last executing test programs: 30.227890396s ago: executing program 0 (id=3436): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "000400"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="00f5db"], 0x0, 0x0, 0x0, 0x0}) 28.310692511s ago: executing program 2 (id=3458): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000a40)=ANY=[@ANYBLOB='-4'], 0xc) 28.140647566s ago: executing program 2 (id=3459): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x2000}) 27.979521426s ago: executing program 2 (id=3460): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x5) 27.793688915s ago: executing program 2 (id=3461): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000100900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000010000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x0) 27.477397954s ago: executing program 2 (id=3464): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="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"], 0x270}}, 0x0) 27.222026051s ago: executing program 2 (id=3466): r0 = syz_io_uring_setup(0x1f87, &(0x7f0000000180)={0x0, 0x7270, 0x13580}, &(0x7f0000000080)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_WRITEV={0x2, 0x3, 0x0, @fd_index=0x3, 0x7, 0x0, 0x0, 0xb}) io_uring_enter(r0, 0x45e0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x3, 0x7, 0x0, 0x0) 26.996784659s ago: executing program 0 (id=3468): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000180)={0x18, 0x0, {0x14, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, 'bond_slave_1\x00'}}, 0x1e) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x0) 26.501893433s ago: executing program 0 (id=3469): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) syz_emit_ethernet(0x86, &(0x7f00000000c0)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0x7f000000, @empty=0xe0000001}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "fdcdae25a7a296872a8a5290e48e30acf8afc7e67d70a62c979cefa10a0028bd", "ae0000000000000000e400", {"35f3c07eeca4a20a9858ac1500", "63081fe8fe001a08ed082ad7121d696f"}}}}}}}, 0x0) 26.263774297s ago: executing program 0 (id=3470): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000001980)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000023000b02d25a806f8c6394f91f24fc60", 0x14}], 0x1}, 0x0) 25.951890708s ago: executing program 0 (id=3473): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000200), 0x4) 25.657319387s ago: executing program 0 (id=3476): r0 = io_uring_setup(0x260d, &(0x7f0000001300)={0x0, 0x0, 0x1046, 0x0, 0x25c}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000002200000c0000000000fee300760000000f8a49dc75000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r1}, 0x10) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0x19, 0x0, 0x0) 13.401459587s ago: executing program 1 (id=3535): socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) 13.009276907s ago: executing program 1 (id=3539): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0xc001001b}]}) 12.682455166s ago: executing program 4 (id=3540): r0 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) unshare(0x28000600) signalfd4(r0, &(0x7f0000000080), 0x8, 0x0) 11.639864721s ago: executing program 4 (id=3541): r0 = socket(0x840000000002, 0x3, 0x100) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='macvlan0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) 10.757199919s ago: executing program 4 (id=3542): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000001540)=[{0x0}, {&(0x7f00000002c0)=""/59, 0x3b}, {0x0}], 0x3}}], 0x1, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 10.75466304s ago: executing program 1 (id=3550): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000005c0)='contention_end\x00', r0}, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000000440)={0x80}) 10.468634943s ago: executing program 1 (id=3543): socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 9.951895802s ago: executing program 1 (id=3545): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000000000000480000000000000008"]) 9.373293681s ago: executing program 4 (id=3547): creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}}) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 9.113236361s ago: executing program 4 (id=3548): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000002c0)={0xc, r1}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f00000000c0)={0x18, 0x0, 0x4000}) 8.822971678s ago: executing program 4 (id=3551): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newrule={0x30, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7, 0x12}, [@FRA_SRC={0x14, 0x2, @dev}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) 7.860487001s ago: executing program 1 (id=3552): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_ADDRESS={0x14, 0x1, @empty}, @IFA_RT_PRIORITY={0x8, 0x9, 0xc3f}]}, 0x48}}, 0x0) 3.712547063s ago: executing program 3 (id=3557): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001a80)={0x4, 0x0, &(0x7f0000001900)=[@enter_looper], 0x1, 0x0, &(0x7f0000001a40)="a1"}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.939070311s ago: executing program 3 (id=3558): ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)}) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x0, 0x0, 0x0, "5debca561a5fbf61048955f6f876b2ff"}) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r0, r0, r0}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha1-ssse3\x00'}}) 2.651011963s ago: executing program 3 (id=3559): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) fcntl$lock(r0, 0x5, &(0x7f0000000700)={0x2, 0x2, 0x5, 0x4}) 2.370141425s ago: executing program 3 (id=3560): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = syz_open_dev$media(&(0x7f0000000000), 0x6, 0xa400) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000fc0)=[{}, {}]}) 348.706158ms ago: executing program 3 (id=3561): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000200)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0xc01464a6, &(0x7f0000000280)={r2}) 0s ago: executing program 3 (id=3562): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) kernel console output (not intermixed with test programs): "rtlwifi/rtl8712u.bin" [ 207.884225][ T5269] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 208.022447][T10622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.066999][ T5269] usb 4-1: Using ep0 maxpacket: 8 [ 208.075141][T10622] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.082969][ T8] usb 2-1: USB disconnect, device number 26 [ 208.086126][ T5269] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 208.110657][ T5269] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 208.129728][ T5269] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 208.150702][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.157930][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.166867][ T5269] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 208.180785][ T5269] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 208.200032][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.207227][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.219017][ T5269] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 208.256641][ T5269] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.282471][ T5269] usb 4-1: config 0 descriptor?? [ 208.328142][ T5232] Bluetooth: hci5: urb ffff88814aabc300 submission failed (90) [ 208.367051][ T5232] Bluetooth: hci3: command tx timeout [ 208.541504][T10622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.543256][ T5223] usb 4-1: USB disconnect, device number 30 [ 208.628480][T10622] veth0_vlan: entered promiscuous mode [ 208.651512][T10622] veth1_vlan: entered promiscuous mode [ 208.732617][T10884] netlink: 'syz.1.2457': attribute type 10 has an invalid length. [ 208.768607][T10884] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 208.809881][T10884] team0: Port device netdevsim0 added [ 208.817562][T10887] netlink: 'syz.1.2457': attribute type 10 has an invalid length. [ 208.852942][T10887] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 208.901340][T10887] team0: Port device netdevsim0 removed [ 208.934565][T10887] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 208.958830][T10622] veth0_macvtap: entered promiscuous mode [ 208.986810][T10622] veth1_macvtap: entered promiscuous mode [ 209.032927][T10622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.063917][T10622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.094450][T10622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.125640][T10622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.148886][T10622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.174390][T10622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.195059][T10622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.221993][T10622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.238774][T10622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.272034][T10622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.283365][T10622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.305631][T10622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.338298][T10622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.356277][T10622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.382051][T10622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.404152][T10622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.414835][T10622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.426710][T10622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.443288][T10622] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.454603][T10622] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.464133][T10622] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.473036][T10622] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.704450][ T3009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.748272][ T3009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.806604][ T5269] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 209.820902][ T3009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.852164][ T3009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.979119][ T5269] usb 4-1: Using ep0 maxpacket: 16 [ 209.990654][ T5269] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.008203][ T5269] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.023861][ T5269] usb 4-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 210.077773][ T5227] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 210.085503][ T5269] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.149120][ T5269] usb 4-1: config 0 descriptor?? [ 210.256812][ T5227] usb 3-1: Using ep0 maxpacket: 32 [ 210.264596][ T5227] usb 3-1: config 0 has no interfaces? [ 210.270451][ T51] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 210.365606][ T5227] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 210.381064][ T5227] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 210.394663][ T5227] usb 3-1: Product: syz [ 210.399072][ T5227] usb 3-1: Manufacturer: syz [ 210.406248][ T5227] usb 3-1: config 0 descriptor?? [ 210.466373][ T51] usb 1-1: Using ep0 maxpacket: 16 [ 210.477922][ T51] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.489267][ T51] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 210.501368][ T51] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 210.511165][ T51] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 210.521106][ T51] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 210.535757][ T51] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 210.545116][ T51] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 210.563027][ T51] usb 1-1: Manufacturer: syz [ 210.574256][ T51] usb 1-1: config 0 descriptor?? [ 210.589672][ T5269] glorious 0003:22D4:1503.0045: hidraw0: USB HID v0.00 Device [Glorious Model I] on usb-dummy_hcd.3-1/input0 [ 210.627811][ T5269] usb 3-1: USB disconnect, device number 27 [ 210.790228][ T5227] usb 4-1: USB disconnect, device number 31 [ 210.957600][ T51] rc_core: IR keymap rc-hauppauge not found [ 210.963567][ T51] Registered IR keymap rc-empty [ 210.982046][ T51] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 211.012487][ T51] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 211.047007][ T51] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 211.067829][ T51] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input50 [ 211.099770][ T51] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 211.130946][ T51] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 211.177433][ T51] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 211.216569][ T51] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 211.256838][ T51] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 211.286490][ T51] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 211.307119][ T51] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 211.336435][ T51] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 211.376911][ T51] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 211.406326][ T51] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 211.432022][ T51] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 211.447511][ T51] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 211.469914][ T51] usb 1-1: USB disconnect, device number 30 [ 211.916202][ T5227] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 212.082871][ T5227] usb 4-1: too many configurations: 65, using maximum allowed: 8 [ 212.098676][ T5227] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.119757][ T5227] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.151409][ T5227] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.175042][ T5227] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.201004][ T5227] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.218500][ T5227] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.253912][ T5227] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.275376][ T5227] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.306323][ T5227] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.326823][T11031] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2492'. [ 212.331788][ T5227] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.373059][ T5227] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.411669][ T5227] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.467200][ T5227] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.486190][ T5227] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.526754][ T5227] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.531779][T11042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2495'. [ 212.563411][ T5227] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.622946][ T5227] usb 4-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 212.662948][ T5227] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.673581][ T5227] usb 4-1: config 0 descriptor?? [ 212.782730][T11050] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2498'. [ 212.792012][T11050] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2498'. [ 212.854667][T11052] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2501'. [ 212.876769][T11052] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.886564][T11052] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.144541][ T5227] cypress 0003:04B4:07B1.0046: unknown main item tag 0x0 [ 213.155091][ T5227] cypress 0003:04B4:07B1.0046: unknown main item tag 0x0 [ 213.166799][T11062] tap0: tun_chr_ioctl cmd 1074025677 [ 213.175620][T11062] tap0: linktype set to 780 [ 213.186351][ T5227] cypress 0003:04B4:07B1.0046: unknown main item tag 0x0 [ 213.203961][ T5227] cypress 0003:04B4:07B1.0046: hidraw0: USB HID v0.00 Device [HID 04b4:07b1] on usb-dummy_hcd.3-1/input0 [ 213.415710][ T5227] usb 4-1: USB disconnect, device number 32 [ 213.890155][T11097] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2520'. [ 214.236304][ T5223] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 214.400659][T11117] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2528'. [ 214.428187][ T5223] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 214.446469][ T5223] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 214.481883][ T5223] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 214.509150][ T5223] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 214.542508][ T5223] usb 3-1: SerialNumber: syz [ 214.775012][ T5223] usb 3-1: 0:2 : does not exist [ 214.843298][ T5223] usb 3-1: USB disconnect, device number 28 [ 214.928023][ T5235] udevd[5235]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 215.019380][T11127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2532'. [ 215.447270][T11139] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 215.621715][T11147] sch_tbf: burst 4 is lower than device lo mtu (65550) ! [ 215.789831][T11154] pimreg3: entered allmulticast mode [ 215.950675][T11166] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2550'. [ 216.097096][T11176] tap0: tun_chr_ioctl cmd 1074025677 [ 216.102877][T11176] tap0: linktype set to 8 [ 216.124137][T11178] sch_tbf: burst 4 is lower than device lo mtu (65550) ! [ 216.456415][ T5223] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 216.547302][T11201] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2568'. [ 216.564872][T11201] openvswitch: netlink: VXLAN extension 43 out of range max 1 [ 216.618748][ T5223] usb 3-1: Using ep0 maxpacket: 8 [ 216.626253][ T5223] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 216.641177][ T5223] usb 3-1: config 0 has no interface number 0 [ 216.651503][T11208] sch_tbf: burst 4 is lower than device lo mtu (65550) ! [ 216.652689][ T5223] usb 3-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=f7.92 [ 216.681747][ T5223] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.693107][ T5223] usb 3-1: Product: syz [ 216.702100][ T5223] usb 3-1: Manufacturer: syz [ 216.713146][ T5223] usb 3-1: SerialNumber: syz [ 216.739389][ T5223] usb 3-1: config 0 descriptor?? [ 216.772209][ T5223] usb 3-1: selecting invalid altsetting 2 [ 216.789197][ T5223] i2c-cp2615 3-1:0.1: probe with driver i2c-cp2615 failed with error -22 [ 216.802336][T11213] netlink: 'syz.4.2574': attribute type 1 has an invalid length. [ 216.894203][T11219] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.903796][T11219] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.913685][T11219] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.923002][T11219] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.934271][T11219] vxlan0: entered promiscuous mode [ 216.940449][T11219] vxlan0: entered allmulticast mode [ 217.069612][ T5379] usb 3-1: USB disconnect, device number 29 [ 217.189289][ T29] audit: type=1326 audit(1728902944.014:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11234 comm="syz.0.2585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c9f77dff9 code=0x7ffc0000 [ 217.255757][ T29] audit: type=1326 audit(1728902944.014:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11234 comm="syz.0.2585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c9f77dff9 code=0x7ffc0000 [ 217.306537][ T29] audit: type=1326 audit(1728902944.054:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11234 comm="syz.0.2585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9c9f77dff9 code=0x7ffc0000 [ 217.352984][ T29] audit: type=1326 audit(1728902944.054:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11234 comm="syz.0.2585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c9f77dff9 code=0x7ffc0000 [ 217.384197][ T29] audit: type=1326 audit(1728902944.054:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11234 comm="syz.0.2585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c9f77dff9 code=0x7ffc0000 [ 217.420384][ T29] audit: type=1326 audit(1728902944.054:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11234 comm="syz.0.2585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f9c9f77dff9 code=0x7ffc0000 [ 217.420567][T11245] netlink: 'syz.0.2589': attribute type 1 has an invalid length. [ 217.449290][ T29] audit: type=1326 audit(1728902944.054:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11234 comm="syz.0.2585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c9f77dff9 code=0x7ffc0000 [ 217.490002][ T29] audit: type=1326 audit(1728902944.054:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11234 comm="syz.0.2585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c9f77dff9 code=0x7ffc0000 [ 217.826228][ T5324] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 217.978290][ T5324] usb 2-1: Using ep0 maxpacket: 16 [ 217.988020][ T5324] usb 2-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 218.002138][ T5324] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.014757][ T5324] usb 2-1: Product: syz [ 218.022709][ T5324] usb 2-1: Manufacturer: syz [ 218.030575][ T5324] usb 2-1: SerialNumber: syz [ 218.036323][ T5379] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 218.038672][ T5324] usb 2-1: config 0 descriptor?? [ 218.057666][ T5324] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 218.219429][ T5379] usb 3-1: Using ep0 maxpacket: 16 [ 218.232806][ T5379] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.255990][ T5379] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.279320][ T5379] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 218.303179][ T5379] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 218.323985][ T5379] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.353763][ T5379] usb 3-1: config 0 descriptor?? [ 218.406612][ T25] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 218.560266][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 218.582534][ T25] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 218.599219][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.613272][ T25] usb 1-1: Product: syz [ 218.621944][ T25] usb 1-1: Manufacturer: syz [ 218.629518][ T25] usb 1-1: SerialNumber: syz [ 218.641281][ T25] usb 1-1: config 0 descriptor?? [ 218.688882][ T5324] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 218.709494][ T5324] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 218.724607][T11302] wg1 speed is unknown, defaulting to 1000 [ 218.733699][T11302] wg1 speed is unknown, defaulting to 1000 [ 218.735949][ T5324] usb 2-1: media controller created [ 218.740294][T11302] wg1 speed is unknown, defaulting to 1000 [ 218.769490][ T5324] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 218.778892][ T5379] microsoft 0003:045E:07DA.0047: item 0 4 0 8 parsing failed [ 218.794616][ T5324] gp8psk_fe: Frontend revision 1 attached [ 218.804618][ T5379] microsoft 0003:045E:07DA.0047: parse failed [ 218.804937][ T5324] usb 2-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 218.823269][ T5379] microsoft 0003:045E:07DA.0047: probe with driver microsoft failed with error -22 [ 218.825535][ T5324] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 218.877481][ T25] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 218.923337][ T5324] gp8psk: usb in 138 operation failed. [ 218.936206][ T5324] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 218.952679][ T5324] gp8psk: found Genpix USB device pID = 201 (hex) [ 218.959671][T11307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2618'. [ 218.981436][ T5324] usb 2-1: USB disconnect, device number 27 [ 219.040235][ T5227] usb 3-1: USB disconnect, device number 30 [ 219.046941][T11302] infiniband syz1: set active [ 219.052910][T11302] infiniband syz1: added wg1 [ 219.058555][ T8] wg1 speed is unknown, defaulting to 1000 [ 219.155720][T11302] RDS/IB: syz1: added [ 219.177106][T11302] smc: adding ib device syz1 with port count 1 [ 219.181829][ T5324] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 219.183565][T11302] smc: ib device syz1 port 1 has pnetid [ 219.210484][ T8] wg1 speed is unknown, defaulting to 1000 [ 219.231515][T11302] wg1 speed is unknown, defaulting to 1000 [ 219.328885][T11302] wg1 speed is unknown, defaulting to 1000 [ 219.408047][T11302] wg1 speed is unknown, defaulting to 1000 [ 219.489677][ T25] usb write operation failed. (-71) [ 219.507142][ T25] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 219.526508][ T25] dvbdev: DVB: registering new adapter (Terratec H7) [ 219.533247][ T25] usb 1-1: media controller created [ 219.540070][T11302] wg1 speed is unknown, defaulting to 1000 [ 219.546818][ T25] usb read operation failed. (-71) [ 219.556182][ T25] usb write operation failed. (-71) [ 219.568089][ T25] dvb_usb_az6007 1-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 219.597562][ T25] usb 1-1: USB disconnect, device number 31 [ 219.714616][T11302] wg1 speed is unknown, defaulting to 1000 [ 219.952073][T11320] xt_CT: No such helper "syz0" [ 220.037783][T11327] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2627'. [ 220.547069][ T25] kernel write not supported for file /snd/seq (pid: 25 comm: kworker/1:0) [ 220.716514][ T5379] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 220.880618][ T5379] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 220.891106][ T5379] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.899828][ T5379] usb 2-1: Product: syz [ 220.911681][ T5379] usb 2-1: Manufacturer: syz [ 220.926669][ T5379] usb 2-1: SerialNumber: syz [ 220.943513][ T5379] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 220.977622][ T5223] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 221.160604][T11383] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 221.182275][ T5232] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 221.271105][ T29] audit: type=1326 audit(1728902948.094:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11387 comm="syz.3.2655" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f74e357dff9 code=0x0 [ 221.513649][T11400] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 222.223811][T11419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2667'. [ 222.286670][ T5223] usb 2-1: Service connection timeout for: 256 [ 222.293181][ T5223] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 222.305346][T11421] bond1: entered promiscuous mode [ 222.327916][ T5223] ath9k_htc: Failed to initialize the device [ 222.332246][T11421] bond1: entered allmulticast mode [ 222.342632][ T5223] usb 2-1: ath9k_htc: USB layer deinitialized [ 222.362984][T11421] 8021q: adding VLAN 0 to HW filter on device bond1 [ 222.512274][T11421] bond1 (unregistering): Released all slaves [ 222.561657][ T5223] usb 2-1: USB disconnect, device number 28 [ 222.664586][T11432] block nbd2: NBD_DISCONNECT [ 224.597906][ T29] audit: type=1326 audit(1728902951.424:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11508 comm="syz.1.2704" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0107f7dff9 code=0x0 [ 225.245979][T11518] pimreg: entered allmulticast mode [ 225.292072][T11517] pimreg: left allmulticast mode [ 225.414388][T11531] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2712'. [ 225.616462][ T25] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 225.677929][ T5227] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 225.721635][T11546] netlink: 'syz.0.2721': attribute type 1 has an invalid length. [ 225.836379][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 225.843856][ T5227] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 225.856502][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.873396][ T5227] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 225.884756][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.903630][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 225.930097][ T5227] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 225.942282][ T5227] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 225.954055][ T25] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 225.965839][ T5227] usb 4-1: SerialNumber: syz [ 225.974469][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.001131][ T25] usb 3-1: config 0 descriptor?? [ 226.232210][ T5227] usb 4-1: 0:2 : does not exist [ 226.271727][ T5227] usb 4-1: USB disconnect, device number 33 [ 226.429992][ T25] microsoft 0003:045E:07DA.0048: unknown main item tag 0x0 [ 226.446492][ T25] microsoft 0003:045E:07DA.0048: unknown main item tag 0x0 [ 226.467788][ T5235] udevd[5235]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 226.492587][ T25] microsoft 0003:045E:07DA.0048: unknown main item tag 0x0 [ 226.500113][ T25] microsoft 0003:045E:07DA.0048: unknown main item tag 0x0 [ 226.507707][ T29] audit: type=1326 audit(1728902953.234:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11555 comm="syz.4.2725" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa49397dff9 code=0x0 [ 226.544943][ T25] microsoft 0003:045E:07DA.0048: unknown main item tag 0x0 [ 226.565190][ T25] microsoft 0003:045E:07DA.0048: unknown main item tag 0x0 [ 226.578127][ T25] microsoft 0003:045E:07DA.0048: unknown main item tag 0x0 [ 226.585666][ T25] microsoft 0003:045E:07DA.0048: unknown main item tag 0x0 [ 226.597426][ T25] microsoft 0003:045E:07DA.0048: unknown main item tag 0x0 [ 226.618757][ T25] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0048/input/input51 [ 226.637783][ T25] microsoft 0003:045E:07DA.0048: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 226.661269][ T25] usb 3-1: USB disconnect, device number 31 [ 227.606640][ T25] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 227.797082][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 227.838945][ T25] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 227.869689][ T25] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 227.884872][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.909679][ T25] usb 4-1: Product: syz [ 227.921048][ T25] usb 4-1: Manufacturer: syz [ 227.925821][ T25] usb 4-1: SerialNumber: syz [ 227.953030][ T25] usb 4-1: config 0 descriptor?? [ 227.979854][ T25] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 228.585693][ T25] gspca_zc3xx: reg_w_i err -71 [ 228.728769][T11616] input: syz1 as /devices/virtual/input/input52 [ 229.004860][T11634] @: renamed from vlan0 (while UP) [ 229.068745][T11640] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2760'. [ 229.176961][ T25] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 229.183345][ T25] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 229.216681][ T25] usb 4-1: USB disconnect, device number 34 [ 229.238439][T11649] netlink: 'syz.2.2764': attribute type 14 has an invalid length. [ 229.259362][T11649] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2764'. [ 229.325403][T11653] input: syz1 as /devices/virtual/input/input53 [ 229.728411][ T25] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 229.826445][ T5324] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 229.897222][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 229.909710][ T25] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 229.926212][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.934246][ T25] usb 4-1: Product: syz [ 229.938581][ T25] usb 4-1: Manufacturer: syz [ 229.943200][ T25] usb 4-1: SerialNumber: syz [ 229.972778][ T25] usb 4-1: config 0 descriptor?? [ 229.994738][ T5324] usb 5-1: Using ep0 maxpacket: 16 [ 230.013711][ T5324] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.031055][ T5324] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.043406][ T5324] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 230.060057][ T5324] usb 5-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 230.071457][ T5324] usb 5-1: Product: syz [ 230.083260][ T5324] usb 5-1: Manufacturer: syz [ 230.110430][ T5324] usb 5-1: config 0 descriptor?? [ 230.224686][ T25] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 230.375118][T11695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2785'. [ 230.391307][T11695] (unnamed net_device) (uninitialized): peer notification delay (48896) is not a multiple of miimon (129), value rounded to 48891 ms [ 230.419852][T11695] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (511) [ 230.446936][T11695] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 230.487657][T11697] @: renamed from vlan0 (while UP) [ 230.532135][ T5324] kovaplus 0003:1E7D:2D50.0049: unknown main item tag 0x0 [ 230.548060][ T5324] kovaplus 0003:1E7D:2D50.0049: unknown main item tag 0x0 [ 230.568148][ T5324] kovaplus 0003:1E7D:2D50.0049: hidraw0: USB HID v0.07 Device [syz syz] on usb-dummy_hcd.4-1/input0 [ 230.709342][T11704] netlink: 'syz.0.2789': attribute type 1 has an invalid length. [ 230.724867][T11704] netlink: 'syz.0.2789': attribute type 2 has an invalid length. [ 230.730659][ T5324] kovaplus 0003:1E7D:2D50.0049: couldn't init struct kovaplus_device [ 230.741345][T11704] netlink: 16074 bytes leftover after parsing attributes in process `syz.0.2789'. [ 230.786299][ T5324] kovaplus 0003:1E7D:2D50.0049: couldn't install mouse [ 230.812749][ T5324] kovaplus 0003:1E7D:2D50.0049: probe with driver kovaplus failed with error -71 [ 230.846387][ T25] usb write operation failed. (-71) [ 230.853451][ T25] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 230.883250][ T5324] usb 5-1: USB disconnect, device number 23 [ 230.896720][ T25] dvbdev: DVB: registering new adapter (Terratec H7) [ 230.903567][ T25] usb 4-1: media controller created [ 230.926807][ T25] usb read operation failed. (-71) [ 230.936485][ T25] usb write operation failed. (-71) [ 230.980877][ T25] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 231.021942][ T25] usb 4-1: USB disconnect, device number 35 [ 231.252221][T11721] netlink: 'syz.2.2797': attribute type 2 has an invalid length. [ 231.690824][T11740] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2806'. [ 231.767246][T11747] netlink: 'syz.0.2809': attribute type 2 has an invalid length. [ 232.146284][ T25] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 232.316205][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 232.323135][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.351300][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.372998][ T25] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 232.392723][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.413013][ T25] usb 3-1: config 0 descriptor?? [ 232.843674][T11759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.932941][T11759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.207150][ T25] hid (null): bogus close delimiter [ 233.240736][T11790] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2829'. [ 233.317586][T11794] netlink: 'syz.4.2831': attribute type 1 has an invalid length. [ 233.325614][ T25] usb 3-1: string descriptor 0 read error: -71 [ 233.341824][T11794] netlink: 'syz.4.2831': attribute type 4 has an invalid length. [ 233.349963][T11794] netlink: 192 bytes leftover after parsing attributes in process `syz.4.2831'. [ 233.366520][ T25] usb 3-1: Max retries (5) exceeded reading string descriptor 200 [ 233.374456][ T25] letsketch 0003:6161:4D15.004A: probe with driver letsketch failed with error -32 [ 233.430423][ T25] usb 3-1: USB disconnect, device number 32 [ 233.517991][T11798] netlink: 'syz.3.2833': attribute type 11 has an invalid length. [ 233.542856][T11798] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2833'. [ 234.040740][ T29] audit: type=1326 audit(1728902960.864:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11816 comm="syz.1.2841" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0107f7dff9 code=0x0 [ 234.466298][ T5227] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 234.628155][ T5227] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 234.639622][ T5227] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 234.660922][ T5227] usb 5-1: config 1 has no interface number 0 [ 234.672192][ T5227] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.698621][ T5227] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 234.730553][ T5227] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 234.740222][ T5227] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.759076][ T5227] usb 5-1: Product: syz [ 234.763464][ T5227] usb 5-1: Manufacturer: syz [ 234.773611][ T5227] usb 5-1: SerialNumber: syz [ 235.036312][ T25] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 235.216368][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 235.224921][ T25] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 235.237526][ T25] usb 4-1: config 0 has no interface number 0 [ 235.272250][ T25] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 235.292925][ T25] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 235.313346][ T25] usb 4-1: config 0 interface 126 has no altsetting 0 [ 235.669854][ T5227] cdc_ncm 5-1:1.1: failed GET_NTB_PARAMETERS [ 235.676157][ T5227] cdc_ncm 5-1:1.1: bind() failure [ 235.685304][ T25] usb 4-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 235.694514][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.703091][ T25] usb 4-1: Product: syz [ 235.707527][ T25] usb 4-1: Manufacturer: syz [ 235.712153][ T25] usb 4-1: SerialNumber: syz [ 235.720720][ T5227] usb 5-1: USB disconnect, device number 24 [ 236.054436][ T25] usb 4-1: config 0 descriptor?? [ 236.099532][T11844] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 236.119793][T11844] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 236.399406][T11878] sch_fq: defrate 0 ignored. [ 236.575045][ T25] ir_usb 4-1:0.126: IR Dongle converter detected [ 236.801569][ T25] usb 4-1: IR Dongle converter now attached to ttyUSB0 [ 236.986030][T11901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2876'. [ 237.004269][ T25] usb 4-1: USB disconnect, device number 36 [ 237.024137][ T25] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 237.046875][ T25] ir_usb 4-1:0.126: device disconnected [ 237.340644][T11914] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2884'. [ 238.581376][T11978] bridge0: port 3(vlan0) entered blocking state [ 238.610106][T11978] bridge0: port 3(vlan0) entered disabled state [ 238.646502][T11978] vlan0: entered allmulticast mode [ 238.660833][T11978] vlan0: left allmulticast mode [ 239.076751][ T5379] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 239.146634][ T25] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 239.177389][ T29] audit: type=1326 audit(1728902965.994:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12005 comm="syz.3.2925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74e357dff9 code=0x7ffc0000 [ 239.236615][ T29] audit: type=1326 audit(1728902965.994:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12005 comm="syz.3.2925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74e357dff9 code=0x7ffc0000 [ 239.236691][ T5379] usb 5-1: Using ep0 maxpacket: 32 [ 239.292447][ T29] audit: type=1326 audit(1728902965.994:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12005 comm="syz.3.2925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f74e357dff9 code=0x7ffc0000 [ 239.300772][ T5379] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 239.314216][ C1] vkms_vblank_simulate: vblank timer overrun [ 239.335987][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.357803][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.365180][ T5379] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.373487][ T29] audit: type=1326 audit(1728902965.994:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12005 comm="syz.3.2925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74e357dff9 code=0x7ffc0000 [ 239.396662][ T5379] usb 5-1: Product: syz [ 239.397710][ C1] vkms_vblank_simulate: vblank timer overrun [ 239.409364][ T5379] usb 5-1: Manufacturer: syz [ 239.414333][ T5379] usb 5-1: SerialNumber: syz [ 239.426181][ T25] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 239.435300][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.450200][ T5379] usb 5-1: config 0 descriptor?? [ 239.479308][ T5379] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 239.486830][ T25] usb 2-1: config 0 descriptor?? [ 239.492078][ T29] audit: type=1326 audit(1728902965.994:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12005 comm="syz.3.2925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74e357dff9 code=0x7ffc0000 [ 239.566298][ T29] audit: type=1326 audit(1728902965.994:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12005 comm="syz.3.2925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f74e357dff9 code=0x7ffc0000 [ 239.622944][ T29] audit: type=1326 audit(1728902966.034:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12005 comm="syz.3.2925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74e357dff9 code=0x7ffc0000 [ 239.967189][ T25] pyra 0003:1E7D:2CF6.004B: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 240.288540][ T5379] gspca_ov534_9: reg_w failed -71 [ 240.328509][ T25] pyra 0003:1E7D:2CF6.004B: couldn't init struct pyra_device [ 240.336187][ T25] pyra 0003:1E7D:2CF6.004B: couldn't install mouse [ 240.359894][ T25] pyra 0003:1E7D:2CF6.004B: probe with driver pyra failed with error -71 [ 240.386886][ T25] usb 2-1: USB disconnect, device number 29 [ 240.596735][ T5379] gspca_ov534_9: Unknown sensor 0000 [ 240.596810][ T5379] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 240.645478][ T5379] usb 5-1: USB disconnect, device number 25 [ 240.696452][T12057] netlink: 'syz.3.2948': attribute type 1 has an invalid length. [ 240.704736][T12057] netlink: 71 bytes leftover after parsing attributes in process `syz.3.2948'. [ 240.715875][T12057] openvswitch: netlink: Actions may not be safe on all matching packets [ 240.862911][T12064] Bluetooth: MGMT ver 1.23 [ 241.012108][T12074] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 241.611169][T12095] program syz.1.2964 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 242.416435][ T25] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 242.588778][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 242.607971][ T25] usb 2-1: config 0 has an invalid interface number: 126 but max is 0 [ 242.626148][ T25] usb 2-1: config 0 has no interface number 0 [ 242.633142][ T25] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 242.655125][ T25] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 242.677179][ T25] usb 2-1: config 0 interface 126 has no altsetting 0 [ 242.700819][ T25] usb 2-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 242.710339][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.722696][ T25] usb 2-1: Product: syz [ 242.727670][ T25] usb 2-1: Manufacturer: syz [ 242.732556][ T25] usb 2-1: SerialNumber: syz [ 242.739298][ T25] usb 2-1: config 0 descriptor?? [ 242.749991][T12117] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 242.758439][T12117] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 243.208557][T12138] Falling back ldisc for ttyS3. [ 243.217155][ T25] ir_usb 2-1:0.126: IR Dongle converter detected [ 243.303081][ T5379] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 243.428509][ T25] usb 2-1: IR Dongle converter now attached to ttyUSB0 [ 243.567868][ T5379] usb 4-1: Using ep0 maxpacket: 8 [ 243.584504][ T5379] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 243.605745][ T5379] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 26056, setting to 1024 [ 243.617865][ T5379] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 243.628379][ T5379] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 243.639203][ T5379] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 243.650513][ T5379] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 243.659058][ T25] usb 2-1: USB disconnect, device number 30 [ 243.661066][ T5379] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8d.58 [ 243.676255][ T5379] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.683728][ T25] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 243.703956][ T5379] usb 4-1: config 0 descriptor?? [ 243.712170][T12134] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 243.734617][ T25] ir_usb 2-1:0.126: device disconnected [ 243.799473][ T5232] Bluetooth: hci5: urb ffff88802e219400 submission failed (90) [ 243.940929][T12175] netlink: 'syz.2.2994': attribute type 3 has an invalid length. [ 243.949946][T12175] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2994'. [ 243.984800][ T5324] usb 4-1: USB disconnect, device number 37 [ 244.105179][T12183] ip6gretap0: entered promiscuous mode [ 244.152528][T12183] ip6gretap0: left promiscuous mode [ 244.407567][T12193] netlink: 'syz.0.3000': attribute type 3 has an invalid length. [ 244.786799][ T5223] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 244.939156][ T5223] usb 3-1: config 246 has an invalid interface number: 166 but max is 0 [ 244.948876][ T5223] usb 3-1: config 246 has no interface number 0 [ 244.955182][ T5223] usb 3-1: config 246 interface 166 altsetting 118 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 244.969466][ T5223] usb 3-1: config 246 interface 166 altsetting 118 endpoint 0x8A has invalid wMaxPacketSize 0 [ 244.980836][ T5223] usb 3-1: config 246 interface 166 has no altsetting 0 [ 244.990798][ T5223] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63 [ 245.003644][ T5223] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.012647][ T5223] usb 3-1: Product: syz [ 245.017446][ T5223] usb 3-1: Manufacturer: syz [ 245.022073][ T5223] usb 3-1: SerialNumber: syz [ 245.056356][ T25] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 245.146732][ T5324] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 245.228572][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 245.240506][ T25] usb 1-1: config 0 has an invalid interface number: 126 but max is 0 [ 245.249553][ T25] usb 1-1: config 0 has no interface number 0 [ 245.255689][ T25] usb 1-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 245.267109][ T25] usb 1-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 245.279566][ T25] usb 1-1: config 0 interface 126 has no altsetting 0 [ 245.289259][ T25] usb 1-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 245.298718][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.307232][ T25] usb 1-1: Product: syz [ 245.316164][ T25] usb 1-1: Manufacturer: syz [ 245.320804][ T25] usb 1-1: SerialNumber: syz [ 245.328961][ T5324] usb 2-1: Using ep0 maxpacket: 8 [ 245.337274][ T25] usb 1-1: config 0 descriptor?? [ 245.342907][T12219] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 245.353790][T12219] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 245.361974][T12235] xt_CT: You must specify a L4 protocol and not use inversions on it [ 245.362233][ T5324] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 245.380581][ T5324] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 245.390017][ T5324] usb 2-1: config 0 has no interface number 0 [ 245.397323][ T5324] usb 2-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 245.409772][ T5324] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 245.421667][ T5324] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 245.445701][ T5324] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 245.464246][ T5324] usb 2-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 245.484841][ T5324] usb 2-1: Product: syz [ 245.504032][ T5324] usb 2-1: config 0 descriptor?? [ 245.657133][ T5223] usb 3-1: Limiting number of CPorts to U8_MAX [ 245.669132][ T5223] usb 3-1: Unknown endpoint type found, address 0x0b [ 245.675874][ T5223] usb 3-1: Not enough endpoints found in device, aborting! [ 245.795690][ T25] ir_usb 1-1:0.126: IR Dongle converter detected [ 245.864787][ T5227] usb 3-1: USB disconnect, device number 33 [ 246.010974][ T25] usb 1-1: IR Dongle converter now attached to ttyUSB0 [ 246.129083][ T5324] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.21/input/input54 [ 246.148564][ T5324] input: failed to attach handler kbd to device input54, error: -5 [ 246.234462][ T5324] usb 1-1: USB disconnect, device number 32 [ 246.257496][ T5324] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 246.274139][ T5324] ir_usb 1-1:0.126: device disconnected [ 246.333750][ T5223] usb 2-1: USB disconnect, device number 31 [ 246.585760][T12273] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3036'. [ 246.753386][T12283] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3040'. [ 246.763488][T12283] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3040'. [ 247.052318][T12301] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3048'. [ 247.182144][ T5223] kernel write not supported for file /uhid (pid: 5223 comm: kworker/0:3) [ 247.242998][T12310] dvmrp1: entered allmulticast mode [ 247.275752][T12310] dvmrp5: entered allmulticast mode [ 247.282478][T12310] dvmrp1: left allmulticast mode [ 247.289383][T12310] dvmrp5: left allmulticast mode [ 247.476953][ T5223] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 247.499783][T12325] netlink: 'syz.2.3062': attribute type 3 has an invalid length. [ 247.642588][ T5223] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.670851][ T5223] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.696775][ T5223] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 247.705874][ T5223] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.747082][ T5223] usb 4-1: config 0 descriptor?? [ 248.202522][ T5223] hid-thrustmaster 0003:044F:B65D.004C: unknown main item tag 0x0 [ 248.242211][ T5223] hid-thrustmaster 0003:044F:B65D.004C: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.3-1/input0 [ 248.279212][ T5223] hid-thrustmaster 0003:044F:B65D.004C: Wrong number of endpoints? [ 248.366524][ T5230] Bluetooth: hci3: command 0x0406 tx timeout [ 248.398142][ C0] hid-thrustmaster 0003:044F:B65D.004C: Unknown packet type 0x0, unable to proceed further with wheel init [ 248.473524][T12363] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3078'. [ 248.570543][T12365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3079'. [ 248.612047][ T5227] usb 4-1: USB disconnect, device number 38 [ 248.762519][T12378] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 249.107874][ T5227] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 249.282679][ T5227] usb 2-1: Using ep0 maxpacket: 32 [ 249.290123][ T5227] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 249.300732][ T5227] usb 2-1: config 0 has no interface number 0 [ 249.316923][ T5227] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 249.333074][ T5227] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.350658][ T5227] usb 2-1: Product: syz [ 249.355174][ T5227] usb 2-1: Manufacturer: syz [ 249.360534][ T5227] usb 2-1: SerialNumber: syz [ 249.371560][ T5227] usb 2-1: config 0 descriptor?? [ 249.606630][ T5227] radio-si470x 2-1:0.35: this is not a si470x device. [ 249.648263][ T5227] radio-raremono 2-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 249.816276][ T5324] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 249.854445][ T5227] radio-raremono 2-1:0.35: raremono_cmd_main failed (-71) [ 249.884960][ T5227] radio-raremono 2-1:0.35: V4L2 device registered as radio32 [ 249.913198][ T5227] usb 2-1: USB disconnect, device number 32 [ 249.942269][ T5227] radio-raremono 2-1:0.35: Thanko's Raremono disconnected [ 249.998444][ T5324] usb 3-1: Using ep0 maxpacket: 8 [ 250.037750][ T5324] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 250.066263][ T5324] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.074309][ T5324] usb 3-1: Product: syz [ 250.083233][ T5324] usb 3-1: Manufacturer: syz [ 250.088462][ T5324] usb 3-1: SerialNumber: syz [ 250.097270][ T5324] usb 3-1: config 0 descriptor?? [ 250.261468][T12413] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3102'. [ 250.321118][ T5324] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 250.730926][ T5324] usb write operation failed. (-71) [ 250.738751][ T5324] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 250.767022][ T5324] dvbdev: DVB: registering new adapter (Terratec H7) [ 250.773782][ T5324] usb 3-1: media controller created [ 250.793438][ T5324] usb read operation failed. (-71) [ 250.810474][ T5324] usb write operation failed. (-71) [ 250.830926][ T5324] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 250.855134][ T5324] usb 3-1: USB disconnect, device number 34 [ 251.293120][T12442] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3116'. [ 251.334685][T12442] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 251.475562][T12446] lo speed is unknown, defaulting to 1000 [ 251.678015][T12446] wg1 speed is unknown, defaulting to 1000 [ 251.756694][ T5227] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 251.909347][T12459] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 251.958721][T12459] batman_adv: batadv0: Adding interface: gretap1 [ 251.979459][ T5227] usb 2-1: config 0 has no interfaces? [ 251.984979][ T5227] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 251.997085][T12459] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 252.023111][ T5227] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.034755][ T5227] usb 2-1: config 0 descriptor?? [ 252.086297][T12459] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 252.213047][T12463] tap0: tun_chr_ioctl cmd 1074025672 [ 252.225566][T12463] tap0: ignored: set checksum enabled [ 252.271023][ T5324] usb 2-1: USB disconnect, device number 33 [ 254.633561][ T5230] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 254.645125][ T5230] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 254.653291][ T5230] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 254.661508][ T5230] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 254.670199][ T5230] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 254.678850][ T5230] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 254.754750][T12511] lo speed is unknown, defaulting to 1000 [ 254.853725][T12511] wg1 speed is unknown, defaulting to 1000 [ 255.700099][T12511] chnl_net:caif_netlink_parms(): no params data found [ 255.967755][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.974434][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.993565][T12511] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.023093][T12511] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.073818][T12511] bridge_slave_0: entered allmulticast mode [ 256.097485][T12511] bridge_slave_0: entered promiscuous mode [ 256.129329][T12511] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.154762][T12511] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.181062][T12546] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3161'. [ 256.203920][T12511] bridge_slave_1: entered allmulticast mode [ 256.231847][T12511] bridge_slave_1: entered promiscuous mode [ 256.316674][T12546] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3161'. [ 256.364095][T12511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.409155][T12511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.618070][T12511] team0: Port device team_slave_0 added [ 256.665499][T12511] team0: Port device team_slave_1 added [ 256.707985][T12552] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3164'. [ 256.763301][T12552] netlink: 'syz.0.3164': attribute type 6 has an invalid length. [ 256.771961][ T5230] Bluetooth: hci5: command tx timeout [ 256.799431][T12511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.829643][T12511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.925347][T12511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.980956][T12511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.037230][T12511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.154294][T12511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.322390][T12511] hsr_slave_0: entered promiscuous mode [ 257.387253][T12511] hsr_slave_1: entered promiscuous mode [ 257.411286][T12511] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 257.446340][T12511] Cannot create hsr debugfs directory [ 258.259263][T12511] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.310805][T12575] sctp: [Deprecated]: syz.0.3174 (pid 12575) Use of struct sctp_assoc_value in delayed_ack socket option. [ 258.310805][T12575] Use struct sctp_sack_info instead [ 258.530824][T12511] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.695602][T12511] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.851175][ T5230] Bluetooth: hci5: command tx timeout [ 258.991761][T12511] bond0: (slave netdevsim0): Releasing backup interface [ 259.011179][T12511] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.027583][T12597] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3184'. [ 259.041978][T12597] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 259.280130][T12511] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 259.326621][T12511] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 259.368668][T12511] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 259.398900][T12511] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 259.755099][ T5232] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 259.765583][ T5232] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 259.774383][ T5232] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 259.783375][ T5232] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 259.791615][ T5232] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 259.799438][ T5232] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 259.998993][T12603] lo speed is unknown, defaulting to 1000 [ 260.027989][T12511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.118128][T12511] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.175410][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.182594][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.374166][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.605439][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.612628][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.751805][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.777075][ T5232] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 260.785736][ T5232] Bluetooth: hci0: Injecting HCI hardware error event [ 260.795300][ T5230] Bluetooth: hci0: hardware error 0x00 [ 260.926396][ T5232] Bluetooth: hci5: command tx timeout [ 260.968797][T12603] wg1 speed is unknown, defaulting to 1000 [ 261.538952][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.681727][ T12] bond0: (slave netdevsim0): Releasing backup interface [ 261.737354][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.774686][T12511] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 261.785757][T12511] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 261.898009][ T5232] Bluetooth: hci1: command tx timeout [ 262.097653][ T12] bridge_slave_1: left allmulticast mode [ 262.132928][ T12] bridge_slave_1: left promiscuous mode [ 262.161600][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.180303][ T12] bridge_slave_0: left allmulticast mode [ 262.224302][ T12] bridge_slave_0: left promiscuous mode [ 262.244693][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.937664][ T5230] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 263.008559][ T5232] Bluetooth: hci5: command tx timeout [ 263.076041][T12655] netlink: 'syz.1.3204': attribute type 1 has an invalid length. [ 263.084241][T12655] netlink: 9352 bytes leftover after parsing attributes in process `syz.1.3204'. [ 263.126535][T12655] netlink: 'syz.1.3204': attribute type 1 has an invalid length. [ 263.134314][T12655] netlink: 'syz.1.3204': attribute type 2 has an invalid length. [ 263.157349][ T5232] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 263.169288][ T5232] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 263.177728][ T5232] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 263.185577][ T5232] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 263.193267][ T5232] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 263.201497][ T5232] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 263.412808][ T12] batman_adv: batadv0: Removing interface: gretap1 [ 263.977592][ T5232] Bluetooth: hci1: command tx timeout [ 264.169120][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 264.213214][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 264.255812][ T12] bond0 (unregistering): Released all slaves [ 264.448022][T12633] lo speed is unknown, defaulting to 1000 [ 264.456636][ T12] tipc: Left network mode [ 265.266721][ T5232] Bluetooth: hci6: command tx timeout [ 265.533679][T12511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.593994][T12633] wg1 speed is unknown, defaulting to 1000 [ 265.764584][T12603] chnl_net:caif_netlink_parms(): no params data found [ 266.047651][ T5232] Bluetooth: hci1: command tx timeout [ 266.233248][T12603] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.282650][T12603] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.346381][T12603] bridge_slave_0: entered allmulticast mode [ 266.385078][T12603] bridge_slave_0: entered promiscuous mode [ 266.452501][T12603] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.519352][T12603] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.566797][T12603] bridge_slave_1: entered allmulticast mode [ 266.648809][T12603] bridge_slave_1: entered promiscuous mode [ 267.179877][T12603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.326675][ T5230] Bluetooth: hci6: command tx timeout [ 267.410545][ T12] hsr_slave_0: left promiscuous mode [ 267.423595][ T12] hsr_slave_1: left promiscuous mode [ 267.457143][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.464628][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.481586][T12737] netlink: 4056 bytes leftover after parsing attributes in process `syz.0.3225'. [ 267.520885][T12737] openvswitch: netlink: Actions may not be safe on all matching packets [ 267.537648][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.545081][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.659491][ T12] veth1_macvtap: left promiscuous mode [ 267.686004][ T12] veth0_macvtap: left promiscuous mode [ 267.700630][ T12] veth1_vlan: left promiscuous mode [ 267.705959][ T12] veth0_vlan: left promiscuous mode [ 268.100744][ T12] infiniband syz0: set down [ 268.134481][ T5230] Bluetooth: hci1: command tx timeout [ 268.159807][ T12] pimreg3 (unregistering): left allmulticast mode [ 268.286990][ T5230] Bluetooth: hci4: command 0x0405 tx timeout [ 269.407674][ T5232] Bluetooth: hci6: command tx timeout [ 269.694882][ T12] team0 (unregistering): Port device team_slave_1 removed [ 269.785559][ T12] team0 (unregistering): Port device team_slave_0 removed [ 270.702097][ T963] smc: removing ib device syz0 [ 270.710283][T12603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.791560][ T5269] lo speed is unknown, defaulting to 1000 [ 271.295988][T12511] veth0_vlan: entered promiscuous mode [ 271.493402][ T5232] Bluetooth: hci6: command tx timeout [ 271.548690][T12603] team0: Port device team_slave_0 added [ 271.616022][T12511] veth1_vlan: entered promiscuous mode [ 271.710585][T12603] team0: Port device team_slave_1 added [ 271.861815][T12603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.916944][T12603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.036180][T12603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.137484][T12603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.156583][T12603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.256675][T12603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.532191][T12603] hsr_slave_0: entered promiscuous mode [ 272.547971][T12603] hsr_slave_1: entered promiscuous mode [ 272.558159][T12603] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 272.569107][T12603] Cannot create hsr debugfs directory [ 272.726221][ T5227] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 272.783727][ T12] IPVS: stop unused estimator thread 0... [ 272.806805][T12511] veth0_macvtap: entered promiscuous mode [ 272.821889][T12511] veth1_macvtap: entered promiscuous mode [ 272.863923][T12511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.876658][T12511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.890104][T12511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.901010][T12511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.911374][T12511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.922835][T12511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.933943][T12511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.945253][T12511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.956596][ T5227] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 272.965990][ T5227] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.975007][ T5227] usb 1-1: Product: syz [ 272.980064][ T5227] usb 1-1: Manufacturer: syz [ 272.986248][T12511] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.995243][ T5227] usb 1-1: SerialNumber: syz [ 273.008926][T12511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.021530][ T5227] usb 1-1: config 0 descriptor?? [ 273.041695][T12511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.066624][T12511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.080602][T12511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.107954][T12511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.149421][T12511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.196896][T12511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.260226][T12511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.287506][ T5227] usb 1-1: USB disconnect, device number 33 [ 273.352559][T12511] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.423753][T12633] chnl_net:caif_netlink_parms(): no params data found [ 273.470086][T12511] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.509957][T12511] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.543736][T12511] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.585986][T12511] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.274129][T12633] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.282541][T12633] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.290078][T12633] bridge_slave_0: entered allmulticast mode [ 274.297817][T12633] bridge_slave_0: entered promiscuous mode [ 274.305916][T12633] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.314464][T12633] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.322078][T12633] bridge_slave_1: entered allmulticast mode [ 274.329341][T12633] bridge_slave_1: entered promiscuous mode [ 274.365122][T12633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.403709][T12633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.426475][ T5324] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 274.561905][T12633] team0: Port device team_slave_0 added [ 274.626851][ T5324] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 274.647152][ T5324] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 274.692032][ T5324] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 274.778475][ T5324] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 274.801531][T12603] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.817639][ T5324] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.853526][ T5324] usb 1-1: Product: syz [ 274.864684][ T5324] usb 1-1: Manufacturer: syz [ 274.880374][ T5324] usb 1-1: SerialNumber: syz [ 274.907514][T12633] team0: Port device team_slave_1 added [ 275.009354][ T2945] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.018713][ T2945] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.047006][ T5269] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 275.089100][T12633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.107143][T12633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.226690][T12633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.238044][ T5269] usb 2-1: Using ep0 maxpacket: 8 [ 275.258490][ T5269] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.286344][ T5269] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.312225][T12633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.329734][ T5269] usb 2-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 275.350256][T12633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.405812][ T5269] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.444983][ T5269] usb 2-1: config 0 descriptor?? [ 275.488175][T12633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.585316][T12603] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.608803][ T5324] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 275.624733][ T5324] usb 1-1: 2:1 : sample bitwidth 64 in over sample bytes 2 [ 275.634407][ T5324] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 275.653342][ T5324] usb 1-1: 2:1 : invalid channels 0 [ 275.769964][ T2945] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.827763][ T2945] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.853470][T12603] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.880135][ T5269] playstation 0003:054C:0CE6.004D: unknown main item tag 0x0 [ 275.935558][ T5269] playstation 0003:054C:0CE6.004D: unknown main item tag 0x0 [ 275.955238][ T5324] usb 1-1: USB disconnect, device number 34 [ 275.963842][ T5269] playstation 0003:054C:0CE6.004D: unknown main item tag 0x0 [ 276.017898][ T5269] playstation 0003:054C:0CE6.004D: unknown main item tag 0x0 [ 276.049638][ T5269] playstation 0003:054C:0CE6.004D: unknown main item tag 0x0 [ 276.060732][ T5269] playstation 0003:054C:0CE6.004D: unknown main item tag 0x0 [ 276.068363][ T5269] playstation 0003:054C:0CE6.004D: unknown main item tag 0x0 [ 276.116450][ T5269] playstation 0003:054C:0CE6.004D: hidraw0: USB HID v0.00 Device [HID 054c:0ce6] on usb-dummy_hcd.1-1/input0 [ 276.117299][T12632] udevd[12632]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 276.187272][ T5269] playstation 0003:054C:0CE6.004D: Invalid byte count transferred, expected 20 got 0 [ 276.208568][ T5269] playstation 0003:054C:0CE6.004D: Failed to retrieve DualSense pairing info: -22 [ 276.235236][ T5269] playstation 0003:054C:0CE6.004D: Failed to get MAC address from DualSense [ 276.244596][ T5269] playstation 0003:054C:0CE6.004D: Failed to create dualsense. [ 276.272190][T12633] hsr_slave_0: entered promiscuous mode [ 276.285331][T12633] hsr_slave_1: entered promiscuous mode [ 276.292034][ T5269] playstation 0003:054C:0CE6.004D: probe with driver playstation failed with error -22 [ 276.312523][T12633] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 276.341946][T12633] Cannot create hsr debugfs directory [ 276.371457][T12603] tipc: Resetting bearer [ 276.442874][ T5269] usb 2-1: USB disconnect, device number 34 [ 276.479583][T12603] bond0: (slave netdevsim0): Releasing backup interface [ 276.545435][T12603] tipc: Resetting bearer [ 276.555069][T12603] tipc: Disabling bearer [ 276.563328][T12603] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.235927][T12603] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 277.288345][T12603] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 277.320359][T12603] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 277.337220][ T5379] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 277.475370][T12603] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 277.488388][ T5379] usb 1-1: Using ep0 maxpacket: 8 [ 277.503113][ T5379] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 277.523972][ T5379] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 277.543814][ T5379] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 277.590971][ T5379] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 277.622480][ T5379] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 277.633112][ T5379] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.863381][ T5379] usb 1-1: GET_CAPABILITIES returned 0 [ 277.882243][ T5379] usbtmc 1-1:16.0: can't read capabilities [ 278.053332][T12603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.102198][ T5379] usb 1-1: USB disconnect, device number 35 [ 278.177265][T12603] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.238092][ T2925] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.245231][ T2925] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.299077][ T963] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.306284][ T963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.563238][T12633] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 278.595320][T12633] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 278.659763][T12633] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 278.708199][T12633] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 279.013006][T12603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.097880][T12633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.215493][T12633] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.255350][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.262500][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.332789][T12603] veth0_vlan: entered promiscuous mode [ 279.441100][T12603] veth1_vlan: entered promiscuous mode [ 279.489576][ T3009] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.496768][ T3009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.558182][T12633] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 279.569502][T12633] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 279.651079][T12603] veth0_macvtap: entered promiscuous mode [ 279.671646][T12603] veth1_macvtap: entered promiscuous mode [ 279.880090][T12603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.897004][T12603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.906937][T12603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.917460][T12603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.927696][T12603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.938310][T12603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.948208][T12603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.958940][T12603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.969782][T12603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.980319][T12603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.992712][T12603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.032024][T12603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.057147][T12603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.076423][T12603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.096149][T12603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.128531][T12603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.176160][T12603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.186007][T12603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.208098][T12603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.226478][T12603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.237034][T12603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.260635][T12603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.271074][T12603] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.286813][T12603] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.296399][T12603] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.305119][T12603] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.371784][T12633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.407689][ T5379] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 280.536375][ T2945] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.544205][ T2945] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.578195][ T5379] usb 5-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 280.613426][ T5379] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.678070][ T5379] usb 5-1: config 0 descriptor?? [ 280.718769][ T5379] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input55 [ 280.933714][ T9] usb 5-1: USB disconnect, device number 26 [ 281.089062][T12963] vxcan1: tx address claim with dest, not broadcast [ 281.352347][T12633] veth0_vlan: entered promiscuous mode [ 281.431501][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.510105][T12633] veth1_vlan: entered promiscuous mode [ 281.535996][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.823052][T12633] veth0_macvtap: entered promiscuous mode [ 281.912490][T12633] veth1_macvtap: entered promiscuous mode [ 281.998122][T12633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.008817][T12633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.018715][T12633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.029457][T12633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.040435][T12633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.066179][T12633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.076040][T12633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.145828][T12633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.193076][T12633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.230607][T12633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.266147][T12633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.290779][T12633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.319686][T12633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.349881][T12633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.366409][T12633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.410067][T12633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.444899][T12633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.486429][T12633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.516205][T12633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.551010][T12633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.586490][T12633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.618344][T12633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.647127][T12633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.681809][T12633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.704499][T12633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.729439][T12633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.788101][T12633] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.840616][T12633] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.879211][T12633] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.917682][T12633] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.186791][ T2925] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.194646][ T2925] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.310354][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.361073][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.583973][T13053] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 283.678847][T13061] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 283.957183][T13071] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3318'. [ 284.007245][ T5269] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 284.166562][ T5269] usb 2-1: Using ep0 maxpacket: 32 [ 284.188635][ T5269] usb 2-1: unable to get BOS descriptor or descriptor too short [ 284.196689][ T5379] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 284.207139][ T5269] usb 2-1: config 3 has an invalid interface number: 238 but max is 0 [ 284.226940][ T5269] usb 2-1: config 3 has no interface number 0 [ 284.235609][ T5269] usb 2-1: config 3 interface 238 altsetting 6 has a duplicate endpoint with address 0x86, skipping [ 284.247035][ T5269] usb 2-1: config 3 interface 238 has no altsetting 0 [ 284.332373][ T5269] usb 2-1: New USB device found, idVendor=2040, idProduct=2010, bcdDevice=40.8b [ 284.341651][ T5269] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.349733][ T5269] usb 2-1: Product: syz [ 284.353928][ T5269] usb 2-1: Manufacturer: syz [ 284.358917][ T5269] usb 2-1: SerialNumber: syz [ 284.380743][ T5379] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 284.413151][ T5379] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 284.462582][T13064] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 284.468690][ T5379] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 284.541742][ T5379] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.582254][T13066] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 284.603146][ T5379] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 284.694279][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 284.703572][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 284.711063][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 284.728719][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 284.736124][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 284.777529][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 284.787385][ T5269] smsusb:smsusb_probe: board id=9, interface number 238 [ 284.807678][ T5269] usb 2-1: USB disconnect, device number 35 [ 284.856564][ T5324] usb 5-1: USB disconnect, device number 27 [ 285.118027][T13117] netlink: 'syz.2.3331': attribute type 4 has an invalid length. [ 286.265747][T13168] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 286.527667][T13184] netlink: 'syz.3.3349': attribute type 9 has an invalid length. [ 286.560548][T13184] bond_slave_0: entered promiscuous mode [ 286.566832][T13184] bond_slave_1: entered promiscuous mode [ 286.649628][T13184] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 286.883887][T13200] netlink: 'syz.4.3359': attribute type 1 has an invalid length. [ 286.916553][T13200] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3359'. [ 287.150571][T13204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3361'. [ 287.411901][T13219] netlink: 45 bytes leftover after parsing attributes in process `syz.0.3367'. [ 287.546243][ T5324] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 287.650891][T13232] tun0: tun_chr_ioctl cmd 1074025677 [ 287.675842][T13232] tun0: linktype set to 823 [ 287.719525][ T5324] usb 4-1: config 0 interface 0 has no altsetting 0 [ 287.740000][ T5324] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 287.772909][ T5324] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.788255][ T5324] usb 4-1: config 0 descriptor?? [ 287.836718][ T8] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 288.006656][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 288.013543][ T8] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 288.025110][ T8] usb 5-1: config 0 has no interface number 0 [ 288.047119][ T8] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 288.088234][ T8] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 288.112588][ T8] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 288.133918][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.156624][ T8] usb 5-1: Product: syz [ 288.160838][ T8] usb 5-1: Manufacturer: syz [ 288.185842][ T8] usb 5-1: SerialNumber: syz [ 288.212728][ T8] usb 5-1: config 0 descriptor?? [ 288.230796][T13228] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 288.239099][T13228] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 288.477920][T13228] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 288.495498][T13228] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 288.676658][ T5324] video4linux radio32: keene_cmd_main failed (-71) [ 288.683743][ T5324] radio-keene 4-1:0.0: V4L2 device registered as radio32 [ 288.755462][ T5324] usb 4-1: USB disconnect, device number 39 [ 288.906291][ T5391] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 289.077030][ T5391] usb 3-1: Using ep0 maxpacket: 16 [ 289.084095][ T5391] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 289.119796][ T5391] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 289.130407][ T8] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 289.153574][ T8] asix 5-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 289.167174][ T5391] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.177322][ T8] asix 5-1:0.251: probe with driver asix failed with error -71 [ 289.187643][ T5391] usb 3-1: Product: syz [ 289.191842][ T5391] usb 3-1: Manufacturer: syz [ 289.221078][ T5391] usb 3-1: SerialNumber: syz [ 289.226476][ T8] usb 5-1: USB disconnect, device number 28 [ 289.254148][ T5391] usb 3-1: config 0 descriptor?? [ 289.282218][ T5391] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 289.298718][ T5391] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 289.544117][T13263] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3385'. [ 289.555534][T13263] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3385'. [ 289.944841][ T5391] em28xx 3-1:0.0: chip ID is em2710/2820 [ 289.951508][T13280] ALSA: mixer_oss: invalid OSS volume '' [ 290.200979][ T5391] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 290.250747][ T5391] em28xx 3-1:0.0: board has no eeprom [ 290.346636][ T5391] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 290.354510][ T5391] em28xx 3-1:0.0: dvb set to bulk mode. [ 290.399503][ T5379] em28xx 3-1:0.0: Binding DVB extension [ 290.444526][ T5391] usb 3-1: USB disconnect, device number 35 [ 290.477739][ T5391] em28xx 3-1:0.0: Disconnecting em28xx [ 290.601425][ T5379] em28xx 3-1:0.0: Registering input extension [ 290.646942][ T5391] em28xx 3-1:0.0: Closing input extension [ 290.703725][ T5391] em28xx 3-1:0.0: Freeing device [ 291.538502][ T5379] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 291.554723][T13335] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 291.688087][ T5269] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 291.696273][ T5379] usb 4-1: Using ep0 maxpacket: 8 [ 291.719344][ T5379] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.743515][ T5379] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.771274][ T5379] usb 4-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 291.801671][ T5379] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.862984][ T5269] usb 2-1: Using ep0 maxpacket: 8 [ 291.864869][ T5269] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 291.864895][ T5269] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 291.864915][ T5269] usb 2-1: config 0 has no interface number 0 [ 291.864947][ T5269] usb 2-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 291.864972][ T5269] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 291.864997][ T5269] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 291.865386][ T5379] usb 4-1: config 0 descriptor?? [ 291.867233][ T5269] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 291.867261][ T5269] usb 2-1: New USB device strings: Mfr=31, Product=0, SerialNumber=0 [ 291.867282][ T5269] usb 2-1: Manufacturer: syz [ 291.869172][ T5269] usb 2-1: config 0 descriptor?? [ 292.150164][ T5232] Bluetooth: hci3: unknown advertising packet type: 0x72 [ 292.150309][ T5232] Bluetooth: hci3: unknown advertising packet type: 0x09 [ 292.150328][ T5232] Bluetooth: hci3: unknown advertising packet type: 0x05 [ 292.150363][ T5232] Bluetooth: hci3: Malformed LE Event: 0x02 [ 292.320052][ T5379] saitek 0003:06A3:0CCD.004E: unknown main item tag 0x0 [ 292.320091][ T5379] saitek 0003:06A3:0CCD.004E: unknown main item tag 0x0 [ 292.320122][ T5379] saitek 0003:06A3:0CCD.004E: item fetching failed at offset 2/11 [ 292.320588][ T5379] saitek 0003:06A3:0CCD.004E: parse failed [ 292.350243][ T5379] saitek 0003:06A3:0CCD.004E: probe with driver saitek failed with error -22 [ 292.493018][ T5269] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.21/input/input57 [ 292.502587][ T5269] input: failed to attach handler kbd to device input57, error: -5 [ 292.627643][ T5391] usb 4-1: USB disconnect, device number 40 [ 292.716762][ T5269] usb 2-1: USB disconnect, device number 36 [ 293.059829][ T29] audit: type=1400 audit(1728903019.614:52): lsm=SMACK fn=smack_key_permission action=denied subject="w" object="_" requested=w pid=13357 comm="syz.0.3429" key_serial=83044596 key_desc="_uid_ses.0" [ 293.789205][T13391] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3442'. [ 293.888520][T13398] GUP no longer grows the stack in syz.2.3445 (13398): 20004000-20005000 (20001000) [ 293.899374][T13398] CPU: 0 UID: 0 PID: 13398 Comm: syz.2.3445 Not tainted 6.12.0-rc3-syzkaller-00007-g6485cf5ea253 #0 [ 293.910175][T13398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 293.920273][T13398] Call Trace: [ 293.923592][T13398] [ 293.926547][T13398] dump_stack_lvl+0x241/0x360 [ 293.931264][T13398] ? __pfx_dump_stack_lvl+0x10/0x10 [ 293.936492][T13398] ? __pfx__printk+0x10/0x10 [ 293.941103][T13398] ? find_vma+0xf9/0x170 [ 293.945381][T13398] __get_user_pages+0x4260/0x48d0 [ 293.950431][T13398] ? __pfx_lock_acquire+0x10/0x10 [ 293.955525][T13398] ? __pfx___get_user_pages+0x10/0x10 [ 293.960929][T13398] ? __gup_longterm_locked+0x2d3/0x17d0 [ 293.966519][T13398] ? __pfx_down_read_killable+0x10/0x10 [ 293.972106][T13398] ? __pfx_lock_acquire+0x10/0x10 [ 293.977182][T13398] __gup_longterm_locked+0x3ba/0x17d0 [ 293.982584][T13398] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 293.988600][T13398] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 293.994975][T13398] gup_fast_fallback+0x2748/0x2b60 [ 294.000153][T13398] ? __pfx_gup_fast_fallback+0x10/0x10 [ 294.005649][T13398] ? __pfx_lock_acquire+0x10/0x10 [ 294.010707][T13398] ? mark_lock+0x9a/0x360 [ 294.015049][T13398] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 294.021037][T13398] ? __lock_acquire+0x1384/0x2050 [ 294.026081][T13398] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 294.032422][T13398] ? __lruvec_stat_mod_folio+0x7d/0x300 [ 294.037969][T13398] ? __lruvec_stat_mod_folio+0x7d/0x300 [ 294.043518][T13398] ? __phys_addr+0xba/0x170 [ 294.048023][T13398] ? is_valid_gup_args+0x124/0x200 [ 294.053140][T13398] pin_user_pages_fast+0xcc/0x160 [ 294.058181][T13398] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 294.063818][T13398] ? __kmalloc_node_noprof+0x247/0x440 [ 294.069277][T13398] ? __kvmalloc_node_noprof+0x72/0x190 [ 294.074743][T13398] io_pin_pages+0x7e/0x170 [ 294.079164][T13398] io_sqe_buffer_register+0x18a/0x2a30 [ 294.084659][T13398] ? __pfx_io_sqe_buffer_register+0x10/0x10 [ 294.090552][T13398] ? io_sqe_buffers_register+0x209/0x750 [ 294.096311][T13398] ? io_sqe_buffers_register+0x209/0x750 [ 294.101943][T13398] ? io_sqe_buffers_register+0x209/0x750 [ 294.107578][T13398] ? io_sqe_buffers_register+0x209/0x750 [ 294.113209][T13398] ? __kmalloc_noprof+0x21a/0x400 [ 294.118231][T13398] ? iovec_from_user+0x1b0/0x240 [ 294.123571][T13398] io_sqe_buffers_register+0x589/0x750 [ 294.129128][T13398] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 294.135125][T13398] ? do_futex+0x392/0x560 [ 294.139481][T13398] ? __fget_files+0x29/0x470 [ 294.144103][T13398] __se_sys_io_uring_register+0x97d/0x1780 [ 294.149929][T13398] ? __pfx___se_sys_io_uring_register+0x10/0x10 [ 294.156178][T13398] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 294.162627][T13398] ? do_syscall_64+0x100/0x230 [ 294.167400][T13398] ? do_syscall_64+0xb6/0x230 [ 294.172077][T13398] do_syscall_64+0xf3/0x230 [ 294.176589][T13398] ? clear_bhb_loop+0x35/0x90 [ 294.181266][T13398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.187162][T13398] RIP: 0033:0x7f2859b7dff9 [ 294.191574][T13398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.211197][T13398] RSP: 002b:00007f285a8d3038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 294.219618][T13398] RAX: ffffffffffffffda RBX: 00007f2859d35f80 RCX: 00007f2859b7dff9 [ 294.227599][T13398] RDX: 00000000200002c0 RSI: 0000000000000000 RDI: 0000000000000003 [ 294.235580][T13398] RBP: 00007f2859bf0296 R08: 0000000000000000 R09: 0000000000000000 [ 294.243551][T13398] R10: 100000000000011a R11: 0000000000000246 R12: 0000000000000000 [ 294.251525][T13398] R13: 0000000000000000 R14: 00007f2859d35f80 R15: 00007ffc4ce495d8 [ 294.259520][T13398] [ 294.358005][ T5391] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 294.410092][T13403] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 294.426240][T13403] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 294.446819][T13403] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 294.455999][T13403] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 294.469835][T13411] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 294.495846][T13411] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 294.537069][ T5324] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 294.552691][T13411] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 294.579682][T13411] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 294.595771][ T5391] usb 1-1: Using ep0 maxpacket: 16 [ 294.626702][ T5391] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.638771][ T5391] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.649101][ T5391] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 294.659131][ T5391] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.671734][ T5391] usb 1-1: config 0 descriptor?? [ 294.708679][ T5324] usb 2-1: Using ep0 maxpacket: 8 [ 294.726322][ T5324] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 294.727233][T13415] netlink: 'syz.2.3452': attribute type 9 has an invalid length. [ 294.745965][ T5324] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 294.751783][T13415] bond_slave_0: entered promiscuous mode [ 294.761469][T13415] bond_slave_1: entered promiscuous mode [ 294.769064][T13415] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 294.781626][ T5324] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 294.815797][ T5324] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 294.852721][ T5324] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 294.870780][ T5379] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 294.878557][ T5324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.123863][ T5324] usb 2-1: GET_CAPABILITIES returned 0 [ 295.150194][ T5324] usbtmc 2-1:16.0: can't read capabilities [ 295.350244][ T5324] usb 2-1: USB disconnect, device number 37 [ 296.335902][T13438] netlink: 'syz.2.3464': attribute type 25 has an invalid length. [ 296.375071][T13438] netlink: 'syz.2.3464': attribute type 8 has an invalid length. [ 296.944130][T13449] bond0: entered promiscuous mode [ 296.978768][T13449] bond_slave_0: entered promiscuous mode [ 297.018079][T13449] bond_slave_1: entered promiscuous mode [ 298.687880][T13473] xt_bpf: check failed: parse error [ 299.322094][T13485] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3484'. [ 301.086110][ C0] sched: DL replenish lagged too much [ 302.289238][T13512] dvmrp2: entered allmulticast mode [ 307.818491][ T5324] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 307.850719][ T5230] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 307.864411][ T5230] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 307.873258][ T5230] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 307.881530][ T5230] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 307.896284][ T5230] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 307.913655][ T5230] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 308.000837][T13582] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3526'. [ 308.072162][T13579] wg1 speed is unknown, defaulting to 1000 [ 308.115452][ T5324] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.186411][ T5324] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.266259][ T5324] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 308.346634][ T5324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.419184][ T5324] usb 2-1: config 0 descriptor?? [ 308.815093][T13588] netlink: 'syz.4.3529': attribute type 14 has an invalid length. [ 308.921750][ T5324] arvo 0003:1E7D:30D4.004F: unbalanced collection at end of report description [ 309.002665][ T5324] arvo 0003:1E7D:30D4.004F: parse failed [ 309.036280][ T5324] arvo 0003:1E7D:30D4.004F: probe with driver arvo failed with error -22 [ 309.136318][ T5324] usb 2-1: USB disconnect, device number 38 [ 309.709452][ T5232] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 309.723785][ T5232] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 309.742988][ T5232] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 309.752735][ T5232] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 309.760433][ T5232] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 309.768092][ T5232] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 309.944777][T13594] wg1 speed is unknown, defaulting to 1000 [ 309.976221][ T5232] Bluetooth: hci7: command tx timeout [ 310.078161][T13579] chnl_net:caif_netlink_parms(): no params data found [ 310.915789][T13579] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.965443][T13579] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.035607][T13579] bridge_slave_0: entered allmulticast mode [ 311.077623][T13579] bridge_slave_0: entered promiscuous mode [ 311.128859][T13579] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.186316][T13579] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.216769][T13579] bridge_slave_1: entered allmulticast mode [ 311.265868][T13579] bridge_slave_1: entered promiscuous mode [ 311.514702][T13579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.585862][T13579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.806726][ T5232] Bluetooth: hci8: command tx timeout [ 311.917739][T13579] team0: Port device team_slave_0 added [ 312.054927][ T5232] Bluetooth: hci7: command tx timeout [ 312.093954][T13579] team0: Port device team_slave_1 added [ 312.403617][T13579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.458543][T13579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.624177][T13579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.692706][T13579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.737606][T13579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.893203][T13579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.417870][T13579] hsr_slave_0: entered promiscuous mode [ 313.476608][T13579] hsr_slave_1: entered promiscuous mode [ 313.532121][T13579] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 313.571869][T13579] Cannot create hsr debugfs directory [ 313.603272][T13594] chnl_net:caif_netlink_parms(): no params data found [ 313.887341][ T5232] Bluetooth: hci8: command tx timeout [ 314.126422][ T5232] Bluetooth: hci7: command tx timeout [ 314.557366][T13645] netlink: 35 bytes leftover after parsing attributes in process `syz.3.3546'. [ 314.683586][T13594] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.728102][T13594] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.771684][T13594] bridge_slave_0: entered allmulticast mode [ 314.800467][T13594] bridge_slave_0: entered promiscuous mode [ 314.860960][T13594] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.907956][T13594] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.915241][T13594] bridge_slave_1: entered allmulticast mode [ 314.975451][T13594] bridge_slave_1: entered promiscuous mode [ 315.373221][T13594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.966815][ T5232] Bluetooth: hci8: command tx timeout [ 316.216879][ T5232] Bluetooth: hci7: command tx timeout [ 317.418315][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.057480][ T5232] Bluetooth: hci8: command tx timeout [ 326.121725][ T5230] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 326.135395][ T5230] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 326.144999][ T5230] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 326.153289][ T5230] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 326.161018][ T5230] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 326.168608][ T5230] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 327.267226][ T5232] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 327.278375][ T5232] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 327.290242][ T5232] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 327.300489][ T5232] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 327.308297][ T5232] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 327.317329][ T5232] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 328.288604][ T5230] Bluetooth: hci9: command tx timeout [ 329.406669][ T5230] Bluetooth: hci10: command tx timeout [ 330.366452][ T5230] Bluetooth: hci9: command tx timeout [ 331.486801][ T5230] Bluetooth: hci10: command tx timeout [ 332.450271][ T5232] Bluetooth: hci9: command tx timeout [ 333.566667][ T5232] Bluetooth: hci10: command tx timeout [ 334.526331][ T5232] Bluetooth: hci9: command tx timeout [ 335.081086][ T5230] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 335.092375][ T5230] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 335.101270][ T5230] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 335.109828][ T5230] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 335.118173][ T5230] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 335.134419][ T5230] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 335.654904][ T5230] Bluetooth: hci10: command tx timeout [ 337.166565][ T5230] Bluetooth: hci11: command tx timeout [ 339.252371][ T5230] Bluetooth: hci11: command tx timeout [ 341.326333][ T5230] Bluetooth: hci11: command tx timeout [ 343.406270][ T5232] Bluetooth: hci11: command tx timeout [ 345.098497][ T5232] Bluetooth: hci3: command 0x0406 tx timeout [ 367.626606][ T5232] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 367.644539][ T5232] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 367.653561][ T5232] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 367.661768][ T5232] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 367.670904][ T5232] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 367.680965][ T5232] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 369.644906][ T5230] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 369.655369][ T5230] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 369.664945][ T5230] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 369.674282][ T5230] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 369.682038][ T5230] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 369.702709][ T5230] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 369.806393][ T5232] Bluetooth: hci12: command tx timeout [ 371.806915][ T5232] Bluetooth: hci13: command tx timeout [ 371.887897][ T5232] Bluetooth: hci12: command tx timeout [ 373.886351][ T5232] Bluetooth: hci13: command tx timeout [ 373.977461][ T5232] Bluetooth: hci12: command tx timeout [ 375.967714][ T5232] Bluetooth: hci13: command tx timeout [ 376.046385][ T5232] Bluetooth: hci12: command tx timeout [ 378.046564][ T5232] Bluetooth: hci13: command tx timeout [ 378.860638][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 380.934053][ T5230] Bluetooth: hci5: command 0x0406 tx timeout [ 386.051877][ T5232] Bluetooth: hci1: command 0x0406 tx timeout [ 386.058337][ T5219] Bluetooth: hci6: command 0x0406 tx timeout [ 386.740839][ T4618] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 386.751153][ T4618] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 386.759922][ T4618] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 386.769597][ T4618] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 386.777485][ T4618] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 386.809202][ T4618] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 387.767969][ T5230] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 387.779503][ T5230] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 387.790697][ T5230] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 387.802021][ T5230] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 387.813458][ T5230] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 387.824681][ T5230] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 388.846644][ T5230] Bluetooth: hci14: command tx timeout [ 389.886423][ T5230] Bluetooth: hci15: command tx timeout [ 390.926310][ T5230] Bluetooth: hci14: command tx timeout [ 391.966428][ T5230] Bluetooth: hci15: command tx timeout [ 393.006711][ T5230] Bluetooth: hci14: command tx timeout [ 394.046555][ T5230] Bluetooth: hci15: command tx timeout [ 395.087130][ T5230] Bluetooth: hci14: command tx timeout [ 395.808393][ T4618] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 395.830581][ T4618] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 395.839235][ T4618] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 395.850073][ T4618] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 395.858190][ T4618] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 395.865647][ T4618] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 396.128868][ T4618] Bluetooth: hci15: command tx timeout [ 397.966581][ T5230] Bluetooth: hci16: command tx timeout [ 400.046756][ T5230] Bluetooth: hci16: command tx timeout [ 402.126771][ T5230] Bluetooth: hci16: command tx timeout [ 404.207122][ T5230] Bluetooth: hci16: command tx timeout [ 427.734024][ T4618] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 427.745144][ T4618] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 427.763722][ T4618] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 427.773121][ T4618] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 427.781989][ T4618] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 427.796877][ T4618] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 429.769430][ T5230] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 429.782750][ T5230] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 429.791639][ T5230] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 429.806930][ T5230] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 429.815760][ T5230] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 429.823489][ T5230] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 429.889040][ T4618] Bluetooth: hci17: command tx timeout [ 431.208434][ T5391] corsair 0003:1B1C:1B02.0050: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.0-1/input0 [ 431.301353][ T5391] corsair 0003:1B1C:1B02.0050: Failed to get K90 initial state (error -71). [ 431.889118][ T5219] Bluetooth: hci18: command tx timeout [ 431.966913][ T5219] Bluetooth: hci17: command tx timeout [ 432.133973][ T5219] Bluetooth: hci7: command 0x0406 tx timeout [ 432.140380][ T5232] Bluetooth: hci8: command 0x0406 tx timeout [ 433.966759][ T5219] Bluetooth: hci18: command tx timeout [ 434.046424][ T5219] Bluetooth: hci17: command tx timeout [ 435.184855][T13579] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.348221][T13594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.066584][ T5230] Bluetooth: hci18: command tx timeout [ 436.136220][ T5230] Bluetooth: hci17: command tx timeout [ 436.296178][T13718] wg1 speed is unknown, defaulting to 1000 [ 438.133283][ T5230] Bluetooth: hci18: command tx timeout [ 440.299218][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 447.268193][ T4618] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 447.280922][ T4618] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 447.289984][ T4618] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 447.306953][ T4618] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 447.319703][ T4618] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 447.328622][ T4618] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 448.310913][ T5230] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 448.320469][ T5230] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 448.328666][ T5230] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 448.338039][ T5230] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 448.345641][ T5230] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 448.353048][ T5230] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 449.406633][ T4618] Bluetooth: hci0: command tx timeout [ 450.459538][ T4618] Bluetooth: hci1: command tx timeout [ 451.486373][ T4618] Bluetooth: hci0: command tx timeout [ 452.526389][ T4618] Bluetooth: hci1: command tx timeout [ 453.566594][ T4618] Bluetooth: hci0: command tx timeout [ 454.606432][ T4618] Bluetooth: hci1: command tx timeout [ 455.647574][ T4618] Bluetooth: hci0: command tx timeout [ 456.213996][ T4618] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 456.225764][ T4618] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 456.234718][ T4618] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 456.245948][ T4618] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 456.254792][ T4618] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 456.262359][ T4618] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 456.686321][ T4618] Bluetooth: hci1: command tx timeout [ 458.286273][ T4618] Bluetooth: hci5: command tx timeout [ 460.366262][ T4618] Bluetooth: hci5: command tx timeout [ 462.456245][ T4618] Bluetooth: hci5: command tx timeout [ 464.528936][ T4618] Bluetooth: hci5: command tx timeout [ 477.848975][ T5379] usb 5-1: device not accepting address 29, error -71 [ 477.938609][ T5391] usb 1-1: USB disconnect, device number 36 [ 478.586239][T13735] wg1 speed is unknown, defaulting to 1000 [ 479.264818][T13579] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.910013][ T63] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.304502][ T5230] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 488.316705][ T5230] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 488.331448][ T5230] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 488.339558][ T5230] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 488.349348][ T5230] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 488.359186][ T5230] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 490.307046][ T4618] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 490.316789][ T4618] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 490.326464][ T4618] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 490.338069][ T4618] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 490.345637][ T4618] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 490.355005][ T4618] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 490.456570][ T4618] Bluetooth: hci3: command tx timeout [ 492.446448][ T4618] Bluetooth: hci8: command tx timeout [ 492.535650][ T4618] Bluetooth: hci3: command tx timeout [ 494.528860][ T4618] Bluetooth: hci8: command tx timeout [ 494.606880][ T4618] Bluetooth: hci3: command tx timeout [ 496.615031][ T4618] Bluetooth: hci8: command tx timeout [ 496.686758][ T5230] Bluetooth: hci3: command tx timeout [ 498.686357][ T5230] Bluetooth: hci8: command tx timeout [ 501.738815][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.782896][ T5219] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 507.793913][ T5219] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 507.802408][ T5219] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 507.812371][ T5219] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 507.820199][ T5219] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 507.832694][ T5219] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 508.805366][ T5230] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 508.817568][ T5230] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 508.828053][ T5230] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 508.839056][ T5230] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 508.848393][ T5230] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 508.857691][ T5230] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 508.929870][ T5230] Bluetooth: hci14: command 0x0406 tx timeout [ 509.886247][ T4618] Bluetooth: hci9: command tx timeout [ 510.935787][ T4618] Bluetooth: hci10: command tx timeout [ 511.969587][ T4618] Bluetooth: hci9: command tx timeout [ 513.006574][ T5219] Bluetooth: hci10: command tx timeout [ 514.050894][ T5219] Bluetooth: hci15: command 0x0406 tx timeout [ 514.059424][ T5230] Bluetooth: hci9: command tx timeout [ 515.086387][ T4618] Bluetooth: hci10: command tx timeout [ 516.126711][ T4618] Bluetooth: hci9: command tx timeout [ 516.807537][ T5219] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 516.818153][ T5219] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 516.827054][ T5219] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 516.836369][ T5219] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 516.850546][ T5219] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 516.859066][ T5219] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 517.176255][ T5219] Bluetooth: hci10: command tx timeout [ 518.926664][ T5219] Bluetooth: hci11: command tx timeout [ 519.176926][ T5219] Bluetooth: hci16: command 0x0406 tx timeout [ 521.007730][ T4618] Bluetooth: hci11: command tx timeout [ 523.088761][ T4618] Bluetooth: hci11: command tx timeout [ 525.166377][ T4618] Bluetooth: hci11: command tx timeout [ 533.407856][T13579] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.230772][ T5219] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 549.243008][ T5219] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 549.254248][ T5219] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 549.263366][ T5219] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 549.271212][ T5219] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 549.279108][ T5219] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 551.248452][ T4618] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 551.260405][ T4618] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 551.271796][ T4618] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 551.281214][ T4618] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 551.289030][ T4618] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 551.324683][ T4618] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 551.332535][ T4618] Bluetooth: hci12: command tx timeout [ 553.406691][ T4618] Bluetooth: hci13: command tx timeout [ 553.413415][ T4618] Bluetooth: hci12: command tx timeout [ 555.013506][T13792] Bluetooth: hci18: command 0x0406 tx timeout [ 555.019846][ T5232] Bluetooth: hci17: command 0x0406 tx timeout [ 555.489312][T13792] Bluetooth: hci12: command tx timeout [ 555.494855][T13792] Bluetooth: hci13: command tx timeout [ 557.577901][T13792] Bluetooth: hci13: command tx timeout [ 557.583445][T13792] Bluetooth: hci12: command tx timeout [ 559.646434][T13792] Bluetooth: hci13: command tx timeout [ 563.170298][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.271114][ T5232] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 568.292898][ T4618] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 568.302332][ T4618] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 568.312456][ T4618] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 568.320266][ T4618] Bluetooth: hci19: unexpected cc 0x0c25 length: 249 > 3 [ 568.329482][ T4618] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 569.746018][T13801] Bluetooth: hci20: unexpected cc 0x0c03 length: 249 > 1 [ 569.757133][T13801] Bluetooth: hci20: unexpected cc 0x1003 length: 249 > 9 [ 569.766535][T13801] Bluetooth: hci20: unexpected cc 0x1001 length: 249 > 9 [ 569.774657][T13801] Bluetooth: hci20: unexpected cc 0x0c23 length: 249 > 4 [ 569.787629][T13801] Bluetooth: hci20: unexpected cc 0x0c25 length: 249 > 3 [ 569.795205][T13801] Bluetooth: hci20: unexpected cc 0x0c38 length: 249 > 2 [ 570.366626][T13801] Bluetooth: hci0: command 0x0406 tx timeout [ 575.486607][T13803] Bluetooth: hci1: command 0x0406 tx timeout [ 577.836472][T13808] Bluetooth: hci21: unexpected cc 0x0c03 length: 249 > 1 [ 577.870808][T13808] Bluetooth: hci21: unexpected cc 0x1003 length: 249 > 9 [ 577.879890][T13808] Bluetooth: hci21: unexpected cc 0x1001 length: 249 > 9 [ 577.889196][T13808] Bluetooth: hci21: unexpected cc 0x0c23 length: 249 > 4 [ 577.898237][T13808] Bluetooth: hci21: unexpected cc 0x0c25 length: 249 > 3 [ 577.908590][T13808] Bluetooth: hci21: unexpected cc 0x0c38 length: 249 > 2 [ 580.622145][T13810] Bluetooth: hci5: command 0x0406 tx timeout [ 581.086896][ T30] INFO: task syz-executor:13724 blocked for more than 143 seconds. [ 581.094855][ T30] Not tainted 6.12.0-rc3-syzkaller-00007-g6485cf5ea253 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 581.148762][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 581.215585][ T30] task:syz-executor state:D stack:24128 pid:13724 tgid:13724 ppid:1 flags:0x00004006 [ 581.306372][ T30] Call Trace: [ 581.309709][ T30] [ 581.312671][ T30] __schedule+0x1843/0x4ae0 [ 581.386569][ T30] ? __pfx___schedule+0x10/0x10 [ 581.392084][ T30] ? __pfx_lock_release+0x10/0x10 [ 581.426507][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 581.432045][ T30] ? schedule+0x90/0x320 [ 581.459688][ T30] schedule+0x14b/0x320 [ 581.463908][ T30] schedule_preempt_disabled+0x13/0x30 [ 581.506565][ T30] __mutex_lock+0x6a7/0xd70 [ 581.511130][ T30] ? xas_find_marked+0xf80/0x10e0 [ 581.546383][ T30] ? __mutex_lock+0x52a/0xd70 [ 581.551125][ T30] ? add_one_compat_dev+0x10d/0x710 [ 581.591554][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 581.616049][ T30] ? xa_find+0x36c/0x420 [ 581.620438][ T30] ? __pfx_down_read+0x10/0x10 [ 581.625243][ T30] add_one_compat_dev+0x10d/0x710 [ 581.667484][ T30] ? fs_reclaim_acquire+0x93/0x130 [ 581.672736][ T30] rdma_dev_init_net+0x1f1/0x280 [ 581.726512][ T30] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 581.732062][ T30] ops_init+0x31e/0x590 [ 581.761277][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 581.786250][ T30] setup_net+0x287/0x9e0 [ 581.790558][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 581.826435][ T30] ? __pfx_setup_net+0x10/0x10 [ 581.831285][ T30] copy_net_ns+0x33f/0x570 [ 581.835743][ T30] create_new_namespaces+0x425/0x7b0 [ 581.906320][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 581.912124][ T30] ksys_unshare+0x57d/0xa70 [ 581.945780][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 581.976281][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 582.006304][ T30] ? do_syscall_64+0x100/0x230 [ 582.011137][ T30] __x64_sys_unshare+0x38/0x40 [ 582.015924][ T30] do_syscall_64+0xf3/0x230 [ 582.056143][ T30] ? clear_bhb_loop+0x35/0x90 [ 582.060894][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.105845][ T30] RIP: 0033:0x7f02cdb7f7f7 [ 582.126435][ T30] RSP: 002b:00007fffb3a07678 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 582.134920][ T30] RAX: ffffffffffffffda RBX: 00007f02cdd35f40 RCX: 00007f02cdb7f7f7 [ 582.206280][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 582.214311][ T30] RBP: 00007f02cdd36a38 R08: 0000000000000000 R09: 0000000000000000 [ 582.266562][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 582.306292][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 582.336284][ T30] [ 582.348695][ T30] INFO: task syz-executor:13730 blocked for more than 144 seconds. [ 582.392936][ T30] Not tainted 6.12.0-rc3-syzkaller-00007-g6485cf5ea253 #0 [ 582.429159][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 582.476351][ T30] task:syz-executor state:D stack:24128 pid:13730 tgid:13730 ppid:1 flags:0x00004006 [ 582.526716][ T30] Call Trace: [ 582.530057][ T30] [ 582.533018][ T30] __schedule+0x1843/0x4ae0 [ 582.566314][ T30] ? __pfx___schedule+0x10/0x10 [ 582.571229][ T30] ? __pfx_lock_release+0x10/0x10 [ 582.616598][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 582.622130][ T30] ? schedule+0x90/0x320 [ 582.657379][ T30] schedule+0x14b/0x320 [ 582.661608][ T30] schedule_preempt_disabled+0x13/0x30 [ 582.695147][ T30] __mutex_lock+0x6a7/0xd70 [ 582.726833][ T30] ? xas_find_marked+0xf80/0x10e0 [ 582.731921][ T30] ? __mutex_lock+0x52a/0xd70 [ 582.767682][ T30] ? add_one_compat_dev+0x10d/0x710 [ 582.772955][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 582.816205][ T30] ? xa_find+0x36c/0x420 [ 582.820519][ T30] ? __pfx_down_read+0x10/0x10 [ 582.825323][ T30] add_one_compat_dev+0x10d/0x710 [ 582.866153][ T30] ? fs_reclaim_acquire+0x93/0x130 [ 582.871336][ T30] rdma_dev_init_net+0x1f1/0x280 [ 582.906144][ T30] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 582.911683][ T30] ops_init+0x31e/0x590 [ 582.915867][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 582.985708][ T30] setup_net+0x287/0x9e0 [ 582.992502][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 583.026321][ T30] ? __pfx_setup_net+0x10/0x10 [ 583.031648][ T30] copy_net_ns+0x33f/0x570 [ 583.066761][ T30] create_new_namespaces+0x425/0x7b0 [ 583.072132][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 583.097693][ T30] ksys_unshare+0x57d/0xa70 [ 583.102273][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 583.136187][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 583.142597][ T30] ? do_syscall_64+0x100/0x230 [ 583.195558][ T30] __x64_sys_unshare+0x38/0x40 [ 583.207472][ T30] do_syscall_64+0xf3/0x230 [ 583.212026][ T30] ? clear_bhb_loop+0x35/0x90 [ 583.246736][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.252707][ T30] RIP: 0033:0x7f3826b7f7f7 [ 583.297943][ T30] RSP: 002b:00007ffd029d9888 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 583.326504][ T30] RAX: ffffffffffffffda RBX: 00007f3826d35f40 RCX: 00007f3826b7f7f7 [ 583.334542][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 583.400397][ T30] RBP: 00007f3826d36a38 R08: 0000000000000000 R09: 0000000000000000 [ 583.436165][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000c [ 583.476124][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 583.484173][ T30] [ 583.516463][ T30] [ 583.516463][ T30] Showing all locks held in the system: [ 583.524228][ T30] 3 locks held by kworker/0:0/8: [ 583.576619][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 583.616484][ T30] #1: ffffc900000d7d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 583.676350][ T30] #2: ffffffff8fcbffc8 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 583.716279][ T30] 4 locks held by kworker/0:1/9: [ 583.721272][ T30] 3 locks held by ksoftirqd/0/16: [ 583.774530][ T30] 1 lock held by khungtaskd/30: [ 583.795136][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 583.836355][ T30] 3 locks held by kworker/u8:3/52: [ 583.841520][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 583.926381][ T30] #1: ffffc90000bd7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 583.977504][ T30] #2: ffffffff8fcbffc8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 584.016350][ T30] 6 locks held by kworker/u8:4/63: [ 584.021516][ T30] #0: ffff88801baeb148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 584.096241][ T30] #1: ffffc900015e7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 584.136438][ T30] #2: ffffffff8fcb34d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 584.176547][ T30] #3: ffff8880602900e8 (&dev->mutex){....}-{3:3}, at: devlink_pernet_pre_exit+0x13b/0x440 [ 584.216306][ T30] #4: ffff888060293250 (&devlink->lock_key#8){+.+.}-{3:3}, at: devlink_pernet_pre_exit+0x14d/0x440 [ 584.251661][ T30] #5: ffffffff8fcbffc8 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 584.296648][ T30] 3 locks held by kworker/u8:5/963: [ 584.301896][ T30] #0: ffff88814bac2948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 584.386810][ T30] #1: ffffc90003937d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 584.434090][ T30] #2: ffffffff8fcbffc8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 584.476510][ T30] 2 locks held by kworker/u8:6/1596: [ 584.481866][ T30] 4 locks held by kworker/u9:1/4618: [ 584.528153][ T30] #0: ffff8880512f0148 ((wq_completion)hci19#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 584.566573][ T30] #1: ffffc9000d98fd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 584.616771][ T30] #2: ffff8880488c0078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaa0 [ 584.663504][ T30] #3: ffffffff8fe2c8e8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x473/0xaa0 [ 584.706149][ T30] 2 locks held by getty/4974: [ 584.710873][ T30] #0: ffff88814c0650a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 584.766445][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 584.816526][ T30] 5 locks held by kworker/u9:2/5219: [ 584.821858][ T30] #0: ffff88802333c948 ((wq_completion)hci18){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 584.886199][ T30] #1: ffffc90002d1fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 584.956886][ T30] #2: ffff888045228d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 584.986448][ T30] #3: ffff888045228078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 585.026197][ T30] #4: ffffffff8fe2c8e8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 585.036042][ T30] 6 locks held by kworker/u9:6/5230: [ 585.106436][ T30] #0: ffff88803676b148 ((wq_completion)hci17){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 585.141081][ T30] #1: ffffc90004087d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 585.205346][ T30] #2: ffff88803012cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 585.246482][ T30] #3: ffff88803012c078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 585.286517][ T30] #4: ffffffff8fe2c8e8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 585.326430][ T30] #5: ffffffff8e93d378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 585.376610][ T30] 5 locks held by kworker/u9:7/5232: [ 585.381944][ T30] #0: ffff88807dbfe148 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 585.446295][ T30] #1: ffffc900040a7d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 585.491538][ T30] #2: ffff8880337d4d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 585.536692][ T30] #3: ffff8880337d4078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 585.592986][ T30] #4: ffffffff8fe2c8e8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 585.637586][ T30] 7 locks held by kworker/0:6/5379: [ 585.642831][ T30] 3 locks held by kworker/0:7/5391: [ 585.686599][ T30] 2 locks held by syz.4.2990/12157: [ 585.691852][ T30] #0: ffffffff8fd25d30 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 585.755701][ T30] #1: ffffffff8ec176c8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_listener_set_doit+0x12d/0x1a90 [ 585.796310][ T30] 1 lock held by syz.3.3094/12395: [ 585.826599][ T30] 1 lock held by syz.2.3466/13444: [ 585.831760][ T30] 2 locks held by iou-sqp-13467/13468: [ 585.876134][ T30] 7 locks held by syz-executor/13579: [ 585.881562][ T30] #0: ffff88802e560420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 585.926677][ T30] #1: ffff88807d968c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 585.967894][ T30] #2: ffff888144b58698 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 586.025964][ T30] #3: ffffffff8f55e0a8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 586.066158][ T30] #4: ffff888144a970e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 586.106412][ T30] #5: ffff888144a95250 (&devlink->lock_key#10){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 586.156538][ T30] #6: ffffffff8fcbffc8 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 586.187538][ T30] 2 locks held by syz-executor/13718: [ 586.192962][ T30] #0: ffffffff8fcb34d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 586.256686][ T30] #1: ffffffff8fcbffc8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 586.306162][ T30] 6 locks held by syz-executor/13721: [ 586.311586][ T30] #0: ffffffff8fcb34d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 586.356300][ T30] #1: ffffffff8fa2f1d0 (devices_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x198/0x280 [ 586.407740][ T30] #2: ffffffff8fa2f390 (rdma_nets_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x1e6/0x280 [ 586.456698][ T30] #3: ffff888027f6cf38 (&device->compat_devs_mutex){+.+.}-{3:3}, at: add_one_compat_dev+0x10d/0x710 [ 586.517419][ T30] #4: ffff888027f6d230 (&rxe->usdev_lock){+.+.}-{3:3}, at: rxe_query_port+0x61/0x260 [ 586.555668][ T30] #5: ffffffff8fcbffc8 (rtnl_mutex){+.+.}-{3:3}, at: ib_get_eth_speed+0x153/0x800 [ 586.606240][ T30] 4 locks held by syz-executor/13724: [ 586.611655][ T30] #0: ffffffff8fcb34d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 586.656436][ T30] #1: ffffffff8fa2f1d0 (devices_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x198/0x280 [ 586.696794][ T30] #2: ffffffff8fa2f390 (rdma_nets_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x1e6/0x280 [ 586.737850][ T30] #3: ffff888027f6cf38 (&device->compat_devs_mutex){+.+.}-{3:3}, at: add_one_compat_dev+0x10d/0x710 [ 586.788766][ T30] 4 locks held by syz-executor/13730: [ 586.794187][ T30] #0: ffffffff8fcb34d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 586.859827][ T30] #1: ffffffff8fa2f1d0 (devices_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x198/0x280 [ 586.896173][ T30] #2: ffffffff8fa2f390 (rdma_nets_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x1e6/0x280 [ 586.956820][ T30] #3: ffff888027f6cf38 (&device->compat_devs_mutex){+.+.}-{3:3}, at: add_one_compat_dev+0x10d/0x710 [ 587.016642][ T30] 2 locks held by syz-executor/13735: [ 587.022066][ T30] #0: ffffffff8fcb34d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 587.066476][ T30] #1: ffffffff8fcbffc8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 587.106674][ T30] 4 locks held by syz-executor/13740: [ 587.112101][ T30] #0: ffffffff8fcb34d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 587.176343][ T30] #1: ffffffff8fa2f1d0 (devices_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x198/0x280 [ 587.226652][ T30] #2: ffffffff8fa2f390 (rdma_nets_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x1e6/0x280 [ 587.266626][ T30] #3: ffff888027f6cf38 (&device->compat_devs_mutex){+.+.}-{3:3}, at: add_one_compat_dev+0x10d/0x710 [ 587.316402][ T30] 2 locks held by syz-executor/13745: [ 587.321837][ T30] #0: ffffffff8fcb34d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 587.366530][ T30] #1: ffffffff8fcbffc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 587.416143][ T30] 2 locks held by syz-executor/13748: [ 587.421573][ T30] #0: ffffffff8fcb34d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 587.488546][ T30] #1: ffffffff8fcbffc8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 587.536508][ T30] 4 locks held by syz-executor/13762: [ 587.541941][ T30] #0: ffffffff8fcb34d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 587.596540][ T30] #1: ffffffff8fa2f1d0 (devices_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x198/0x280 [ 587.646306][ T30] #2: ffffffff8fa2f390 (rdma_nets_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x1e6/0x280 [ 587.686622][ T30] #3: ffff888027f6cf38 (&device->compat_devs_mutex){+.+.}-{3:3}, at: add_one_compat_dev+0x10d/0x710 [ 587.730819][ T30] 1 lock held by syz-executor/13767: [ 587.756260][ T30] #0: ffffffff8fcbffc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 587.765754][ T30] 1 lock held by syz-executor/13771: [ 587.802970][ T30] #0: ffffffff8fcbffc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 587.866340][ T30] 1 lock held by syz-executor/13776: [ 587.871676][ T30] #0: ffffffff8fcbffc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 587.934028][ T30] 1 lock held by syz-executor/13781: [ 587.966785][ T30] #0: ffffffff8fcbffc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 588.007693][ T30] 1 lock held by syz-executor/13786: [ 588.013026][ T30] #0: ffffffff8fcbffc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 588.076327][ T30] 1 lock held by syz-executor/13790: [ 588.081665][ T30] #0: ffffffff8fcbffc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 588.136297][ T30] 4 locks held by kworker/u9:0/13792: [ 588.141719][ T30] #0: ffff888046dd2148 ((wq_completion)hci20#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 588.220277][ T30] #1: ffffc9000304fd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 588.266493][ T30] #2: ffff888079e28078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaa0 [ 588.306656][ T30] #3: ffffffff8fe2c8e8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x473/0xaa0 [ 588.354211][ T30] 1 lock held by syz-executor/13794: [ 588.376704][ T30] #0: ffffffff8fcbffc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 588.419984][ T30] 1 lock held by syz-executor/13800: [ 588.425318][ T30] #0: ffffffff8fcbffc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 588.486323][ T30] 5 locks held by kworker/u9:4/13801: [ 588.491755][ T30] #0: ffff88804e26e148 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 588.556513][ T30] #1: ffffc90002e9fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 588.606417][ T30] #2: ffff888079b48d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 588.666000][ T30] #3: ffff888079b48078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 588.716328][ T30] #4: ffffffff8fe2c8e8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 588.757976][ T30] 4 locks held by kworker/u9:5/13803: [ 588.763397][ T30] #0: ffff88804c214948 ((wq_completion)hci21#2){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 588.837144][ T30] #1: ffffc90002e2fd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 588.896380][ T30] #2: ffff88804c208078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaa0 [ 588.926383][ T30] #3: ffffffff8fe2c8e8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x473/0xaa0 [ 588.977836][ T30] 1 lock held by syz-executor/13805: [ 588.983168][ T30] #0: ffffffff8fcbffc8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 589.046242][ T30] 5 locks held by kworker/u9:8/13808: [ 589.051663][ T30] #0: ffff888039c12148 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 589.126345][ T30] #1: ffffc90002defd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 589.176522][ T30] #2: ffff88803b67cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 589.237668][ T30] #3: ffff88803b67c078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 589.286485][ T30] #4: ffffffff8fe2c8e8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x15d/0x300 [ 589.326864][ T30] [ 589.329235][ T30] ============================================= [ 589.329235][ T30] [ 589.378842][ T30] NMI backtrace for cpu 1 [ 589.383221][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc3-syzkaller-00007-g6485cf5ea253 #0 [ 589.393743][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 589.403821][ T30] Call Trace: [ 589.407150][ T30] [ 589.410099][ T30] dump_stack_lvl+0x241/0x360 [ 589.414804][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 589.420024][ T30] ? __pfx__printk+0x10/0x10 [ 589.424648][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 589.429610][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 589.435085][ T30] ? _printk+0xd5/0x120 [ 589.439268][ T30] ? __pfx__printk+0x10/0x10 [ 589.443875][ T30] ? __wake_up_klogd+0xcc/0x110 [ 589.448746][ T30] ? __pfx__printk+0x10/0x10 [ 589.453356][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 589.458404][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 589.464402][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 589.470407][ T30] watchdog+0xff4/0x1040 [ 589.474674][ T30] ? watchdog+0x1ea/0x1040 [ 589.479165][ T30] ? __pfx_watchdog+0x10/0x10 [ 589.483866][ T30] kthread+0x2f0/0x390 [ 589.487954][ T30] ? __pfx_watchdog+0x10/0x10 [ 589.492651][ T30] ? __pfx_kthread+0x10/0x10 [ 589.497261][ T30] ret_from_fork+0x4b/0x80 [ 589.501702][ T30] ? __pfx_kthread+0x10/0x10 [ 589.506311][ T30] ret_from_fork_asm+0x1a/0x30 [ 589.511181][ T30] [ 589.515849][ T30] Sending NMI from CPU 1 to CPUs 0: [ 589.521909][ C0] NMI backtrace for cpu 0 [ 589.521922][ C0] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:1 Not tainted 6.12.0-rc3-syzkaller-00007-g6485cf5ea253 #0 [ 589.521940][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 589.521951][ C0] Workqueue: wg-crypt-wg1 wg_packet_decrypt_worker [ 589.521978][ C0] RIP: 0010:mark_lock+0xa2/0x360 [ 589.521997][ C0] Code: 00 8b 1b 81 e3 ff 1f 00 00 48 89 d8 48 c1 e8 06 48 8d 3c c5 00 28 29 94 be 08 00 00 00 e8 66 a8 8a 00 48 0f a3 1d de 59 b8 12 <73> 10 48 69 c3 c8 00 00 00 48 8d 98 c0 a6 c0 93 eb 68 48 c7 c0 40 [ 589.522011][ C0] RSP: 0018:ffffc90000006ef8 EFLAGS: 00000057 [ 589.522024][ C0] RAX: 0000000000000001 RBX: 0000000000000787 RCX: ffffffff8170ce1a [ 589.522036][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff942928f0 [ 589.522046][ C0] RBP: 0000000000000002 R08: ffffffff942928f7 R09: 1ffffffff285251e [ 589.522058][ C0] R10: dffffc0000000000 R11: fffffbfff285251f R12: ffff88801bee0b00 [ 589.522071][ C0] R13: dffffc0000000000 R14: 0000000000000004 R15: ffff88801bee0ae0 [ 589.522082][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 589.522096][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 589.522108][ C0] CR2: 0000000000000000 CR3: 000000000e734000 CR4: 00000000003526f0 [ 589.522121][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 589.522131][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 589.522141][ C0] Call Trace: [ 589.522147][ C0] [ 589.522154][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 589.522174][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 589.522198][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 589.522222][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 589.522243][ C0] ? nmi_handle+0x14f/0x5a0 [ 589.522259][ C0] ? nmi_handle+0x2a/0x5a0 [ 589.522276][ C0] ? mark_lock+0xa2/0x360 [ 589.522290][ C0] ? default_do_nmi+0x63/0x160 [ 589.522310][ C0] ? exc_nmi+0x123/0x1f0 [ 589.522329][ C0] ? end_repeat_nmi+0xf/0x53 [ 589.522352][ C0] ? mark_lock+0x9a/0x360 [ 589.522367][ C0] ? mark_lock+0xa2/0x360 [ 589.522382][ C0] ? mark_lock+0xa2/0x360 [ 589.522397][ C0] ? mark_lock+0xa2/0x360 [ 589.522412][ C0] [ 589.522417][ C0] [ 589.522425][ C0] lockdep_hardirqs_on_prepare+0x282/0x780 [ 589.522449][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 589.522473][ C0] ? rcu_is_watching+0x15/0xb0 [ 589.522491][ C0] trace_hardirqs_on+0x28/0x40 [ 589.522510][ C0] call_rcu+0x731/0xa70 [ 589.522530][ C0] ? __pfx_call_rcu+0x10/0x10 [ 589.522547][ C0] ? percpu_counter_add_batch+0xff/0x1f0 [ 589.522574][ C0] skb_release_head_state+0x73/0x250 [ 589.522592][ C0] consume_skb+0x60/0xf0 [ 589.522607][ C0] nft_synproxy_eval_v4+0x3d2/0x610 [ 589.522632][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 589.522655][ C0] ? NF_HOOK+0x29e/0x450 [ 589.522673][ C0] ? nf_ip_checksum+0x13a/0x500 [ 589.522689][ C0] nft_synproxy_do_eval+0x362/0xa60 [ 589.522714][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 589.522737][ C0] ? __lock_acquire+0x1384/0x2050 [ 589.522761][ C0] ? __pfx_validate_chain+0x10/0x10 [ 589.522781][ C0] nft_do_chain+0x4ad/0x1da0 [ 589.522800][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 589.522814][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 589.522847][ C0] nft_do_chain_inet+0x418/0x6b0 [ 589.522871][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 589.522893][ C0] ? ipt_do_table+0x312/0x1860 [ 589.522922][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 589.522944][ C0] nf_hook_slow+0xc3/0x220 [ 589.522964][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 589.522983][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 589.523001][ C0] NF_HOOK+0x29e/0x450 [ 589.523019][ C0] ? NF_HOOK+0x9a/0x450 [ 589.523036][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 589.523054][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 589.523074][ C0] ? ip_rcv_finish+0x406/0x560 [ 589.523092][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 589.523110][ C0] NF_HOOK+0x3a4/0x450 [ 589.523128][ C0] ? NF_HOOK+0x9a/0x450 [ 589.523144][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 589.523160][ C0] ? ip_rcv_core+0x801/0xd10 [ 589.523178][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 589.523199][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 589.523216][ C0] __netif_receive_skb+0x2bf/0x650 [ 589.523237][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 589.523259][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 589.523278][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 589.523301][ C0] ? __pfx_lock_release+0x10/0x10 [ 589.523323][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 589.523352][ C0] process_backlog+0x662/0x15b0 [ 589.523374][ C0] ? process_backlog+0x33b/0x15b0 [ 589.523397][ C0] ? __pfx_process_backlog+0x10/0x10 [ 589.523417][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 589.523440][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 589.523464][ C0] __napi_poll+0xcb/0x490 [ 589.523484][ C0] net_rx_action+0x89b/0x1240 [ 589.523512][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 589.523532][ C0] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 589.523566][ C0] handle_softirqs+0x2c5/0x980 [ 589.523587][ C0] ? do_softirq+0x11b/0x1e0 [ 589.523607][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 589.523631][ C0] do_softirq+0x11b/0x1e0 [ 589.523649][ C0] [ 589.523655][ C0] [ 589.523660][ C0] ? __pfx_do_softirq+0x10/0x10 [ 589.523680][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 589.523702][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 589.523725][ C0] ? rcu_is_watching+0x15/0xb0 [ 589.523742][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 589.523762][ C0] ? wg_packet_decrypt_worker+0xcde/0xd80 [ 589.523783][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 589.523805][ C0] ? wg_packet_decrypt_worker+0x8b3/0xd80 [ 589.523827][ C0] wg_packet_decrypt_worker+0xcde/0xd80 [ 589.523855][ C0] ? __pfx_wg_packet_decrypt_worker+0x10/0x10 [ 589.523903][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 589.523926][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 589.523952][ C0] ? process_scheduled_works+0x976/0x1850 [ 589.523974][ C0] process_scheduled_works+0xa63/0x1850 [ 589.524004][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 589.524028][ C0] ? assign_work+0x364/0x3d0 [ 589.524049][ C0] worker_thread+0x870/0xd30 [ 589.524075][ C0] ? __kthread_parkme+0x169/0x1d0 [ 589.524099][ C0] ? __pfx_worker_thread+0x10/0x10 [ 589.524120][ C0] kthread+0x2f0/0x390 [ 589.524134][ C0] ? __pfx_worker_thread+0x10/0x10 [ 589.524155][ C0] ? __pfx_kthread+0x10/0x10 [ 589.524170][ C0] ret_from_fork+0x4b/0x80 [ 589.524192][ C0] ? __pfx_kthread+0x10/0x10 [ 589.524206][ C0] ret_from_fork_asm+0x1a/0x30 [ 589.524241][ C0] [ 590.977066][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 590.983965][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc3-syzkaller-00007-g6485cf5ea253 #0 [ 590.994493][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 591.004563][ T30] Call Trace: [ 591.007858][ T30] [ 591.010802][ T30] dump_stack_lvl+0x241/0x360 [ 591.015503][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 591.020731][ T30] ? __pfx__printk+0x10/0x10 [ 591.025335][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 591.031350][ T30] ? vscnprintf+0x5d/0x90 [ 591.035702][ T30] panic+0x349/0x880 [ 591.039615][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 591.045793][ T30] ? __pfx_panic+0x10/0x10 [ 591.050228][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 591.055616][ T30] ? __irq_work_queue_local+0x137/0x410 [ 591.061184][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 591.066578][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 591.072754][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 591.078930][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 591.085110][ T30] watchdog+0x1033/0x1040 [ 591.089463][ T30] ? watchdog+0x1ea/0x1040 [ 591.093907][ T30] ? __pfx_watchdog+0x10/0x10 [ 591.098608][ T30] kthread+0x2f0/0x390 [ 591.102702][ T30] ? __pfx_watchdog+0x10/0x10 [ 591.107404][ T30] ? __pfx_kthread+0x10/0x10 [ 591.112010][ T30] ret_from_fork+0x4b/0x80 [ 591.116446][ T30] ? __pfx_kthread+0x10/0x10 [ 591.121052][ T30] ret_from_fork_asm+0x1a/0x30