last executing test programs: 35.064060148s ago: executing program 1 (id=584): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x8, 0x0) sendfile(r0, r1, 0x0, 0xbd) 34.808709681s ago: executing program 4 (id=586): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x54, r1, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @dev}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x54}, 0x2, 0x34005}, 0x0) 34.777567245s ago: executing program 1 (id=587): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f00000019c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x0, 0xe, 0x0, &(0x7f0000000180)="0000ffffff8d00f03f0100000001", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 34.583811155s ago: executing program 1 (id=589): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000400000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r0}, 0x10) request_key(0x0, 0x0, 0x0, 0x0) 34.421127549s ago: executing program 1 (id=590): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x34, r1, 0x431, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}]}, 0x34}}, 0x0) 34.148974323s ago: executing program 4 (id=591): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r0, 0x6, 0xa, &(0x7f0000000040), 0x4) 34.044593747s ago: executing program 1 (id=593): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 33.742058946s ago: executing program 1 (id=596): r0 = socket$netlink(0x10, 0x3, 0x15) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe}, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfe}, 0xc) 33.051888632s ago: executing program 4 (id=600): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b040000000000000000020000000900010073797a30000000000900020073797a32000000003800048034000180090001007866726d00000000240002800500030000000000080001400000000008000440000000cc0800024000000002"], 0x8c}, 0x1, 0x0, 0x0, 0x41}, 0x20000010) 32.543667596s ago: executing program 3 (id=604): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x6080, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r1, 0x2, &(0x7f00000001c0)=[&(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x0, r0, &(0x7f0000000000)='%', 0x100000}, 0x0, 0x0]) 23.396840673s ago: executing program 0 (id=613): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x1000000000007, 0x28842) fdatasync(r0) 21.404144514s ago: executing program 2 (id=614): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) syz_open_procfs$namespace(0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000001400)) 21.404007412s ago: executing program 0 (id=615): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x34, r1, 0x101, 0x70bd2f, 0x25dfdbfc, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004000}, 0x4040) 21.403186969s ago: executing program 0 (id=616): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x50}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 21.402766015s ago: executing program 0 (id=617): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000300)=[{0x6, 0x0, 0xb, 0x7fff0000}]}) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r0, 0x107, 0xb, &(0x7f0000000100)=""/41, &(0x7f0000000180)=0x29) 21.40262233s ago: executing program 2 (id=618): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@remote, 0x8000000, 0x0, 0xff, 0x1, 0x66}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x2, 0x3, 0xa, 0x0, 0x9}, 0x20) 21.402534526s ago: executing program 2 (id=619): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000005300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a001000010000090588"], 0x0) 21.400904269s ago: executing program 4 (id=620): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) select(0x40, &(0x7f0000000000)={0x9, 0x7, 0xffff, 0x0, 0x0, 0x1000}, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 21.064149016s ago: executing program 3 (id=621): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) utimes(&(0x7f0000000440)='./file0\x00', 0x0) 20.270918694s ago: executing program 4 (id=622): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000200)='sys_enter\x00', r0}, 0x10) shmdt(0x0) 20.223374674s ago: executing program 3 (id=623): prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) r0 = gettid() tkill(r0, 0xb) 19.99228105s ago: executing program 2 (id=624): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'vlan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@delqdisc={0x24, 0x26, 0x1f, 0x60bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xf, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) 19.877834896s ago: executing program 3 (id=625): r0 = syz_io_uring_setup(0x116, &(0x7f0000000100)={0x0, 0x86c0, 0x8, 0x0, 0x162}, &(0x7f0000000040)=0x0, &(0x7f0000000dc0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) io_uring_enter(r0, 0xf3, 0x80ffff, 0x49, 0x0, 0x40) 19.631360519s ago: executing program 2 (id=626): r0 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r0, &(0x7f0000000080), 0x10) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f00000000c0)) 19.464636338s ago: executing program 3 (id=627): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x2, 0x300, 0x1, 0x1, 0x9, 0xe1cb, 0x0, 0x4, 0x3, 0x1ff, 0x80000089, 0xfffffffd, 0x0, 0x20001e56, 0xffffeadb, 0x3, 0x3d, 0x8, 0x4, 0x8000000, 0xdffffffa]}) 19.19992472s ago: executing program 2 (id=628): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYRESDEC], 0xfdef) 18.683223332s ago: executing program 3 (id=629): socket(0x11, 0x2, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000040)={0x0, 0x48, &(0x7f00000013c0)={&(0x7f0000000000)={0x24, 0x14, 0x201, 0x70bd21, 0x25dfdbfb, {0x11}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "38bdb2f8d8b9e19f44"}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c0}, 0x4004) 17.415519224s ago: executing program 32 (id=596): r0 = socket$netlink(0x10, 0x3, 0x15) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe}, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfe}, 0xc) 17.415427839s ago: executing program 0 (id=631): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x109a42, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000440)=0x80) close(r0) 17.258847396s ago: executing program 0 (id=632): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000010000d0400"/20, @ANYRES32=r0, @ANYBLOB="01000000000002004c0012800b00010067726574617000003c000280060011004e240000060018001f0100000800070000ffffff06000f"], 0x6c}}, 0x0) 14.653038845s ago: executing program 4 (id=633): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xfffffcf0, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x4}]}}]}, 0x38}}, 0x0) 4.023688316s ago: executing program 33 (id=628): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYRESDEC], 0xfdef) 3.481582421s ago: executing program 34 (id=629): socket(0x11, 0x2, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000040)={0x0, 0x48, &(0x7f00000013c0)={&(0x7f0000000000)={0x24, 0x14, 0x201, 0x70bd21, 0x25dfdbfb, {0x11}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "38bdb2f8d8b9e19f44"}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c0}, 0x4004) 2.048036485s ago: executing program 35 (id=632): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000010000d0400"/20, @ANYRES32=r0, @ANYBLOB="01000000000002004c0012800b00010067726574617000003c000280060011004e240000060018001f0100000800070000ffffff06000f"], 0x6c}}, 0x0) 0s ago: executing program 36 (id=633): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xfffffcf0, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x4}]}}]}, 0x38}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.1' (ED25519) to the list of known hosts. [ 91.394228][ T5828] cgroup: Unknown subsys name 'net' [ 91.646174][ T5828] cgroup: Unknown subsys name 'cpuset' [ 91.701163][ T5828] cgroup: Unknown subsys name 'rlimit' [ 91.864999][ T31] cfg80211: failed to load regulatory.db Setting up swapspace version 1, size = 127995904 bytes [ 93.681370][ T5828] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 96.551865][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.554187][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 96.555848][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.557042][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 96.557752][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 96.559036][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 96.559861][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.617249][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.626793][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.627860][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.691270][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 96.692886][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 96.698826][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 96.701030][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 96.704049][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 96.705982][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 96.706835][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 96.747446][ T5159] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 96.749987][ T5159] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 96.760750][ T5159] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 96.760805][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 96.773907][ T5159] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 96.774817][ T5159] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 96.779133][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 96.780372][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.764322][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 97.828705][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 97.925495][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 97.943837][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 98.322947][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 98.742267][ T5159] Bluetooth: hci1: command tx timeout [ 98.742273][ T5847] Bluetooth: hci0: command tx timeout [ 98.742427][ T5847] Bluetooth: hci2: command tx timeout [ 98.820768][ T59] Bluetooth: hci3: command tx timeout [ 98.820951][ T59] Bluetooth: hci4: command tx timeout [ 98.856495][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.857841][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.858324][ T5839] bridge_slave_0: entered allmulticast mode [ 98.869597][ T5839] bridge_slave_0: entered promiscuous mode [ 98.885541][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.885713][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.885936][ T5844] bridge_slave_0: entered allmulticast mode [ 98.900532][ T5844] bridge_slave_0: entered promiscuous mode [ 99.052785][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.052924][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.053081][ T5839] bridge_slave_1: entered allmulticast mode [ 99.054940][ T5839] bridge_slave_1: entered promiscuous mode [ 99.057309][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.057417][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.057549][ T5844] bridge_slave_1: entered allmulticast mode [ 99.059436][ T5844] bridge_slave_1: entered promiscuous mode [ 99.402146][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.402289][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.402800][ T5842] bridge_slave_0: entered allmulticast mode [ 99.405828][ T5842] bridge_slave_0: entered promiscuous mode [ 99.433280][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.433424][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.433624][ T5849] bridge_slave_0: entered allmulticast mode [ 99.436542][ T5849] bridge_slave_0: entered promiscuous mode [ 99.601542][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.601742][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.601949][ T5842] bridge_slave_1: entered allmulticast mode [ 99.604089][ T5842] bridge_slave_1: entered promiscuous mode [ 99.682147][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.682352][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.682539][ T5849] bridge_slave_1: entered allmulticast mode [ 99.685510][ T5849] bridge_slave_1: entered promiscuous mode [ 99.693216][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.731294][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.029799][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.039716][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.125651][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.125750][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.125950][ T5843] bridge_slave_0: entered allmulticast mode [ 100.127887][ T5843] bridge_slave_0: entered promiscuous mode [ 100.336472][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.336977][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.337170][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.337379][ T5843] bridge_slave_1: entered allmulticast mode [ 100.339810][ T5843] bridge_slave_1: entered promiscuous mode [ 100.346181][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.498742][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.576991][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.579091][ T5839] team0: Port device team_slave_0 added [ 100.592076][ T5844] team0: Port device team_slave_0 added [ 100.820979][ T5159] Bluetooth: hci1: command tx timeout [ 100.821013][ T5159] Bluetooth: hci2: command tx timeout [ 100.821036][ T5159] Bluetooth: hci0: command tx timeout [ 100.835576][ T5839] team0: Port device team_slave_1 added [ 100.838671][ T5844] team0: Port device team_slave_1 added [ 100.900745][ T59] Bluetooth: hci4: command tx timeout [ 100.900779][ T59] Bluetooth: hci3: command tx timeout [ 100.948171][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.344436][ T5842] team0: Port device team_slave_0 added [ 101.348569][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.350283][ T5849] team0: Port device team_slave_0 added [ 101.526332][ T5842] team0: Port device team_slave_1 added [ 101.639411][ T5849] team0: Port device team_slave_1 added [ 101.644537][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.644556][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.644589][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.648479][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.648494][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.648526][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.942668][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.942686][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.942722][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.944134][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.944148][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.944175][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.046697][ T5843] team0: Port device team_slave_0 added [ 102.213046][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.213064][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.213093][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.217283][ T5843] team0: Port device team_slave_1 added [ 102.218894][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.218908][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.218936][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.250078][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.250099][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.250130][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.370070][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.370086][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.370119][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.637295][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.637309][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.637328][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.854305][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.854319][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.854338][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.864679][ T5839] hsr_slave_0: entered promiscuous mode [ 102.866413][ T5839] hsr_slave_1: entered promiscuous mode [ 102.882375][ T5844] hsr_slave_0: entered promiscuous mode [ 102.883967][ T5844] hsr_slave_1: entered promiscuous mode [ 102.885196][ T5844] debugfs: 'hsr0' already exists in 'hsr' [ 102.885341][ T5844] Cannot create hsr debugfs directory [ 102.900959][ T59] Bluetooth: hci0: command tx timeout [ 102.900992][ T59] Bluetooth: hci2: command tx timeout [ 102.901017][ T59] Bluetooth: hci1: command tx timeout [ 102.980794][ T5159] Bluetooth: hci3: command tx timeout [ 102.980832][ T5159] Bluetooth: hci4: command tx timeout [ 103.270651][ T5842] hsr_slave_0: entered promiscuous mode [ 103.272058][ T5842] hsr_slave_1: entered promiscuous mode [ 103.273013][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 103.273038][ T5842] Cannot create hsr debugfs directory [ 103.467704][ T5849] hsr_slave_0: entered promiscuous mode [ 103.468899][ T5849] hsr_slave_1: entered promiscuous mode [ 103.469552][ T5849] debugfs: 'hsr0' already exists in 'hsr' [ 103.469574][ T5849] Cannot create hsr debugfs directory [ 103.930156][ T5843] hsr_slave_0: entered promiscuous mode [ 103.932041][ T5843] hsr_slave_1: entered promiscuous mode [ 103.933140][ T5843] debugfs: 'hsr0' already exists in 'hsr' [ 103.933167][ T5843] Cannot create hsr debugfs directory [ 104.980731][ T59] Bluetooth: hci1: command tx timeout [ 104.980766][ T59] Bluetooth: hci2: command tx timeout [ 104.980790][ T59] Bluetooth: hci0: command tx timeout [ 105.061649][ T59] Bluetooth: hci3: command tx timeout [ 105.061696][ T5159] Bluetooth: hci4: command tx timeout [ 105.495643][ T5839] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 105.540264][ T5839] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 105.579173][ T5839] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 105.637672][ T5839] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 105.743421][ T5844] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.785244][ T5844] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.829328][ T5844] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.874032][ T5844] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 106.005409][ T5842] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 106.064575][ T5842] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 106.126427][ T5842] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 106.169778][ T5842] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 106.354833][ T5849] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 106.398557][ T5849] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 106.447394][ T5849] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 106.503242][ T5849] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 106.711585][ T5843] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 106.767861][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.773750][ T5843] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 106.810054][ T5843] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 106.860012][ T5843] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 106.981985][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.046268][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.064554][ T3530] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.065722][ T3530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.124564][ T3605] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.124715][ T3605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.208348][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.230391][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.274034][ T1511] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.274256][ T1511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.328318][ T1511] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.328518][ T1511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.395879][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.444577][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.446700][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.446861][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.494204][ T3605] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.494376][ T3605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.645292][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.734145][ T162] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.734879][ T162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.757717][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.818939][ T3530] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.819710][ T3530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.976283][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.038200][ T3530] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.040795][ T3530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.138866][ T3530] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.139037][ T3530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.148734][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.444319][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.592206][ T5839] veth0_vlan: entered promiscuous mode [ 108.625403][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.695391][ T5839] veth1_vlan: entered promiscuous mode [ 108.918166][ T5844] veth0_vlan: entered promiscuous mode [ 108.972458][ T5839] veth0_macvtap: entered promiscuous mode [ 108.991356][ T5844] veth1_vlan: entered promiscuous mode [ 109.016376][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.019106][ T5839] veth1_macvtap: entered promiscuous mode [ 109.189598][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.257684][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.298810][ T5844] veth0_macvtap: entered promiscuous mode [ 109.324873][ T162] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.349064][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.360183][ T162] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.378353][ T162] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.379002][ T5844] veth1_macvtap: entered promiscuous mode [ 109.424562][ T162] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.567793][ T5849] veth0_vlan: entered promiscuous mode [ 109.655461][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.743179][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.746552][ T5849] veth1_vlan: entered promiscuous mode [ 109.837632][ T37] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.857149][ T37] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.859417][ T1511] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.859439][ T1511] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.872592][ T5842] veth0_vlan: entered promiscuous mode [ 109.890649][ T37] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.911897][ T37] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.031171][ T5843] veth0_vlan: entered promiscuous mode [ 110.054351][ T5842] veth1_vlan: entered promiscuous mode [ 110.070034][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.070054][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.206049][ T5843] veth1_vlan: entered promiscuous mode [ 110.271711][ T5849] veth0_macvtap: entered promiscuous mode [ 110.333256][ T5849] veth1_macvtap: entered promiscuous mode [ 110.338248][ T1511] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.338266][ T1511] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.513745][ T5842] veth0_macvtap: entered promiscuous mode [ 110.548290][ T162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.548311][ T162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.553948][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.555553][ T5842] veth1_macvtap: entered promiscuous mode [ 110.589062][ T5843] veth0_macvtap: entered promiscuous mode [ 110.625164][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.642305][ T5843] veth1_macvtap: entered promiscuous mode [ 110.736890][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.740326][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.755425][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.759479][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.759563][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.819702][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.902574][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.953888][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.075242][ T67] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.079802][ T67] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.115177][ T67] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.190263][ T67] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.217203][ T67] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.233809][ T67] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.286583][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.289419][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.601112][ T5975] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11'. [ 111.603342][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.603362][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.676011][ T5975] vlan2: entered promiscuous mode [ 111.676034][ T5975] syz_tun: entered promiscuous mode [ 111.964126][ T5980] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 111.978411][ T162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.978429][ T162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.152960][ T162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.152983][ T162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.238967][ T162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.238990][ T162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.537117][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.537139][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.703799][ T45] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 112.783299][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.783322][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.881036][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 112.902475][ T45] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 112.902525][ T45] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 112.902570][ T45] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 112.902598][ T45] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 112.902626][ T45] usb 4-1: config 0 interface 0 has no altsetting 0 [ 112.968032][ T45] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 112.968064][ T45] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 112.968086][ T45] usb 4-1: Product: syz [ 112.968101][ T45] usb 4-1: Manufacturer: syz [ 112.968115][ T45] usb 4-1: SerialNumber: syz [ 113.036732][ T45] usb 4-1: config 0 descriptor?? [ 113.157834][ T45] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 113.208062][ T45] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 113.297877][ T45] usb 4-1: USB disconnect, device number 2 [ 113.329166][ T45] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 113.872021][ T6005] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3'. [ 113.876976][ T6005] IPVS: Error connecting to the multicast addr [ 114.053988][ T6006] sp0: Synchronizing with TNC [ 114.661051][ T5928] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 114.814795][ T5928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 114.814846][ T5928] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0a0f, bcdDevice= 0.00 [ 114.814869][ T5928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.878893][ T5928] usb 5-1: config 0 descriptor?? [ 115.378870][ T5928] hid-corsair-void 0003:1B1C:0A0F.0001: item fetching failed at offset 0/3 [ 115.379706][ T5928] hid-corsair-void 0003:1B1C:0A0F.0001: parse failed (reason: -22) [ 115.379818][ T5928] hid-corsair-void 0003:1B1C:0A0F.0001: probe with driver hid-corsair-void failed with error -22 [ 115.586448][ T5915] usb 5-1: USB disconnect, device number 2 [ 115.699870][ T38] audit: type=1326 audit(1757719444.486:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6038 comm="syz.3.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f342deba9 code=0x7ffc0000 [ 115.699923][ T38] audit: type=1326 audit(1757719444.496:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6038 comm="syz.3.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f342deba9 code=0x7ffc0000 [ 115.769529][ T38] audit: type=1326 audit(1757719444.566:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6038 comm="syz.3.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f1f342deba9 code=0x7ffc0000 [ 115.796326][ T38] audit: type=1326 audit(1757719444.566:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6038 comm="syz.3.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f342deba9 code=0x7ffc0000 [ 115.796385][ T38] audit: type=1326 audit(1757719444.566:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6038 comm="syz.3.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f1f342deba9 code=0x7ffc0000 [ 115.796433][ T38] audit: type=1326 audit(1757719444.566:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6038 comm="syz.3.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f342deba9 code=0x7ffc0000 [ 116.483469][ T6055] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_hsr, syncid = 4, id = 0 [ 116.638573][ T6058] netlink: 20 bytes leftover after parsing attributes in process `syz.2.45'. [ 116.979339][ T38] audit: type=1326 audit(1757719445.776:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6065 comm="syz.3.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f342deba9 code=0x7ffc0000 [ 116.979843][ T38] audit: type=1326 audit(1757719445.776:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6065 comm="syz.3.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f342deba9 code=0x7ffc0000 [ 116.980105][ T38] audit: type=1326 audit(1757719445.776:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6065 comm="syz.3.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7f1f342deba9 code=0x7ffc0000 [ 117.016994][ T38] audit: type=1326 audit(1757719445.776:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6065 comm="syz.3.50" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f342deba9 code=0x7ffc0000 [ 117.524278][ T6072] sp0: Synchronizing with TNC [ 118.072744][ T6085] sp0: Synchronizing with TNC [ 118.076739][ T6083] [U] è [ 118.433976][ T6099] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 118.812833][ T6112] netlink: 'syz.0.71': attribute type 2 has an invalid length. [ 119.357871][ T6129] tipc: Started in network mode [ 119.357904][ T6129] tipc: Node identity ac14142e, cluster identity 4711 [ 119.359315][ T6129] tipc: Enabling of bearer rejected, failed to enable media [ 119.826737][ T6140] netlink: 'syz.4.85': attribute type 5 has an invalid length. [ 119.826761][ T6140] netlink: 12 bytes leftover after parsing attributes in process `syz.4.85'. [ 121.212182][ T5997] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 121.279843][ T6186] netlink: 32 bytes leftover after parsing attributes in process `syz.2.107'. [ 121.280007][ T6186] Zero length message leads to an empty skb [ 121.360713][ T5997] usb 5-1: Using ep0 maxpacket: 16 [ 121.366638][ T5997] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.366665][ T5997] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 121.392949][ T5997] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 121.392985][ T5997] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.393009][ T5997] usb 5-1: Product: syz [ 121.393126][ T5997] usb 5-1: Manufacturer: syz [ 121.393142][ T5997] usb 5-1: SerialNumber: syz [ 121.909354][ T5997] usb 5-1: USB disconnect, device number 3 [ 122.056624][ T5976] udevd[5976]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 123.008034][ T6237] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 123.046555][ T6235] netlink: 32 bytes leftover after parsing attributes in process `syz.3.129'. [ 123.381209][ T6240] capability: warning: `syz.4.131' uses 32-bit capabilities (legacy support in use) [ 123.381638][ T6240] ucma_write: process 41 (syz.4.131) changed security contexts after opening file descriptor, this is not allowed. [ 125.356401][ T6283] netlink: 32 bytes leftover after parsing attributes in process `syz.4.150'. [ 125.542568][ T6287] netlink: 20 bytes leftover after parsing attributes in process `syz.3.151'. [ 126.381397][ T6307] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.581753][ T5159] Bluetooth: hci4: command tx timeout [ 127.307012][ T6339] capability: warning: `syz.4.176' uses deprecated v2 capabilities in a way that may be insecure [ 128.011222][ T6349] vlan2: entered allmulticast mode [ 128.011244][ T6349] macsec0: entered allmulticast mode [ 128.011257][ T6349] veth1_macvtap: entered allmulticast mode [ 128.545328][ T6364] syz.0.187 uses old SIOCAX25GETINFO [ 129.078300][ T6356] syz.3.183 (6356) used greatest stack depth: 18552 bytes left [ 129.323897][ T6385] netlink: 36 bytes leftover after parsing attributes in process `syz.3.197'. [ 129.551223][ T6393] fuse: Bad value for 'user_id' [ 129.551243][ T6393] fuse: Bad value for 'user_id' [ 130.540686][ T6426] netlink: 'syz.1.215': attribute type 1 has an invalid length. [ 130.540709][ T6426] netlink: 228 bytes leftover after parsing attributes in process `syz.1.215'. [ 130.577781][ T6428] netlink: 'syz.4.216': attribute type 5 has an invalid length. [ 130.672514][ T6430] Illegal XDP return value 4294967274 on prog (id 22) dev N/A, expect packet loss! [ 131.513427][ T6459] program syz.3.231 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.341280][ T5928] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 132.515248][ T5928] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 132.515278][ T5928] usb 5-1: config 0 has no interface number 0 [ 132.515353][ T5928] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 132.515377][ T5928] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 132.515404][ T5928] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 132.515430][ T5928] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 132.515458][ T5928] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 132.515485][ T5928] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 132.515529][ T5928] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 132.515552][ T5928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.534707][ T5928] usb 5-1: config 0 descriptor?? [ 132.536975][ T6483] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 132.537277][ T6483] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 132.601392][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 132.604558][ T5928] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 132.777583][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 132.781255][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.781292][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.781337][ T9] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 132.781364][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.807352][ T5928] usb 5-1: USB disconnect, device number 4 [ 132.844587][ T9] usb 1-1: config 0 descriptor?? [ 132.874809][ T5928] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 133.323533][ T9] savu 0003:1E7D:2D5A.0002: unknown main item tag 0x0 [ 133.323573][ T9] savu 0003:1E7D:2D5A.0002: unknown main item tag 0x0 [ 133.323601][ T9] savu 0003:1E7D:2D5A.0002: unknown main item tag 0x0 [ 133.323628][ T9] savu 0003:1E7D:2D5A.0002: unknown main item tag 0x0 [ 133.323656][ T9] savu 0003:1E7D:2D5A.0002: unknown main item tag 0x0 [ 133.323681][ T9] savu 0003:1E7D:2D5A.0002: unbalanced collection at end of report description [ 133.324558][ T9] savu 0003:1E7D:2D5A.0002: parse failed [ 133.324632][ T9] savu 0003:1E7D:2D5A.0002: probe with driver savu failed with error -22 [ 133.507466][ T5997] usb 1-1: USB disconnect, device number 2 [ 133.630574][ T45] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 133.780667][ T45] usb 4-1: Using ep0 maxpacket: 32 [ 133.784249][ T45] usb 4-1: config 0 interface 0 has no altsetting 0 [ 133.803820][ T45] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 133.803850][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.803871][ T45] usb 4-1: Product: syz [ 133.803885][ T45] usb 4-1: Manufacturer: syz [ 133.803900][ T45] usb 4-1: SerialNumber: syz [ 133.810163][ T45] usb 4-1: config 0 descriptor?? [ 134.241024][ T45] gs_usb 4-1:0.0: Configuring for 16 interfaces [ 134.241058][ T45] gs_usb 4-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 134.241096][ T45] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -22 [ 134.449441][ T5928] usb 4-1: USB disconnect, device number 3 [ 134.486920][ T6524] pimreg: entered allmulticast mode [ 134.502090][ T6525] pimreg: left allmulticast mode [ 135.230726][ T9] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 135.404727][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.404757][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 135.404813][ T9] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 135.404837][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.416341][ T9] usb 3-1: config 0 descriptor?? [ 135.444359][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 135.444823][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 135.520601][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 135.522233][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 135.522325][ T9] usb 3-1: media controller created [ 135.526193][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 135.578678][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 135.578797][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 135.615025][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6 [ 135.643122][ T6535] dvb-usb: bulk message failed: -22 (2/0) [ 135.663874][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 135.663899][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 135.679075][ T9] usb 3-1: USB disconnect, device number 2 acpid: input device has been disconnected, fd 10 [ 135.913145][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 135.983678][ T6557] [U]  [ 136.390634][ T5901] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 136.540639][ T5901] usb 5-1: Using ep0 maxpacket: 16 [ 136.543437][ T5901] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.543460][ T5901] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 136.546759][ T5901] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 136.546784][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.546803][ T5901] usb 5-1: Product: syz [ 136.546817][ T5901] usb 5-1: Manufacturer: syz [ 136.546830][ T5901] usb 5-1: SerialNumber: syz [ 136.751959][ T6586] tmpfs: Bad value for 'mpol' [ 136.844019][ T5901] usb 5-1: 0:2 : does not exist [ 136.865794][ T5901] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 136.928651][ T5901] usb 5-1: USB disconnect, device number 5 [ 137.470236][ T6602] netlink: 12 bytes leftover after parsing attributes in process `syz.2.299'. [ 137.766421][ T6619] netlink: 36 bytes leftover after parsing attributes in process `syz.2.307'. [ 137.946626][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.946707][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.183534][ T6635] tipc: Enabling not permitted [ 138.183567][ T6635] tipc: Enabling of bearer rejected, failed to enable media [ 138.290654][ T5901] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 138.444855][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.444890][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.444914][ T5901] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 138.444957][ T5901] usb 2-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 138.444980][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.512545][ T5901] usb 2-1: config 0 descriptor?? [ 138.654459][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 138.820627][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 138.829188][ T9] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 138.829223][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.829244][ T9] usb 4-1: Product: syz [ 138.829258][ T9] usb 4-1: Manufacturer: syz [ 138.829273][ T9] usb 4-1: SerialNumber: syz [ 138.847635][ T9] usb 4-1: config 0 descriptor?? [ 138.875829][ T9] gspca_main: sq930x-2.14.0 probing 2770:930c [ 138.949561][ T5901] dragonrise 0003:0079:0011.0003: invalid report_count -326368751 [ 138.949613][ T5901] dragonrise 0003:0079:0011.0003: item 0 4 1 9 parsing failed [ 138.967320][ T5901] dragonrise 0003:0079:0011.0003: parse failed [ 138.967409][ T5901] dragonrise 0003:0079:0011.0003: probe with driver dragonrise failed with error -22 [ 138.987019][ T5928] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 139.038640][ T6658] netlink: 16 bytes leftover after parsing attributes in process `syz.2.326'. [ 139.038662][ T6658] tipc: Invalid UDP bearer configuration [ 139.038705][ T6658] tipc: Enabling of bearer rejected, failed to enable media [ 139.167508][ T5928] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.167611][ T5928] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 139.167639][ T5928] usb 1-1: config 0 interface 0 has no altsetting 0 [ 139.167674][ T5928] usb 1-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00 [ 139.167697][ T5928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.175462][ T5901] usb 2-1: USB disconnect, device number 2 [ 139.251934][ T5928] usb 1-1: config 0 descriptor?? [ 139.500556][ T9] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 139.500739][ T9] sq930x 4-1:0.0: probe with driver sq930x failed with error -71 [ 139.529559][ T9] usb 4-1: USB disconnect, device number 4 [ 139.714679][ T5928] itetech 0003:06CB:73F6.0004: hidraw0: USB HID v0.01 Device [HID 06cb:73f6] on usb-dummy_hcd.0-1/input0 [ 139.828040][ T6675] overlayfs: failed to resolve './file1': -2 [ 139.896955][ T5928] usb 1-1: USB disconnect, device number 3 [ 140.293601][ T6688] sp0: Synchronizing with TNC [ 140.495627][ T6696] process 'syz.4.344' launched '/dev/fd/3' with NULL argv: empty string added [ 140.680609][ T2167] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 140.840649][ T2167] usb 4-1: Using ep0 maxpacket: 32 [ 140.843394][ T2167] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 140.843420][ T2167] usb 4-1: config 0 has no interface number 0 [ 140.846560][ T2167] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 140.846586][ T2167] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.846607][ T2167] usb 4-1: Product: syz [ 140.846621][ T2167] usb 4-1: Manufacturer: syz [ 140.846644][ T2167] usb 4-1: SerialNumber: syz [ 140.909817][ T2167] usb 4-1: config 0 descriptor?? [ 140.923442][ T2167] smsc95xx v2.0.0 [ 141.230713][ T5928] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 141.270555][ T5910] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 141.395231][ T5928] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 141.395262][ T5928] usb 2-1: config 0 has no interface number 0 [ 141.395410][ T5928] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 141.395450][ T5928] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 141.395505][ T5928] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 141.395530][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.413070][ T5928] usb 2-1: config 0 descriptor?? [ 141.416803][ T6713] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 141.435854][ T5910] usb 3-1: Using ep0 maxpacket: 16 [ 141.442805][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.442843][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.442890][ T5910] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 141.442914][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.477125][ T5910] usb 3-1: config 0 descriptor?? [ 141.484610][ T5928] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 141.577998][ T2167] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 141.578028][ T2167] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 141.600844][ T2167] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 141.601501][ T2167] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 141.651100][ T2167] usb 4-1: USB disconnect, device number 5 [ 141.740228][ T992] usb 2-1: USB disconnect, device number 3 [ 141.927087][ T5910] hid-multitouch 0003:1FD2:6007.0005: unknown main item tag 0x0 [ 141.927134][ T5910] hid-multitouch 0003:1FD2:6007.0005: unknown main item tag 0x0 [ 141.927166][ T5910] hid-multitouch 0003:1FD2:6007.0005: unknown main item tag 0x0 [ 141.927195][ T5910] hid-multitouch 0003:1FD2:6007.0005: unknown main item tag 0x0 [ 141.927222][ T5910] hid-multitouch 0003:1FD2:6007.0005: unknown main item tag 0x0 [ 141.951383][ T5910] hid-multitouch 0003:1FD2:6007.0005: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.2-1/input0 [ 142.112849][ T45] usb 3-1: USB disconnect, device number 3 [ 143.151275][ T38] kauditd_printk_skb: 8 callbacks suppressed [ 143.151295][ T38] audit: type=1326 audit(1757719471.956:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6752 comm="syz.1.372" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9c1d20eba9 code=0x0 [ 143.780041][ T6774] devtmpfs: Too few inodes for current use [ 145.520636][ T45] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 145.708258][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.708293][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.708333][ T45] usb 1-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 145.708357][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.773572][ T45] usb 1-1: config 0 descriptor?? [ 146.145422][ T6854] can0: slcan on ptm0. [ 146.312215][ T45] hid_mf 0003:0079:1846.0006: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.0-1/input0 [ 146.312250][ T45] hid_mf 0003:0079:1846.0006: Invalid report, this should never happen! [ 146.312267][ T45] hid_mf 0003:0079:1846.0006: Force feedback init failed. [ 146.417146][ T6853] can0 (unregistered): slcan off ptm0. [ 146.467810][ T5910] usb 1-1: USB disconnect, device number 4 [ 146.770308][ T6879] netlink: 40 bytes leftover after parsing attributes in process `syz.4.429'. [ 146.770331][ T6879] tipc: Invalid UDP bearer configuration [ 146.770372][ T6879] tipc: Enabling of bearer rejected, failed to enable media [ 147.009776][ T6885] erspan0: entered promiscuous mode [ 147.018118][ T6885] macsec1: entered promiscuous mode [ 147.083950][ T6885] erspan0: left promiscuous mode [ 147.652799][ T6908] warning: `syz.2.442' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 148.100641][ T2167] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 148.133559][ T6929] netlink: 'syz.0.454': attribute type 30 has an invalid length. [ 148.263506][ T2167] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.263549][ T2167] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.263589][ T2167] usb 3-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 148.263614][ T2167] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.269200][ T2167] usb 3-1: config 0 descriptor?? [ 148.696799][ T2167] hid-retrode 0003:0403:97C1.0007: unknown main item tag 0x0 [ 148.721108][ T2167] hid-retrode 0003:0403:97C1.0007: hidraw0: USB HID v0.00 Device [HID 0403:97c1] on usb-dummy_hcd.2-1/input0 [ 148.907411][ T992] usb 3-1: USB disconnect, device number 4 [ 149.040605][ T2167] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 149.190638][ T2167] usb 4-1: Using ep0 maxpacket: 32 [ 149.195226][ T2167] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 149.224823][ T2167] usb 4-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 149.224856][ T2167] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.224877][ T2167] usb 4-1: Product: syz [ 149.224892][ T2167] usb 4-1: Manufacturer: syz [ 149.224907][ T2167] usb 4-1: SerialNumber: syz [ 149.266083][ T2167] usb 4-1: config 0 descriptor?? [ 149.267033][ T6944] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 149.288982][ T2167] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 149.491388][ T2167] usb 4-1: USB disconnect, device number 6 [ 149.520489][ T5910] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 149.686167][ T5910] usb 2-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 149.686196][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.732882][ T5910] usb 2-1: config 0 descriptor?? [ 149.876436][ T6965] macsec1: entered promiscuous mode [ 149.876470][ T6965] macsec1: entered allmulticast mode [ 150.170634][ T5910] elecom 0003:056E:00E6.0008: unknown main item tag 0x0 [ 150.170673][ T5910] elecom 0003:056E:00E6.0008: unknown main item tag 0x0 [ 150.170702][ T5910] elecom 0003:056E:00E6.0008: unknown main item tag 0x0 [ 150.170729][ T5910] elecom 0003:056E:00E6.0008: unknown main item tag 0x0 [ 150.170775][ T5910] elecom 0003:056E:00E6.0008: unknown main item tag 0x0 [ 150.181952][ T5910] elecom 0003:056E:00E6.0008: hidraw0: USB HID v1.01 Device [HID 056e:00e6] on usb-dummy_hcd.1-1/input0 [ 150.400382][ T5910] usb 2-1: USB disconnect, device number 4 [ 151.439545][ T7012] pim6reg: entered allmulticast mode [ 151.810287][ T7030] tipc: Started in network mode [ 151.810318][ T7030] tipc: Node identity ac14140f, cluster identity 4711 [ 151.831606][ T7030] tipc: New replicast peer: 255.255.255.83 [ 151.832298][ T7030] tipc: Enabled bearer , priority 10 [ 151.960243][ T7032] can0: slcan on ptm0. [ 152.158559][ T7031] can0 (unregistered): slcan off ptm0. [ 152.845226][ T5910] tipc: Node number set to 2886997007 [ 153.500612][ T2167] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 153.588672][ T38] audit: type=1326 audit(1757719482.386:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7104 comm="syz.3.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f342deba9 code=0x7ffc0000 [ 153.588727][ T38] audit: type=1326 audit(1757719482.386:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7104 comm="syz.3.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f342deba9 code=0x7ffc0000 [ 153.602971][ T38] audit: type=1326 audit(1757719482.406:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7104 comm="syz.3.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f1f342deba9 code=0x7ffc0000 [ 153.603034][ T38] audit: type=1326 audit(1757719482.406:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7104 comm="syz.3.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f342deba9 code=0x7ffc0000 [ 153.603085][ T38] audit: type=1326 audit(1757719482.406:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7104 comm="syz.3.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f342deba9 code=0x7ffc0000 [ 153.604470][ T38] audit: type=1326 audit(1757719482.406:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7104 comm="syz.3.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f1f342deba9 code=0x7ffc0000 [ 153.604895][ T38] audit: type=1326 audit(1757719482.406:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7104 comm="syz.3.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f342deba9 code=0x7ffc0000 [ 153.650541][ T2167] usb 3-1: Using ep0 maxpacket: 8 [ 153.690561][ T2167] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 153.690591][ T2167] usb 3-1: config 0 has no interface number 0 [ 153.690643][ T2167] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 153.690667][ T2167] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 153.690694][ T2167] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 153.690722][ T2167] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 153.690767][ T2167] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 153.690789][ T2167] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.834471][ T2167] usb 3-1: config 0 descriptor?? [ 153.858597][ T2167] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 154.055122][ T5910] usb 3-1: USB disconnect, device number 5 [ 154.076740][ T5910] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 155.710902][ T2167] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 155.860900][ T2167] usb 3-1: Using ep0 maxpacket: 16 [ 155.868529][ T2167] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.868561][ T2167] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.868601][ T2167] usb 3-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 155.868624][ T2167] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.940324][ T2167] usb 3-1: config 0 descriptor?? [ 156.119581][ T7193] netlink: 96 bytes leftover after parsing attributes in process `syz.1.580'. [ 156.160918][ T5956] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 156.310986][ T5956] usb 4-1: Using ep0 maxpacket: 32 [ 156.313761][ T5956] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 156.313792][ T5956] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 156.313819][ T5956] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 156.313842][ T5956] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 156.313869][ T5956] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 156.317183][ T5956] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 156.317211][ T5956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.317232][ T5956] usb 4-1: Product: syz [ 156.317247][ T5956] usb 4-1: Manufacturer: syz [ 156.317263][ T5956] usb 4-1: SerialNumber: syz [ 156.357814][ T5956] usb 4-1: config 0 descriptor?? [ 156.434834][ T2167] magicmouse 0003:05AC:0324.0009: hidraw0: USB HID v0.00 Device [HID 05ac:0324] on usb-dummy_hcd.2-1/input0 [ 156.645228][ T5910] usb 3-1: USB disconnect, device number 6 [ 156.764156][ T7205] loop6: detected capacity change from 0 to 7 [ 156.815901][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 156.816028][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 156.835503][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 156.835543][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 156.838059][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 156.838095][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 156.847685][ T5956] input input8: Device does not respond to id packet M [ 156.886829][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 156.886869][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 156.888343][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 156.888376][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 156.889469][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 156.889548][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 156.901101][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 156.901136][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 156.901293][ T7205] ldm_validate_partition_table(): Disk read failed. [ 156.902884][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 156.902918][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 156.904538][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 156.904568][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 156.906159][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 156.906193][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 156.907202][ T7205] Dev loop6: unable to read RDB block 0 [ 156.914615][ T7205] loop6: unable to read partition table [ 156.925308][ T7205] loop6: partition table beyond EOD, truncated [ 156.925365][ T7205] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà–() failed (rc=-5) [ 157.058121][ T5956] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 157.058171][ T5956] input input8: Device does not respond to id packet P [ 157.058787][ T5956] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 157.058846][ T5956] input input8: Device does not respond to id packet B [ 157.062333][ T5956] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 157.062396][ T5956] input input8: Device does not respond to id packet N [ 157.065080][ T5956] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 157.070617][ T5956] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 157.080700][ T5956] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 157.091098][ T5956] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 157.117864][ T5956] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input8 [ 157.190080][ T5956] usb 4-1: USB disconnect, device number 7 [ 164.217120][ C1] sched: DL replenish lagged too much [ 167.103453][ T7255] pim6reg: entered allmulticast mode [ 167.479121][ T7257] IPVS: Error joining to the multicast group [ 169.701183][ T992] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 169.906473][ T992] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 169.906503][ T992] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.906536][ T992] usb 3-1: config 0 has no interface number 0 [ 169.906585][ T992] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 169.906608][ T992] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 170.009378][ T992] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 170.009410][ T992] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.009431][ T992] usb 3-1: Product: syz [ 170.009446][ T992] usb 3-1: Manufacturer: syz [ 170.009461][ T992] usb 3-1: SerialNumber: syz [ 170.177686][ T992] usb 3-1: config 0 descriptor?? [ 170.531570][ T992] usbtouchscreen 3-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 170.640271][ T992] usb 3-1: USB disconnect, device number 7 [ 170.710694][ T38] audit: type=1326 audit(1757719499.496:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7278 comm="syz.3.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f342deba9 code=0x7ffc0000 [ 170.747689][ T38] audit: type=1326 audit(1757719499.546:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7278 comm="syz.3.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f342deba9 code=0x7ffc0000 [ 170.790901][ T38] audit: type=1326 audit(1757719499.596:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7278 comm="syz.3.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f1f342deba9 code=0x7ffc0000 [ 170.797812][ T38] audit: type=1326 audit(1757719499.596:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7278 comm="syz.3.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f342deba9 code=0x7ffc0000 [ 170.797875][ T38] audit: type=1326 audit(1757719499.596:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7278 comm="syz.3.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f342deba9 code=0x7ffc0000 [ 170.798671][ T38] audit: type=1326 audit(1757719499.596:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7278 comm="syz.3.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f1f342deba9 code=0x7ffc0000 [ 170.895124][ T38] audit: type=1326 audit(1757719499.596:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7278 comm="syz.3.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f342deba9 code=0x7ffc0000 [ 172.176311][ T7294] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 172.176373][ T7294] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 172.176475][ T7294] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 172.176623][ T7294] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 172.176677][ T7294] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 172.176743][ T7294] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 172.176793][ T7294] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 172.176898][ T7294] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 172.176949][ T7294] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 172.177003][ T7294] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 174.201338][ T7303] netlink: 24 bytes leftover after parsing attributes in process `syz.0.632'. [ 174.798954][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 174.813357][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 174.815834][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 174.837699][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 174.860968][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 176.981766][ T5159] Bluetooth: hci5: command tx timeout [ 179.070516][ T5159] Bluetooth: hci5: command tx timeout [ 181.140842][ T5159] Bluetooth: hci5: command tx timeout [ 183.220839][ T5159] Bluetooth: hci5: command tx timeout [ 187.896007][ T59] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 187.912218][ T59] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 187.914000][ T59] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 187.919880][ T59] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 187.945340][ T59] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 188.392494][ T59] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 188.394830][ T59] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 188.395899][ T59] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 188.397177][ T59] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 188.398002][ T59] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 189.720018][ T5159] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 189.737494][ T5159] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 189.738656][ T5159] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 189.740201][ T5159] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 189.766138][ T5159] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 190.020702][ T5159] Bluetooth: hci6: command tx timeout [ 190.422086][ T5159] Bluetooth: hci7: command tx timeout [ 191.781205][ T5159] Bluetooth: hci8: command tx timeout [ 192.110957][ T5159] Bluetooth: hci6: command tx timeout [ 192.209573][ T59] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 192.226236][ T59] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 192.227927][ T59] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 192.229299][ T59] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 192.230230][ T59] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 192.500879][ T5159] Bluetooth: hci7: command tx timeout [ 193.862720][ T5159] Bluetooth: hci8: command tx timeout [ 194.190439][ T5159] Bluetooth: hci6: command tx timeout [ 194.590759][ T5159] Bluetooth: hci7: command tx timeout [ 195.941036][ T5159] Bluetooth: hci8: command tx timeout [ 196.274239][ T5159] Bluetooth: hci6: command tx timeout [ 196.660557][ T5159] Bluetooth: hci7: command tx timeout [ 198.020629][ T5159] Bluetooth: hci8: command tx timeout [ 199.591058][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.591154][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 208.051543][ T59] Bluetooth: hci9: command tx timeout [ 210.110533][ T59] Bluetooth: hci9: command tx timeout [ 210.936685][ T7307] netlink: 12 bytes leftover after parsing attributes in process `syz.4.633'. [ 212.180724][ T59] Bluetooth: hci9: command tx timeout [ 214.260692][ T59] Bluetooth: hci9: command tx timeout [ 221.955298][ T5846] Bluetooth: hci3: command 0x0406 tx timeout [ 222.210190][ T5846] Bluetooth: hci2: command 0x0406 tx timeout [ 222.210250][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 235.236914][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 235.252415][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 235.255467][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 235.256897][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 235.257857][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 238.222598][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 238.267679][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 238.335083][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 238.416722][ T5159] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 238.417596][ T5159] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 248.820031][ T59] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 248.836736][ T59] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 248.837901][ T59] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 248.839962][ T59] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 248.864905][ T59] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 249.928598][ T5846] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 249.951195][ T5846] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 249.952284][ T5846] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 249.953911][ T5846] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 249.954774][ T5846] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 251.025978][ T5841] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 251.028572][ T5841] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 251.029637][ T5841] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 251.066214][ T5841] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 251.067543][ T5841] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 253.207971][ T7329] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 253.220247][ T7329] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 253.229960][ T7329] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 253.239062][ T7329] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 253.239987][ T7329] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 260.828309][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.828396][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.301136][ T7329] Bluetooth: hci0: command tx timeout [ 267.380620][ T7329] Bluetooth: hci0: command tx timeout [ 269.460965][ T7329] Bluetooth: hci0: command tx timeout [ 271.547484][ T7329] Bluetooth: hci0: command tx timeout [ 275.221042][ T5846] Bluetooth: hci12: command tx timeout [ 275.221383][ T5846] Bluetooth: hci11: command tx timeout [ 275.221507][ T5846] Bluetooth: hci10: command tx timeout [ 275.249587][ T5841] Bluetooth: hci13: command tx timeout [ 277.300646][ T5841] Bluetooth: hci13: command tx timeout [ 277.300699][ T5841] Bluetooth: hci11: command tx timeout [ 277.300722][ T5841] Bluetooth: hci10: command tx timeout [ 277.300745][ T5841] Bluetooth: hci12: command tx timeout [ 279.381017][ T5841] Bluetooth: hci12: command tx timeout [ 279.381054][ T5841] Bluetooth: hci10: command tx timeout [ 279.381077][ T5841] Bluetooth: hci11: command tx timeout [ 279.381098][ T5841] Bluetooth: hci13: command tx timeout [ 281.460592][ T5846] Bluetooth: hci13: command tx timeout [ 281.460625][ T5846] Bluetooth: hci10: command tx timeout [ 281.460649][ T5846] Bluetooth: hci12: command tx timeout [ 281.460714][ T5841] Bluetooth: hci11: command tx timeout [ 295.794046][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 295.817421][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 295.818678][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 295.839754][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 295.849308][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 310.421692][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 310.429836][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 310.459317][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 310.473333][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 310.474332][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 310.541322][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 310.548185][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 310.561142][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 310.582700][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 310.585284][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 311.566098][ T7329] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 311.582794][ T7329] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 311.583983][ T7329] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 311.585318][ T7329] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 311.586922][ T7329] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 313.308986][ T7329] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 313.327069][ T7366] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 313.328195][ T7366] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 313.329895][ T7366] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 313.353920][ T7366] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 322.279147][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.279241][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 346.581323][ T5159] Bluetooth: hci1: command tx timeout [ 348.660874][ T5159] Bluetooth: hci1: command tx timeout [ 350.741025][ T5159] Bluetooth: hci1: command tx timeout [ 352.820694][ T5159] Bluetooth: hci1: command tx timeout [ 356.942778][ T5841] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 356.963557][ T5841] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 356.964712][ T5841] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 356.985023][ T5841] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 356.989693][ T5841] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 358.123837][ T39] INFO: task syz.2.628:7295 blocked for more than 143 seconds. [ 358.123866][ T39] Not tainted syzkaller #0 [ 358.123877][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 358.123890][ T39] task:syz.2.628 state:D stack:25128 pid:7295 tgid:7295 ppid:5843 task_flags:0x400040 flags:0x00004006 [ 358.123958][ T39] Call Trace: [ 358.123965][ T39] [ 358.123979][ T39] __schedule+0x16f3/0x4c20 [ 358.124052][ T39] ? __lock_acquire+0xab9/0xd20 [ 358.124081][ T39] ? __pfx___schedule+0x10/0x10 [ 358.124127][ T39] ? schedu[ 358.124127][ T39] ? schedule+0x91/0x360 [ 358.124158][ T39] schedule+0x165/0x360 [ 358.124188][ T39] schedule_timeout+0x9a/0x270 [ 358.124216][ T39] ? __pfx_schedule_timeout+0x10/0x10 [ 358.124256][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 358.124285][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 358.124313][ T39] ? wait_for_completion+0x267/0x5d0 [ 358.124344][ T39] wait_for_completion+0x2bf/0x5d0 [ 358.124393][ T39] ? __pfx_wait_for_completion+0x10/0x10 [ 358.124430][ T39] ? __init_swait_queue_head+0xa9/0x150 [ 358.124459][ T39] rcu_barrier+0x463/0x570 [ 358.124488][ T39] ? __pfx_tun_chr_close+0x10/0x10 [ 358.124520][ T39] netdev_run_todo+0x327/0xea0 [ 358.124546][ T39] ? __pfx_netif_state_change+0x10/0x10 [ 358.124573][ T39] ? __pfx_netdev_run_todo+0x10/0x10 [ 358.124593][ T39] ? kasan_quarantine_put+0xdd/0x220 [ 358.124616][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 358.124655][ T39] ? netdev_state_change+0x1ca/0x220 [ 358.124686][ T39] ? __pfx_tun_chr_close+0x10/0x10 [ 358.124716][ T39] tun_chr_close+0x13f/0x1c0 [ 358.124747][ T39] __fput+0x458/0xa80 [ 358.124779][ T39] task_work_run+0x1d4/0x260 [ 358.124804][ T39] ? __pfx_task_work_run+0x10/0x10 [ 358.124831][ T39] ? exit_to_user_mode_loop+0x40/0x110 [ 358.124881][ T39] exit_to_user_mode_loop+0xec/0x110 [ 358.124911][ T39] do_syscall_64+0x2bd/0x3b0 [ 358.124931][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 358.124962][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.124984][ T39] ? clear_bhb_loop+0x60/0xb0 [ 358.125017][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.125039][ T39] RIP: 0033:0x7fd1b130eba9 [ 358.125062][ T39] RSP: 002b:00007ffdf5cc6408 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 358.125084][ T39] RAX: 0000000000000000 RBX: 000000000002a05d RCX: 00007fd1b130eba9 [ 358.125099][ T39] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 358.125112][ T39] RBP: 00007fd1b1557da0 R08: 0000000000000001 R09: 00000003f5cc66ff [ 358.125126][ T39] R10: 0000001b30c20000 R11: 0000000000000246 R12: 00007fd1b1555fac [ 358.125141][ T39] R13: 00007fd1b1555fa0 R14: ffffffffffffffff R15: 00007ffdf5cc6520 [ 358.125176][ T39] [ 358.125270][ T39] [ 358.125270][ T39] Showing all locks held in the system: [ 358.125282][ T39] 3 locks held by kworker/u8:0/12: [ 358.125294][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 358.125353][ T39] #1: ffffc90000117bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 358.125409][ T39] #2: ffffffff8ecd34f8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 358.125479][ T39] 2 locks held by rcuc/1/28: [ 358.125491][ T39] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 358.125548][ T39] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 358.125605][ T39] 2 locks held by ksoftirqd/1/30: [ 358.125617][ T39] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 358.125673][ T39] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 358.125731][ T39] 2 locks held by kworker/1:0/31: [ 358.125745][ T39] 1 lock held by khungtaskd/39: [ 358.125757][ T39] #0: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 358.125811][ T39] 4 locks held by kworker/u9:0/59: [ 358.125823][ T39] #0: ffff888031b4e138 ((wq_completion)hci14#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 358.125885][ T39] #1: ffffc9000125fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 358.125943][ T39] #2: ffff88806275c0a8 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xb1/0x1220 [ 358.126011][ T39] #3: ffffffff8ee3afd8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 [ 358.126091][ T39] 3 locks held by kworker/u8:14/3605: [ 358.126104][ T39] #0: ffff88802fb93938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 358.126161][ T39] #1: ffffc9000db3fbc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 358.126219][ T39] #2: ffffffff8ecd34f8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 358.126277][ T39] 2 locks held by getty/5597: [ 358.126289][ T39] #0: ffff88823bf708a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 358.126354][ T39] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 358.126410][ T39] 1 lock held by syz-executor/5839: [ 358.126423][ T39] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 358.126474][ T39] 4 locks held by kworker/u9:2/5841: [ 358.126487][ T39] #0: ffff8880512b0138 ((wq_completion)hci5#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 358.126549][ T39] #1: ffffc90004b67bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 358.126617][ T39] #2: ffff8880886480a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 358.126671][ T39] #3: ffffffff8ee3afd8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 358.126777][ T39] 4 locks held by kworker/u9:3/5846: [ 358.126789][ T39] #0: ffff88804a42b138 ((wq_completion)hci2#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 358.126844][ T39] #1: ffffc90004ba7bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 358.126915][ T39] #2: ffff88806dd240a8 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xb1/0x1220 [ 358.126972][ T39] #3: ffffffff8ee3afd8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 [ 358.127035][ T39] 4 locks held by kworker/u9:4/5847: [ 358.127047][ T39] #0: ffff88804a42d138 ((wq_completion)hci4#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 358.127112][ T39] #1: ffffc90004bb7bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 358.127167][ T39] #2: ffff88806b3500a8 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xb1/0x1220 [ 358.127230][ T39] #3: ffffffff8ee3afd8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 [ 358.127292][ T39] 7 locks held by kworker/1:8/7250: [ 358.127305][ T39] 1 lock held by syz.2.628/7295: [ 358.127316][ T39] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 358.127367][ T39] 1 lock held by syz.3.629/7297: [ 358.127378][ T39] #0: ffffffff8ecd34f8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 358.127442][ T39] 1 lock held by syz.0.632/7303: [ 358.127453][ T39] #0: ffffffff8ecd34f8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 358.127512][ T39] 1 lock held by syz.4.633/7307: [ 358.127524][ T39] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 358.127574][ T39] 4 locks held by syz-executor/7314: [ 358.127585][ T39] #0: ffff888030850e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 358.127639][ T39] #1: ffff8880308500a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 358.127697][ T39] #2: ffffffff8ee3afd8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 358.127752][ T39] #3: ffff88803e632b58 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 358.127818][ T39] 2 locks held by syz-executor/7320: [ 358.127830][ T39] #0: ffff88806565ce80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 358.127884][ T39] #1: ffff88806565c0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 358.127942][ T39] 4 locks held by kworker/1:13/7324: [ 358.127955][ T39] 1 lock held by syz-executor/7327: [ 358.127966][ T39] #0: ffffffff8ecd34f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 358.128028][ T39] 1 lock held by syz-executor/7331: [ 358.128040][ T39] #0: ffffffff8ecd34f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 358.128097][ T39] 1 lock held by syz-executor/7334: [ 358.128109][ T39] #0: ffffffff8ecd34f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 358.128174][ T39] 2 locks held by kworker/1:17/7339: [ 358.128190][ T39] 1 lock held by syz-executor/7342: [ 358.128201][ T39] #0: ffffffff8ecd34f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 358.128254][ T39] 1 lock held by syz-executor/7347: [ 358.128266][ T39] #0: ffffffff8ecd34f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 358.128317][ T39] 1 lock held by syz-executor/7352: [ 358.128328][ T39] #0: ffffffff8ecd34f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 358.128376][ T39] 1 lock held by syz-executor/7356: [ 358.128387][ T39] #0: ffffffff8ecd34f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 358.128435][ T39] 1 lock held by syz-executor/7357: [ 358.128446][ T39] #0: ffffffff8ecd34f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 358.128493][ T39] 1 lock held by syz-executor/7361: [ 358.128504][ T39] #0: ffffffff8ecd34f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 358.128551][ T39] 1 lock held by syz-executor/7364: [ 358.128562][ T39] #0: ffffffff8ecd34f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 358.128606][ T39] 4 locks held by kworker/u9:7/7366: [ 358.128616][ T39] #0: ffff888023936938 ((wq_completion)hci15#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 358.128670][ T39] #1: ffffc90003be7bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 358.128718][ T39] #2: ffff88807c3f80a8 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xb1/0x1220 [ 358.128771][ T39] #3: ffffffff8ee3afd8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 [ 358.128842][ T39] 1 lock held by syz-executor/7369: [ 358.128854][ T39] #0: ffffffff8ecd34f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 358.128905][ T39] [ 358.128910][ T39] ============================================= [ 358.128910][ T39] [ 358.128930][ T39] NMI backtrace for cpu 0 [ 358.128957][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 358.128982][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 358.128994][ T39] Call Trace: [ 358.129008][ T39] [ 358.129017][ T39] dump_stack_lvl+0x189/0x250 [ 358.129052][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 358.129084][ T39] ? __pfx__printk+0x10/0x10 [ 358.129120][ T39] nmi_cpu_backtrace+0x39e/0x3d0 [ 358.129151][ T39] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 358.129180][ T39] ? __pfx__printk+0x10/0x10 [ 358.129212][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 358.129242][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 358.129272][ T39] watchdog+0xf93/0xfe0 [ 358.129305][ T39] ? watchdog+0x1de/0xfe0 [ 358.129339][ T39] kthread+0x70e/0x8a0 [ 358.129374][ T39] ? __pfx_watchdog+0x10/0x10 [ 358.129401][ T39] ? __pfx_kthread+0x10/0x10 [ 358.129438][ T39] ? __pfx_kthread+0x10/0x10 [ 358.129471][ T39] ret_from_fork+0x439/0x7d0 [ 358.129502][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 358.129536][ T39] ? __switch_to_asm+0x39/0x70 [ 358.129555][ T39] ? __switch_to_asm+0x33/0x70 [ 358.129574][ T39] ? __pfx_kthread+0x10/0x10 [ 358.129607][ T39] ret_from_fork_asm+0x1a/0x30 [ 358.129644][ T39] [ 358.129652][ T39] Sending NMI from CPU 0 to CPUs 1: [ 358.129684][ C1] NMI backtrace for cpu 1 [ 358.129698][ C1] CPU: 1 UID: 0 PID: 7250 Comm: kworker/1:8 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 358.129718][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 358.129729][ C1] Workqueue: events_power_efficient neigh_periodic_work [ 358.129755][ C1] RIP: 0010:trace_hardirqs_off+0x19/0x40 [ 358.129779][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 53 48 8b 5c 24 08 48 89 df e8 7e cb 30 09 65 8b 05 c7 25 31 10 <85> c0 74 07 5b e9 7d 78 34 09 cc 65 c7 05 b1 25 31 10 01 00 00 00 [ 358.129793][ C1] RSP: 0018:ffffc9000d906230 EFLAGS: 00000086 [ 358.129807][ C1] RAX: 0000000000000000 RBX: ffffffff8afa5062 RCX: 9bd156e89bcc9b00 [ 358.129820][ C1] RDX: ffff888027400000 RSI: ffffffff8d03a8d9 RDI: ffffffff8b621500 [ 358.129833][ C1] RBP: ffffc9000d9062d0 R08: 0000000000000000 R09: ffffffff88e071bc [ 358.129845][ C1] R10: dffffc0000000000 R11: ffffed1006a5ac16 R12: dffffc0000000000 [ 358.129858][ C1] R13: ffffc9000d906328 R14: 0000000000000a06 R15: 1ffff92001b20c48 [ 358.129871][ C1] FS: 0000000000000000(0000) GS:ffff8881269bd000(0000) knlGS:0000000000000000 [ 358.129885][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 358.129897][ C1] CR2: 00007f8eaaf8ed00 CR3: 000000000d7a6000 CR4: 00000000003526f0 [ 358.129913][ C1] Call Trace: [ 358.129919][ C1] [ 358.129944][ C1] _raw_spin_lock_irqsave+0x82/0xf0 [ 358.129971][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 358.130006][ C1] rt_spin_lock+0x144/0x2c0 [ 358.130028][ C1] ? __pfx___skb_flow_dissect+0x10/0x10 [ 358.130045][ C1] ? __pfx_rt_spin_lock+0x10/0x10 [ 358.130067][ C1] ? skb_network_protocol+0x508/0x760 [ 358.130089][ C1] enqueue_to_backlog+0x15c/0xda0 [ 358.130110][ C1] ? __lock_acquire+0xab9/0xd20 [ 358.130141][ C1] netif_rx_internal+0x130/0x560 [ 358.130169][ C1] ? __pfx_netif_rx_internal+0x10/0x10 [ 358.130198][ C1] ? rcu_is_watching+0x15/0xb0 [ 358.130228][ C1] __netif_rx+0xaa/0x110 [ 358.130253][ C1] loopback_xmit+0x47a/0x6f0 [ 358.130281][ C1] dev_hard_start_xmit+0x2f0/0x870 [ 358.130307][ C1] __dev_queue_xmit+0x1b50/0x3b70 [ 358.130337][ C1] ? __dev_queue_xmit+0x26f/0x3b70 [ 358.130364][ C1] ? synproxy_pernet+0x23/0x240 [ 358.130394][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 358.130412][ C1] ? synproxy_pernet+0x23/0x240 [ 358.130438][ C1] ? synproxy_pernet+0x23/0x240 [ 358.130463][ C1] ? synproxy_pernet+0x23/0x240 [ 358.130490][ C1] ? __asan_memset+0x22/0x50 [ 358.130512][ C1] ? __lock_acquire+0xab9/0xd20 [ 358.130541][ C1] ? ip_output+0x2a1/0x3c0 [ 358.130562][ C1] ? ip_finish_output2+0xbae/0x11d0 [ 358.130585][ C1] ip_finish_output2+0xd5a/0x11d0 [ 358.130606][ C1] ? ip_finish_output2+0x452/0x11d0 [ 358.130642][ C1] ? __pfx_ip_finish_output2+0x10/0x10 [ 358.130664][ C1] ? ip_skb_dst_mtu+0x866/0xab0 [ 358.130683][ C1] ? ip_finish_output+0x33a/0x3f0 [ 358.130702][ C1] ip_output+0x2a1/0x3c0 [ 358.130719][ C1] ? ip_output+0x60/0x3c0 [ 358.130737][ C1] synproxy_send_client_synack+0x8bb/0xe20 [ 358.130771][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 358.130797][ C1] ? nft_log_dump+0x148/0x4a0 [ 358.130821][ C1] ? synproxy_pernet+0x45/0x270 [ 358.130842][ C1] nft_synproxy_eval_v4+0x36e/0x560 [ 358.130864][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 358.130884][ C1] ? nf_ip_checksum+0x13c/0x510 [ 358.130905][ C1] nft_synproxy_do_eval+0x345/0x570 [ 358.130926][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 358.130954][ C1] nft_do_chain+0x409/0x1920 [ 358.130979][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 358.131000][ C1] ? __lock_acquire+0xab9/0xd20 [ 358.131040][ C1] nft_do_chain_inet+0x25d/0x340 [ 358.131057][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 358.131075][ C1] ? __lock_acquire+0xab9/0xd20 [ 358.131103][ C1] ? NF_HOOK+0x9a/0x3a0 [ 358.131127][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 358.131145][ C1] nf_hook_slow+0xc2/0x220 [ 358.131173][ C1] NF_HOOK+0x206/0x3a0 [ 358.131196][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 358.131220][ C1] ? NF_HOOK+0x9a/0x3a0 [ 358.131243][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 358.131270][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 358.131296][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 358.131322][ C1] ? skb_dst+0x4f/0xd0 [ 358.131345][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 358.131371][ C1] NF_HOOK+0x30c/0x3a0 [ 358.131395][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 358.131419][ C1] ? NF_HOOK+0x9a/0x3a0 [ 358.131441][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 358.131466][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 358.131496][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 358.131518][ C1] __netif_receive_skb+0x143/0x380 [ 358.131539][ C1] ? rt_spin_unlock+0x65/0x80 [ 358.131562][ C1] ? process_backlog+0x27b/0x900 [ 358.131585][ C1] process_backlog+0x31e/0x900 [ 358.131614][ C1] __napi_poll+0xb3/0x540 [ 358.131638][ C1] net_rx_action+0x707/0xe00 [ 358.131660][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 358.131687][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 358.131713][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 358.131743][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 358.131768][ C1] handle_softirqs+0x22f/0x710 [ 358.131795][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 358.131823][ C1] __local_bh_enable_ip+0x179/0x270 [ 358.131845][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 358.131868][ C1] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 358.131888][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 358.131920][ C1] ? neigh_periodic_work+0x57/0xe90 [ 358.131945][ C1] neigh_periodic_work+0xc37/0xe90 [ 358.131971][ C1] ? neigh_periodic_work+0x57/0xe90 [ 358.131994][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 358.132018][ C1] process_scheduled_works+0xade/0x17b0 [ 358.132055][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 358.132086][ C1] worker_thread+0x8a0/0xda0 [ 358.132122][ C1] kthread+0x70e/0x8a0 [ 358.132151][ C1] ? __pfx_worker_thread+0x10/0x10 [ 358.132172][ C1] ? __pfx_kthread+0x10/0x10 [ 358.132201][ C1] ? __pfx_kthread+0x10/0x10 [ 358.132228][ C1] ret_from_fork+0x439/0x7d0 [ 358.132258][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 358.132283][ C1] ? __switch_to_asm+0x39/0x70 [ 358.132299][ C1] ? __switch_to_asm+0x33/0x70 [ 358.132314][ C1] ? __pfx_kthread+0x10/0x10 [ 358.132341][ C1] ret_from_fork_asm+0x1a/0x30 [ 358.132366][ C1] [ 358.230560][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 358.230584][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 358.230609][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 358.230622][ T39] Call Trace: [ 358.230631][ T39] [ 358.230642][ T39] dump_stack_lvl+0x99/0x250 [ 358.230679][ T39] ? __asan_memcpy+0x40/0x70 [ 358.230704][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 358.230734][ T39] ? __pfx__printk+0x10/0x10 [ 358.230772][ T39] vpanic+0x281/0x750 [ 358.230808][ T39] ? __pfx_vpanic+0x10/0x10 [ 358.230838][ T39] ? preempt_schedule+0xae/0xc0 [ 358.230871][ T39] ? preempt_schedule_common+0x83/0xd0 [ 358.230909][ T39] panic+0xb9/0xc0 [ 358.230940][ T39] ? __pfx_panic+0x10/0x10 [ 358.230973][ T39] ? preempt_schedule_thunk+0x16/0x30 [ 358.231016][ T39] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 358.231047][ T39] watchdog+0xfd2/0xfe0 [ 358.231081][ T39] ? watchdog+0x1de/0xfe0 [ 358.231115][ T39] kthread+0x70e/0x8a0 [ 358.231157][ T39] ? __pfx_watchdog+0x10/0x10 [ 358.231184][ T39] ? __pfx_kthread+0x10/0x10 [ 358.231221][ T39] ? __pfx_kthread+0x10/0x10 [ 358.231255][ T39] ret_from_fork+0x439/0x7d0 [ 358.231286][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 358.231320][ T39] ? __switch_to_asm+0x39/0x70 [ 358.231339][ T39] ? __switch_to_asm+0x33/0x70 [ 358.231358][ T39] ? __pfx_kthread+0x10/0x10 [ 358.231392][ T39] ret_from_fork_asm+0x1a/0x30 [ 358.231429][ T39] [ 358.231774][ T39] Kernel Offset: disabled