last executing test programs: 2m3.605291954s ago: executing program 1 (id=143): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 2m3.372438491s ago: executing program 1 (id=144): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfd, {{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa0, 0x80, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x101, 0x0, 0x0, 0x4, 0xb}, {0x2, 0x800000000008}, 0x4, 0x400000, 0x0, 0x0, 0x0, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x44}, 0x40) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb00148008000b"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 2m2.896458463s ago: executing program 1 (id=147): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0, 0x500}, {&(0x7f0000001a00)=""/4109, 0x100d}, {0x0}, {&(0x7f00000004c0)=""/121, 0x79}], 0x4}, 0x8}, {{0x0, 0x0, 0x0}, 0xc}], 0x7, 0x40000020, 0x0) 2m2.450688593s ago: executing program 1 (id=153): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x3) ppoll(&(0x7f0000003840)=[{r0, 0x40}], 0x1, 0x0, 0x0, 0x0) 2m2.145969127s ago: executing program 1 (id=157): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 2m1.854878445s ago: executing program 1 (id=160): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x202000, 0x0) preadv(r0, 0x0, 0x0, 0x5, 0xfffffff7) 1m46.362868241s ago: executing program 32 (id=160): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x202000, 0x0) preadv(r0, 0x0, 0x0, 0x5, 0xfffffff7) 1m8.253075679s ago: executing program 4 (id=575): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001200970226bd700000000000072a"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 1m7.917689579s ago: executing program 4 (id=580): r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @broadcast}, 0x4}}, 0x26) 1m7.635118276s ago: executing program 4 (id=584): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0x3) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000080)={0x281, 0x3}) 1m6.871423465s ago: executing program 4 (id=593): r0 = memfd_create(&(0x7f0000000500)='\x00'/12, 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x11, r0, 0x0) ftruncate(r0, 0x1000000) 1m6.562906169s ago: executing program 4 (id=599): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000100000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='kfree\x00', r0}, 0x18) syz_usb_connect(0x0, 0x24, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0x4b, 0x42, 0xe6, 0x8, 0x1a0a, 0x103, 0xad1d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf6, 0x39, 0xbe}}]}}]}}, 0x0) 1m4.614281605s ago: executing program 4 (id=611): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) 51.625195053s ago: executing program 0 (id=659): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_delrule={0x1c, 0x1e, 0x1}, 0x1c}}, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0"], 0x1c) 51.230340383s ago: executing program 0 (id=661): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xd0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) 49.266151464s ago: executing program 33 (id=611): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) 47.680404762s ago: executing program 3 (id=672): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r1, r0, 0x0, r0}, 0x10) 47.20083628s ago: executing program 3 (id=673): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "88"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x60}}, 0x40) 40.138175851s ago: executing program 0 (id=675): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x13) write(r0, &(0x7f0000000080)="d4c0", 0x2) 40.135048716s ago: executing program 3 (id=677): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x44, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}]}]}, 0x44}}, 0x0) 40.13477188s ago: executing program 0 (id=678): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x4001, 0x1, 0x0, 0x9}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@ipv6_getaddr={0x18, 0x16, 0x1, 0x70bd2c, 0x25dfdbfb, {0xa, 0x0, 0x0, 0xfd}}, 0x18}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000010) 39.748420353s ago: executing program 0 (id=679): bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8b0b, &(0x7f0000000200)={'wlan1\x00', @random="9ffff7070600"}) 37.829105784s ago: executing program 5 (id=680): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$swradio(&(0x7f00000004c0), 0x1, 0x2) pread64(r0, &(0x7f0000000700)=""/115, 0x73, 0x5) 36.351570241s ago: executing program 3 (id=682): r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) setreuid(0x0, 0xee00) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)={0x0, 0x4, 0x5d}) 36.351437189s ago: executing program 0 (id=683): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001d00070f000200000000000007000000", @ANYRES32=r1, @ANYBLOB='\x00\x00g\x00\b\x00\b\x00', @ANYRESOCT], 0x24}}, 0x0) 36.351154866s ago: executing program 3 (id=685): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000005c0), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002ab97000ffdbdf25040000000800020005000000080007007f0000e0070008"], 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x24004854) 36.350975151s ago: executing program 5 (id=686): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x14}, 0x8f) 36.350777659s ago: executing program 3 (id=687): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000040000a50000000060a0904000000000000000002000003240004800c000180080001006c6f6700140001800c000100636f756e74657200040002800900010073797a30000000000900020073797a32"], 0x78}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 36.349039419s ago: executing program 5 (id=689): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000a80)) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, 0x0) umount2(&(0x7f00000001c0)='./cgroup\x00', 0x3) 26.520054711s ago: executing program 5 (id=692): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x2c, r1, 0x1, 0x400000, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 26.008642101s ago: executing program 5 (id=694): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x17, 0x56, 0xd23}, 0x18}}, 0x0) 22.648199258s ago: executing program 34 (id=683): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001d00070f000200000000000007000000", @ANYRES32=r1, @ANYBLOB='\x00\x00g\x00\b\x00\b\x00', @ANYRESOCT], 0x24}}, 0x0) 21.549408589s ago: executing program 35 (id=687): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000040000a50000000060a0904000000000000000002000003240004800c000180080001006c6f6700140001800c000100636f756e74657200040002800900010073797a30000000000900020073797a32"], 0x78}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 17.140798187s ago: executing program 5 (id=697): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_setup(0x3, &(0x7f00000004c0)=0x0) io_submit(r1, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) 16.64328991s ago: executing program 2 (id=699): unshare(0x480) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, 0x0, 0x0) 16.486988606s ago: executing program 2 (id=700): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x18, r1, 0x4, 0x0, &(0x7f0000000000)=[{0x0, 0x1}, {0x3, 0x5}, {0xd, 0x402}, {0x9, 0x7}]}) 16.197499362s ago: executing program 2 (id=701): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000010000100fffffff5000000000a00000a20000000000a0108000000000000000001"], 0x9c}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0x3, 0xa0002f5}) 15.944947512s ago: executing program 2 (id=702): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x0) 15.72220293s ago: executing program 2 (id=703): r0 = syz_open_dev$cec(&(0x7f00000004c0), 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000040)={0xd0}) ioctl$CEC_DQEVENT(r0, 0xc0506107, &(0x7f00000002c0)={0x0, 0x0, 0x0, @raw}) 15.509233051s ago: executing program 2 (id=704): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900020073797a32000000000900010073797a300000000070000000080a01010000000000000000020000000900010073797a30000000000900020073797a32000000002c00058008000140000000000800024000000000080001400000000608000140000000f9080001400000005c080009"], 0xc4}}, 0x0) 2.012829629s ago: executing program 36 (id=697): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_setup(0x3, &(0x7f00000004c0)=0x0) io_submit(r1, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) 0s ago: executing program 37 (id=704): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900020073797a32000000000900010073797a300000000070000000080a01010000000000000000020000000900010073797a30000000000900020073797a32000000002c00058008000140000000000800024000000000080001400000000608000140000000f9080001400000005c080009"], 0xc4}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.212' (ED25519) to the list of known hosts. [ 91.971941][ T9] cfg80211: failed to load regulatory.db [ 92.131363][ T5830] cgroup: Unknown subsys name 'net' [ 92.360213][ T5830] cgroup: Unknown subsys name 'cpuset' [ 92.406334][ T5830] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 94.473519][ T5830] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 98.965863][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.970338][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 98.971089][ T5850] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 98.971841][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 98.982425][ T5859] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 98.993280][ T5859] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 98.996731][ T5859] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 99.014763][ T5859] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 99.056828][ T5850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 99.057423][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 99.058326][ T5850] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 99.060026][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 99.060722][ T5864] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 99.061343][ T5864] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 99.062002][ T5850] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 99.063500][ T5864] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 99.065655][ T5864] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 99.065817][ T5864] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 99.068175][ T5864] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 99.068476][ T5864] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 99.138719][ T5857] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.145158][ T5857] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.155053][ T5858] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 99.198931][ T5858] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.200008][ T5858] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 100.129945][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 100.426050][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 100.432187][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 100.508746][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 100.516203][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 101.068611][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.069958][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.070447][ T5861] bridge_slave_0: entered allmulticast mode [ 101.072592][ T5861] bridge_slave_0: entered promiscuous mode [ 101.135424][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.135571][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.135849][ T5861] bridge_slave_1: entered allmulticast mode [ 101.138849][ T5861] bridge_slave_1: entered promiscuous mode [ 101.176084][ T59] Bluetooth: hci4: command tx timeout [ 101.184922][ T5857] Bluetooth: hci1: command tx timeout [ 101.246072][ T59] Bluetooth: hci2: command tx timeout [ 101.246184][ T59] Bluetooth: hci3: command tx timeout [ 101.246397][ T5857] Bluetooth: hci0: command tx timeout [ 101.696306][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.696534][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.696722][ T5845] bridge_slave_0: entered allmulticast mode [ 101.700901][ T5845] bridge_slave_0: entered promiscuous mode [ 101.872270][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.872385][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.872560][ T5846] bridge_slave_0: entered allmulticast mode [ 101.881196][ T5846] bridge_slave_0: entered promiscuous mode [ 101.894476][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.898435][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.898596][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.899213][ T5845] bridge_slave_1: entered allmulticast mode [ 101.902450][ T5845] bridge_slave_1: entered promiscuous mode [ 102.084373][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.084531][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.085022][ T5846] bridge_slave_1: entered allmulticast mode [ 102.088484][ T5846] bridge_slave_1: entered promiscuous mode [ 102.169669][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.169931][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.170046][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.170182][ T5848] bridge_slave_0: entered allmulticast mode [ 102.172094][ T5848] bridge_slave_0: entered promiscuous mode [ 102.305720][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.305902][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.306274][ T5844] bridge_slave_0: entered allmulticast mode [ 102.308164][ T5844] bridge_slave_0: entered promiscuous mode [ 102.550914][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.551078][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.551228][ T5848] bridge_slave_1: entered allmulticast mode [ 102.553208][ T5848] bridge_slave_1: entered promiscuous mode [ 102.637133][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.637281][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.637459][ T5844] bridge_slave_1: entered allmulticast mode [ 102.639374][ T5844] bridge_slave_1: entered promiscuous mode [ 102.646263][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.832684][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.911528][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.914544][ T5861] team0: Port device team_slave_0 added [ 102.992168][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.157351][ T5861] team0: Port device team_slave_1 added [ 103.160832][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.230316][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.245669][ T5857] Bluetooth: hci1: command tx timeout [ 103.245701][ T5857] Bluetooth: hci4: command tx timeout [ 103.324968][ T5853] Bluetooth: hci0: command tx timeout [ 103.325005][ T5853] Bluetooth: hci3: command tx timeout [ 103.325029][ T5853] Bluetooth: hci2: command tx timeout [ 103.423657][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.499341][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.728279][ T5845] team0: Port device team_slave_0 added [ 103.868514][ T5846] team0: Port device team_slave_0 added [ 103.937418][ T5845] team0: Port device team_slave_1 added [ 103.938782][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.938793][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.938813][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.033283][ T5846] team0: Port device team_slave_1 added [ 104.177143][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.177162][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.177190][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.180241][ T5848] team0: Port device team_slave_0 added [ 104.298751][ T5844] team0: Port device team_slave_0 added [ 104.382338][ T5848] team0: Port device team_slave_1 added [ 104.456385][ T5844] team0: Port device team_slave_1 added [ 104.457443][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.457458][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.457477][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.589082][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.589101][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.589129][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.676468][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.676482][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.676502][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.887663][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.887681][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.887700][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.967866][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.967883][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.967912][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.109434][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.109451][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.109470][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.112926][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.112943][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.112962][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.230752][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.230766][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.230786][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.257617][ T5861] hsr_slave_0: entered promiscuous mode [ 105.259462][ T5861] hsr_slave_1: entered promiscuous mode [ 105.324879][ T5853] Bluetooth: hci1: command tx timeout [ 105.324984][ T5857] Bluetooth: hci4: command tx timeout [ 105.404894][ T5857] Bluetooth: hci2: command tx timeout [ 105.404930][ T5857] Bluetooth: hci3: command tx timeout [ 105.404954][ T5857] Bluetooth: hci0: command tx timeout [ 105.607246][ T5845] hsr_slave_0: entered promiscuous mode [ 105.608573][ T5845] hsr_slave_1: entered promiscuous mode [ 105.609620][ T5845] debugfs: 'hsr0' already exists in 'hsr' [ 105.609748][ T5845] Cannot create hsr debugfs directory [ 105.828188][ T5846] hsr_slave_0: entered promiscuous mode [ 105.829584][ T5846] hsr_slave_1: entered promiscuous mode [ 105.830500][ T5846] debugfs: 'hsr0' already exists in 'hsr' [ 105.830526][ T5846] Cannot create hsr debugfs directory [ 106.080991][ T5848] hsr_slave_0: entered promiscuous mode [ 106.082369][ T5848] hsr_slave_1: entered promiscuous mode [ 106.083282][ T5848] debugfs: 'hsr0' already exists in 'hsr' [ 106.083301][ T5848] Cannot create hsr debugfs directory [ 106.114525][ T5844] hsr_slave_0: entered promiscuous mode [ 106.123936][ T5844] hsr_slave_1: entered promiscuous mode [ 106.131099][ T5844] debugfs: 'hsr0' already exists in 'hsr' [ 106.131120][ T5844] Cannot create hsr debugfs directory [ 107.404750][ T5857] Bluetooth: hci1: command tx timeout [ 107.404801][ T5853] Bluetooth: hci4: command tx timeout [ 107.494778][ T5853] Bluetooth: hci0: command tx timeout [ 107.494847][ T5853] Bluetooth: hci3: command tx timeout [ 107.494872][ T5853] Bluetooth: hci2: command tx timeout [ 107.842880][ T5861] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 107.871785][ T5861] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 107.909361][ T5861] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 107.931778][ T5861] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 108.100932][ T5845] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 108.139217][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 108.192804][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 108.241796][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 108.356621][ T5846] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 108.412627][ T5846] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 108.450540][ T5846] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 108.502107][ T5846] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 108.707629][ T5848] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 108.775693][ T5848] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 108.842751][ T5848] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 108.906522][ T5848] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 109.082220][ T5844] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 109.129309][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.148082][ T5844] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 109.202565][ T5844] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 109.228129][ T5844] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 109.348081][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.410270][ T1445] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.411827][ T1445] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.445597][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.497414][ T1130] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.497655][ T1130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.610198][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.620579][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.666811][ T1514] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.666981][ T1514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.729992][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.730179][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.778279][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.840956][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.857405][ T1445] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.858924][ T1445] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.907543][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.907768][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.080342][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.120260][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.142708][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.143739][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.204486][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.205841][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.309386][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.386853][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.387010][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.448012][ T1514] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.448171][ T1514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.709484][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.861967][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.119142][ T5861] veth0_vlan: entered promiscuous mode [ 111.234246][ T5861] veth1_vlan: entered promiscuous mode [ 111.241912][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.321795][ T5845] veth0_vlan: entered promiscuous mode [ 111.384278][ T5845] veth1_vlan: entered promiscuous mode [ 111.436847][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.492236][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.533910][ T5861] veth0_macvtap: entered promiscuous mode [ 111.597623][ T5861] veth1_macvtap: entered promiscuous mode [ 111.672915][ T5846] veth0_vlan: entered promiscuous mode [ 111.710746][ T5845] veth0_macvtap: entered promiscuous mode [ 111.761283][ T5845] veth1_macvtap: entered promiscuous mode [ 111.766901][ T5846] veth1_vlan: entered promiscuous mode [ 111.778282][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.828989][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.923845][ T5848] veth0_vlan: entered promiscuous mode [ 111.931305][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.945941][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.960845][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.995955][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.010168][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.018648][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.039884][ T5848] veth1_vlan: entered promiscuous mode [ 112.118638][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.142806][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.151339][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.194382][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.209425][ T5846] veth0_macvtap: entered promiscuous mode [ 112.324138][ T5846] veth1_macvtap: entered promiscuous mode [ 112.573766][ T5844] veth0_vlan: entered promiscuous mode [ 112.606267][ T1925] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.606663][ T1925] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.636764][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.654206][ T5848] veth0_macvtap: entered promiscuous mode [ 112.673616][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.720236][ T5844] veth1_vlan: entered promiscuous mode [ 112.742872][ T5848] veth1_macvtap: entered promiscuous mode [ 112.779240][ T1130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.779262][ T1130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.779351][ T37] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.805592][ T37] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.860343][ T37] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.879481][ T37] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.909987][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.910008][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.066035][ T1925] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.066059][ T1925] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.069811][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.242737][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.321001][ T5844] veth0_macvtap: entered promiscuous mode [ 113.345582][ T57] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.353788][ T1130] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.391533][ T1130] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.454368][ T5844] veth1_macvtap: entered promiscuous mode [ 113.467684][ T1130] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.574369][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.574392][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.805472][ T5851] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 113.892454][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.984783][ T5851] usb 3-1: Using ep0 maxpacket: 32 [ 113.984957][ T1130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.984974][ T1130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.990811][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.029185][ T5851] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.029256][ T5851] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.029284][ T5851] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.029306][ T5851] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 114.029333][ T5851] usb 3-1: config 0 interface 0 has no altsetting 0 [ 114.029371][ T5851] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 114.029393][ T5851] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.121013][ T5851] usb 3-1: config 0 descriptor?? [ 114.230165][ T57] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.250120][ T1925] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.250141][ T1925] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.255896][ T57] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.270704][ T57] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.288275][ T57] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.545537][ T1130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.545561][ T1130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.605808][ T5851] hid-thrustmaster 0003:044F:B65D.0001: global environment stack underflow [ 114.605833][ T5851] hid-thrustmaster 0003:044F:B65D.0001: item 0 4 1 11 parsing failed [ 114.606730][ T5851] hid-thrustmaster 0003:044F:B65D.0001: parse failed with error -22 [ 114.606808][ T5851] hid-thrustmaster 0003:044F:B65D.0001: probe with driver hid-thrustmaster failed with error -22 [ 114.856669][ T5932] usb 3-1: USB disconnect, device number 2 [ 115.127990][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.128012][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.382663][ T5981] Illegal XDP return value 5981 on prog (id 3) dev N/A, expect packet loss! [ 115.424877][ T5933] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 115.620219][ T5933] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 115.620255][ T5933] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.620296][ T5933] usb 4-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 115.620321][ T5933] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.669445][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.669466][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.686103][ T5933] usb 4-1: config 0 descriptor?? [ 116.391150][ T5933] bigben 0003:146B:0902.0002: unexpected rdesc, please submit for review [ 116.559496][ T5933] bigben 0003:146B:0902.0002: hidraw0: USB HID v0.01 Device [HID 146b:0902] on usb-dummy_hcd.3-1/input0 [ 116.559533][ T5933] bigben 0003:146B:0902.0002: not enough values in HID_OUTPUT_REPORT 0 field 0 [ 116.559555][ T5933] bigben 0003:146B:0902.0002: no output report found [ 116.700766][ T5933] usb 4-1: USB disconnect, device number 2 [ 117.095810][ T5990] veth0_to_team: entered promiscuous mode [ 117.285531][ T5933] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 117.363132][ T5987] fido_id[5987]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 117.461171][ T5933] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 117.461199][ T5933] usb 5-1: config 0 has no interface number 0 [ 117.475552][ T5933] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 117.475588][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.475613][ T5933] usb 5-1: Product: syz [ 117.475631][ T5933] usb 5-1: Manufacturer: syz [ 117.475649][ T5933] usb 5-1: SerialNumber: syz [ 117.620156][ T5933] usb 5-1: config 0 descriptor?? [ 117.722369][ T5999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16'. [ 117.926290][ T5999] erspan0: entered promiscuous mode [ 117.997991][ T5999] erspan0: left promiscuous mode [ 118.000036][ T5933] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 118.048589][ T5933] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 118.049176][ T5933] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 118.049259][ T5933] usb 5-1: media controller created [ 118.530105][ T6008] netlink: 'syz.0.20': attribute type 29 has an invalid length. [ 118.783430][ T6009] netlink: 'syz.0.20': attribute type 29 has an invalid length. [ 118.818540][ T5932] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 118.989194][ T5932] usb 4-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 118.989227][ T5932] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.052378][ T5932] usb 4-1: config 0 descriptor?? [ 119.077314][ T5933] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 119.548166][ T5933] usb 5-1: USB disconnect, device number 2 [ 119.700518][ T5932] pantherlord 0003:0F30:0111.0003: item fetching failed at offset 0/4 [ 119.701335][ T5932] pantherlord 0003:0F30:0111.0003: parse failed [ 119.701410][ T5932] pantherlord 0003:0F30:0111.0003: probe with driver pantherlord failed with error -22 [ 119.803066][ T6023] warning: `syz.2.25' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 119.865476][ T5932] usb 4-1: USB disconnect, device number 3 [ 119.978563][ T6025] ALSA: seq fatal error: cannot create timer (-22) [ 120.826391][ T6039] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 120.826558][ T6039] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 120.827088][ T6039] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 120.827169][ T6039] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 120.827477][ T6039] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 120.827562][ T6039] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 120.828109][ T6039] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 120.828191][ T6039] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 120.828488][ T6039] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 120.828565][ T6039] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 121.220481][ T6049] netlink: 'syz.0.38': attribute type 6 has an invalid length. [ 122.145561][ T5912] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 122.317881][ T5912] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.317911][ T5912] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 122.322345][ T5912] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 122.322376][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 122.322396][ T5912] usb 3-1: SerialNumber: syz [ 122.587283][ T6076] mkiss: ax0: crc mode is auto. [ 122.677379][ T38] audit: type=1326 audit(1758337869.393:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6078 comm="syz.0.50" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faa27d4ec29 code=0x0 [ 122.722534][ T5912] usb 3-1: 0:2 : does not exist [ 123.000445][ T5912] usb 3-1: USB disconnect, device number 3 [ 123.250218][ T6016] udevd[6016]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 124.156733][ T5912] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 124.327610][ T5912] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 124.327638][ T5912] usb 5-1: config 0 has no interface number 0 [ 124.327688][ T5912] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 124.327713][ T5912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.366735][ T5912] usb 5-1: config 0 descriptor?? [ 124.395786][ T5912] usb 5-1: selecting invalid altsetting 1 [ 124.396600][ T5912] dvb_ttusb_budget: ttusb_init_controller: error [ 124.396617][ T5912] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 124.792743][ T5912] DVB: Unable to find symbol cx22700_attach() [ 124.985470][ T5912] DVB: Unable to find symbol tda10046_attach() [ 124.985487][ T5912] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 125.038036][ T5912] usb 5-1: USB disconnect, device number 3 [ 125.538157][ T6137] netlink: 'syz.2.74': attribute type 1 has an invalid length. [ 126.314777][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 126.484723][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 126.487887][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 126.489480][ T9] usb 2-1: config 4 interface 0 has no altsetting 0 [ 126.499335][ T9] usb 2-1: string descriptor 0 read error: -22 [ 126.499471][ T9] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 126.499497][ T9] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 126.559881][ T9] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 126.665768][ T9] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 126.666224][ T9] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 126.666277][ T9] usb 2-1: media controller created [ 126.930937][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 127.589032][ T31] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 127.778020][ T31] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 127.778051][ T31] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.778071][ T31] usb 5-1: config 0 has no interface number 0 [ 127.778127][ T31] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 127.778152][ T31] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 127.845997][ T31] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 127.846035][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.846059][ T31] usb 5-1: Product: syz [ 127.846076][ T31] usb 5-1: Manufacturer: syz [ 127.846092][ T31] usb 5-1: SerialNumber: syz [ 127.915618][ T31] usb 5-1: config 0 descriptor?? [ 127.940800][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 128.167892][ T31] usbtouchscreen 5-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 128.201510][ T9] usb 2-1: USB disconnect, device number 2 [ 128.219111][ T31] usb 5-1: USB disconnect, device number 4 [ 129.498737][ T6217] mmap: syz.1.100 (6217) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 129.812758][ T31] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 129.971192][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 129.983011][ T31] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 129.983044][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.983065][ T31] usb 5-1: Product: syz [ 129.983080][ T31] usb 5-1: Manufacturer: syz [ 129.983096][ T31] usb 5-1: SerialNumber: syz [ 130.017659][ T31] usb 5-1: config 0 descriptor?? [ 130.174778][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 130.336417][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 130.363669][ T9] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.363702][ T9] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.363725][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 130.363757][ T9] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 130.363788][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.427860][ T9] usb 4-1: config 0 descriptor?? [ 130.526712][ T31] airspy 5-1:0.0: usb_control_msg() failed -71 request 0a [ 130.526740][ T31] airspy 5-1:0.0: Could not detect board [ 130.526855][ T31] airspy 5-1:0.0: probe with driver airspy failed with error -71 [ 130.576744][ T31] usb 5-1: USB disconnect, device number 5 [ 130.958474][ T6246] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 130.995664][ T9] holtek_kbd 0003:04D9:A055.0004: hidraw0: USB HID v0.00 Device [HID 04d9:a055] on usb-dummy_hcd.3-1/input0 [ 131.137976][ T5937] usb 4-1: USB disconnect, device number 4 [ 131.207698][ T5932] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 131.387495][ T5932] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.387525][ T5932] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 131.387580][ T5932] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 131.392694][ T5932] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 131.392725][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.392747][ T5932] usb 2-1: Product: syz [ 131.392763][ T5932] usb 2-1: Manufacturer: syz [ 131.392779][ T5932] usb 2-1: SerialNumber: syz [ 131.462471][ T6248] fido_id[6248]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 131.490797][ T5932] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 131.490853][ T5932] cdc_ncm 2-1:1.0: bind() failure [ 131.558754][ T6253] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 131.738733][ T5912] usb 2-1: USB disconnect, device number 3 [ 132.244667][ T38] audit: type=1326 audit(1758337878.983:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6266 comm="syz.4.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43b1c3ec29 code=0x7ffc0000 [ 132.248563][ T38] audit: type=1326 audit(1758337878.983:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6266 comm="syz.4.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43b1c3ec29 code=0x7ffc0000 [ 132.320775][ T38] audit: type=1326 audit(1758337879.063:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6266 comm="syz.4.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f43b1c3ec29 code=0x7ffc0000 [ 132.320831][ T38] audit: type=1326 audit(1758337879.063:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6266 comm="syz.4.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43b1c3ec29 code=0x7ffc0000 [ 132.323480][ T38] audit: type=1326 audit(1758337879.063:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6266 comm="syz.4.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43b1c3ec29 code=0x7ffc0000 [ 132.323534][ T38] audit: type=1326 audit(1758337879.063:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6266 comm="syz.4.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f43b1c3ec29 code=0x7ffc0000 [ 132.323580][ T38] audit: type=1326 audit(1758337879.063:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6266 comm="syz.4.118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43b1c3ec29 code=0x7ffc0000 [ 133.614874][ T5912] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 133.636144][ T6297] netlink: 'syz.0.131': attribute type 1 has an invalid length. [ 133.798628][ T5912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 133.798664][ T5912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.798707][ T5912] usb 5-1: New USB device found, idVendor=056a, idProduct=0217, bcdDevice= 0.fc [ 133.798732][ T5912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.850709][ T5912] usb 5-1: config 0 descriptor?? [ 134.265313][ T6307] delete_channel: no stack [ 134.301320][ T5912] wacom 0003:056A:0217.0005: Unknown device_type for 'HID 056a:0217'. Ignoring. [ 134.486555][ T5932] usb 5-1: USB disconnect, device number 6 [ 134.914746][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 135.074757][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 135.079909][ T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 135.079944][ T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 135.079988][ T9] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 135.080015][ T9] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 135.083197][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 135.083227][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.083248][ T9] usb 3-1: Product: syz [ 135.083263][ T9] usb 3-1: Manufacturer: syz [ 135.083279][ T9] usb 3-1: SerialNumber: syz [ 135.313260][ T6328] net_ratelimit: 1052 callbacks suppressed [ 135.313286][ T6328] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 135.401096][ T6327] bridge1: entered promiscuous mode [ 135.401128][ T6327] bridge1: entered allmulticast mode [ 135.496161][ T6327] team0: Port device bridge1 added [ 135.535088][ T9] usb 3-1: USB disconnect, device number 4 [ 135.641781][ T6314] comedi comedi3: reset error (fatal) [ 135.778169][ T6016] udevd[6016]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 136.020864][ T6339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.151'. [ 136.536640][ T6355] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 136.536732][ T6355] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 136.537059][ T6355] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 136.537127][ T6355] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 136.538760][ T6355] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 136.538879][ T6355] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 136.539186][ T6355] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 136.539279][ T6355] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 136.539581][ T6355] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 136.724821][ T1597] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 136.896662][ T1597] usb 4-1: Using ep0 maxpacket: 8 [ 136.958531][ T1597] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 136.958564][ T1597] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.958585][ T1597] usb 4-1: Product: syz [ 136.958600][ T1597] usb 4-1: Manufacturer: syz [ 136.958616][ T1597] usb 4-1: SerialNumber: syz [ 137.000683][ T1597] usb 4-1: config 0 descriptor?? [ 137.043786][ T1597] gspca_main: sq930x-2.14.0 probing 2770:930c [ 137.704836][ T1597] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 137.704956][ T1597] sq930x 4-1:0.0: probe with driver sq930x failed with error -71 [ 137.754902][ T1597] usb 4-1: USB disconnect, device number 5 [ 138.015017][ T6367] syz.0.166 (6367) used greatest stack depth: 17800 bytes left [ 138.051083][ T6371] Bluetooth: MGMT ver 1.23 [ 138.073767][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.073867][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.414863][ T1597] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 138.586570][ T1597] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 138.586599][ T1597] usb 5-1: config 0 has no interface number 0 [ 138.586655][ T1597] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 138.586679][ T1597] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.650256][ T1597] usb 5-1: config 0 descriptor?? [ 138.671928][ T1597] usb 5-1: selecting invalid altsetting 1 [ 138.672109][ T1597] dvb_ttusb_budget: ttusb_init_controller: error [ 138.672123][ T1597] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 138.919898][ T1597] DVB: Unable to find symbol cx22700_attach() [ 139.073519][ T1597] DVB: Unable to find symbol tda10046_attach() [ 139.073534][ T1597] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 139.106778][ T1597] usb 5-1: USB disconnect, device number 7 [ 140.201222][ T6402] capability: warning: `syz.2.181' uses deprecated v2 capabilities in a way that may be insecure [ 140.314969][ T6393] net_ratelimit: 1571 callbacks suppressed [ 140.315062][ T6393] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 140.315159][ T6393] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 140.324847][ T6393] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 140.324935][ T6393] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 140.325293][ T6393] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 140.325390][ T6393] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 140.328139][ T6393] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 140.328236][ T6393] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 140.328572][ T6393] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 140.328663][ T6393] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 140.458076][ T6404] capability: warning: `syz.0.182' uses 32-bit capabilities (legacy support in use) [ 141.159232][ T5937] kernel write not supported for file /111/uid_map (pid: 5937 comm: kworker/1:5) [ 141.894732][ T38] audit: type=1326 audit(1758337888.633:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6435 comm="syz.2.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89cda2ec29 code=0x7ffc0000 [ 141.894789][ T38] audit: type=1326 audit(1758337888.633:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6435 comm="syz.2.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89cda2ec29 code=0x7ffc0000 [ 141.899693][ T38] audit: type=1326 audit(1758337888.643:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6435 comm="syz.2.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f89cda2ec29 code=0x7ffc0000 [ 141.899747][ T38] audit: type=1326 audit(1758337888.643:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6435 comm="syz.2.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89cda2ec29 code=0x7ffc0000 [ 141.918814][ T38] audit: type=1326 audit(1758337888.663:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6435 comm="syz.2.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f89cda2ec29 code=0x7ffc0000 [ 141.994397][ T38] audit: type=1326 audit(1758337888.733:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6435 comm="syz.2.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89cda2ec29 code=0x7ffc0000 [ 141.994463][ T38] audit: type=1326 audit(1758337888.733:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6435 comm="syz.2.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89cda2ec29 code=0x7ffc0000 [ 142.137063][ T38] audit: type=1800 audit(1758337888.873:17): pid=6441 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.201" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 142.644853][ T5905] IPVS: starting estimator thread 0... [ 142.745210][ T6454] IPVS: using max 8 ests per chain, 19200 per kthread [ 143.356009][ T6470] netlink: 256 bytes leftover after parsing attributes in process `syz.2.215'. [ 143.356033][ T6470] netlink: 72 bytes leftover after parsing attributes in process `syz.2.215'. [ 143.808739][ T6480] macsec1: entered promiscuous mode [ 143.836877][ T5905] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 143.948439][ T6484] tmpfs: Bad value for 'mpol' [ 143.984808][ T5905] usb 3-1: Using ep0 maxpacket: 16 [ 143.987231][ T5905] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.987268][ T5905] usb 3-1: config 0 interface 0 has no altsetting 0 [ 143.987303][ T5905] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0a16, bcdDevice= 0.00 [ 143.987328][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.989542][ T6486] netlink: 56 bytes leftover after parsing attributes in process `syz.0.223'. [ 144.088451][ T5905] usb 3-1: config 0 descriptor?? [ 144.423613][ T6491] tmpfs: Bad value for 'mpol' [ 144.520256][ T5905] hid-corsair-void 0003:1B1C:0A16.0006: unknown main item tag 0x0 [ 144.520300][ T5905] hid-corsair-void 0003:1B1C:0A16.0006: unknown main item tag 0x0 [ 144.520326][ T5905] hid-corsair-void 0003:1B1C:0A16.0006: unknown main item tag 0x0 [ 144.520352][ T5905] hid-corsair-void 0003:1B1C:0A16.0006: unknown main item tag 0x0 [ 144.520378][ T5905] hid-corsair-void 0003:1B1C:0A16.0006: unknown main item tag 0x0 [ 144.520404][ T5905] hid-corsair-void 0003:1B1C:0A16.0006: unknown main item tag 0x0 [ 144.548379][ T6492] gretap0: entered promiscuous mode [ 144.548583][ T6492] vlan2: entered promiscuous mode [ 144.625513][ T5905] hid-corsair-void 0003:1B1C:0A16.0006: hidraw0: USB HID v0.05 Device [HID 1b1c:0a16] on usb-dummy_hcd.2-1/input0 [ 144.718018][ T5912] usb 3-1: USB disconnect, device number 5 [ 144.737689][ T5905] hid-corsair-void 0003:1B1C:0A16.0006: failed to request firmware (reason: -19) [ 144.738098][ T5905] hid-corsair-void 0003:1B1C:0A16.0006: failed to request battery (reason: -19) [ 144.843402][ T6495] fido_id[6495]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 146.084769][ T5932] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 146.243738][ T5932] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 146.243770][ T5932] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 146.243854][ T5932] usb 5-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 146.243874][ T5932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.261480][ T5932] usb 5-1: config 0 descriptor?? [ 146.268548][ T6515] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 146.425353][ T5905] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 146.495801][ T5912] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 146.590394][ T5905] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 146.590425][ T5905] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.590445][ T5905] usb 3-1: config 0 has no interface number 0 [ 146.590496][ T5905] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 146.590521][ T5905] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 146.657735][ T5905] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 146.657767][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.657789][ T5905] usb 3-1: Product: syz [ 146.657804][ T5905] usb 3-1: Manufacturer: syz [ 146.657819][ T5905] usb 3-1: SerialNumber: syz [ 146.714821][ T5912] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 146.714856][ T5912] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.714880][ T5912] usb 1-1: config 0 interface 0 has no altsetting 0 [ 146.714989][ T5912] usb 1-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 146.715014][ T5912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.721827][ T5905] usb 3-1: config 0 descriptor?? [ 146.818032][ T5912] usb 1-1: config 0 descriptor?? [ 146.820259][ T5932] playstation 0003:054C:0BA0.0007: unknown main item tag 0x0 [ 146.820296][ T5932] playstation 0003:054C:0BA0.0007: unknown main item tag 0x0 [ 146.820324][ T5932] playstation 0003:054C:0BA0.0007: unknown main item tag 0x0 [ 146.820352][ T5932] playstation 0003:054C:0BA0.0007: unknown main item tag 0x0 [ 146.880559][ T5932] playstation 0003:054C:0BA0.0007: hidraw0: USB HID v1.01 Device [HID 054c:0ba0] on usb-dummy_hcd.4-1/input0 [ 147.003208][ T5905] usbtouchscreen 3-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 147.045024][ T5932] playstation 0003:054C:0BA0.0007: Failed to retrieve feature with reportID 18: -71 [ 147.045053][ T5932] playstation 0003:054C:0BA0.0007: Failed to retrieve DualShock4 pairing info: -71 [ 147.045183][ T5932] playstation 0003:054C:0BA0.0007: Failed to get MAC address from DualShock4 [ 147.045206][ T5932] playstation 0003:054C:0BA0.0007: Failed to create dualshock4. [ 147.178765][ T5932] playstation 0003:054C:0BA0.0007: probe with driver playstation failed with error -71 [ 147.194656][ T5905] usb 3-1: USB disconnect, device number 6 [ 147.273696][ T5932] usb 5-1: USB disconnect, device number 8 [ 147.444056][ T6535] Zero length message leads to an empty skb [ 147.489751][ T6531] fido_id[6531]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 147.514781][ T5912] holtek_mouse 0003:04D9:A067.0008: hidraw0: USB HID v0.00 Device [HID 04d9:a067] on usb-dummy_hcd.0-1/input0 [ 147.634425][ T5912] usb 1-1: USB disconnect, device number 2 [ 147.990983][ T6538] fido_id[6538]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 148.010144][ T6543] net_ratelimit: 534 callbacks suppressed [ 148.010165][ T6543] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 148.344975][ T6550] netlink: 24 bytes leftover after parsing attributes in process `syz.3.253'. [ 148.722819][ T5932] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 148.881844][ T5932] usb 5-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 148.881876][ T5932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.919222][ T5932] usb 5-1: config 0 descriptor?? [ 149.240726][ T6565] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 149.240756][ T6565] CIFS mount error: No usable UNC path provided in device string! [ 149.240756][ T6565] [ 149.240986][ T6565] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 149.371660][ T5932] waltop 0003:172F:0032.0009: item fetching failed at offset 3/5 [ 149.372642][ T5932] waltop 0003:172F:0032.0009: probe with driver waltop failed with error -22 [ 149.560063][ T5905] usb 5-1: USB disconnect, device number 9 [ 150.852595][ T5905] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 150.997071][ T6595] syz.3.274 (6595): drop_caches: 4 [ 150.999813][ T5905] usb 3-1: config 0 interface 0 has no altsetting 0 [ 150.999856][ T5905] usb 3-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 150.999881][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.050135][ T5905] usb 3-1: config 0 descriptor?? [ 151.314707][ T5932] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 151.469736][ T5932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 151.469783][ T5932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 151.469901][ T5932] usb 1-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 151.469927][ T5932] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.480369][ T5932] usb 1-1: config 0 descriptor?? [ 151.483271][ T6598] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 151.562280][ T5905] kye 0003:0458:5013.000A: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 151.585662][ T5905] kye 0003:0458:5013.000A: hidraw0: USB HID v0.06 Device [HID 0458:5013] on usb-dummy_hcd.2-1/input0 [ 151.585698][ T5905] kye 0003:0458:5013.000A: tablet-enabling feature report not found [ 151.585714][ T5905] kye 0003:0458:5013.000A: tablet enabling failed [ 151.766578][ T31] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 151.898650][ T5937] usb 3-1: USB disconnect, device number 7 [ 151.979499][ T31] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 151.980089][ T31] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.980113][ T31] usb 4-1: config 0 has no interface number 0 [ 151.980166][ T31] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 151.980571][ T31] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 152.042350][ T31] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 152.042385][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.042406][ T31] usb 4-1: Product: syz [ 152.042421][ T31] usb 4-1: Manufacturer: syz [ 152.042436][ T31] usb 4-1: SerialNumber: syz [ 152.116745][ T6603] fido_id[6603]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 152.234869][ T5932] gembird 0003:11FF:3331.000B: hidraw0: USB HID v0.00 Device [HID 11ff:3331] on usb-dummy_hcd.0-1/input0 [ 152.243820][ T31] usb 4-1: config 0 descriptor?? [ 152.341102][ T1597] usb 1-1: USB disconnect, device number 3 [ 152.608404][ T31] usbtouchscreen 4-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 152.663375][ T31] usb 4-1: USB disconnect, device number 6 [ 153.014676][ T6609] fido_id[6609]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 153.312636][ T5857] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 153.328082][ T5857] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 153.330777][ T5857] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 153.332034][ T5857] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 153.359613][ T5857] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 153.967273][ T6632] tipc: Started in network mode [ 153.967312][ T6632] tipc: Node identity aaaaaaaaaa33, cluster identity 4711 [ 153.972853][ T6632] tipc: Enabled bearer , priority 2 [ 154.235353][ T6644] openvswitch: netlink: nsh attribute has 65533 unknown bytes. [ 154.235393][ T6644] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 154.480492][ T6649] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 154.737715][ T6655] loop6: detected capacity change from 0 to 7 [ 154.761224][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.761340][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 154.765977][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.766017][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 154.772117][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.772156][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 154.772490][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.772520][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 154.772774][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.772805][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 154.773047][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.773077][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 154.773291][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.773322][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 154.780650][ T6655] ldm_validate_partition_table(): Disk read failed. [ 154.780965][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.781002][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 154.789068][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.789105][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 154.791149][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 154.791183][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 154.791546][ T6655] Dev loop6: unable to read RDB block 0 [ 154.792486][ T6655] loop6: unable to read partition table [ 154.792737][ T6655] loop6: partition table beyond EOD, truncated [ 154.792772][ T6655] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà–() failed (rc=-5) [ 155.087168][ T31] tipc: Node number set to 10070698 [ 155.373813][ T6669] netlink: 224 bytes leftover after parsing attributes in process `syz.3.309'. [ 155.479043][ T6671] usb usb8: usbfs: process 6671 (syz.2.310) did not claim interface 0 before use [ 155.485817][ T5853] Bluetooth: hci5: command tx timeout [ 155.491472][ T6669] netlink: 16 bytes leftover after parsing attributes in process `syz.3.309'. [ 155.491499][ T6669] tipc: Started in network mode [ 155.491517][ T6669] tipc: Node identity fffffe01, cluster identity 64 [ 155.491530][ T6669] tipc: Node number set to 4294966785 [ 155.494952][ T5932] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 155.500226][ T6669] tipc: Cannot configure node identity twice [ 155.644903][ T5932] usb 5-1: Using ep0 maxpacket: 32 [ 155.657537][ T5932] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 155.657573][ T5932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.657595][ T5932] usb 5-1: Product: syz [ 155.657611][ T5932] usb 5-1: Manufacturer: syz [ 155.657626][ T5932] usb 5-1: SerialNumber: syz [ 155.716966][ T5932] usb 5-1: config 0 descriptor?? [ 155.746048][ T5932] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 156.023440][ T57] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.335629][ T5932] gspca_stk1135: reg_w 0x3 err -71 [ 156.336699][ T5932] gspca_stk1135: serial bus timeout: status=0x00 [ 156.336712][ T5932] gspca_stk1135: Sensor write failed [ 156.336749][ T5932] gspca_stk1135: serial bus timeout: status=0x00 [ 156.336759][ T5932] gspca_stk1135: Sensor write failed [ 156.336795][ T5932] gspca_stk1135: serial bus timeout: status=0x00 [ 156.336804][ T5932] gspca_stk1135: Sensor read failed [ 156.336840][ T5932] gspca_stk1135: serial bus timeout: status=0x00 [ 156.336850][ T5932] gspca_stk1135: Sensor read failed [ 156.336857][ T5932] gspca_stk1135: Detected sensor type unknown (0x0) [ 156.336897][ T5932] gspca_stk1135: serial bus timeout: status=0x00 [ 156.336907][ T5932] gspca_stk1135: Sensor read failed [ 156.336941][ T5932] gspca_stk1135: serial bus timeout: status=0x00 [ 156.336951][ T5932] gspca_stk1135: Sensor read failed [ 156.336986][ T5932] gspca_stk1135: serial bus timeout: status=0x00 [ 156.336996][ T5932] gspca_stk1135: Sensor write failed [ 156.337031][ T5932] gspca_stk1135: serial bus timeout: status=0x00 [ 156.337041][ T5932] gspca_stk1135: Sensor write failed [ 156.337131][ T5932] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71 [ 156.465631][ T5932] usb 5-1: USB disconnect, device number 10 [ 156.691217][ T57] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.283983][ T57] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.564948][ T5853] Bluetooth: hci5: command tx timeout [ 157.646580][ T6719] xt_l2tp: invalid flags combination: 8 [ 157.904516][ T57] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.950371][ T6721] sit0: entered promiscuous mode [ 157.983153][ T6721] netlink: 'syz.2.332': attribute type 1 has an invalid length. [ 157.983176][ T6721] netlink: 1 bytes leftover after parsing attributes in process `syz.2.332'. [ 158.035484][ T6618] chnl_net:caif_netlink_parms(): no params data found [ 159.301691][ T6618] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.301858][ T6618] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.302135][ T6618] bridge_slave_0: entered allmulticast mode [ 159.347206][ T6618] bridge_slave_0: entered promiscuous mode [ 159.371142][ T6618] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.371294][ T6618] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.371549][ T6618] bridge_slave_1: entered allmulticast mode [ 159.402277][ T6618] bridge_slave_1: entered promiscuous mode [ 159.527093][ T6758] netlink: 260 bytes leftover after parsing attributes in process `syz.0.348'. [ 159.644802][ T5853] Bluetooth: hci5: command tx timeout [ 159.726236][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 159.884732][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 159.887449][ T9] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 159.887476][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.887496][ T9] usb 3-1: config 0 has no interface number 0 [ 159.887548][ T9] usb 3-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 159.887577][ T9] usb 3-1: config 0 interface 8 has no altsetting 0 [ 159.894126][ T9] usb 3-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 159.894158][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.894179][ T9] usb 3-1: Product: syz [ 159.894195][ T9] usb 3-1: Manufacturer: syz [ 159.894210][ T9] usb 3-1: SerialNumber: syz [ 159.930071][ T9] usb 3-1: config 0 descriptor?? [ 160.124828][ T1597] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 160.250697][ T6618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.286976][ T1597] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 160.287011][ T1597] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 160.287054][ T1597] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c23, bcdDevice= 0.00 [ 160.287077][ T1597] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.295614][ T9] ath6kl: Failed to submit usb control message: -71 [ 160.295671][ T9] ath6kl: unable to send the bmi data to the device: -71 [ 160.295686][ T9] ath6kl: Unable to send get target info: -71 [ 160.313737][ T9] ath6kl: Failed to init ath6kl core: -71 [ 160.333899][ T9] ath6kl_usb 3-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 160.379494][ T1597] usb 1-1: config 0 descriptor?? [ 160.380307][ T6768] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 160.473617][ T9] usb 3-1: USB disconnect, device number 8 [ 160.634272][ T6618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.832363][ T1597] corsair-psu 0003:1B1C:1C23.000C: unbalanced collection at end of report description [ 160.833342][ T1597] corsair-psu 0003:1B1C:1C23.000C: probe with driver corsair-psu failed with error -22 [ 160.890501][ T57] bridge_slave_1: left allmulticast mode [ 160.890813][ T57] bridge_slave_1: left promiscuous mode [ 160.892836][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.009751][ T57] bridge_slave_0: left allmulticast mode [ 161.009785][ T57] bridge_slave_0: left promiscuous mode [ 161.010211][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.042376][ T5933] usb 1-1: USB disconnect, device number 4 [ 161.258451][ T6789] Bluetooth: MGMT ver 1.23 [ 161.737486][ T5853] Bluetooth: hci5: command tx timeout [ 161.787937][ T6782] Falling back ldisc for ttyprintk. [ 163.637352][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.695724][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.720526][ T57] bond0 (unregistering): Released all slaves [ 163.776881][ T6780] netlink: 8 bytes leftover after parsing attributes in process `syz.4.358'. [ 163.947100][ T6821] netlink: 'syz.4.376': attribute type 29 has an invalid length. [ 163.988261][ T6803] netlink: 8 bytes leftover after parsing attributes in process `syz.2.369'. [ 164.035897][ T6618] team0: Port device team_slave_0 added [ 164.041474][ T6618] team0: Port device team_slave_1 added [ 165.143155][ T6618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.143173][ T6618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.143201][ T6618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.198906][ T6618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.198924][ T6618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.198953][ T6618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.679802][ T6864] sg_write: data in/out 209152/4 bytes for SCSI command 0x89-- guessing data in; [ 165.679802][ T6864] program syz.2.394 not setting count and/or reply_len properly [ 165.988121][ T6850] tipc: Enabling of bearer rejected, failed to enable media [ 167.153209][ T57] hsr_slave_0: left promiscuous mode [ 167.210294][ T57] hsr_slave_1: left promiscuous mode [ 167.214987][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.215112][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.239981][ T6910] netlink: 'syz.2.411': attribute type 1 has an invalid length. [ 167.240005][ T6910] netlink: 244 bytes leftover after parsing attributes in process `syz.2.411'. [ 167.337889][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.337928][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.507153][ T57] veth1_macvtap: left promiscuous mode [ 167.507440][ T57] veth0_macvtap: left promiscuous mode [ 167.507757][ T57] veth1_vlan: left promiscuous mode [ 167.508109][ T57] veth0_vlan: left promiscuous mode [ 169.614767][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 169.777279][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 169.777333][ T9] usb 5-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 169.777358][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.787002][ T9] usb 5-1: config 0 descriptor?? [ 170.226934][ T9] hid_parser_main: 9 callbacks suppressed [ 170.226959][ T9] aquacomputer_d5next 0003:0C70:F0BD.000D: unknown main item tag 0x0 [ 170.237114][ T9] aquacomputer_d5next 0003:0C70:F0BD.000D: hidraw0: USB HID v0.00 Device [HID 0c70:f0bd] on usb-dummy_hcd.4-1/input0 [ 170.449812][ T9] usb 5-1: USB disconnect, device number 11 [ 170.905852][ T57] team0 (unregistering): Port device team_slave_1 removed [ 171.175587][ T57] team0 (unregistering): Port device team_slave_0 removed [ 171.951714][ T6956] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 171.951714][ T6956] program syz.4.431 not setting count and/or reply_len properly [ 173.791077][ T6618] hsr_slave_0: entered promiscuous mode [ 173.792429][ T6618] hsr_slave_1: entered promiscuous mode [ 173.793335][ T6618] debugfs: 'hsr0' already exists in 'hsr' [ 173.793360][ T6618] Cannot create hsr debugfs directory [ 174.386182][ T6983] netlink: 8 bytes leftover after parsing attributes in process `syz.3.444'. [ 175.814744][ T5937] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 175.994371][ T5937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 175.994426][ T5937] usb 3-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 175.994451][ T5937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.012779][ T5937] usb 3-1: config 0 descriptor?? [ 176.527044][ T5937] uclogic 0003:5543:0522.000E: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.2-1/input0 [ 176.668134][ T9] usb 3-1: USB disconnect, device number 9 [ 176.847362][ T6618] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 176.919221][ T7042] netlink: 'syz.4.466': attribute type 6 has an invalid length. [ 176.919961][ T6618] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 176.998323][ T7036] fido_id[7036]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 177.045085][ T6618] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 177.087021][ T6618] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 177.096154][ T5933] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 177.247429][ T5933] usb 4-1: config 0 interface 0 altsetting 185 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 177.247466][ T5933] usb 4-1: config 0 interface 0 has no altsetting 0 [ 177.247502][ T5933] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 177.247536][ T5933] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.357340][ T5933] usb 4-1: config 0 descriptor?? [ 177.936338][ T5933] hid-picolcd 0003:04D8:F002.000F: No report with id 0xf3 found [ 177.936363][ T5933] hid-picolcd 0003:04D8:F002.000F: No report with id 0xf4 found [ 178.017471][ T6618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.095650][ T5933] usb 4-1: USB disconnect, device number 7 [ 178.174035][ T6618] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.202364][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.203487][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.258484][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.259258][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.587931][ T5933] IPVS: starting estimator thread 0... [ 178.590857][ T7076] IPVS: sh: UDP 0.0.0.0:0 - no destination available [ 178.697576][ T7077] IPVS: using max 9 ests per chain, 21600 per kthread [ 179.535030][ T7102] comedi comedi3: 8255: I/O port conflict (0x40404f26,4) [ 179.535096][ T7102] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 179.535153][ T7102] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 179.535283][ T7102] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 179.535345][ T7102] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 179.704342][ T6618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.200085][ T7115] netlink: 76 bytes leftover after parsing attributes in process `syz.2.489'. [ 180.200110][ T7115] nbd: must specify at least one socket [ 181.048001][ T7139] netlink: 24 bytes leftover after parsing attributes in process `syz.2.498'. [ 181.394367][ T6618] veth0_vlan: entered promiscuous mode [ 181.494829][ T7148] netlink: 'syz.2.501': attribute type 1 has an invalid length. [ 181.494853][ T7148] netlink: 208 bytes leftover after parsing attributes in process `syz.2.501'. [ 181.494887][ T7148] netlink: 'syz.2.501': attribute type 1 has an invalid length. [ 181.494900][ T7148] netlink: 'syz.2.501': attribute type 2 has an invalid length. [ 181.586499][ T6618] veth1_vlan: entered promiscuous mode [ 181.734412][ T6618] veth0_macvtap: entered promiscuous mode [ 181.774380][ T6618] veth1_macvtap: entered promiscuous mode [ 181.928688][ T6618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.981222][ T6618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.047470][ T1445] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.065319][ T1445] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.068128][ T1445] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.068445][ T1445] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.096358][ T1597] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 182.265607][ T1597] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.265661][ T1597] usb 3-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 182.265686][ T1597] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.293732][ T1597] usb 3-1: config 0 descriptor?? [ 182.713563][ T1597] microsoft 0003:045E:00F9.0010: unbalanced delimiter at end of report description [ 182.714436][ T1597] microsoft 0003:045E:00F9.0010: parse failed [ 182.736067][ T1597] microsoft 0003:045E:00F9.0010: probe with driver microsoft failed with error -22 [ 182.944760][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.944783][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.948805][ T9] usb 3-1: USB disconnect, device number 10 [ 183.236080][ T1514] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.236102][ T1514] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.887795][ T5932] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 185.054907][ T5932] usb 6-1: Using ep0 maxpacket: 16 [ 185.060738][ T5932] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.060771][ T5932] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.060810][ T5932] usb 6-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 185.060833][ T5932] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.073430][ T5932] usb 6-1: config 0 descriptor?? [ 185.548735][ T5932] logitech 0003:046D:C29C.0011: unknown main item tag 0x0 [ 185.548773][ T5932] logitech 0003:046D:C29C.0011: unknown main item tag 0x0 [ 185.548815][ T5932] logitech 0003:046D:C29C.0011: unknown main item tag 0x0 [ 185.548843][ T5932] logitech 0003:046D:C29C.0011: unknown main item tag 0x0 [ 185.548870][ T5932] logitech 0003:046D:C29C.0011: unknown main item tag 0x0 [ 185.548897][ T5932] logitech 0003:046D:C29C.0011: unknown main item tag 0x0 [ 185.548924][ T5932] logitech 0003:046D:C29C.0011: unknown main item tag 0x0 [ 185.548951][ T5932] logitech 0003:046D:C29C.0011: unknown main item tag 0x0 [ 185.548978][ T5932] logitech 0003:046D:C29C.0011: unknown main item tag 0x0 [ 185.549005][ T5932] logitech 0003:046D:C29C.0011: unknown main item tag 0x0 [ 185.613345][ T5932] logitech 0003:046D:C29C.0011: hidraw0: USB HID v0.01 Device [HID 046d:c29c] on usb-dummy_hcd.5-1/input0 [ 185.772212][ T5932] logitech 0003:046D:C29C.0011: no inputs found [ 185.820457][ T5932] usb 6-1: USB disconnect, device number 2 [ 186.201008][ T7228] fido_id[7228]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 186.519810][ T7243] veth0_to_bond: entered allmulticast mode [ 187.233296][ T38] audit: type=1326 audit(1758337933.973:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7265 comm="syz.0.548" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faa27d4ec29 code=0x0 [ 188.454878][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 188.607552][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 188.610802][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.610835][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.610875][ T9] usb 1-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 188.610898][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.672148][ T9] usb 1-1: config 0 descriptor?? [ 188.984910][ T7299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.562'. [ 189.146632][ T9] glorious 0003:258A:0033.0012: hidraw0: USB HID v0.00 Device [Glorious Model D] on usb-dummy_hcd.0-1/input0 [ 189.335020][ T5913] usb 1-1: USB disconnect, device number 5 [ 189.428056][ T7304] fido_id[7304]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 189.590329][ T7308] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 189.688746][ T7308] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 189.849276][ T7318] netlink: 256 bytes leftover after parsing attributes in process `syz.3.569'. [ 189.849299][ T7318] netlink: 80 bytes leftover after parsing attributes in process `syz.3.569'. [ 190.198118][ T7326] netlink: 348 bytes leftover after parsing attributes in process `syz.0.573'. [ 190.358269][ T7331] netlink: 8 bytes leftover after parsing attributes in process `syz.2.576'. [ 191.031155][ T38] audit: type=1400 audit(1758337937.763:19): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=7353 comm="syz.5.586" src=1 dest=20000 netif=wpan0 [ 192.071219][ T7389] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 192.284762][ T5933] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 192.441320][ T5933] usb 5-1: Using ep0 maxpacket: 8 [ 192.489580][ T5933] usb 5-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=ad.1d [ 192.489614][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.489639][ T5933] usb 5-1: Product: syz [ 192.489655][ T5933] usb 5-1: Manufacturer: syz [ 192.489670][ T5933] usb 5-1: SerialNumber: syz [ 192.556607][ T5933] usb 5-1: config 0 descriptor?? [ 192.612619][ T5933] usb_ehset_test 5-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 192.618720][ T5932] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 192.784900][ T5932] usb 6-1: Using ep0 maxpacket: 8 [ 192.790617][ T5932] usb 6-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 192.790647][ T5932] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.790667][ T5932] usb 6-1: Product: syz [ 192.790681][ T5932] usb 6-1: Manufacturer: syz [ 192.790694][ T5932] usb 6-1: SerialNumber: syz [ 192.818617][ T5932] usb 6-1: config 0 descriptor?? [ 192.887864][ T1597] usb 5-1: USB disconnect, device number 12 [ 192.923148][ T5932] gspca_main: sq905-2.14.0 probing 2770:9120 [ 193.511743][ T5932] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 193.511905][ T5932] sq905 6-1:0.0: probe with driver sq905 failed with error -71 [ 193.546740][ T5932] usb 6-1: USB disconnect, device number 3 [ 195.361086][ T7436] netlink: 'syz.5.619': attribute type 1 has an invalid length. [ 195.361110][ T7436] netlink: 616 bytes leftover after parsing attributes in process `syz.5.619'. [ 195.361185][ T7436] netlink: 'syz.5.619': attribute type 1 has an invalid length. [ 198.768549][ T7488] netlink: 12 bytes leftover after parsing attributes in process `syz.3.639'. [ 198.768594][ T7488] netlink: 12 bytes leftover after parsing attributes in process `syz.3.639'. [ 199.647716][ T5932] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 199.796233][ T5932] usb 1-1: Using ep0 maxpacket: 16 [ 199.812605][ T5932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.812640][ T5932] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.812682][ T5932] usb 1-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 199.812706][ T5932] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.874078][ T5932] usb 1-1: config 0 descriptor?? [ 200.422315][ T5932] aquacomputer_d5next 0003:0C70:F0B6.0013: hidraw0: USB HID v0.05 Device [HID 0c70:f0b6] on usb-dummy_hcd.0-1/input0 [ 200.467458][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.467542][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.614886][ T5932] usb 1-1: USB disconnect, device number 6 [ 200.904157][ T7499] fido_id[7499]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 202.472432][ T7521] fuse: Bad value for 'user_id' [ 202.472453][ T7521] fuse: Bad value for 'user_id' [ 205.669860][ T7552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.650'. [ 207.478613][ T7582] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 208.204963][ T7590] netlink: 108 bytes leftover after parsing attributes in process `syz.3.665'. [ 208.204989][ T7590] netlink: 20 bytes leftover after parsing attributes in process `syz.3.665'. [ 209.444766][ T5932] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 209.614908][ T5932] usb 4-1: Using ep0 maxpacket: 8 [ 209.619081][ T5932] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.619107][ T5932] usb 4-1: config 0 has no interfaces? [ 209.623852][ T5932] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 209.623881][ T5932] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 209.623902][ T5932] usb 4-1: Product: syz [ 209.623916][ T5932] usb 4-1: Manufacturer: syz [ 209.623932][ T5932] usb 4-1: SerialNumber: syz [ 209.719537][ T5932] usb 4-1: config 0 descriptor?? [ 210.062580][ T7601] IPVS: Unknown mcast interface: pimreg1 [ 210.079866][ T1597] usb 4-1: USB disconnect, device number 8 [ 211.362159][ T5857] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 211.408739][ T5857] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 211.411920][ T5857] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 211.413173][ T5857] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 211.413995][ T5857] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 212.548856][ T7608] chnl_net:caif_netlink_parms(): no params data found [ 213.484953][ T5857] Bluetooth: hci2: command tx timeout [ 215.565006][ T5857] Bluetooth: hci2: command tx timeout [ 217.590752][ T7620] netlink: 16 bytes leftover after parsing attributes in process `syz.2.674'. [ 217.648834][ T5857] Bluetooth: hci2: command tx timeout [ 219.244565][ C0] sched: DL replenish lagged too much [ 219.724864][ T5857] Bluetooth: hci2: command tx timeout [ 220.873636][ T7643] program syz.3.682 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 221.923860][ T7654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.688'. [ 222.055013][ T5858] Bluetooth: hci1: command 0x0406 tx timeout [ 222.055058][ T5858] Bluetooth: hci3: command 0x0406 tx timeout [ 222.055087][ T5858] Bluetooth: hci4: command 0x0406 tx timeout [ 236.283443][ T5858] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 236.310454][ T5858] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 236.323881][ T5858] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 236.340298][ T5858] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 236.342359][ T5858] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 237.771707][ T5864] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 237.775626][ T5864] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 237.777378][ T5864] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 237.779013][ T5864] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 237.780215][ T5864] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 241.064847][ T7668] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.693'. [ 243.006746][ T7696] netlink: 16 bytes leftover after parsing attributes in process `syz.2.704'. [ 254.804147][ T7608] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.804298][ T7608] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.819471][ T7608] bridge_slave_0: entered allmulticast mode [ 254.831035][ T7608] bridge_slave_0: entered promiscuous mode [ 254.852402][ T7608] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.852629][ T7608] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.852884][ T7608] bridge_slave_1: entered allmulticast mode [ 254.902801][ T7608] bridge_slave_1: entered promiscuous mode [ 257.268252][ T59] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 257.291781][ T59] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 257.293486][ T59] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 257.312179][ T59] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 257.326603][ T59] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 259.376222][ T5858] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 259.403920][ T5858] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 259.415091][ T5858] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 259.416382][ T5858] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 259.418085][ T5858] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 260.944935][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.945019][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.020703][ T5864] Bluetooth: hci7: command tx timeout [ 264.045032][ T5857] Bluetooth: hci6: command tx timeout [ 264.045515][ T5857] Bluetooth: hci7: command tx timeout [ 266.125013][ T5864] Bluetooth: hci7: command tx timeout [ 266.125048][ T5864] Bluetooth: hci6: command tx timeout [ 268.204859][ T5864] Bluetooth: hci7: command tx timeout [ 268.204917][ T5857] Bluetooth: hci6: command tx timeout [ 270.256640][ T5864] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 270.288126][ T5859] Bluetooth: hci6: command tx timeout [ 270.289180][ T5864] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 270.290362][ T5864] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 270.292706][ T5864] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 270.293590][ T5864] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 279.085027][ T5857] Bluetooth: hci9: command tx timeout [ 279.085504][ T5857] Bluetooth: hci8: command tx timeout [ 281.165070][ T5853] Bluetooth: hci8: command tx timeout [ 281.165105][ T5853] Bluetooth: hci9: command tx timeout [ 283.245285][ T5853] Bluetooth: hci8: command tx timeout [ 283.246876][ T5857] Bluetooth: hci9: command tx timeout [ 285.325070][ T5853] Bluetooth: hci8: command tx timeout [ 285.325137][ T5857] Bluetooth: hci9: command tx timeout [ 293.793388][ T5864] Bluetooth: hci0: command tx timeout [ 295.804880][ T5864] Bluetooth: hci0: command tx timeout [ 296.862502][ T5857] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 296.884968][ T5857] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 296.886374][ T5857] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 296.887660][ T5857] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 296.889407][ T5857] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 297.884940][ T5864] Bluetooth: hci0: command tx timeout [ 298.781541][ T5853] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 298.815894][ T5853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 298.817548][ T5853] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 298.818835][ T5853] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 298.819999][ T5853] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 299.964933][ T5853] Bluetooth: hci0: command tx timeout [ 303.704204][ T5857] Bluetooth: hci1: command tx timeout [ 305.725164][ T5864] Bluetooth: hci3: command tx timeout [ 305.725663][ T5864] Bluetooth: hci1: command tx timeout [ 307.804824][ T5853] Bluetooth: hci1: command tx timeout [ 307.804859][ T5853] Bluetooth: hci3: command tx timeout [ 309.884862][ T5864] Bluetooth: hci3: command tx timeout [ 309.884898][ T5864] Bluetooth: hci1: command tx timeout [ 311.968516][ T5853] Bluetooth: hci3: command tx timeout [ 318.687753][ T5864] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 318.713947][ T5864] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 318.722907][ T5864] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 318.741294][ T5864] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 318.742182][ T5864] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 319.811506][ T5864] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 319.833479][ T5864] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 319.843020][ T5864] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 319.853340][ T5864] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 319.854232][ T5864] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 320.844957][ T5864] Bluetooth: hci4: command tx timeout [ 321.964926][ T5864] Bluetooth: hci5: command tx timeout [ 322.380604][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.380714][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.924950][ T5864] Bluetooth: hci4: command tx timeout [ 324.044838][ T5864] Bluetooth: hci5: command tx timeout [ 325.004934][ T5864] Bluetooth: hci4: command tx timeout [ 326.124896][ T5864] Bluetooth: hci5: command tx timeout [ 327.085008][ T5864] Bluetooth: hci4: command tx timeout [ 328.205004][ T5864] Bluetooth: hci5: command tx timeout [ 330.915944][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 330.941469][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 330.942972][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 330.966076][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 330.968011][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 333.037907][ T5853] Bluetooth: hci2: command tx timeout [ 335.084772][ T5853] Bluetooth: hci2: command tx timeout [ 337.164809][ T5853] Bluetooth: hci2: command tx timeout [ 339.244783][ T5853] Bluetooth: hci2: command tx timeout [ 357.915620][ T5864] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 357.937486][ T5864] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 357.938763][ T5864] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 357.940503][ T5864] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 357.942370][ T5864] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 359.883098][ T5853] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 359.904869][ T5853] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 359.906977][ T5853] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 359.908350][ T5853] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 359.909635][ T5853] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 360.044904][ T5853] Bluetooth: hci10: command tx timeout [ 361.965185][ T5853] Bluetooth: hci11: command tx timeout [ 362.124832][ T5853] Bluetooth: hci10: command tx timeout [ 364.054795][ T5853] Bluetooth: hci11: command tx timeout [ 364.204966][ T5853] Bluetooth: hci10: command tx timeout [ 366.125076][ T5853] Bluetooth: hci11: command tx timeout [ 366.284849][ T5853] Bluetooth: hci10: command tx timeout [ 368.207214][ T5853] Bluetooth: hci11: command tx timeout [ 375.674806][ T5853] Bluetooth: hci7: command 0x0406 tx timeout [ 375.674848][ T5853] Bluetooth: hci6: command 0x0406 tx timeout [ 379.835549][ T5853] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 379.856221][ T5853] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 379.858516][ T5853] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 379.859998][ T5853] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 379.860955][ T5853] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 380.800171][ T5859] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 380.803785][ T5859] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 380.821703][ T5859] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 380.822982][ T5859] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 380.823804][ T5859] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 383.825607][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.825695][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 389.326596][ T5859] Bluetooth: hci12: command tx timeout [ 389.332961][ T5853] Bluetooth: hci13: command tx timeout [ 391.009914][ T5859] Bluetooth: hci8: command 0x0406 tx timeout [ 391.009972][ T5853] Bluetooth: hci9: command 0x0406 tx timeout [ 391.404922][ T5853] Bluetooth: hci13: command tx timeout [ 391.404959][ T5853] Bluetooth: hci12: command tx timeout [ 391.683836][ T5853] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 391.701689][ T5853] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 391.703227][ T5853] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 391.726443][ T5853] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 391.727388][ T5853] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 393.485014][ T5857] Bluetooth: hci12: command tx timeout [ 393.485049][ T5857] Bluetooth: hci13: command tx timeout [ 395.565040][ T5853] Bluetooth: hci13: command tx timeout [ 395.565076][ T5853] Bluetooth: hci12: command tx timeout [ 401.251472][ T5857] Bluetooth: hci0: command 0x0406 tx timeout [ 418.871340][ T5857] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 418.891481][ T5857] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 418.893385][ T5857] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 418.913633][ T5857] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 418.929090][ T5857] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 419.887055][ T5858] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 419.889767][ T5858] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 419.890970][ T5858] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 419.892336][ T5858] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 419.893230][ T5858] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 426.865880][ T7800] Bluetooth: hci3: command 0x0406 tx timeout [ 426.865925][ T7800] Bluetooth: hci1: command 0x0406 tx timeout [ 435.805228][ T5859] Bluetooth: hci14: command tx timeout [ 437.885314][ T5859] Bluetooth: hci14: command tx timeout [ 439.965227][ T5859] Bluetooth: hci14: command tx timeout [ 440.135788][ T39] INFO: task syz.2.704:7696 blocked for more than 143 seconds. [ 440.135820][ T39] Not tainted syzkaller #0 [ 440.135831][ T39] Blocked by coredump. [ 440.135838][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 440.135852][ T39] task:syz.2.704 state:D stack:24232 pid:7696 tgid:7695 ppid:5861 task_flags:0x40054c flags:0x00004002 [ 440.135924][ T39] Call Trace: [ 440.135932][ T39] [ 440.135947][ T39] __schedule+0x16f3/0x4c20 [ 440.135999][ T39] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 440.136027][ T39] ? arch_stack_walk+0xfc/0x150 [ 440.136077][ T39] ? __pfx___schedule+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 440.136130][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 440.136166][ T39] rt_mutex_schedule+0x77/0xf0 [ 440.136188][ T39] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 440.136216][ T39] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 440.136264][ T39] rt_mutex_slowlock+0x2b1/0x6e0 [ 440.136295][ T39] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 440.136324][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 440.136371][ T39] ? __pfx___fsnotify_parent+0x10/0x10 [ 440.136411][ T39] ? tun_chr_close+0x41/0x1c0 [ 440.136443][ T39] mutex_lock_nested+0x16a/0x1d0 [ 440.136473][ T39] ? __pfx_tun_chr_close+0x10/0x10 [ 440.136507][ T39] tun_chr_close+0x41/0x1c0 [ 440.136542][ T39] __fput+0x458/0xa80 [ 440.136579][ T39] task_work_run+0x1d4/0x260 [ 440.136607][ T39] ? __pfx_task_work_run+0x10/0x10 [ 440.136630][ T39] ? do_exit+0x6b0/0x2300 [ 440.136650][ T39] ? kmem_cache_free+0x195/0x510 [ 440.136687][ T39] do_exit+0x6b5/0x2300 [ 440.136707][ T39] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 440.136747][ T39] ? __lock_acquire+0xab9/0xd20 [ 440.136788][ T39] ? __pfx_do_exit+0x10/0x10 [ 440.136806][ T39] ? rt_mutex_slowunlock+0x493/0x8a0 [ 440.136838][ T39] ? rt_spin_lock+0x1bb/0x2c0 [ 440.136877][ T39] do_group_exit+0x21c/0x2d0 [ 440.136904][ T39] get_signal+0x125e/0x1310 [ 440.136957][ T39] arch_do_signal_or_restart+0x9a/0x750 [ 440.136987][ T39] ? __x64_sys_sendmsg+0x236/0x260 [ 440.137014][ T39] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 440.137059][ T39] ? exit_to_user_mode_loop+0x40/0x110 [ 440.137093][ T39] exit_to_user_mode_loop+0x75/0x110 [ 440.137125][ T39] do_syscall_64+0x2bd/0x3b0 [ 440.137146][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 440.137180][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.137180][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.137202][ T39] ? clear_bhb_loop+0x60/0xb0 [ 440.137230][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.137257][ T39] RIP: 0033:0x7f89cda2ec29 [ 440.137282][ T39] RSP: 002b:00007f89cbc8e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 440.137304][ T39] RAX: 00000000000000c4 RBX: 00007f89cdc75fa0 RCX: 00007f89cda2ec29 [ 440.137319][ T39] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 440.137334][ T39] RBP: 00007f89cdab1e41 R08: 0000000000000000 R09: 0000000000000000 [ 440.137348][ T39] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 440.137361][ T39] R13: 00007f89cdc76038 R14: 00007f89cdc75fa0 R15: 00007ffe8d052ae8 [ 440.137397][ T39] [ 440.137423][ T39] [ 440.137423][ T39] Showing all locks held in the system: [ 440.137434][ T39] 4 locks held by kworker/0:0/9: [ 440.137446][ T39] #0: ffff88802f4dad38 ((wq_completion)wg-crypt-wg0#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 440.137511][ T39] #1: ffffc900000e7bc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 440.137570][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 440.137626][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 440.137683][ T39] 3 locks held by kworker/u8:1/13: [ 440.137695][ T39] #0: ffff88814cd6d138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 440.137786][ T39] #1: ffffc90000127bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 440.137844][ T39] #2: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 440.137903][ T39] 2 locks held by ksoftirqd/0/15: [ 440.137915][ T39] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 440.137970][ T39] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 440.138025][ T39] 7 locks held by ktimers/0/16: [ 440.138039][ T39] 2 locks held by rcuc/0/20: [ 440.138051][ T39] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 440.138107][ T39] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 440.138166][ T39] 1 lock held by khungtaskd/39: [ 440.138177][ T39] #0: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 440.138231][ T39] 4 locks held by kworker/u9:0/59: [ 440.138243][ T39] #0: ffff88803566b938 ((wq_completion)hci15#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 440.138306][ T39] #1: ffffc9000125fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 440.138362][ T39] #2: ffff888081b280a8 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xb1/0x1220 [ 440.138424][ T39] #3: ffffffff8ee3b298 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 [ 440.138491][ T39] 2 locks held by kworker/u8:8/1130: [ 440.138507][ T39] 5 locks held by kworker/u8:13/1502: [ 440.138520][ T39] 3 locks held by kworker/u8:15/1925: [ 440.138532][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 440.138589][ T39] #1: ffffc90005b8fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 440.138645][ T39] #2: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 440.138710][ T39] 2 locks held by getty/5602: [ 440.138723][ T39] #0: ffff88823bf700a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 440.138795][ T39] #1: ffffc90003e832e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 440.138853][ T39] 4 locks held by kworker/u9:4/5857: [ 440.138865][ T39] #0: ffff88805ae34938 ((wq_completion)hci16#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 440.138924][ T39] #1: ffffc90004f4fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 440.138981][ T39] #2: ffff8880568080a8 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xb1/0x1220 [ 440.139041][ T39] #3: ffffffff8ee3b298 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 [ 440.139100][ T39] 5 locks held by kworker/u9:5/5858: [ 440.139112][ T39] #0: ffff888060752138 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 440.139168][ T39] #1: ffffc90004f5fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 440.139225][ T39] #2: ffff888038670e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 440.139278][ T39] #3: ffff8880386700a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 440.139339][ T39] #4: ffffffff8ee3b298 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 440.139400][ T39] 6 locks held by kworker/u9:7/5864: [ 440.139413][ T39] #0: ffff88802f41c138 ((wq_completion)hci3#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 440.139474][ T39] #1: ffffc90004fafbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 440.139531][ T39] #2: ffff8880606a4e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 440.139584][ T39] #3: ffff8880606a40a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 440.139644][ T39] #4: ffffffff8ee3b298 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 440.139705][ T39] #5: ffff888029528358 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 440.139776][ T39] 4 locks held by kworker/0:3/5905: [ 440.139789][ T39] #0: ffff88805b652138 ((wq_completion)wg-crypt-wg2#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 440.139850][ T39] #1: ffffc900051dfbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 440.139926][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 440.139980][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 440.140037][ T39] 4 locks held by kworker/0:4/5912: [ 440.140049][ T39] #0: ffff888030d8ed38 ((wq_completion)wg-crypt-wg1#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 440.140111][ T39] #1: ffffc9000524fbc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 440.140168][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 440.140224][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 440.140280][ T39] 4 locks held by kworker/0:5/5913: [ 440.140294][ T39] 3 locks held by kworker/1:4/5932: [ 440.140306][ T39] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 440.140362][ T39] #1: ffffc9000539fbc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 440.140418][ T39] #2: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 440.140475][ T39] 1 lock held by syz.4.611/7415: [ 440.140487][ T39] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 440.140539][ T39] 4 locks held by kworker/0:7/7481: [ 440.140552][ T39] #0: ffff888034652538 ((wq_completion)wg-crypt-wg2#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 440.140612][ T39] #1: ffffc900041afbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 440.140688][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 440.140743][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 440.140807][ T39] 4 locks held by kworker/0:8/7518: [ 440.140819][ T39] #0: ffff88802f4dad38 ((wq_completion)wg-crypt-wg0#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 440.140888][ T39] #1: ffffc9000408fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 440.140963][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 440.141016][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 440.141068][ T39] 4 locks held by kworker/0:9/7595: [ 440.141080][ T39] #0: ffff88805b650d38 ((wq_completion)wg-crypt-wg2#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 440.141138][ T39] #1: ffffc90005707bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 440.141207][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 440.141262][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 440.141319][ T39] 1 lock held by syz-executor/7608: [ 440.141331][ T39] #0: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 440.141392][ T39] 4 locks held by kworker/0:11/7616: [ 440.141407][ T39] 1 lock held by syz.0.683/7641: [ 440.141418][ T39] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 440.141469][ T39] 1 lock held by syz.3.687/7652: [ 440.141481][ T39] #0: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 440.141540][ T39] 2 locks held by syz-executor/7671: [ 440.141552][ T39] #0: ffffffff8ecc6940 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 440.141610][ T39] #1: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x990 [ 440.141671][ T39] 2 locks held by syz-executor/7677: [ 440.141683][ T39] #0: ffffffff8ecc6940 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 440.141740][ T39] #1: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x990 [ 440.141806][ T39] 1 lock held by syz.5.697/7682: [ 440.141818][ T39] #0: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 440.141877][ T39] 1 lock held by syz.2.704/7696: [ 440.141889][ T39] #0: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 440.141959][ T39] 2 locks held by syz-executor/7704: [ 440.141970][ T39] #0: ffff88806bfe0e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 440.142025][ T39] #1: ffff88806bfe00a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 440.142086][ T39] 1 lock held by syz-executor/7720: [ 440.142098][ T39] #0: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 440.142157][ T39] 1 lock held by syz-executor/7729: [ 440.142168][ T39] #0: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 440.142220][ T39] 1 lock held by syz-executor/7732: [ 440.142232][ T39] #0: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 440.142284][ T39] 1 lock held by syz-executor/7739: [ 440.142296][ T39] #0: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 440.142347][ T39] 1 lock held by syz-executor/7744: [ 440.142358][ T39] #0: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 440.142405][ T39] 1 lock held by syz-executor/7754: [ 440.142417][ T39] #0: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 440.142468][ T39] 1 lock held by syz-executor/7760: [ 440.142480][ T39] #0: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 440.142531][ T39] 1 lock held by syz-executor/7765: [ 440.142543][ T39] #0: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 440.142595][ T39] 1 lock held by syz-executor/7769: [ 440.142607][ T39] #0: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 440.142659][ T39] 1 lock held by syz-executor/7773: [ 440.142671][ T39] #0: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 440.142775][ T39] 1 lock held by syz-executor/7785: [ 440.142788][ T39] #0: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 440.142840][ T39] 1 lock held by syz-executor/7791: [ 440.142852][ T39] #0: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 440.142905][ T39] 1 lock held by syz-executor/7796: [ 440.142917][ T39] #0: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 440.142971][ T39] 1 lock held by syz-executor/7806: [ 440.142983][ T39] [ 440.142989][ T39] ============================================= [ 440.142989][ T39] [ 440.143011][ T39] NMI backtrace for cpu 1 [ 440.143035][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 440.143059][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 440.143072][ T39] Call Trace: [ 440.143081][ T39] [ 440.143090][ T39] dump_stack_lvl+0x189/0x250 [ 440.143127][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 440.143160][ T39] ? __pfx__printk+0x10/0x10 [ 440.143198][ T39] nmi_cpu_backtrace+0x39e/0x3d0 [ 440.143230][ T39] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 440.143261][ T39] ? __pfx__printk+0x10/0x10 [ 440.143290][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 440.143321][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 440.143353][ T39] watchdog+0xf93/0xfe0 [ 440.143388][ T39] ? watchdog+0x1de/0xfe0 [ 440.143423][ T39] kthread+0x70e/0x8a0 [ 440.143459][ T39] ? __pfx_watchdog+0x10/0x10 [ 440.143486][ T39] ? __pfx_kthread+0x10/0x10 [ 440.143526][ T39] ? __pfx_kthread+0x10/0x10 [ 440.143561][ T39] ret_from_fork+0x436/0x7d0 [ 440.143592][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 440.143628][ T39] ? __switch_to_asm+0x39/0x70 [ 440.143648][ T39] ? __switch_to_asm+0x33/0x70 [ 440.143667][ T39] ? __pfx_kthread+0x10/0x10 [ 440.143701][ T39] ret_from_fork_asm+0x1a/0x30 [ 440.143740][ T39] [ 440.143756][ T39] Sending NMI from CPU 1 to CPUs 0: [ 440.143784][ C0] NMI backtrace for cpu 0 [ 440.143799][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 440.143819][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 440.143830][ C0] RIP: 0010:unwind_next_frame+0x1312/0x2390 [ 440.143858][ C0] Code: 01 c8 48 83 e0 fe 4c 8d 3c 45 00 00 00 00 49 01 ef 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 75 27 <49> 63 07 4c 01 f8 49 8d 4f 04 4c 39 e0 48 0f 46 e9 49 8d 47 fc 48 [ 440.143873][ C0] RSP: 0018:ffffc90000156a38 EFLAGS: 00000246 [ 440.143889][ C0] RAX: 0000000000000000 RBX: ffffffff8f8872bc RCX: dffffc0000000000 [ 440.143902][ C0] RDX: ffffffff8f8872bc RSI: ffffffff902accc2 RDI: ffffffff8b621620 [ 440.143916][ C0] RBP: ffffffff8f8872bc R08: 0000000000000001 R09: ffffffff8172c165 [ 440.143928][ C0] R10: ffffc90000156b58 R11: ffffffff81aaf310 R12: ffffffff893b2eec [ 440.143941][ C0] R13: ffffffff8f8872bc R14: ffffc90000156b08 R15: ffffffff8f8872bc [ 440.143955][ C0] FS: 0000000000000000(0000) GS:ffff8881268bc000(0000) knlGS:0000000000000000 [ 440.143970][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 440.143982][ C0] CR2: 00005591730945c0 CR3: 0000000034594000 CR4: 00000000003526f0 [ 440.144006][ C0] Call Trace: [ 440.144013][ C0] [ 440.144023][ C0] ? unwind_next_frame+0xa5/0x2390 [ 440.144050][ C0] ? nft_do_chain_inet+0x25d/0x340 [ 440.144072][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 440.144093][ C0] arch_stack_walk+0x11c/0x150 [ 440.144123][ C0] ? nft_do_chain_inet+0x25d/0x340 [ 440.144144][ C0] stack_trace_save+0x9c/0xe0 [ 440.144162][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 440.144180][ C0] ? kasan_record_aux_stack+0xbd/0xd0 [ 440.144198][ C0] ? nft_synproxy_eval_v4+0x376/0x560 [ 440.144217][ C0] ? nft_synproxy_do_eval+0x345/0x570 [ 440.144235][ C0] ? nft_do_chain+0x409/0x1920 [ 440.144255][ C0] ? __lock_acquire+0xab9/0xd20 [ 440.144279][ C0] kasan_save_track+0x3e/0x80 [ 440.144299][ C0] ? kasan_save_track+0x3e/0x80 [ 440.144318][ C0] ? kasan_save_free_info+0x46/0x50 [ 440.144334][ C0] ? __kasan_slab_free+0x5b/0x80 [ 440.144354][ C0] ? kmem_cache_free+0x195/0x510 [ 440.144379][ C0] ? skb_release_data+0x62d/0x7c0 [ 440.144396][ C0] ? consume_skb+0x9e/0xf0 [ 440.144422][ C0] ? nft_synproxy_eval_v4+0x376/0x560 [ 440.144445][ C0] ? nft_synproxy_do_eval+0x345/0x570 [ 440.144463][ C0] ? nft_do_chain+0x409/0x1920 [ 440.144480][ C0] ? nft_do_chain_inet+0x25d/0x340 [ 440.144526][ C0] kasan_save_free_info+0x46/0x50 [ 440.144543][ C0] __kasan_slab_free+0x5b/0x80 [ 440.144565][ C0] ? skb_release_data+0x62d/0x7c0 [ 440.144581][ C0] kmem_cache_free+0x195/0x510 [ 440.144609][ C0] skb_release_data+0x62d/0x7c0 [ 440.144631][ C0] consume_skb+0x9e/0xf0 [ 440.144659][ C0] nft_synproxy_eval_v4+0x376/0x560 [ 440.144681][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 440.144703][ C0] ? nf_ip_checksum+0x13c/0x510 [ 440.144724][ C0] nft_synproxy_do_eval+0x345/0x570 [ 440.144747][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 440.144768][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 440.144800][ C0] nft_do_chain+0x409/0x1920 [ 440.144827][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 440.144861][ C0] ? try_to_take_rt_mutex+0x840/0xb00 [ 440.144891][ C0] nft_do_chain_inet+0x25d/0x340 [ 440.144909][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 440.144927][ C0] ? __lock_acquire+0xab9/0xd20 [ 440.144957][ C0] ? NF_HOOK+0x9a/0x3a0 [ 440.144982][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 440.145008][ C0] nf_hook_slow+0xc2/0x220 [ 440.145037][ C0] NF_HOOK+0x206/0x3a0 [ 440.145063][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 440.145088][ C0] ? NF_HOOK+0x9a/0x3a0 [ 440.145111][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 440.145133][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 440.145161][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 440.145187][ C0] ? skb_dst+0x4f/0xd0 [ 440.145212][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 440.145239][ C0] NF_HOOK+0x30c/0x3a0 [ 440.145264][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 440.145288][ C0] ? NF_HOOK+0x9a/0x3a0 [ 440.145312][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 440.145337][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 440.145368][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 440.145392][ C0] __netif_receive_skb+0x143/0x380 [ 440.145413][ C0] ? rt_spin_unlock+0x65/0x80 [ 440.145438][ C0] ? process_backlog+0x27b/0x900 [ 440.145461][ C0] process_backlog+0x31e/0x900 [ 440.145492][ C0] __napi_poll+0xb6/0x540 [ 440.145517][ C0] net_rx_action+0x707/0xe00 [ 440.145551][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 440.145595][ C0] handle_softirqs+0x22f/0x710 [ 440.145622][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 440.145651][ C0] run_ktimerd+0xcf/0x190 [ 440.145676][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 440.145700][ C0] ? schedule+0x91/0x360 [ 440.145729][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 440.145751][ C0] smpboot_thread_fn+0x53f/0xa60 [ 440.145774][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 440.145801][ C0] kthread+0x70e/0x8a0 [ 440.145829][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 440.145851][ C0] ? __pfx_kthread+0x10/0x10 [ 440.145881][ C0] ? __pfx_kthread+0x10/0x10 [ 440.145908][ C0] ret_from_fork+0x436/0x7d0 [ 440.145933][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 440.145959][ C0] ? __switch_to_asm+0x39/0x70 [ 440.145976][ C0] ? __switch_to_asm+0x33/0x70 [ 440.145992][ C0] ? __pfx_kthread+0x10/0x10 [ 440.146024][ C0] ret_from_fork_asm+0x1a/0x30 [ 440.146050][ C0] [ 440.468907][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 440.468929][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 440.468954][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 440.468967][ T39] Call Trace: [ 440.468976][ T39] [ 440.468986][ T39] dump_stack_lvl+0x99/0x250 [ 440.469023][ T39] ? __asan_memcpy+0x40/0x70 [ 440.469048][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 440.469081][ T39] ? __pfx__printk+0x10/0x10 [ 440.469119][ T39] vpanic+0x281/0x750 [ 440.469154][ T39] ? __pfx_vpanic+0x10/0x10 [ 440.469186][ T39] ? preempt_schedule+0xae/0xc0 [ 440.469221][ T39] ? preempt_schedule_common+0x83/0xd0 [ 440.469260][ T39] panic+0xb9/0xc0 [ 440.469291][ T39] ? __pfx_panic+0x10/0x10 [ 440.469325][ T39] ? preempt_schedule_thunk+0x16/0x30 [ 440.469358][ T39] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 440.469391][ T39] watchdog+0xfd2/0xfe0 [ 440.469426][ T39] ? watchdog+0x1de/0xfe0 [ 440.469461][ T39] kthread+0x70e/0x8a0 [ 440.469499][ T39] ? __pfx_watchdog+0x10/0x10 [ 440.469526][ T39] ? __pfx_kthread+0x10/0x10 [ 440.469565][ T39] ? __pfx_kthread+0x10/0x10 [ 440.469599][ T39] ret_from_fork+0x436/0x7d0 [ 440.469632][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 440.469667][ T39] ? __switch_to_asm+0x39/0x70 [ 440.469686][ T39] ? __switch_to_asm+0x33/0x70 [ 440.469706][ T39] ? __pfx_kthread+0x10/0x10 [ 440.469740][ T39] ret_from_fork_asm+0x1a/0x30 [ 440.469779][ T39] [ 440.470093][ T39] Kernel Offset: disabled