+0x11b/0x210 [ 432.607019][ T38] netlink_sendmsg+0x805/0xb30 [ 432.607057][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 432.607093][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 432.607113][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 432.607140][ T38] __sock_sendmsg+0x219/0x270 [ 432.607168][ T38] __sys_sendto+0x3c7/0x520 [ 432.607198][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 432.607258][ T38] ? exc_page_fault+0x76/0xf0 [ 432.607290][ T38] ? do_user_addr_fault+0xc8a/0x1390 [ 432.607321][ T38] __x64_sys_sendto+0xde/0x100 [ 432.607353][ T38] do_syscall_64+0xfa/0x3b0 [ 432.607379][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 432.607406][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.607426][ T38] ? clear_bhb_loop+0x60/0xb0 [ 432.607452][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.607472][ T38] RIP: 0033:0x7f6a9a630a7c [ 432.607489][ T38] RSP: 002b:00007ffdf8507970 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 432.607510][ T38] RAX: ffffffffffffffda RBX: 00007f6a9b394620 RCX: 00007f6a9a630a7c [ 432.607524][ T38] RDX: 0000000000000028 RSI: 00007f6a9b394670 RDI: 0000000000000003 [ 432.607537][ T38] RBP: 0000000000000000 R08: 00007ffdf85079c4 R09: 000000000000000c [ 432.607550][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 432.607562][ T38] R13: 0000000000000000 R14: 00007f6a9b394670 R15: 0000000000000000 [ 432.607596][ T38] [ 432.607616][ T38] [ 432.607616][ T38] Showing all locks held in the system: [ 432.607627][ T38] 6 locks held by rcuc/1/28: [ 432.607640][ T38] 4 locks held by kworker/1:0/31: [ 432.607658][ T38] #0: ffff888059f7a938 ((wq_completion)wg-kex-wg0#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 432.607720][ T38] #1: ffffc90000a5fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 432.607787][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 432.607839][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 432.607893][ T38] 1 lock held by khungtaskd/38: [ 432.607903][ T38] #0: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 432.607951][ T38] 4 locks held by kworker/1:1/44: [ 432.607962][ T38] #0: ffff888029ab7d38 ((wq_completion)wg-crypt-wg0){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 432.608014][ T38] #1: ffffc90000b57bc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 432.608066][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 432.608117][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 432.608171][ T38] 4 locks held by kworker/u9:0/59: [ 432.608182][ T38] #0: ffff88805e80b938 ((wq_completion)hci19#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 432.608239][ T38] #1: ffffc9000125fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 432.608290][ T38] #2: ffff88807d57c0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 432.608339][ T38] #3: ffffffff8ee39c78 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 432.608393][ T38] 3 locks held by kworker/u8:5/978: [ 432.608404][ T38] #0: ffff88814d415138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 432.608455][ T38] #1: ffffc900044e7bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 432.608507][ T38] #2: ffffffff8ecd22f8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 432.608559][ T38] 4 locks held by kworker/1:2/1232: [ 432.608570][ T38] #0: ffff88805a2f2d38 ((wq_completion)wg-crypt-wg0#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 432.608626][ T38] #1: ffffc90004db7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 432.608700][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 432.608750][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 432.608815][ T38] 3 locks held by kworker/u8:11/3589: [ 432.608826][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 432.608878][ T38] #1: ffffc9000d6ffbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 432.608926][ T38] #2: ffffffff8ecd22f8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 432.608983][ T38] 4 locks held by kworker/1:3/5225: [ 432.608994][ T38] #0: ffff888029ab7d38 ((wq_completion)wg-crypt-wg0){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 432.609045][ T38] #1: ffffc90003ba7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 432.609112][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 432.609162][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 432.609214][ T38] 2 locks held by getty/5597: [ 432.609225][ T38] #0: ffff88823bf640a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 432.609280][ T38] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 432.609331][ T38] 1 lock held by syz-executor/5839: [ 432.609342][ T38] #0: ffffffff8d9ae570 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 432.609391][ T38] 5 locks held by kworker/u9:2/5841: [ 432.609402][ T38] #0: ffff888031bbd938 ((wq_completion)hci11){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 432.609454][ T38] #1: ffffc90004f27bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 432.609507][ T38] #2: ffff88803a2d8e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 432.609564][ T38] #3: ffff88803a2d80a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 432.609616][ T38] #4: ffffffff8ee39c78 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 432.609681][ T38] 1 lock held by syz-executor/5842: [ 432.609692][ T38] #0: ffffffff8ecd22f8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 432.609745][ T38] 1 lock held by syz-executor/5843: [ 432.609756][ T38] #0: ffffffff8ecd22f8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 432.609809][ T38] 4 locks held by kworker/1:4/5846: [ 432.609820][ T38] #0: ffff88805a83d938 ((wq_completion)wg-crypt-wg2#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 432.609876][ T38] #1: ffffc90004f67bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 432.609940][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 432.610001][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 432.610053][ T38] 4 locks held by kworker/u9:3/5848: [ 432.610063][ T38] #0: ffff88802977e938 ((wq_completion)hci17#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 432.610119][ T38] #1: ffffc90004fa7bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 432.610171][ T38] #2: ffff88808de0c0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 432.610219][ T38] #3: ffffffff8ee39c78 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 432.610267][ T38] 4 locks held by kworker/u9:4/5851: [ 432.610278][ T38] #0: ffff88802324b138 ((wq_completion)hci16#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 432.610334][ T38] #1: ffffc90004fc7bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 432.610386][ T38] #2: ffff8880421000a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 432.610433][ T38] #3: ffffffff8ee39c78 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 432.610487][ T38] 4 locks held by kworker/1:5/5914: [ 432.610499][ T38] #0: ffff888029ab6d38 ((wq_completion)wg-crypt-wg1#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 432.610557][ T38] #1: ffffc90005af7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 432.610624][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 432.610683][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 432.610733][ T38] 3 locks held by kworker/0:4/5921: [ 432.610743][ T38] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 432.610792][ T38] #1: ffffc90005b67bc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 432.610842][ T38] #2: ffffffff8ecd22f8 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 432.610897][ T38] 4 locks held by kworker/1:7/6030: [ 432.610907][ T38] #0: ffff888059f7ad38 ((wq_completion)wg-crypt-wg0#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 432.610960][ T38] #1: ffffc90005df7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 432.611026][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 432.611077][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 432.611128][ T38] 1 lock held by syz.4.820/7735: [ 432.611140][ T38] #0: ffffffff8ecd22f8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 432.611192][ T38] 4 locks held by kworker/1:8/7760: [ 432.611203][ T38] #0: ffff888059f27538 ((wq_completion)wg-crypt-wg0#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 432.611258][ T38] #1: ffffc9000a4a7bc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 432.611309][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 432.611360][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 432.611412][ T38] 4 locks held by kworker/1:9/7795: [ 432.611423][ T38] 4 locks held by syz-executor/7853: [ 432.611434][ T38] #0: ffff888036204e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 432.611479][ T38] #1: ffff8880362040a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 432.611528][ T38] #2: ffffffff8ee39c78 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 432.611583][ T38] #3: ffff8880350fdb58 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 432.611642][ T38] 1 lock held by syz.1.873/7862: [ 432.611661][ T38] #0: ffffffff8ecd22f8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 432.611713][ T38] 4 locks held by kworker/1:10/7889: [ 432.611724][ T38] #0: ffff888059ef8138 ((wq_completion)wg-crypt-wg2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 432.611775][ T38] #1: ffffc90004d77bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 432.611841][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 432.611892][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 432.611941][ T38] 4 locks held by kworker/1:11/7890: [ 432.611952][ T38] #0: ffff88805a3a4538 ((wq_completion)wg-crypt-wg1#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 432.612008][ T38] #1: ffffc90004d27bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 432.612075][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 432.612126][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 432.612178][ T38] 4 locks held by kworker/1:12/7904: [ 432.612190][ T38] #0: ffff88805a2f3138 ((wq_completion)wg-kex-wg2#8){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 432.612246][ T38] #1: ffffc90004c87bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 432.612313][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 432.612363][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 432.612414][ T38] 2 locks held by syz-executor/7907: [ 432.612425][ T38] #0: ffffffff8ecc5400 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 432.612475][ T38] #1: ffffffff8ecd22f8 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x990 [ 432.612529][ T38] 2 locks held by syz-executor/7913: [ 432.612540][ T38] #0: ffffffff8ecc5400 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 432.612592][ T38] #1: ffffffff8ecd22f8 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x990 [ 432.612645][ T38] 5 locks held by kworker/u9:5/7914: [ 432.612672][ T38] #0: ffff88805e7dc938 ((wq_completion)hci10){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 432.612725][ T38] #1: ffffc90004ba7bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 432.612777][ T38] #2: ffff888047f84e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 432.612835][ T38] #3: ffff888047f840a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 432.612887][ T38] #4: ffffffff8ee39c78 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 432.612939][ T38] 3 locks held by syz-executor/7923: [ 432.612951][ T38] #0: ffff888011340e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 432.613000][ T38] #1: ffff8880113400a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 432.613051][ T38] #2: ffffffff8ee39c78 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 432.613108][ T38] 4 locks held by kworker/u9:6/7925: [ 432.613119][ T38] #0: ffff88803a3ba138 ((wq_completion)hci18#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 432.613177][ T38] #1: ffffc9000c557bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 432.613230][ T38] #2: ffff88809020c0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 432.613278][ T38] #3: ffffffff8ee39c78 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 432.613327][ T38] 3 locks held by syz-executor/7926: [ 432.613338][ T38] #0: ffff88804edd0e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 432.613386][ T38] #1: ffff88804edd00a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 432.613439][ T38] #2: ffffffff8ee39c78 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 432.613496][ T38] 4 locks held by kworker/u9:7/7927: [ 432.613507][ T38] #0: ffff88804d35d938 ((wq_completion)hci15#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 432.613564][ T38] #1: ffffc9000c4efbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 432.613618][ T38] #2: ffff88808e1f40a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 432.613674][ T38] #3: ffffffff8ee39c78 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 433.084293][ T38] 4 locks held by kworker/1:15/7929: [ 433.084307][ T38] #0: ffff88805a042538 ((wq_completion)wg-crypt-wg0#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 433.084368][ T38] #1: ffffc9000bce7bc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 433.084423][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 433.084475][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 433.084529][ T38] 4 locks held by kworker/1:16/7930: [ 433.084541][ T38] #0: ffff888019899938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 433.084594][ T38] #1: ffffc90004d57bc0 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 433.084645][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 433.084696][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 433.084749][ T38] 4 locks held by kworker/1:18/7933: [ 433.084761][ T38] #0: ffff88805a3a7d38 ((wq_completion)wg-crypt-wg2#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 433.084818][ T38] #1: ffffc90004887bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 433.084897][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 433.084949][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 433.085001][ T38] 2 locks held by syz-executor/7943: [ 433.085013][ T38] #0: ffff888047f80e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 433.085063][ T38] #1: ffff888047f800a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 433.085115][ T38] 1 lock held by syz-executor/7950: [ 433.085127][ T38] #0: ffffffff8ecd22f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 433.085187][ T38] 1 lock held by syz-executor/7953: [ 433.085199][ T38] #0: ffffffff8ecd22f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 433.085258][ T38] 1 lock held by syz-executor/7959: [ 433.085270][ T38] #0: ffffffff8ecd22f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 433.085327][ T38] 5 locks held by kworker/u9:9/7960: [ 433.085339][ T38] #0: ffff88805d6c4938 ((wq_completion)hci3#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 433.085397][ T38] #1: ffffc900045b7bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 433.085450][ T38] #2: ffff88806bf08e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 433.085508][ T38] #3: ffff88806bf080a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 433.085561][ T38] #4: ffffffff8ee39c78 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 433.085615][ T38] 1 lock held by syz-executor/7965: [ 433.085626][ T38] #0: ffffffff8ecd22f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 433.085684][ T38] 1 lock held by syz-executor/7980: [ 433.085696][ T38] #0: ffffffff8ecd22f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 433.085753][ T38] 1 lock held by syz-executor/7989: [ 433.085764][ T38] #0: ffffffff8ecd22f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 433.085822][ T38] 1 lock held by syz-executor/7994: [ 433.085833][ T38] #0: ffffffff8ecd22f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 433.085896][ T38] 1 lock held by syz-executor/7997: [ 433.085907][ T38] #0: ffffffff8ecd22f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 433.085965][ T38] 1 lock held by syz-executor/8003: [ 433.085976][ T38] #0: ffffffff8ecd22f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 433.086036][ T38] 1 lock held by syz-executor/8007: [ 433.086048][ T38] #0: ffffffff8ecd22f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 433.086105][ T38] 4 locks held by kworker/1:20/8016: [ 433.086116][ T38] #0: ffff88805a3a4538 ((wq_completion)wg-crypt-wg1#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 433.086174][ T38] #1: ffffc90003c17bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 433.086243][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 433.086294][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 433.086348][ T38] 4 locks held by kworker/1:23/8019: [ 433.086359][ T38] #0: ffff88805a042538 ((wq_completion)wg-crypt-wg0#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 433.086418][ T38] #1: ffffc900015afbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 433.086485][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 433.086536][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 433.086589][ T38] 4 locks held by kworker/1:24/8023: [ 433.086600][ T38] #0: ffff88805a043d38 ((wq_completion)wg-crypt-wg2#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 433.086653][ T38] #1: ffffc9000448fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 433.086721][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 433.086772][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 433.086824][ T38] 1 lock held by syz-executor/8024: [ 433.086835][ T38] #0: ffffffff8ecd22f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 433.086902][ T38] 1 lock held by syz-executor/8028: [ 433.086913][ T38] #0: ffffffff8ecd22f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 433.086971][ T38] 1 lock held by syz-executor/8031: [ 433.086982][ T38] #0: ffffffff8ecd22f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 433.087039][ T38] 1 lock held by syz-executor/8036: [ 433.087051][ T38] #0: ffffffff8ecd22f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 433.087110][ T38] [ 433.087115][ T38] ============================================= [ 433.087115][ T38] [ 433.087126][ T38] NMI backtrace for cpu 0 [ 433.087141][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 433.087164][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 433.087176][ T38] Call Trace: [ 433.087184][ T38] [ 433.087194][ T38] dump_stack_lvl+0x189/0x250 [ 433.087229][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 433.087259][ T38] ? __pfx__printk+0x10/0x10 [ 433.087296][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 433.087323][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 433.087350][ T38] ? __pfx__printk+0x10/0x10 [ 433.087377][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 433.087405][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 433.087432][ T38] watchdog+0xf93/0xfe0 [ 433.087464][ T38] ? watchdog+0x1de/0xfe0 [ 433.087496][ T38] kthread+0x711/0x8a0 [ 433.087530][ T38] ? __pfx_watchdog+0x10/0x10 [ 433.087555][ T38] ? __pfx_kthread+0x10/0x10 [ 433.087590][ T38] ? __pfx_kthread+0x10/0x10 [ 433.087622][ T38] ret_from_fork+0x3f9/0x770 [ 433.087649][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 433.087683][ T38] ? __switch_to_asm+0x39/0x70 [ 433.087701][ T38] ? __switch_to_asm+0x33/0x70 [ 433.087719][ T38] ? __pfx_kthread+0x10/0x10 [ 433.087748][ T38] ret_from_fork_asm+0x1a/0x30 [ 433.087785][ T38] [ 433.087793][ T38] Sending NMI from CPU 0 to CPUs 1: [ 433.087821][ C1] NMI backtrace for cpu 1 [ 433.087838][ C1] CPU: 1 UID: 0 PID: 28 Comm: rcuc/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 433.087856][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 433.087866][ C1] RIP: 0010:preempt_count_add+0x42/0x1a0 [ 433.087886][ C1] Code: 01 99 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 f1 00 00 00 83 3d ee 65 71 17 00 75 07 65 8b 05 d5 22 66 10 65 01 3d ce 22 66 10 <48> c7 c0 40 23 01 99 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 ec 00 [ 433.087900][ C1] RSP: 0018:ffffc90000a2ea78 EFLAGS: 00000282 [ 433.087916][ C1] RAX: 0000000080000000 RBX: 00000000962adc50 RCX: ffffffff99012303 [ 433.087928][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000001 [ 433.087939][ C1] RBP: ffffc90000a2ec38 R08: 0000000000000000 R09: 0000000000000100 [ 433.087950][ C1] R10: dffffc0000000000 R11: fffffbfff1e3a947 R12: 0000000000001000 [ 433.087961][ C1] R13: dffffc0000000000 R14: 0000000000000240 R15: dffffc0000000000 [ 433.087973][ C1] FS: 0000000000000000(0000) GS:ffff8881269c2000(0000) knlGS:0000000000000000 [ 433.087987][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 433.087998][ C1] CR2: 00007f6c3f1d8590 CR3: 000000000d7a6000 CR4: 00000000003526f0 [ 433.088015][ C1] Call Trace: [ 433.088021][ C1] [ 433.088029][ C1] __virt_addr_valid+0x1c1/0x5c0 [ 433.088053][ C1] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 433.088069][ C1] kasan_addr_to_slab+0xf/0x90 [ 433.088087][ C1] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 433.088100][ C1] kasan_record_aux_stack+0xf/0xd0 [ 433.088114][ C1] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 433.088127][ C1] call_rcu+0x157/0x9c0 [ 433.088147][ C1] ? rcuref_put+0x1b7/0x210 [ 433.088161][ C1] ? __pfx_call_rcu+0x10/0x10 [ 433.088175][ C1] ? percpu_counter_add_batch+0xea/0x1e0 [ 433.088197][ C1] ? dst_release+0x126/0x1b0 [ 433.088212][ C1] skb_release_head_state+0x71/0x250 [ 433.088234][ C1] consume_skb+0x60/0xf0 [ 433.088264][ C1] nft_synproxy_eval_v4+0x376/0x560 [ 433.088297][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 433.088321][ C1] ? nf_ip_checksum+0x13c/0x510 [ 433.088345][ C1] nft_synproxy_do_eval+0x345/0x570 [ 433.088370][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 433.088393][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 433.088418][ C1] nft_do_chain+0x409/0x1920 [ 433.088447][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 433.088481][ C1] ? rtlock_slowlock_locked+0xd8/0x4010 [ 433.088502][ C1] nft_do_chain_inet+0x25d/0x340 [ 433.088524][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 433.088545][ C1] ? __lock_acquire+0xab9/0xd20 [ 433.088569][ C1] ? NF_HOOK+0x9a/0x3a0 [ 433.088588][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 433.088611][ C1] nf_hook_slow+0xc5/0x220 [ 433.088643][ C1] NF_HOOK+0x206/0x3a0 [ 433.088661][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 433.088680][ C1] ? NF_HOOK+0x9a/0x3a0 [ 433.088697][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 433.088713][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 433.088733][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 433.088752][ C1] ? skb_dst+0x4f/0xd0 [ 433.088784][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 433.088804][ C1] NF_HOOK+0x30c/0x3a0 [ 433.088822][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 433.088840][ C1] ? NF_HOOK+0x9a/0x3a0 [ 433.088857][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 433.088876][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 433.088899][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 433.088915][ C1] __netif_receive_skb+0x143/0x380 [ 433.088932][ C1] ? rt_spin_unlock+0x65/0x80 [ 433.088950][ C1] ? process_backlog+0x27b/0x900 [ 433.088966][ C1] process_backlog+0x31e/0x900 [ 433.088998][ C1] __napi_poll+0xb6/0x540 [ 433.089017][ C1] net_rx_action+0x707/0xe00 [ 433.089034][ C1] ? arch_stack_walk+0x11c/0x150 [ 433.089058][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 433.089078][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 433.089098][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 433.089122][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 433.089152][ C1] handle_softirqs+0x22c/0x710 [ 433.089174][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 433.089197][ C1] __local_bh_enable_ip+0x179/0x270 [ 433.089216][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 433.089239][ C1] ? rcu_cpu_kthread+0x23e/0x1b50 [ 433.089260][ C1] ? rcu_cpu_kthread+0x23e/0x1b50 [ 433.089280][ C1] rcu_cpu_kthread+0xc3d/0x1b50 [ 433.089304][ C1] ? rcu_cpu_kthread+0x23e/0x1b50 [ 433.089330][ C1] ? __pfx_rcu_cpu_kthread+0x10/0x10 [ 433.089352][ C1] ? __lock_acquire+0xab9/0xd20 [ 433.089371][ C1] ? __pfx___schedule+0x10/0x10 [ 433.089396][ C1] ? schedule+0x91/0x360 [ 433.089417][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 433.089435][ C1] smpboot_thread_fn+0x542/0xa60 [ 433.089454][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 433.089476][ C1] kthread+0x711/0x8a0 [ 433.089499][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 433.089517][ C1] ? __pfx_kthread+0x10/0x10 [ 433.089541][ C1] ? __pfx_kthread+0x10/0x10 [ 433.089562][ C1] ret_from_fork+0x3f9/0x770 [ 433.089582][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 433.089604][ C1] ? __switch_to_asm+0x39/0x70 [ 433.089619][ C1] ? __switch_to_asm+0x33/0x70 [ 433.089639][ C1] ? __pfx_kthread+0x10/0x10 [ 433.089661][ C1] ret_from_fork_asm+0x1a/0x30 [ 433.089682][ C1] [ 433.089817][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 433.089833][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 433.089857][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 433.089868][ T38] Call Trace: [ 433.089886][ T38] [ 433.089894][ T38] dump_stack_lvl+0x99/0x250 [ 433.089924][ T38] ? __asan_memcpy+0x40/0x70 [ 433.089947][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 433.089977][ T38] ? __pfx__printk+0x10/0x10 [ 433.090010][ T38] vpanic+0x281/0x750 [ 433.090043][ T38] ? __pfx_vpanic+0x10/0x10 [ 433.090070][ T38] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 433.090091][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 433.090129][ T38] panic+0xb9/0xc0 [ 433.090158][ T38] ? __pfx_panic+0x10/0x10 [ 433.090191][ T38] ? irq_work_queue+0xc3/0x140 [ 433.090222][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 433.090248][ T38] watchdog+0xfd2/0xfe0 [ 433.090279][ T38] ? watchdog+0x1de/0xfe0 [ 433.090312][ T38] kthread+0x711/0x8a0 [ 433.090346][ T38] ? __pfx_watchdog+0x10/0x10 [ 433.090370][ T38] ? __pfx_kthread+0x10/0x10 [ 433.090406][ T38] ? __pfx_kthread+0x10/0x10 [ 433.090437][ T38] ret_from_fork+0x3f9/0x770 [ 433.090467][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 433.090500][ T38] ? __switch_to_asm+0x39/0x70 [ 433.090519][ T38] ? __switch_to_asm+0x33/0x70 [ 433.090537][ T38] ? __pfx_kthread+0x10/0x10 [ 433.090568][ T38] ret_from_fork_asm+0x1a/0x30 [ 433.090605][ T38] [ 433.090927][ T38] Kernel Offset: disabled