last executing test programs: 3m34.514902259s ago: executing program 0 (id=180): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000140)={0x2, 0x0, @ioapic={0x0, 0x4, 0x8000001, 0x0, 0x0, [{0x9, 0x0, 0x0, '\x00', 0xff}, {0xfd}, {0x0, 0x1, 0x0, '\x00', 0x1}, {0x0, 0x40, 0x0, '\x00', 0xfd}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x2, 0x7, '\x00', 0x1}, {0x0, 0x0, 0x0, '\x00', 0x2}, {0x1, 0x2, 0x0, '\x00', 0x5}, {0x2, 0x0, 0x0, '\x00', 0x10}, {0xc, 0xfc, 0x2}, {0x0, 0x0, 0x40, '\x00', 0x24}, {}, {0x0, 0x0, 0x8}, {0x0, 0xb5}, {0x0, 0x9, 0x4, '\x00', 0x9e}, {0x0, 0x2, 0xb, '\x00', 0x1}, {}, {0x3, 0x0, 0x0, '\x00', 0xfc}, {0x24, 0x6, 0x4}, {0x0, 0x0, 0x7, '\x00', 0x7}, {0x0, 0x0, 0x8}, {0x9, 0x0, 0x0, '\x00', 0xb}, {0x0, 0x8}, {0x0, 0x0, 0x40, '\x00', 0x9d}]}}) 3m34.073538648s ago: executing program 0 (id=188): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000009, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f00000000c0)=0x8, 0x4) 3m33.752774024s ago: executing program 0 (id=192): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000100)=0x2, 0x4) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000001a00)=0xf2d, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, 0xfffffffffffffffd, &(0x7f00000000c0)=0xa4) 3m33.638873512s ago: executing program 0 (id=196): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x100}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 3m33.343331603s ago: executing program 0 (id=201): r0 = socket$unix(0x1, 0x2, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000200)=0x10) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 3m33.111039385s ago: executing program 0 (id=205): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000e40)={'syz1\x00', {0x9, 0x6, 0x1, 0x52}, 0x34, [0xffffffff, 0x1, 0x7, 0x5, 0xcc8, 0x8, 0x10, 0x0, 0x9ed, 0x49, 0xf3b, 0x4, 0x3, 0x6, 0x0, 0x3, 0x855, 0x1, 0x0, 0x6, 0x0, 0x3fb, 0xa, 0x6, 0x6, 0x4, 0x6, 0x7, 0xbe7, 0x5, 0x8, 0x0, 0x1bec, 0x2, 0xad1, 0x3, 0xfffff31a, 0xc8, 0xffffffff, 0x86, 0x2, 0x6, 0x101, 0x2855f07a, 0xd, 0x6, 0x868, 0x80008, 0xd, 0x8a, 0xf7a0, 0x40, 0xa57, 0x35b, 0x0, 0xe, 0x8, 0x5, 0x7, 0x4, 0x100, 0xfff, 0x2004, 0x40], [0x0, 0x7, 0x9, 0x2, 0x5, 0x4, 0x7fff, 0x8, 0x7f, 0x6, 0x2, 0xff, 0x9, 0xfffffff9, 0x9, 0x13, 0x0, 0x0, 0xdb, 0x1, 0x2, 0x1002, 0xb93b, 0xf, 0x2, 0x6, 0xfffffffe, 0x9, 0x278, 0x8, 0xf, 0x4, 0x100, 0x6, 0x3, 0xfffffffc, 0x3, 0x13, 0x3f, 0x1, 0xffffff79, 0x1, 0x5, 0xfffffffa, 0xf42, 0x5e9, 0x80000001, 0x1, 0x800, 0x8, 0x9, 0xffffff10, 0x2, 0xfffffffb, 0x7, 0x5, 0x3, 0xfffffffd, 0x8, 0x0, 0xb83, 0x10000, 0x1, 0x10001], [0x8001, 0x7, 0x7, 0xffffff76, 0x80, 0x8, 0x3, 0x5, 0x8, 0x8, 0xffff, 0x7, 0x4, 0x401, 0x200, 0x201, 0x5, 0x9, 0x0, 0x7fff, 0x0, 0x7fffffff, 0x9, 0x0, 0x8, 0x1, 0xadb, 0x6, 0x101, 0x8, 0x7fffffff, 0x8001, 0xff, 0x4, 0x7fffffff, 0x0, 0x5, 0x7, 0x8, 0x1, 0x3, 0x5, 0xa07, 0x9, 0x8, 0x0, 0xfa, 0xc77362a1, 0x7, 0xfffffffd, 0x4, 0x6, 0x40, 0xa, 0x0, 0x4, 0x870, 0x7, 0x10000, 0x9, 0xbb, 0x1, 0x0, 0x5], [0x7f, 0x20000001, 0x7, 0x5, 0xf, 0x0, 0x9, 0x9, 0xffd, 0x9, 0x80000001, 0x7, 0x81, 0xe9, 0xd, 0xd, 0x8, 0x1000, 0x141, 0x2, 0x98a, 0x6, 0xd, 0x0, 0x2, 0x8, 0x59ec, 0x10001, 0x9, 0x8000, 0x6, 0x3, 0x4, 0xb, 0x8, 0x0, 0x7, 0x4, 0xb99, 0x6628, 0x4, 0x4, 0x3, 0x80000001, 0x7, 0x9, 0x5, 0x7, 0x5, 0x2, 0x7, 0x6, 0x8000, 0x2, 0x1, 0xffff, 0x3, 0xfffffffe, 0xfff, 0x500, 0x80000000, 0xfffffffe, 0x7, 0xf3]}, 0x45c) 3m17.924387596s ago: executing program 32 (id=205): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000e40)={'syz1\x00', {0x9, 0x6, 0x1, 0x52}, 0x34, [0xffffffff, 0x1, 0x7, 0x5, 0xcc8, 0x8, 0x10, 0x0, 0x9ed, 0x49, 0xf3b, 0x4, 0x3, 0x6, 0x0, 0x3, 0x855, 0x1, 0x0, 0x6, 0x0, 0x3fb, 0xa, 0x6, 0x6, 0x4, 0x6, 0x7, 0xbe7, 0x5, 0x8, 0x0, 0x1bec, 0x2, 0xad1, 0x3, 0xfffff31a, 0xc8, 0xffffffff, 0x86, 0x2, 0x6, 0x101, 0x2855f07a, 0xd, 0x6, 0x868, 0x80008, 0xd, 0x8a, 0xf7a0, 0x40, 0xa57, 0x35b, 0x0, 0xe, 0x8, 0x5, 0x7, 0x4, 0x100, 0xfff, 0x2004, 0x40], [0x0, 0x7, 0x9, 0x2, 0x5, 0x4, 0x7fff, 0x8, 0x7f, 0x6, 0x2, 0xff, 0x9, 0xfffffff9, 0x9, 0x13, 0x0, 0x0, 0xdb, 0x1, 0x2, 0x1002, 0xb93b, 0xf, 0x2, 0x6, 0xfffffffe, 0x9, 0x278, 0x8, 0xf, 0x4, 0x100, 0x6, 0x3, 0xfffffffc, 0x3, 0x13, 0x3f, 0x1, 0xffffff79, 0x1, 0x5, 0xfffffffa, 0xf42, 0x5e9, 0x80000001, 0x1, 0x800, 0x8, 0x9, 0xffffff10, 0x2, 0xfffffffb, 0x7, 0x5, 0x3, 0xfffffffd, 0x8, 0x0, 0xb83, 0x10000, 0x1, 0x10001], [0x8001, 0x7, 0x7, 0xffffff76, 0x80, 0x8, 0x3, 0x5, 0x8, 0x8, 0xffff, 0x7, 0x4, 0x401, 0x200, 0x201, 0x5, 0x9, 0x0, 0x7fff, 0x0, 0x7fffffff, 0x9, 0x0, 0x8, 0x1, 0xadb, 0x6, 0x101, 0x8, 0x7fffffff, 0x8001, 0xff, 0x4, 0x7fffffff, 0x0, 0x5, 0x7, 0x8, 0x1, 0x3, 0x5, 0xa07, 0x9, 0x8, 0x0, 0xfa, 0xc77362a1, 0x7, 0xfffffffd, 0x4, 0x6, 0x40, 0xa, 0x0, 0x4, 0x870, 0x7, 0x10000, 0x9, 0xbb, 0x1, 0x0, 0x5], [0x7f, 0x20000001, 0x7, 0x5, 0xf, 0x0, 0x9, 0x9, 0xffd, 0x9, 0x80000001, 0x7, 0x81, 0xe9, 0xd, 0xd, 0x8, 0x1000, 0x141, 0x2, 0x98a, 0x6, 0xd, 0x0, 0x2, 0x8, 0x59ec, 0x10001, 0x9, 0x8000, 0x6, 0x3, 0x4, 0xb, 0x8, 0x0, 0x7, 0x4, 0xb99, 0x6628, 0x4, 0x4, 0x3, 0x80000001, 0x7, 0x9, 0x5, 0x7, 0x5, 0x2, 0x7, 0x6, 0x8000, 0x2, 0x1, 0xffff, 0x3, 0xfffffffe, 0xfff, 0x500, 0x80000000, 0xfffffffe, 0x7, 0xf3]}, 0x45c) 2m19.793569103s ago: executing program 4 (id=800): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x2, 0x9}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@mcast2, 0x8000000, 0x0, 0x1, 0x0, 0x7f, 0x7}, 0x20) 2m19.664776178s ago: executing program 4 (id=801): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r0, &(0x7f0000001700)=[{{0x0, 0x0, &(0x7f0000001540)=[{0x0}, {&(0x7f00000013c0)=""/193, 0xc1}], 0x2}, 0x8}], 0x1, 0x2061, 0x0) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 2m18.746176433s ago: executing program 4 (id=811): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000100b060a5000000000000109022400010000500009040002010300000009210000000122f80409058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000706000000ff0309"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 2m18.151625886s ago: executing program 5 (id=822): r0 = syz_io_uring_setup(0x49c, &(0x7f0000000400)={0x0, 0x7b63, 0x80, 0x7ffc, 0x40024e}, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4c, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x989680}, 0x1, 0x8, 0x1}) io_uring_enter(r0, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0) 2m17.905788437s ago: executing program 2 (id=826): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000000)={0x3b}, 0x8) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000380)=0x4, 0x4) sendmmsg$inet6(r0, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0xa}}, 0x1c, 0x0}}], 0x1, 0xc040) 2m17.783786119s ago: executing program 2 (id=828): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)={0x4, 0x823, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0xfd, 0x0, 0x0, 0x0, "5c91440132bb112240fcbcc3fa9d0431575f8614d3538ce09c50eecd6ac579e8e83b944b666113f344d2d963e5089fc83532f17b33515bdd7e1be14f53b9fc9b"}}, 0x80}, 0x1, 0x0, 0x0, 0x40004}, 0x8881) 2m17.603241031s ago: executing program 1 (id=829): r0 = gettid() r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/176, 0xb0}, {0x0}], 0x2) tkill(r0, 0x8) 2m17.602332446s ago: executing program 5 (id=830): r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x9) openat$cgroup_pressure(r1, &(0x7f0000000180)='io.pressure\x00', 0x2, 0x0) 2m17.493522413s ago: executing program 3 (id=831): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x20, r1, 0x1, 0x70bd25, 0x5dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004000}, 0x2000c0c0) 2m17.431920988s ago: executing program 2 (id=832): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1, 0x559, 0x401, {}, {}, {}, 0x1, @can={{}, 0x0, 0x3, 0x0, 0x0, "ce2a4fa700aa108b"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0x800) 2m17.395705551s ago: executing program 1 (id=833): capset(&(0x7f0000a31000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x7fff}) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r1}) 2m17.354232787s ago: executing program 3 (id=834): r0 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000700)=0x4fb8, 0x4) sendmmsg(r0, &(0x7f0000000600)=[{{&(0x7f0000000400)=@qipcrtr={0x2a, 0x1, 0x7fff}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e38100", 0xe}], 0x1}}], 0x1, 0x24044015) recvmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x2002, 0x0) 2m17.263372159s ago: executing program 2 (id=835): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000002240)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2m17.242505416s ago: executing program 5 (id=836): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0x6) 2m17.217785452s ago: executing program 3 (id=837): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000180)={r2, 0x3ff, 0x3}) 2m17.215296786s ago: executing program 1 (id=838): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x34, r2, 0x1, 0x0, 0x4000, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x99e}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}]]}, 0x34}}, 0x80) 2m17.08088257s ago: executing program 1 (id=839): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x5, 0x4, 0x5, 0x0, 0x9, 0x5, 0x3c, 0x7, 0x6, 0x4, 0xf9, 0x8, 0x0, 0xff, 0x25, 0x2, 0x84, 0x3, 0x4, '\x00', 0x7, 0x7}) 2m17.036591243s ago: executing program 4 (id=840): ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'netpci0\x00'}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c) 2m17.021450948s ago: executing program 2 (id=841): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x1d}, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=[@dstopts_2292={{0x14, 0x29, 0x34, {0x5e, 0x47}}}], 0x18}, 0xc4) 2m17.020752585s ago: executing program 5 (id=842): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4600040000ff7f00000000000003003e00ecffffff940200000000000040000000000000000000000000000000000000002c8f380003"], 0xe6) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 2m16.862281012s ago: executing program 3 (id=843): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="e6", 0x1}], 0x1}}], 0x1, 0x24040890) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000140)=0xffff0000, 0x4) 2m16.819982873s ago: executing program 2 (id=844): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)={0x3c, r0, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_DATA={0x4}]}, 0x3c}}, 0x0) 2m16.819700656s ago: executing program 4 (id=845): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000020100c0000000008e23d573b8c0c8"]) 2m16.805624721s ago: executing program 5 (id=846): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r0, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x408, 0x1) 2m16.632092428s ago: executing program 1 (id=847): ioctl$TCSETS(0xffffffffffffffff, 0x40204706, &(0x7f0000000040)={0x1, 0x0, 0x5, 0x0, 0x0, "3eccd8f9d20000000000001000000200000500"}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001000000100000800130000000000080012"], 0x44}}, 0x0) 2m16.537030199s ago: executing program 5 (id=848): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000300)={0x34, r0, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc0}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x34}}, 0x0) 2m16.516389916s ago: executing program 4 (id=849): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4102a}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048050}, 0x4000) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, 0xffffffffffffffff, 0x1000) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, "040086dd0000ffff"}}}}}, 0x0) 2m16.296549862s ago: executing program 1 (id=850): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x3fe3aa0262d8c783, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x9, 0x84, 0x200, 0x2, 0xd, 0x10001}}, {0x4}}]}]}, 0x58}}, 0x800) 2m15.846662026s ago: executing program 3 (id=851): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b80000001900010027bd700000000000e000000200"/46], 0xb8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000006200)=ANY=[@ANYBLOB="b8000000150001000000000000030000e00000020000000000000000000000000000000003000000000000000000000001fe0000000000000a"], 0xb8}}, 0x0) 2m15.620890893s ago: executing program 3 (id=852): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0xff, 0xfffff034}, {0xb1, 0x80, 0x0, 0x80000000}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) 30.603137253s ago: executing program 33 (id=848): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000300)={0x34, r0, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc0}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x34}}, 0x0) 2.163561135s ago: executing program 34 (id=850): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x3fe3aa0262d8c783, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x9, 0x84, 0x200, 0x2, 0xd, 0x10001}}, {0x4}}]}]}, 0x58}}, 0x800) 417.852458ms ago: executing program 35 (id=844): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)={0x3c, r0, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_DATA={0x4}]}, 0x3c}}, 0x0) 266.720324ms ago: executing program 36 (id=852): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0xff, 0xfffff034}, {0xb1, 0x80, 0x0, 0x80000000}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) 0s ago: executing program 37 (id=849): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4102a}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048050}, 0x4000) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, 0xffffffffffffffff, 0x1000) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, "040086dd0000ffff"}}}}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.74' (ED25519) to the list of known hosts. [ 82.425496][ T5826] cgroup: Unknown subsys name 'net' [ 82.653384][ T5826] cgroup: Unknown subsys name 'cpuset' [ 82.698897][ T5826] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.530167][ T5826] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.931399][ T9] cfg80211: failed to load regulatory.db [ 88.627108][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.640263][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.645002][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.668533][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.671542][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.672494][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.703424][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.708703][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.712516][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.713244][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.770614][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.774808][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.777873][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.802383][ T5158] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.803172][ T5158] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.819241][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.830468][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.831214][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.837466][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.839907][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.975158][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.977420][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.989066][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.990216][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.990926][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.709885][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 89.929582][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 89.934481][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 89.995324][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 90.442145][ T5858] chnl_net:caif_netlink_parms(): no params data found [ 90.461537][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.461629][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.462155][ T5842] bridge_slave_0: entered allmulticast mode [ 90.463857][ T5842] bridge_slave_0: entered promiscuous mode [ 90.524486][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.524690][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.526741][ T5842] bridge_slave_1: entered allmulticast mode [ 90.533960][ T5842] bridge_slave_1: entered promiscuous mode [ 90.770633][ T5848] Bluetooth: hci1: command tx timeout [ 90.770833][ T5158] Bluetooth: hci0: command tx timeout [ 90.848327][ T5158] Bluetooth: hci2: command tx timeout [ 90.928392][ T5158] Bluetooth: hci3: command tx timeout [ 91.088483][ T5158] Bluetooth: hci4: command tx timeout [ 91.089621][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.089783][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.089960][ T5843] bridge_slave_0: entered allmulticast mode [ 91.091801][ T5843] bridge_slave_0: entered promiscuous mode [ 91.095176][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.095305][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.095481][ T5851] bridge_slave_0: entered allmulticast mode [ 91.097314][ T5851] bridge_slave_0: entered promiscuous mode [ 91.213196][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.213741][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.213890][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.214066][ T5843] bridge_slave_1: entered allmulticast mode [ 91.215673][ T5843] bridge_slave_1: entered promiscuous mode [ 91.217458][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.217547][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.217655][ T5851] bridge_slave_1: entered allmulticast mode [ 91.221772][ T5851] bridge_slave_1: entered promiscuous mode [ 91.247296][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.247528][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.247742][ T5852] bridge_slave_0: entered allmulticast mode [ 91.264438][ T5852] bridge_slave_0: entered promiscuous mode [ 91.309055][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.447168][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.447261][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.447385][ T5852] bridge_slave_1: entered allmulticast mode [ 91.449552][ T5852] bridge_slave_1: entered promiscuous mode [ 91.856555][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.860595][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.072240][ T5842] team0: Port device team_slave_0 added [ 92.076858][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.081030][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.085321][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.085450][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.085637][ T5858] bridge_slave_0: entered allmulticast mode [ 92.099678][ T5858] bridge_slave_0: entered promiscuous mode [ 92.106990][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.110884][ T5842] team0: Port device team_slave_1 added [ 92.249496][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.249633][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.249801][ T5858] bridge_slave_1: entered allmulticast mode [ 92.252989][ T5858] bridge_slave_1: entered promiscuous mode [ 92.256124][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.683173][ T5851] team0: Port device team_slave_0 added [ 92.686635][ T5843] team0: Port device team_slave_0 added [ 92.848530][ T5848] Bluetooth: hci1: command tx timeout [ 92.848632][ T5158] Bluetooth: hci0: command tx timeout [ 92.853120][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.853129][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.853142][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.856701][ T5851] team0: Port device team_slave_1 added [ 92.858885][ T5843] team0: Port device team_slave_1 added [ 92.865146][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.867963][ T5852] team0: Port device team_slave_0 added [ 92.879195][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.879210][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.879231][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.928559][ T5158] Bluetooth: hci2: command tx timeout [ 93.009601][ T5158] Bluetooth: hci3: command tx timeout [ 93.070774][ T5852] team0: Port device team_slave_1 added [ 93.073170][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.178816][ T5158] Bluetooth: hci4: command tx timeout [ 93.634187][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.634198][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.634211][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.635855][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.635869][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.635891][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.820715][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.820730][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.820743][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.821610][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.821622][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.821635][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.822642][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.822650][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.822662][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.824738][ T5858] team0: Port device team_slave_0 added [ 94.012727][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.012742][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.012765][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.021368][ T5858] team0: Port device team_slave_1 added [ 94.180014][ T5842] hsr_slave_0: entered promiscuous mode [ 94.181269][ T5842] hsr_slave_1: entered promiscuous mode [ 94.489851][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.489863][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.489877][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.782784][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.782799][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.782822][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.795330][ T5851] hsr_slave_0: entered promiscuous mode [ 94.796644][ T5851] hsr_slave_1: entered promiscuous mode [ 94.797656][ T5851] debugfs: 'hsr0' already exists in 'hsr' [ 94.797778][ T5851] Cannot create hsr debugfs directory [ 94.809590][ T5843] hsr_slave_0: entered promiscuous mode [ 94.810895][ T5843] hsr_slave_1: entered promiscuous mode [ 94.811729][ T5843] debugfs: 'hsr0' already exists in 'hsr' [ 94.811750][ T5843] Cannot create hsr debugfs directory [ 94.910895][ T5852] hsr_slave_0: entered promiscuous mode [ 94.912326][ T5852] hsr_slave_1: entered promiscuous mode [ 94.912890][ T5852] debugfs: 'hsr0' already exists in 'hsr' [ 94.912912][ T5852] Cannot create hsr debugfs directory [ 94.928392][ T5158] Bluetooth: hci0: command tx timeout [ 94.928420][ T5158] Bluetooth: hci1: command tx timeout [ 95.009723][ T5848] Bluetooth: hci2: command tx timeout [ 95.098741][ T5848] Bluetooth: hci3: command tx timeout [ 95.248546][ T5848] Bluetooth: hci4: command tx timeout [ 95.564397][ T5858] hsr_slave_0: entered promiscuous mode [ 95.565216][ T5858] hsr_slave_1: entered promiscuous mode [ 95.566725][ T5858] debugfs: 'hsr0' already exists in 'hsr' [ 95.566742][ T5858] Cannot create hsr debugfs directory [ 96.721509][ T5842] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.764842][ T5842] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.824845][ T5842] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.869239][ T5842] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.985320][ T5851] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 97.008631][ T5848] Bluetooth: hci1: command tx timeout [ 97.008661][ T5848] Bluetooth: hci0: command tx timeout [ 97.035186][ T5851] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 97.067076][ T5851] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 97.088504][ T5158] Bluetooth: hci2: command tx timeout [ 97.107165][ T5851] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 97.169906][ T5158] Bluetooth: hci3: command tx timeout [ 97.281481][ T5852] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.327346][ T5852] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.329858][ T5158] Bluetooth: hci4: command tx timeout [ 97.377327][ T5852] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.442544][ T5852] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.588788][ T5843] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.627321][ T5843] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.657302][ T5843] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.705900][ T5843] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.815933][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.893828][ T5858] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 97.932581][ T5858] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 97.977874][ T5858] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 98.021645][ T5858] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 98.080289][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.135401][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.136436][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.187577][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.187704][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.217773][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.336516][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.365246][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.401802][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.401886][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.472711][ T3554] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.472843][ T3554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.506051][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.541526][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.582421][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.582932][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.654217][ T3607] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.654524][ T3607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.751270][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.834564][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.834693][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.885835][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.900494][ T85] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.900604][ T85] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.044062][ T5858] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.062753][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.152685][ T3607] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.152989][ T3607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.196981][ T3607] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.197192][ T3607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.401358][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.481496][ T5842] veth0_vlan: entered promiscuous mode [ 99.603925][ T5842] veth1_vlan: entered promiscuous mode [ 99.833377][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.835837][ T5851] veth0_vlan: entered promiscuous mode [ 99.845630][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.856021][ T5842] veth0_macvtap: entered promiscuous mode [ 99.885409][ T5851] veth1_vlan: entered promiscuous mode [ 99.891332][ T5842] veth1_macvtap: entered promiscuous mode [ 100.021585][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.072393][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.136787][ T43] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.152188][ T5851] veth0_macvtap: entered promiscuous mode [ 100.154150][ T43] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.155718][ T5852] veth0_vlan: entered promiscuous mode [ 100.166186][ T43] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.192154][ T43] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.201125][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.202583][ T5843] veth0_vlan: entered promiscuous mode [ 100.210668][ T5851] veth1_macvtap: entered promiscuous mode [ 100.306498][ T5852] veth1_vlan: entered promiscuous mode [ 100.484261][ T5843] veth1_vlan: entered promiscuous mode [ 100.527796][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.620507][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.725194][ T43] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.741319][ T43] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.751617][ T3607] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.760233][ T3600] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.760255][ T3600] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.777301][ T3607] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.825927][ T5852] veth0_macvtap: entered promiscuous mode [ 100.902884][ T5852] veth1_macvtap: entered promiscuous mode [ 100.939680][ T5843] veth0_macvtap: entered promiscuous mode [ 100.942865][ T3554] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.942881][ T3554] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.062496][ T5843] veth1_macvtap: entered promiscuous mode [ 101.169781][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.259185][ T5858] veth0_vlan: entered promiscuous mode [ 101.279563][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.299918][ T3600] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.299937][ T3600] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.326227][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.385582][ T3554] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.387594][ T3554] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.400260][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.400346][ T3554] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.418937][ T5858] veth1_vlan: entered promiscuous mode [ 101.454097][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.560663][ T3607] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.560683][ T3607] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.585859][ T3625] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.606366][ T3625] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.638916][ T3625] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.743898][ T3625] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.262161][ T5858] veth0_macvtap: entered promiscuous mode [ 102.370600][ T5858] veth1_macvtap: entered promiscuous mode [ 102.501222][ T3625] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.501242][ T3625] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.725619][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.726877][ T3625] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.726895][ T3625] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.843534][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.994174][ T3554] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.994282][ T3607] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.994297][ T3607] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.997901][ T3607] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.044507][ T3607] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.075962][ T3607] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.163013][ T3607] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.163032][ T3607] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.807427][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.807446][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.948649][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 104.120522][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 104.153024][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 104.153056][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 104.153097][ T9] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 104.153116][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.234147][ T85] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.234166][ T85] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.245249][ T9] usb 1-1: config 0 descriptor?? [ 104.580459][ T6011] netlink: 'syz.2.26': attribute type 12 has an invalid length. [ 104.580693][ T6011] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.26'. [ 104.646907][ T5935] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 104.799610][ T5935] usb 4-1: Using ep0 maxpacket: 32 [ 104.802339][ T5935] usb 4-1: config 0 has an invalid interface number: 29 but max is 0 [ 104.802363][ T5935] usb 4-1: config 0 has no interface number 0 [ 104.802393][ T5935] usb 4-1: config 0 interface 29 has no altsetting 0 [ 104.810157][ T5935] usb 4-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 104.810183][ T5935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.810200][ T5935] usb 4-1: Product: syz [ 104.810212][ T5935] usb 4-1: Manufacturer: syz [ 104.810224][ T5935] usb 4-1: SerialNumber: syz [ 104.884195][ T5935] usb 4-1: config 0 descriptor?? [ 104.943326][ T9] playstation 0003:054C:0DF2.0001: hidraw0: USB HID v0.09 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 105.014671][ T9] playstation 0003:054C:0DF2.0001: Failed to retrieve feature with reportID 9: -71 [ 105.014700][ T9] playstation 0003:054C:0DF2.0001: Failed to retrieve DualSense pairing info: -71 [ 105.014750][ T9] playstation 0003:054C:0DF2.0001: Failed to get MAC address from DualSense [ 105.014766][ T9] playstation 0003:054C:0DF2.0001: Failed to create dualsense. [ 105.179713][ T9] playstation 0003:054C:0DF2.0001: probe with driver playstation failed with error -71 [ 105.222617][ T5935] peak_usb 4-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 105.273121][ T9] usb 1-1: USB disconnect, device number 2 [ 105.424908][ T5935] peak_usb 4-1:0.29 can0: sending command failure: -8 [ 105.424984][ T5935] peak_usb 4-1:0.29 can0: sending command failure: -8 [ 105.425065][ T5935] peak_usb 4-1:0.29 can0: sending command failure: -8 [ 105.655074][ T6027] netlink: 348 bytes leftover after parsing attributes in process `syz.4.31'. [ 105.732809][ T5935] peak_usb 4-1:0.29: probe with driver peak_usb failed with error -8 [ 105.821009][ T5935] usb 4-1: USB disconnect, device number 2 [ 107.300816][ T6064] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 107.300874][ T6064] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 107.300964][ T6064] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 107.301100][ T6064] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 107.301147][ T6064] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 107.301193][ T6064] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 107.301240][ T6064] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 107.301326][ T6064] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 107.301373][ T6064] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 107.301415][ T6064] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 107.301508][ T6064] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 107.301553][ T6064] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 107.301597][ T6064] comedi comedi3: 8255: I/O port conflict (0x10,4) [ 107.301690][ T6064] comedi comedi3: 8255: I/O port conflict (0xffffffff8000008b,4) [ 107.336228][ T6064] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 107.336286][ T6064] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 107.336331][ T6064] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 107.336377][ T6064] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4) [ 108.328994][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 108.488306][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 108.490802][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 108.490825][ T9] usb 2-1: config 0 has no interface number 0 [ 108.494287][ T9] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 108.494312][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.494328][ T9] usb 2-1: Product: syz [ 108.494340][ T9] usb 2-1: Manufacturer: syz [ 108.494351][ T9] usb 2-1: SerialNumber: syz [ 108.513375][ T9] usb 2-1: config 0 descriptor?? [ 108.523244][ T9] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 108.523277][ T9] usb 2-1: selecting invalid altsetting 1 [ 108.523296][ T9] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 108.580150][ T9] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 108.582337][ T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 108.582443][ T9] usb 2-1: media controller created [ 108.639839][ T5935] kernel write not supported for file /input/mice (pid: 5935 comm: kworker/0:6) [ 108.741848][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 108.901239][ T9] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 108.901295][ T9] zl10353_read_register: readreg error (reg=127, ret==-71) [ 108.928120][ T9] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 109.114666][ T6114] syz.4.71 (6114) used greatest stack depth: 18280 bytes left [ 109.158116][ T9] usb 2-1: USB disconnect, device number 2 [ 109.240389][ T37] audit: type=1800 audit(1756931921.872:2): pid=6127 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.77" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 109.346695][ T6129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.78'. [ 109.354152][ T6131] netlink: 12 bytes leftover after parsing attributes in process `syz.0.79'. [ 109.648751][ T1197] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 109.798391][ T1197] usb 5-1: Using ep0 maxpacket: 32 [ 109.800797][ T1197] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 109.800821][ T1197] usb 5-1: config 0 has no interface number 0 [ 109.800873][ T1197] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.800893][ T1197] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.800927][ T1197] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 109.800946][ T1197] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.869516][ T1197] usb 5-1: config 0 descriptor?? [ 109.928358][ T5918] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 110.089082][ T5918] usb 3-1: Using ep0 maxpacket: 16 [ 110.094478][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.094507][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.094580][ T5918] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 110.094620][ T5918] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 110.094648][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.178010][ T5918] usb 3-1: config 0 descriptor?? [ 110.199316][ T5935] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 110.359695][ T5935] usb 1-1: Using ep0 maxpacket: 8 [ 110.364101][ T5935] usb 1-1: config 12 has an invalid interface number: 212 but max is 0 [ 110.364126][ T5935] usb 1-1: config 12 has no interface number 0 [ 110.379779][ T5935] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db98, bcdDevice=30.0c [ 110.379804][ T5935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.379820][ T5935] usb 1-1: Product: syz [ 110.379832][ T5935] usb 1-1: Manufacturer: syz [ 110.379844][ T5935] usb 1-1: SerialNumber: syz [ 110.436574][ T5935] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)' in warm state. [ 110.456668][ T5935] dvb-usb: bulk message failed: -22 (2/0) [ 110.472011][ T5935] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 110.474778][ T5935] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)) [ 110.474830][ T5935] usb 1-1: media controller created [ 110.553580][ T1197] uclogic 0003:28BD:0094.0002: failed retrieving string descriptor #100: -71 [ 110.553692][ T1197] uclogic 0003:28BD:0094.0002: failed retrieving pen parameters: -71 [ 110.553722][ T1197] uclogic 0003:28BD:0094.0002: pen probing failed: -71 [ 110.553741][ T1197] uclogic 0003:28BD:0094.0002: failed probing parameters: -71 [ 110.554050][ T1197] uclogic 0003:28BD:0094.0002: probe with driver uclogic failed with error -71 [ 110.574940][ T5935] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 110.632440][ T1197] usb 5-1: USB disconnect, device number 2 [ 110.664397][ T5918] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 110.664437][ T5918] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 110.664460][ T5918] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 110.664482][ T5918] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 110.664505][ T5918] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 110.664529][ T5918] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 110.664552][ T5918] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 110.664575][ T5918] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 110.664598][ T5918] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 110.664621][ T5918] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 110.664945][ T6146] dvb-usb: bulk message failed: -22 (3/0) [ 110.675902][ T5935] cxusb: set interface failed [ 110.675919][ T5935] dvb-usb: bulk message failed: -22 (1/0) [ 110.675939][ T5935] dvb-usb: bulk message failed: -22 (3/0) [ 110.675955][ T5935] usb 1-1: bluebird_gpio_write failed. [ 110.697007][ T5935] dvb-usb: bulk message failed: -22 (3/0) [ 110.697035][ T5935] usb 1-1: bluebird_gpio_write failed. [ 110.793477][ T5918] microsoft 0003:045E:07DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 110.793508][ T5918] microsoft 0003:045E:07DA.0003: no inputs found [ 110.793519][ T5918] microsoft 0003:045E:07DA.0003: could not initialize ff, continuing anyway [ 110.920258][ T6021] usb 3-1: USB disconnect, device number 2 [ 110.939780][ T5935] DVB: Unable to find symbol dib7000p_attach() [ 110.939829][ T5935] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)' [ 111.048314][ T5935] rc_core: IR keymap rc-dvico-mce not found [ 111.048334][ T5935] Registered IR keymap rc-empty [ 111.058465][ T5935] rc rc0: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 111.061533][ T5935] input: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input6 [ 111.105745][ T5935] dvb-usb: schedule remote query interval to 100 msecs. [ 111.105766][ T5935] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) successfully initialized and connected. [ 111.122765][ T5935] usb 1-1: USB disconnect, device number 3 [ 111.333996][ T5935] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 4 ( successfully deinitialized and disconnected. [ 111.872494][ T6185] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 112.095422][ T6193] netlink: 24 bytes leftover after parsing attributes in process `syz.0.110'. [ 112.133285][ T6196] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 112.133349][ T6196] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 112.133441][ T6196] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 112.133571][ T6196] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 112.133619][ T6196] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 112.133666][ T6196] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 112.133795][ T6196] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 112.133842][ T6196] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 112.133889][ T6196] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 112.133978][ T6196] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 112.134025][ T6196] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 112.134076][ T6196] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 112.688322][ T9] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 112.841446][ T9] usb 1-1: config 0 has an invalid interface number: 29 but max is 0 [ 112.841473][ T9] usb 1-1: config 0 has no interface number 0 [ 112.841505][ T9] usb 1-1: config 0 interface 29 has no altsetting 0 [ 112.846266][ T9] usb 1-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 112.846293][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.846311][ T9] usb 1-1: Product: syz [ 112.846323][ T9] usb 1-1: Manufacturer: syz [ 112.846335][ T9] usb 1-1: SerialNumber: syz [ 112.902120][ T9] usb 1-1: config 0 descriptor?? [ 112.914857][ T6225] program syz.2.124 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 113.054690][ T6230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.127'. [ 113.153566][ T9] peak_usb 1-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 113.355421][ T9] peak_usb 1-1:0.29 can0: sending command failure: -22 [ 113.355444][ T9] peak_usb 1-1:0.29 can0: sending command failure: -22 [ 113.355468][ T9] peak_usb 1-1:0.29 can0: sending command failure: -22 [ 113.560461][ T9] peak_usb 1-1:0.29: probe with driver peak_usb failed with error -22 [ 113.576496][ T9] usb 1-1: USB disconnect, device number 4 [ 113.788706][ T6021] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 113.938507][ T6021] usb 3-1: Using ep0 maxpacket: 16 [ 113.941550][ T6021] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.941579][ T6021] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.941599][ T6021] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 113.941638][ T6021] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 113.941658][ T6021] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.952737][ T6021] usb 3-1: config 0 descriptor?? [ 114.409084][ T6275] Zero length message leads to an empty skb [ 114.454139][ T6021] HID 045e:07da: Invalid code 65791 type 1 [ 114.454473][ T6021] HID 045e:07da: Invalid code 768 type 1 [ 114.454486][ T6021] HID 045e:07da: Invalid code 769 type 1 [ 114.454498][ T6021] HID 045e:07da: Invalid code 770 type 1 [ 114.454509][ T6021] HID 045e:07da: Invalid code 771 type 1 [ 114.454521][ T6021] HID 045e:07da: Invalid code 772 type 1 [ 114.454532][ T6021] HID 045e:07da: Invalid code 773 type 1 [ 114.454543][ T6021] HID 045e:07da: Invalid code 774 type 1 [ 114.454555][ T6021] HID 045e:07da: Invalid code 775 type 1 [ 114.454566][ T6021] HID 045e:07da: Invalid code 776 type 1 [ 114.516568][ T6021] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0004/input/input7 [ 114.565175][ T6280] capability: warning: `syz.3.150' uses deprecated v2 capabilities in a way that may be insecure [ 114.588339][ T1240] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 114.619017][ T6021] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 114.671754][ T5918] usb 3-1: USB disconnect, device number 3 [ 114.741890][ T1240] usb 5-1: Using ep0 maxpacket: 32 [ 114.746755][ T1240] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 114.746779][ T1240] usb 5-1: config 0 has no interface number 0 [ 114.771265][ T6284] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 114.793690][ T1240] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 114.793716][ T1240] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.793733][ T1240] usb 5-1: Product: syz [ 114.793744][ T1240] usb 5-1: Manufacturer: syz [ 114.793755][ T1240] usb 5-1: SerialNumber: syz [ 114.844295][ T1240] usb 5-1: config 0 descriptor?? [ 114.876448][ T1240] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 114.876474][ T1240] usb 5-1: selecting invalid altsetting 1 [ 114.876488][ T1240] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 114.920847][ T1240] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 114.921219][ T1240] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 114.921267][ T1240] usb 5-1: media controller created [ 115.004925][ T1240] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 115.448318][ T1197] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 115.539573][ T6303] NILFS (nullb0): couldn't find nilfs on the device [ 115.600687][ T5918] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 115.620210][ T1197] usb 2-1: Using ep0 maxpacket: 16 [ 115.637383][ T1197] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.637985][ T1197] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.638008][ T1197] usb 2-1: config 0 interface 0 has no altsetting 0 [ 115.638041][ T1197] usb 2-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 115.638061][ T1197] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.697663][ T1197] usb 2-1: config 0 descriptor?? [ 115.794119][ T5918] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 115.794145][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.833778][ T5918] usb 3-1: config 0 descriptor?? [ 115.850343][ T5918] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 116.005227][ T6021] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 116.059704][ T5911] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 116.133999][ T1240] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 116.134129][ T1240] zl10353_read_register: readreg error (reg=127, ret==-110) [ 116.161212][ T6021] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.161236][ T6021] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 116.197912][ T6021] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 116.197939][ T6021] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 116.197957][ T6021] usb 1-1: SerialNumber: syz [ 116.232949][ T5911] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 116.232985][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.236838][ T1197] hid_parser_main: 5 callbacks suppressed [ 116.236860][ T1197] kye 0003:0458:0138.0005: unknown main item tag 0x0 [ 116.236893][ T1197] kye 0003:0458:0138.0005: unknown main item tag 0x0 [ 116.236919][ T1197] kye 0003:0458:0138.0005: unknown main item tag 0x0 [ 116.237151][ T1197] kye 0003:0458:0138.0005: unknown main item tag 0x0 [ 116.237177][ T1197] kye 0003:0458:0138.0005: unknown main item tag 0x0 [ 116.237203][ T1197] kye 0003:0458:0138.0005: unknown main item tag 0x0 [ 116.237237][ T1197] kye 0003:0458:0138.0005: unknown main item tag 0x0 [ 116.237479][ T1197] kye 0003:0458:0138.0005: unknown main item tag 0x0 [ 116.237505][ T1197] kye 0003:0458:0138.0005: unknown main item tag 0x0 [ 116.237531][ T1197] kye 0003:0458:0138.0005: unknown main item tag 0x0 [ 116.252760][ T6272] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 116.280410][ T5911] usb 4-1: config 0 descriptor?? [ 116.326673][ T5911] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 116.394121][ T1197] kye 0003:0458:0138.0005: collection stack underflow [ 116.394148][ T1197] kye 0003:0458:0138.0005: item 0 0 0 12 parsing failed [ 116.397657][ T1197] kye 0003:0458:0138.0005: parse failed [ 116.397728][ T1197] kye 0003:0458:0138.0005: probe with driver kye failed with error -22 [ 116.458931][ T5918] gp8psk: usb out operation failed. [ 116.458946][ T5918] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 116.458982][ T5918] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 116.459496][ T1197] usb 2-1: USB disconnect, device number 3 [ 116.511979][ T5918] usb 3-1: USB disconnect, device number 4 [ 116.579134][ T1240] usb 5-1: USB disconnect, device number 3 [ 116.593719][ T6021] usb 1-1: 0:2 : does not exist [ 116.686443][ T6021] usb 1-1: USB disconnect, device number 5 [ 116.949345][ T6309] comedi comedi3: 8255: I/O port conflict (0x40404f26,4) [ 116.949410][ T6309] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 116.949457][ T6309] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 116.949571][ T6309] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 116.949618][ T6309] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 116.949704][ T6309] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 116.949752][ T6309] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 116.949797][ T6309] comedi comedi3: 8255: I/O port conflict (0x3bf,4) [ 116.949928][ T6309] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 116.949974][ T6309] comedi comedi3: 8255: I/O port conflict (0x20000001,4) [ 116.950020][ T6309] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 116.950108][ T6309] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 116.981280][ T5911] gspca_cpia1: usb_control_msg 01, error -71 [ 116.981299][ T5911] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 117.007649][ T5911] usb 4-1: USB disconnect, device number 3 [ 117.169001][ T6315] netlink: 'syz.1.168': attribute type 32 has an invalid length. [ 117.169020][ T6315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.168'. [ 117.169642][ T6315] (unnamed net_device) (uninitialized): option coupled_control: invalid value (98) [ 117.264717][ T6317] macsec1: entered promiscuous mode [ 117.264746][ T6317] macsec1: entered allmulticast mode [ 118.915494][ T6379] netlink: 4 bytes leftover after parsing attributes in process `syz.4.195'. [ 119.168401][ T5935] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 119.318270][ T5935] usb 2-1: Using ep0 maxpacket: 32 [ 119.320445][ T5935] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 119.320467][ T5935] usb 2-1: config 0 has no interface number 0 [ 119.324564][ T5935] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 119.324588][ T5935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.324605][ T5935] usb 2-1: Product: syz [ 119.324617][ T5935] usb 2-1: Manufacturer: syz [ 119.324630][ T5935] usb 2-1: SerialNumber: syz [ 119.340100][ T5935] usb 2-1: config 0 descriptor?? [ 119.375485][ T5935] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 119.600965][ T5935] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 119.628850][ T5935] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 119.792253][ T6405] loop7: detected capacity change from 0 to 524255232 [ 119.928374][ T6408] loop7: detected capacity change from 524255232 to 524287912 [ 119.946302][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 119.956060][ T5918] usb 2-1: USB disconnect, device number 4 [ 119.967454][ T6406] nbd0: detected capacity change from 0 to 127 [ 119.985181][ T5158] block nbd0: Receive control failed (result -32) [ 120.041801][ T5918] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 120.063248][ T5918] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 120.064030][ T5918] quatech2 2-1:0.51: device disconnected [ 120.438387][ T1240] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 120.612023][ T1240] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.612053][ T1240] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.612089][ T1240] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 120.612109][ T1240] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.664444][ T1240] usb 3-1: config 0 descriptor?? [ 121.292033][ T1240] hid-led 0003:27B8:01ED.0006: probe with driver hid-led failed with error -71 [ 121.310538][ T1240] usb 3-1: USB disconnect, device number 5 [ 121.580513][ T49] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 121.740681][ T49] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.740711][ T49] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.740756][ T49] usb 2-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 121.740774][ T49] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.746212][ T49] usb 2-1: config 0 descriptor?? [ 122.237163][ T49] hid_mf 0003:0079:1846.0007: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.1-1/input0 [ 122.237192][ T49] hid_mf 0003:0079:1846.0007: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler [ 122.430993][ T1197] usb 2-1: USB disconnect, device number 5 [ 122.546790][ T6469] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 122.798410][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 122.961090][ T9] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.961119][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 122.961149][ T9] usb 3-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00 [ 122.961169][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.970366][ T9] usb 3-1: config 0 descriptor?? [ 123.427258][ T9] aquacomputer_d5next 0003:0C70:F003.0008: hidraw0: USB HID v0.00 Device [HID 0c70:f003] on usb-dummy_hcd.2-1/input0 [ 123.474522][ T6486] netlink: 12 bytes leftover after parsing attributes in process `syz.1.244'. [ 123.474551][ T6486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.244'. [ 123.601947][ T1240] usb 3-1: USB disconnect, device number 6 [ 123.828274][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 123.982442][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 123.982469][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 123.982489][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 124.027793][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice=20.41 [ 124.027818][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 124.027835][ T9] usb 2-1: Product: syz [ 124.027847][ T9] usb 2-1: Manufacturer: syz [ 124.027859][ T9] usb 2-1: SerialNumber: syz [ 124.061809][ T6501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.251'. [ 124.061827][ T6501] netlink: 4 bytes leftover after parsing attributes in process `syz.3.251'. [ 124.352727][ T9] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 124.543809][ T6512] tipc: Started in network mode [ 124.543844][ T6512] tipc: Node identity ac14140f, cluster identity 4711 [ 124.551090][ T6512] tipc: New replicast peer: 255.255.255.255 [ 124.551274][ T9] usb 2-1: USB disconnect, device number 6 [ 124.552614][ T6512] tipc: Enabled bearer , priority 10 [ 124.588889][ T9] usblp0: removed [ 125.307468][ T37] audit: type=1326 audit(1756931937.942:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6525 comm="syz.1.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa6d408adb9 code=0x7ffc0000 [ 125.307516][ T37] audit: type=1326 audit(1756931937.942:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6525 comm="syz.1.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa6d408adb9 code=0x7ffc0000 [ 125.307556][ T37] audit: type=1326 audit(1756931937.942:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6525 comm="syz.1.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa6d408adb9 code=0x7ffc0000 [ 125.307595][ T37] audit: type=1326 audit(1756931937.942:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6525 comm="syz.1.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa6d408adb9 code=0x7ffc0000 [ 125.307632][ T37] audit: type=1326 audit(1756931937.942:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6525 comm="syz.1.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa6d408adb9 code=0x7ffc0000 [ 125.307670][ T37] audit: type=1326 audit(1756931937.942:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6525 comm="syz.1.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa6d408adb9 code=0x7ffc0000 [ 125.307709][ T37] audit: type=1326 audit(1756931937.942:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6525 comm="syz.1.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa6d408adb9 code=0x7ffc0000 [ 125.383260][ T37] audit: type=1326 audit(1756931938.002:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6525 comm="syz.1.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa6d408adb9 code=0x7ffc0000 [ 125.401116][ T37] audit: type=1326 audit(1756931938.042:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6525 comm="syz.1.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa6d408adb9 code=0x7ffc0000 [ 125.401598][ T37] audit: type=1326 audit(1756931938.042:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6525 comm="syz.1.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa6d408adb9 code=0x7ffc0000 [ 125.670646][ T49] tipc: Node number set to 2886997007 [ 126.782947][ T6542] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.785000][ T6542] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.000519][ T6560] syz.3.277 uses obsolete (PF_INET,SOCK_PACKET) [ 127.518442][ T1240] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 127.674951][ T1240] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 127.674977][ T1240] usb 4-1: config 0 has no interface number 0 [ 127.704190][ T1240] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 127.704218][ T1240] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.704236][ T1240] usb 4-1: Product: syz [ 127.704248][ T1240] usb 4-1: Manufacturer: syz [ 127.704260][ T1240] usb 4-1: SerialNumber: syz [ 127.716279][ T1240] usb 4-1: config 0 descriptor?? [ 127.926360][ T1240] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 127.934157][ T1240] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 127.934540][ T1240] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 127.934594][ T1240] usb 4-1: media controller created [ 127.994075][ T6542] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.997448][ T1240] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 128.062771][ T6542] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.133076][ T1240] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 128.217818][ T1240] usb 4-1: USB disconnect, device number 4 [ 129.494542][ T3529] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.494639][ T6585] netlink: 'syz.4.288': attribute type 2 has an invalid length. [ 129.558385][ T3529] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.571388][ T3529] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.571432][ T3529] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.168277][ T49] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 132.188269][ T1240] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 132.288573][ T5158] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 132.358037][ T1240] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 132.358064][ T1240] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.389952][ T1240] usb 5-1: config 0 descriptor?? [ 132.398676][ T49] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 132.398701][ T49] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.398718][ T49] usb 4-1: Product: syz [ 132.398730][ T49] usb 4-1: Manufacturer: syz [ 132.398742][ T49] usb 4-1: SerialNumber: syz [ 132.444808][ T49] usb 4-1: config 0 descriptor?? [ 132.445454][ T1240] gspca_main: spca508-2.14.0 probing 8086:0110 [ 132.627452][ T1240] gspca_spca508: reg_read err -71 [ 132.627988][ T1240] gspca_spca508: reg_read err -71 [ 132.639845][ T1240] gspca_spca508: reg_read err -71 [ 132.640517][ T1240] gspca_spca508: reg_read err -71 [ 132.640990][ T1240] gspca_spca508: reg_read err -71 [ 132.643394][ T1240] gspca_spca508: reg write: error -71 [ 132.643708][ T1240] spca508 5-1:0.0: probe with driver spca508 failed with error -71 [ 132.677152][ T49] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 132.693586][ T1240] usb 5-1: USB disconnect, device number 4 [ 133.024663][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.027456][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.028512][ T5911] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 133.077534][ T49] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 133.090795][ T49] usb 4-1: USB disconnect, device number 5 [ 133.192551][ T5911] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 133.192606][ T5911] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 133.192627][ T5911] usb 2-1: config 0 interface 0 has no altsetting 0 [ 133.197117][ T5911] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 133.197143][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 133.197162][ T5911] usb 2-1: Product: syz [ 133.197174][ T5911] usb 2-1: Manufacturer: syz [ 133.197186][ T5911] usb 2-1: SerialNumber: syz [ 133.206727][ T5911] usb 2-1: config 0 descriptor?? [ 133.214563][ T5911] hub 2-1:0.0: bad descriptor, ignoring hub [ 133.214598][ T5911] hub 2-1:0.0: probe with driver hub failed with error -5 [ 133.244593][ T5911] usb 2-1: selecting invalid altsetting 0 [ 133.519208][ T5911] usb 2-1: USB disconnect, device number 7 [ 134.028381][ T5911] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 134.182400][ T5911] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 134.182458][ T5911] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 134.182479][ T5911] usb 2-1: config 0 interface 0 has no altsetting 0 [ 134.196711][ T5911] usb 2-1: string descriptor 0 read error: -22 [ 134.196970][ T5911] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 134.196991][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 134.225954][ T5911] usb 2-1: config 0 descriptor?? [ 134.242946][ T5911] hub 2-1:0.0: bad descriptor, ignoring hub [ 134.242984][ T5911] hub 2-1:0.0: probe with driver hub failed with error -5 [ 134.270021][ T5911] usb 2-1: selecting invalid altsetting 0 [ 134.460285][ T5911] usb 2-1: USB disconnect, device number 8 [ 134.649572][ T6688] netlink: 24 bytes leftover after parsing attributes in process `syz.2.334'. [ 134.868654][ T6299] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 135.045108][ T6299] usb 5-1: config index 0 descriptor too short (expected 69, got 36) [ 135.045136][ T6299] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.047940][ T6299] usb 5-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 135.047967][ T6299] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.047985][ T6299] usb 5-1: Product: syz [ 135.047997][ T6299] usb 5-1: Manufacturer: syz [ 135.048008][ T6299] usb 5-1: SerialNumber: syz [ 135.121450][ T6299] usb 5-1: config 0 descriptor?? [ 135.179149][ T6299] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 135.438396][ T6701] netlink: 4 bytes leftover after parsing attributes in process `syz.1.342'. [ 135.445835][ T6701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.342'. [ 135.678272][ T6021] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 135.819037][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 135.837600][ T5158] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 135.846462][ T5158] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 135.854005][ T5158] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 135.857643][ T5158] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 135.862434][ T5158] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 135.877818][ T6021] usb 3-1: config 0 has no interfaces? [ 135.877852][ T6021] usb 3-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 135.877871][ T6021] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.942191][ T6021] usb 3-1: config 0 descriptor?? [ 135.998347][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 136.000647][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.000675][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.000710][ T9] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 136.000729][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.035951][ T9] usb 4-1: config 0 descriptor?? [ 136.066876][ T6299] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 136.066968][ T6299] gspca_pac7302 5-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 136.108703][ T6299] usb 5-1: USB disconnect, device number 5 [ 136.194964][ T6711] netlink: 16 bytes leftover after parsing attributes in process `syz.1.346'. [ 136.227563][ T5911] usb 3-1: USB disconnect, device number 7 [ 136.507240][ T9] savu 0003:1E7D:2D5A.0009: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 136.645825][ T6717] netlink: 20 bytes leftover after parsing attributes in process `syz.1.349'. [ 136.735290][ T31] usb 4-1: USB disconnect, device number 6 [ 137.024750][ T67] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.076145][ T6723] netlink: 'syz.1.352': attribute type 1 has an invalid length. [ 137.076164][ T6723] netlink: 'syz.1.352': attribute type 2 has an invalid length. [ 137.437090][ T67] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.904978][ T67] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.968324][ T5158] Bluetooth: hci5: command tx timeout [ 138.376115][ T67] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.716283][ T6706] chnl_net:caif_netlink_parms(): no params data found [ 139.206235][ T6788] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 139.206235][ T6788] The task syz.2.379 (6788) triggered the difference, watch for misbehavior. [ 139.879571][ T6706] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.879787][ T6706] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.880025][ T6706] bridge_slave_0: entered allmulticast mode [ 139.882873][ T6706] bridge_slave_0: entered promiscuous mode [ 139.920200][ T6706] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.931548][ T6706] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.931792][ T6706] bridge_slave_1: entered allmulticast mode [ 139.941848][ T6706] bridge_slave_1: entered promiscuous mode [ 140.048639][ T5158] Bluetooth: hci5: command tx timeout [ 140.220234][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 140.223707][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 140.224877][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 140.226462][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 140.227238][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 140.250674][ T67] bridge_slave_1: left allmulticast mode [ 140.251100][ T67] bridge_slave_1: left promiscuous mode [ 140.253615][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.362712][ T67] bridge_slave_0: left allmulticast mode [ 140.362744][ T67] bridge_slave_0: left promiscuous mode [ 140.363000][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.759307][ T6821] mmap: syz.1.390 (6821) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 141.103282][ T6829] sctp: [Deprecated]: syz.2.395 (pid 6829) Use of struct sctp_assoc_value in delayed_ack socket option. [ 141.103282][ T6829] Use struct sctp_sack_info instead [ 141.871774][ T6841] process 'syz.2.401' launched './file2' with NULL argv: empty string added [ 142.128324][ T5158] Bluetooth: hci5: command tx timeout [ 142.368326][ T5158] Bluetooth: hci3: command tx timeout [ 143.201514][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.284124][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.325914][ T67] bond0 (unregistering): Released all slaves [ 143.632696][ T6706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.670631][ T6706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.210101][ T5158] Bluetooth: hci5: command tx timeout [ 144.448319][ T5158] Bluetooth: hci3: command tx timeout [ 144.555929][ T6863] warning: `syz.2.409' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 144.632704][ T6706] team0: Port device team_slave_0 added [ 144.667374][ T6706] team0: Port device team_slave_1 added [ 145.253923][ T6882] netlink: 28 bytes leftover after parsing attributes in process `syz.2.418'. [ 145.409291][ T6706] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.409308][ T6706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.409331][ T6706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.462778][ T6706] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.462792][ T6706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.462813][ T6706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.698339][ T67] hsr_slave_0: left promiscuous mode [ 145.743359][ T67] hsr_slave_1: left promiscuous mode [ 145.744594][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.744686][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.758288][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 145.805877][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.805910][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.924716][ T9] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 145.924744][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.924762][ T9] usb 4-1: Product: syz [ 145.924775][ T9] usb 4-1: Manufacturer: syz [ 145.924787][ T9] usb 4-1: SerialNumber: syz [ 145.950257][ T9] usb 4-1: config 0 descriptor?? [ 145.970566][ T9] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 146.038671][ T67] veth1_macvtap: left promiscuous mode [ 146.042582][ T67] veth0_macvtap: left promiscuous mode [ 146.042943][ T67] veth1_vlan: left promiscuous mode [ 146.043368][ T67] veth0_vlan: left promiscuous mode [ 146.528370][ T5158] Bluetooth: hci3: command tx timeout [ 146.776398][ T31] usb 4-1: USB disconnect, device number 7 [ 147.158356][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 147.308386][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 147.318975][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.319002][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.319040][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 147.319057][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.365570][ T9] usb 2-1: config 0 descriptor?? [ 147.377991][ T9] hub 2-1:0.0: USB hub found [ 147.584239][ T9] hub 2-1:0.0: config failed, can't read hub descriptor (err -90) [ 147.811613][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 147.811732][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 147.833099][ T9] usb 2-1: USB disconnect, device number 9 [ 148.608511][ T5158] Bluetooth: hci3: command tx timeout [ 148.608593][ T31] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 148.764786][ T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.764827][ T31] usb 2-1: config 0 interface 0 has no altsetting 0 [ 148.768101][ T31] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 148.768981][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.769002][ T31] usb 2-1: Product: syz [ 148.769014][ T31] usb 2-1: Manufacturer: syz [ 148.769027][ T31] usb 2-1: SerialNumber: syz [ 148.774400][ T31] usb 2-1: config 0 descriptor?? [ 148.784267][ T31] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 148.793524][ T31] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 148.796726][ T31] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 148.796868][ T31] usb 2-1: media controller created [ 148.847474][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 148.899258][ T67] team0 (unregistering): Port device team_slave_1 removed [ 148.929723][ T31] DVB: Unable to find symbol tda10046_attach() [ 148.929738][ T31] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 148.929750][ T31] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 149.185500][ T67] team0 (unregistering): Port device team_slave_0 removed [ 149.392737][ T31] dvb_usb_m920x 2-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 149.399448][ T31] usb 2-1: USB disconnect, device number 10 [ 151.820121][ T6913] bridge0: entered promiscuous mode [ 151.821738][ T6913] macvlan2: entered promiscuous mode [ 152.260501][ T6944] netlink: 40 bytes leftover after parsing attributes in process `syz.3.444'. [ 152.353717][ T6706] hsr_slave_0: entered promiscuous mode [ 152.355161][ T6706] hsr_slave_1: entered promiscuous mode [ 152.356078][ T6706] debugfs: 'hsr0' already exists in 'hsr' [ 152.356100][ T6706] Cannot create hsr debugfs directory [ 152.655417][ T6957] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.452'. [ 152.655618][ T6957] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 152.655639][ T6957] openvswitch: netlink: Message has 8454 unknown bytes. [ 152.698299][ T5911] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 152.853065][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.853095][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.853132][ T5911] usb 2-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 152.853152][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.899871][ T5911] usb 2-1: config 0 descriptor?? [ 153.292484][ T6808] chnl_net:caif_netlink_parms(): no params data found [ 153.335658][ T5911] sony 0003:054C:024B.000A: unexpected long global item [ 153.336459][ T5911] sony 0003:054C:024B.000A: parse failed [ 153.336549][ T5911] sony 0003:054C:024B.000A: probe with driver sony failed with error -22 [ 153.566634][ T5911] usb 2-1: USB disconnect, device number 11 [ 153.808339][ T5935] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 153.960110][ T5935] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.960134][ T5935] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 153.961332][ T5935] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 153.961355][ T5935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 153.961371][ T5935] usb 3-1: SerialNumber: syz [ 154.069468][ T6983] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.461'. [ 154.234072][ T5935] usb 3-1: 0:2 : does not exist [ 154.265731][ T5935] usb 3-1: USB disconnect, device number 8 [ 154.515037][ T6808] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.515218][ T6808] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.515459][ T6808] bridge_slave_0: entered allmulticast mode [ 154.519293][ T6808] bridge_slave_0: entered promiscuous mode [ 154.568689][ T6808] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.568827][ T6808] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.569045][ T6808] bridge_slave_1: entered allmulticast mode [ 154.572023][ T6808] bridge_slave_1: entered promiscuous mode [ 154.822548][ T67] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.987986][ T6992] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 155.007731][ T6992] macvtap1: entered allmulticast mode [ 155.010843][ T6992] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 155.102619][ T6992] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 155.102758][ T6992] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 155.716133][ T67] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.782493][ T6808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.783292][ T6706] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 155.821993][ T6808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.826297][ T6706] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 155.966475][ T7018] netlink: 20 bytes leftover after parsing attributes in process `syz.2.478'. [ 156.037471][ T6706] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 156.521427][ T67] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.813334][ T6706] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 156.887664][ T6808] team0: Port device team_slave_0 added [ 157.206298][ T67] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.307248][ T6808] team0: Port device team_slave_1 added [ 157.406756][ T7047] kvm: kvm [7044]: vcpu10, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010004) = 0x1 [ 157.737107][ T7058] netlink: 8 bytes leftover after parsing attributes in process `syz.2.492'. [ 157.737214][ T7058] netlink: 26 bytes leftover after parsing attributes in process `syz.2.492'. [ 157.739082][ T6808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.739095][ T6808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.739116][ T6808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.752906][ T6808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.752921][ T6808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.752943][ T6808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.196400][ T37] kauditd_printk_skb: 304 callbacks suppressed [ 158.196416][ T37] audit: type=1326 audit(1756931970.832:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7065 comm="syz.3.496" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2bdc98ebe9 code=0x0 [ 158.227608][ T6808] hsr_slave_0: entered promiscuous mode [ 158.235187][ T6808] hsr_slave_1: entered promiscuous mode [ 158.236213][ T6808] debugfs: 'hsr0' already exists in 'hsr' [ 158.236237][ T6808] Cannot create hsr debugfs directory [ 158.778336][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 158.938389][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 158.955780][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 158.955810][ T9] usb 3-1: config 0 has no interface number 0 [ 158.964165][ T9] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 158.964193][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.964209][ T9] usb 3-1: Product: syz [ 158.964221][ T9] usb 3-1: Manufacturer: syz [ 158.964234][ T9] usb 3-1: SerialNumber: syz [ 159.020362][ T67] bridge_slave_1: left allmulticast mode [ 159.020393][ T67] bridge_slave_1: left promiscuous mode [ 159.020470][ T9] usb 3-1: config 0 descriptor?? [ 159.020717][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.026271][ T9] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 159.129783][ T67] bridge_slave_0: left allmulticast mode [ 159.129812][ T67] bridge_slave_0: left promiscuous mode [ 159.130065][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.571720][ T6299] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 159.718436][ T6299] usb 4-1: Using ep0 maxpacket: 16 [ 159.722869][ T6299] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.722898][ T6299] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.722916][ T6299] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 159.722954][ T6299] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 159.722974][ T6299] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.731752][ T6299] usb 4-1: config 0 descriptor?? [ 159.866822][ T9] gspca_spca1528: reg_w err -71 [ 159.881905][ T9] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71 [ 159.907249][ T9] usb 3-1: USB disconnect, device number 9 [ 160.197184][ T6299] hid_parser_main: 643 callbacks suppressed [ 160.197200][ T6299] microsoft 0003:045E:07DA.000B: unknown main item tag 0x2 [ 160.197385][ T6299] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 160.197400][ T6299] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 160.197414][ T6299] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 160.197429][ T6299] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 160.197443][ T6299] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 160.197457][ T6299] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 160.197471][ T6299] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 160.197485][ T6299] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0 [ 160.221053][ T6299] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.000B/input/input9 [ 160.242295][ T6299] microsoft 0003:045E:07DA.000B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 160.428906][ T5827] usb 4-1: USB disconnect, device number 8 [ 161.599920][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.670544][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.693177][ T67] bond0 (unregistering): Released all slaves [ 161.776189][ T7095] tipc: Started in network mode [ 161.776218][ T7095] tipc: Node identity ac14140f, cluster identity 4711 [ 161.776553][ T7095] tipc: New replicast peer: 255.255.255.255 [ 161.783020][ T7095] tipc: Enabled bearer , priority 10 [ 161.805295][ T7096] netlink: 12 bytes leftover after parsing attributes in process `syz.1.508'. [ 161.930617][ T7114] netlink: 312 bytes leftover after parsing attributes in process `syz.3.516'. [ 162.071874][ T7116] ip6gretap1: entered promiscuous mode [ 162.071902][ T7116] ip6gretap1: entered allmulticast mode [ 162.483332][ T7123] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 162.518635][ T49] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 162.678371][ T49] usb 4-1: Using ep0 maxpacket: 8 [ 162.678489][ T5827] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 162.684928][ T49] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 162.688037][ T49] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 162.689457][ T49] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 162.689480][ T49] usb 4-1: Product: syz [ 162.689492][ T49] usb 4-1: Manufacturer: syz [ 162.689505][ T49] usb 4-1: SerialNumber: syz [ 162.838229][ T5827] usb 3-1: Using ep0 maxpacket: 32 [ 162.842448][ T5827] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 162.842472][ T5827] usb 3-1: config 0 has no interface number 0 [ 162.845239][ T5827] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 162.845263][ T5827] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.845279][ T5827] usb 3-1: Product: syz [ 162.845290][ T5827] usb 3-1: Manufacturer: syz [ 162.845301][ T5827] usb 3-1: SerialNumber: syz [ 162.888351][ T31] tipc: Node number set to 2886997007 [ 162.925876][ T49] usb 4-1: Handspring Visor / Palm OS: No valid connect info available [ 162.925899][ T49] usb 4-1: Handspring Visor / Palm OS: port 79, is for unknown use [ 162.925915][ T49] usb 4-1: Handspring Visor / Palm OS: port 0, is for Debugger use [ 162.925931][ T49] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2 [ 162.964084][ T5827] usb 3-1: config 0 descriptor?? [ 162.978939][ T5827] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 163.129534][ T49] usb 4-1: palm_os_3_probe - error -71 getting bytes available request [ 163.130420][ T49] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 163.148675][ T49] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 163.155180][ T49] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 163.160841][ T49] usb 4-1: USB disconnect, device number 9 [ 163.178852][ T49] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 163.191118][ T49] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 163.191615][ T49] visor 4-1:1.0: device disconnected [ 163.230266][ T5827] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 163.261049][ T5827] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 163.607874][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 163.621801][ T5827] usb 3-1: USB disconnect, device number 10 [ 163.636343][ T5827] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 163.653326][ T5827] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 163.654071][ T5827] quatech2 3-1:0.51: device disconnected [ 163.757337][ T6706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.902469][ T37] audit: type=1326 audit(1756931976.542:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7155 comm="syz.1.534" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa6d40eebe9 code=0x0 [ 164.068392][ T67] hsr_slave_0: left promiscuous mode [ 164.089254][ T67] hsr_slave_1: left promiscuous mode [ 164.090306][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.090333][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.146976][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.147007][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.301847][ T67] veth1_macvtap: left promiscuous mode [ 164.301972][ T67] veth0_macvtap: left promiscuous mode [ 164.302265][ T67] veth1_vlan: left promiscuous mode [ 164.302468][ T67] veth0_vlan: left promiscuous mode [ 164.688230][ T5827] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 164.858475][ T5827] usb 3-1: Using ep0 maxpacket: 8 [ 164.861278][ T5827] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 164.861303][ T5827] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 164.861324][ T5827] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 164.861345][ T5827] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 164.861383][ T5827] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 164.861403][ T5827] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.048520][ T49] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 165.083922][ T5827] usb 3-1: GET_CAPABILITIES returned 0 [ 165.083984][ T5827] usbtmc 3-1:16.0: can't read capabilities [ 165.198510][ T49] usb 2-1: Using ep0 maxpacket: 16 [ 165.201039][ T49] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.201085][ T49] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.201105][ T49] usb 2-1: config 0 interface 0 has no altsetting 0 [ 165.201136][ T49] usb 2-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 165.201156][ T49] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.205251][ T49] usb 2-1: config 0 descriptor?? [ 165.304526][ T6299] usb 3-1: USB disconnect, device number 11 [ 165.676673][ T49] cougar 0003:060B:500A.000C: unexpected long global item [ 165.677111][ T49] cougar 0003:060B:500A.000C: parse failed [ 165.677166][ T49] cougar 0003:060B:500A.000C: probe with driver cougar failed with error -22 [ 165.891706][ T5827] usb 2-1: USB disconnect, device number 12 [ 167.396447][ T7190] netlink: 4 bytes leftover after parsing attributes in process `syz.1.550'. [ 167.396474][ T7190] netlink: 4 bytes leftover after parsing attributes in process `syz.1.550'. [ 167.534252][ T67] team0 (unregistering): Port device team_slave_1 removed [ 167.932537][ T67] team0 (unregistering): Port device team_slave_0 removed [ 169.827519][ T7241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.573'. [ 169.827553][ T7241] netlink: 'syz.1.573': attribute type 30 has an invalid length. [ 169.827568][ T7241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.573'. [ 170.928302][ T6299] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 171.086788][ T7161] bond_slave_0: entered promiscuous mode [ 171.086862][ T7161] bond_slave_1: entered promiscuous mode [ 171.087117][ T7161] macvlan3: entered promiscuous mode [ 171.087128][ T7161] bond0: entered promiscuous mode [ 171.101922][ T6299] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 171.101948][ T6299] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.101966][ T6299] usb 3-1: Product: syz [ 171.101978][ T6299] usb 3-1: Manufacturer: syz [ 171.101990][ T6299] usb 3-1: SerialNumber: syz [ 171.149444][ T7161] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 171.150927][ T7161] bond0: left promiscuous mode [ 171.151682][ T7161] bond_slave_0: left promiscuous mode [ 171.151754][ T7161] bond_slave_1: left promiscuous mode [ 171.154333][ T6299] usb 3-1: config 0 descriptor?? [ 171.165226][ T6299] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 012 [ 171.361630][ T6706] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.469245][ T3554] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.469810][ T3554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.582677][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.582814][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.595897][ T6299] (null): failure reading functionality [ 171.677399][ T6299] i2c i2c-2: connected i2c-tiny-usb device [ 171.846789][ T6299] usb 3-1: USB disconnect, device number 12 [ 172.149709][ T9] IPVS: starting estimator thread 0... [ 172.171347][ T6808] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 172.258599][ T7266] IPVS: using max 7 ests per chain, 16800 per kthread [ 172.268533][ T6808] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 172.308866][ T6808] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 172.404944][ T6808] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 173.181538][ T6808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.300394][ T6808] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.345642][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.345990][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.357993][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.358342][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.584131][ T6706] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.656226][ T6808] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 173.837411][ T7316] can0: slcan on ttyS3. [ 174.099393][ T7316] can0 (unregistered): slcan off ttyS3. [ 174.578090][ T6808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.812011][ T6706] veth0_vlan: entered promiscuous mode [ 174.872236][ T6706] veth1_vlan: entered promiscuous mode [ 175.057419][ T6706] veth0_macvtap: entered promiscuous mode [ 175.085308][ T6706] veth1_macvtap: entered promiscuous mode [ 175.210394][ T6706] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.234536][ T6706] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.268629][ T3625] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.269746][ T67] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.271141][ T67] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.273324][ T67] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.848100][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.848281][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.888771][ T5935] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 175.970141][ T6808] veth0_vlan: entered promiscuous mode [ 176.017909][ T7374] block nbd3: NBD_DISCONNECT [ 176.029868][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.029884][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.064636][ T5935] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 176.064663][ T5935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.064681][ T5935] usb 3-1: Product: syz [ 176.064693][ T5935] usb 3-1: Manufacturer: syz [ 176.064706][ T5935] usb 3-1: SerialNumber: syz [ 176.110944][ T6808] veth1_vlan: entered promiscuous mode [ 176.346583][ T6808] veth0_macvtap: entered promiscuous mode [ 176.396158][ T6808] veth1_macvtap: entered promiscuous mode [ 176.481379][ T6808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.527318][ T6808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.562445][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.562800][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.562838][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.562872][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.898304][ T5927] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 176.945618][ T5935] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 176.945686][ T5935] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 176.947271][ T5935] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 177.014762][ T7380] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.031252][ T5935] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 177.057997][ T5935] usb 3-1: USB disconnect, device number 13 [ 177.068335][ T5927] usb 4-1: Using ep0 maxpacket: 16 [ 177.075951][ T5927] usb 4-1: config 0 has an invalid interface number: 24 but max is 0 [ 177.075975][ T5927] usb 4-1: config 0 has no interface number 0 [ 177.076017][ T5927] usb 4-1: config 0 interface 24 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.076039][ T5927] usb 4-1: config 0 interface 24 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.076073][ T5927] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 177.076090][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.153265][ T5927] usb 4-1: config 0 descriptor?? [ 177.213526][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.213546][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.480820][ T85] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.480838][ T85] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.581357][ T5927] hid (null): unknown global tag 0xe [ 177.581391][ T5927] hid (null): global environment stack underflow [ 177.581415][ T5927] hid (null): global environment stack underflow [ 177.794919][ T6299] usb 4-1: USB disconnect, device number 10 [ 178.191554][ T7410] netlink: 268 bytes leftover after parsing attributes in process `syz.1.637'. [ 178.557661][ T7425] input: syz1 as /devices/virtual/input/input10 [ 178.712986][ T7432] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 178.912506][ T7439] ======================================================= [ 178.912506][ T7439] WARNING: The mand mount option has been deprecated and [ 178.912506][ T7439] and is ignored by this kernel. Remove the mand [ 178.912506][ T7439] option from the mount to silence this warning. [ 178.912506][ T7439] ======================================================= [ 178.916837][ T7440] netlink: 48 bytes leftover after parsing attributes in process `syz.4.651'. [ 179.306909][ T7456] Can't find a SQUASHFS superblock on nullb0 [ 180.949353][ T7525] netem: incorrect ge model size [ 181.028372][ T6299] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 181.053686][ T7529] netlink: 4 bytes leftover after parsing attributes in process `syz.2.693'. [ 181.180015][ T6299] usb 5-1: Using ep0 maxpacket: 16 [ 181.186305][ T6299] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.186365][ T6299] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 181.186389][ T6299] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 181.186408][ T6299] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 181.186427][ T6299] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 181.187999][ T6299] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 181.188023][ T6299] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 181.188040][ T6299] usb 5-1: Manufacturer: syz [ 181.233884][ T6299] usb 5-1: config 0 descriptor?? [ 181.719922][ T6299] rc_core: IR keymap rc-hauppauge not found [ 181.719942][ T6299] Registered IR keymap rc-empty [ 181.720646][ T6299] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 181.741431][ T6299] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 181.779924][ T6299] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 181.782977][ T6299] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input11 [ 181.797084][ T6299] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 181.819838][ T6299] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 181.848738][ T6299] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 181.868547][ T6299] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 181.888496][ T6299] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 181.908465][ T6299] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 181.994271][ T6299] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 182.008339][ T6299] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 182.030502][ T6299] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 182.068762][ T6299] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 182.079002][ T7546] netlink: 'syz.2.701': attribute type 1 has an invalid length. [ 182.118589][ T6299] mceusb 5-1:0.0: Registered Ð… with mce emulator interface version 1 [ 182.118610][ T6299] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 182.147452][ T6299] usb 5-1: USB disconnect, device number 6 [ 183.261418][ T7592] netlink: 12 bytes leftover after parsing attributes in process `syz.1.721'. [ 183.488590][ T5927] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 183.638356][ T5927] usb 3-1: Using ep0 maxpacket: 16 [ 183.643894][ T6299] kernel write not supported for file /binder/transactions (pid: 6299 comm: kworker/1:6) [ 183.646966][ T5927] usb 3-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 183.646990][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.647007][ T5927] usb 3-1: Product: syz [ 183.647020][ T5927] usb 3-1: Manufacturer: syz [ 183.647032][ T5927] usb 3-1: SerialNumber: syz [ 183.698824][ T5927] usb 3-1: config 0 descriptor?? [ 183.703502][ T5927] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 183.748460][ T31] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 183.915203][ T31] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 183.915257][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.922084][ T31] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 183.922110][ T31] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 183.922127][ T31] usb 4-1: Manufacturer: syz [ 183.943661][ T31] usb 4-1: config 0 descriptor?? [ 183.964510][ T5927] gp8psk: usb in 128 operation failed. [ 183.967227][ T5927] gp8psk: usb in 137 operation failed. [ 183.967247][ T5927] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 183.968065][ T5927] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 183.988201][ T5927] usb 3-1: media controller created [ 184.052730][ T5927] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 184.092506][ T5927] gp8psk_fe: Frontend revision 1 attached [ 184.104617][ T5927] usb 3-1: DVB: registering adapter 2 frontend 0 (Genpix DVB-S)... [ 184.107957][ T5927] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 184.251133][ T31] rc_core: IR keymap rc-hauppauge not found [ 184.251153][ T31] Registered IR keymap rc-empty [ 184.259769][ T31] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 184.266145][ T31] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input12 [ 184.341932][ C1] igorplugusb 4-1:0.0: Error: urb status = -32 [ 184.390322][ T31] usb 4-1: USB disconnect, device number 11 [ 184.423617][ T5927] gp8psk: usb in 137 operation failed. [ 184.423635][ T5927] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 184.423647][ T5927] gp8psk: found Genpix USB device pID = 201 (hex) [ 184.453229][ T5927] usb 3-1: USB disconnect, device number 14 [ 184.478282][ T5911] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 184.628398][ T5911] usb 2-1: Using ep0 maxpacket: 32 [ 184.643694][ T5911] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 184.643718][ T5911] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 184.643735][ T5911] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 184.643753][ T5911] usb 2-1: config 1 has no interface number 0 [ 184.643801][ T5911] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 184.643823][ T5911] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 184.643860][ T5911] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 184.643879][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.744585][ T5911] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 184.771902][ T5927] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 185.774192][ T7637] netlink: 4 bytes leftover after parsing attributes in process `syz.2.738'. [ 186.407677][ T5911] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 186.719296][ T7637] bond0: (slave bond_slave_1): Releasing backup interface [ 186.766896][ T31] usb 2-1: USB disconnect, device number 13 [ 186.782015][ T31] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 187.348365][ T5911] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 187.532554][ T5911] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 187.532581][ T5911] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.532599][ T5911] usb 6-1: Product: syz [ 187.532611][ T5911] usb 6-1: Manufacturer: syz [ 187.532623][ T5911] usb 6-1: SerialNumber: syz [ 187.569201][ T5911] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 187.778609][ T5935] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 188.644874][ T7691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.645851][ T7691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.928417][ T5935] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 188.935689][ T5935] ath9k_htc: Failed to initialize the device [ 189.013494][ T5935] usb 6-1: ath9k_htc: USB layer deinitialized [ 189.035176][ T7702] netlink: 'syz.3.766': attribute type 3 has an invalid length. [ 189.035196][ T7702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.766'. [ 189.076098][ T31] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 189.100100][ T5927] usb 6-1: USB disconnect, device number 2 [ 189.218230][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 189.220694][ T31] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 189.220718][ T31] usb 5-1: config 0 has no interface number 0 [ 189.220763][ T31] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 189.220786][ T31] usb 5-1: config 0 interface 196 has no altsetting 0 [ 189.222633][ T7708] program syz.3.769 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 189.223800][ T31] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 189.223823][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.223841][ T31] usb 5-1: Product: syz [ 189.223853][ T31] usb 5-1: Manufacturer: syz [ 189.223865][ T31] usb 5-1: SerialNumber: syz [ 189.318043][ T31] usb 5-1: config 0 descriptor?? [ 189.319307][ T7698] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 189.342045][ T7712] netlink: 12 bytes leftover after parsing attributes in process `syz.1.770'. [ 189.618314][ T5927] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 189.736589][ T7721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.775'. [ 189.759976][ T31] ipheth 5-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 189.760265][ T31] ipheth 5-1:0.196: probe with driver ipheth failed with error -22 [ 189.778715][ T5927] usb 3-1: Using ep0 maxpacket: 32 [ 189.794145][ T5927] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 189.794169][ T5927] usb 3-1: config 0 has no interface number 0 [ 189.796524][ T5927] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 189.796541][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.796550][ T5927] usb 3-1: Product: syz [ 189.796557][ T5927] usb 3-1: Manufacturer: syz [ 189.796564][ T5927] usb 3-1: SerialNumber: syz [ 189.804502][ T5927] usb 3-1: config 0 descriptor?? [ 189.832646][ T5927] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 189.876070][ T7718] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 189.880511][ T7718] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 189.970607][ T31] usb 5-1: USB disconnect, device number 7 [ 190.024447][ T7718] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 190.125699][ T7718] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 190.125831][ T7718] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 190.135290][ T5927] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 190.166337][ T5927] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 190.232751][ T7718] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 190.323740][ T7718] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 190.324288][ T7718] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 190.336059][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - change_port message too short [ 190.434748][ T7718] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 190.543680][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 190.555714][ T31] usb 3-1: USB disconnect, device number 15 [ 190.590495][ T7718] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 190.590578][ T7718] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 190.597077][ T31] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 190.603306][ T31] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 190.603963][ T31] quatech2 3-1:0.51: device disconnected [ 190.709654][ T7718] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 191.038359][ T31] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 191.192435][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.192466][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.192501][ T31] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 191.192521][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.206878][ T31] usb 5-1: config 0 descriptor?? [ 191.358387][ T6299] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 191.559542][ T6299] usb 6-1: Using ep0 maxpacket: 16 [ 191.562983][ T6299] usb 6-1: config 0 has an invalid interface number: 203 but max is 0 [ 191.563060][ T6299] usb 6-1: config 0 has no interface number 0 [ 191.563105][ T6299] usb 6-1: config 0 interface 203 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 191.566986][ T6299] usb 6-1: New USB device found, idVendor=0499, idProduct=1026, bcdDevice=e8.af [ 191.567064][ T6299] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.567082][ T6299] usb 6-1: Product: syz [ 191.567094][ T6299] usb 6-1: Manufacturer: syz [ 191.567105][ T6299] usb 6-1: SerialNumber: syz [ 191.613924][ T6299] usb 6-1: config 0 descriptor?? [ 191.616604][ T7751] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 191.639459][ T6299] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 191.670705][ T31] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 191.685103][ T31] cp2112 0003:10C4:EA90.000E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 191.808345][ T5158] Bluetooth: hci1: command 0x0c1a tx timeout [ 191.839897][ T31] cp2112 0003:10C4:EA90.000E: error requesting version [ 191.843560][ T31] cp2112 0003:10C4:EA90.000E: probe with driver cp2112 failed with error -71 [ 191.879869][ T31] usb 5-1: USB disconnect, device number 8 [ 192.128264][ T5158] Bluetooth: hci2: command 0x0c1a tx timeout [ 192.369711][ T5158] Bluetooth: hci5: command 0x0c1a tx timeout [ 192.610903][ T5158] Bluetooth: hci3: command 0x0c1a tx timeout [ 192.955274][ T5911] usb 6-1: USB disconnect, device number 3 [ 192.989639][ T7783] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.802'. [ 193.888788][ T5158] Bluetooth: hci1: command 0x0c1a tx timeout [ 194.038760][ T31] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 194.073773][ T7815] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 194.208321][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 194.208994][ T5158] Bluetooth: hci2: command 0x0c1a tx timeout [ 194.213893][ T31] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.213920][ T31] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.213939][ T31] usb 5-1: config 0 interface 0 has no altsetting 0 [ 194.213969][ T31] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 194.213987][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.220374][ T31] usb 5-1: config 0 descriptor?? [ 194.455409][ T5158] Bluetooth: hci5: command 0x0c1a tx timeout [ 194.472184][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.472258][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.685384][ T31] cougar 0003:060B:500A.000F: unexpected long global item [ 194.686187][ T31] cougar 0003:060B:500A.000F: parse failed [ 194.686284][ T31] cougar 0003:060B:500A.000F: probe with driver cougar failed with error -22 [ 194.690328][ T5158] Bluetooth: hci3: command 0x0c1a tx timeout [ 194.865923][ T49] usb 5-1: USB disconnect, device number 9 [ 195.273530][ T7854] Illegal XDP return value 4294967282 on prog (id 67) dev N/A, expect packet loss! [ 195.288064][ T7853] Bluetooth: MGMT ver 1.23 [ 195.990250][ T5158] Bluetooth: hci1: command 0x0c1a tx timeout [ 196.311547][ T5158] Bluetooth: hci2: command 0x0c1a tx timeout [ 196.535551][ T5158] Bluetooth: hci5: command 0x0c1a tx timeout [ 196.656958][ T7888] netlink: 104 bytes leftover after parsing attributes in process `syz.3.851'. [ 196.802216][ T5158] Bluetooth: hci3: command 0x0c1a tx timeout [ 208.498141][ C0] sched: DL replenish lagged too much [ 261.950832][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.983373][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 313.476482][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 313.486857][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 313.489553][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 313.490747][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 313.492170][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 325.226595][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 325.243413][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 325.571805][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 325.576118][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 325.576557][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 325.577749][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 325.578705][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 327.968514][ T5848] Bluetooth: hci4: command tx timeout [ 330.048379][ T5848] Bluetooth: hci4: command tx timeout [ 332.128294][ T5848] Bluetooth: hci4: command tx timeout [ 334.410668][ T5848] Bluetooth: hci4: command tx timeout [ 342.587955][ T59] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 342.600406][ T59] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 342.601719][ T59] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 342.602962][ T59] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 342.630567][ T59] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 346.605768][ T5158] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 346.618359][ T5158] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 346.620066][ T5158] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 346.622652][ T5158] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 346.623493][ T5158] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 347.781242][ T5158] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 347.784940][ T5158] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 350.264659][ T5158] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 350.800176][ T5158] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 350.810017][ T5158] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 350.811356][ T5158] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 351.175863][ T7940] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 351.222868][ T38] INFO: task syz.5.848:7879 blocked for more than 145 seconds. [ 351.222894][ T38] Not tainted syzkaller #0 [ 351.222904][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 351.222915][ T38] task:syz.5.848 state:D stack:26824 pid:7879 tgid:7877 ppid:6706 task_flags:0x400140 flags:0x00004004 [ 351.222975][ T38] Call Trace: [ 351.222981][ T38] [ 351.222994][ T38] __schedule+0x16f3/0x4c20 [ 351.223032][ T38] ? sched_clock+0x3f/0x60 [ 351.223053][ T38] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 351.223083][ T38] ? __pfx___schedule+0x10/0x10 [ 351.223127][ T38] rt_mutex_schedule+0x77/0xf0 [ 351.223145][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 351.223177][ T38] ? rt_mutex_slowlock_block+0x351/0x6d0 [ 351.223199][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 351.223221][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 351.223240][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 351.223256][ T38] ? __lock_acquire+0xab9/0xd20 [ 351.223289][ T38] ? nl80211_pre_doit+0x5f/0x930 [ 351.223313][ T38] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 351.223337][ T38] ? nl80211_pre_doit+0x5f/0x930 [ 351.223352][ T38] mutex_lock_nested+0x16a/0x1d0 [ 351.223368][ T38] ? __nla_parse+0x40/0x60 [ 351.223396][ T38] nl80211_pre_doit+0x5f/0x930 [ 351.223411][ T38] ? genl_family_rcv_msg_attrs_parse+0x212/0x2a0 [ 351.223444][ T38] genl_family_rcv_msg_doit+0x1bb/0x300 [ 351.223476][ T38] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 351.223514][ T38] ? bpf_lsm_capable+0x9/0x20 [ 351.223534][ T38] ? security_capable+0x7e/0x2e0 [ 351.223564][ T38] genl_rcv_msg+0x60e/0x790 [ 351.223595][ [ 351.223595][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 351.223616][ T38] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 351.223631][ T38] ? __pfx_nl80211_set_tid_config+0x10/0x10 [ 351.223653][ T38] ? __pfx_nl80211_post_doit+0x10/0x10 [ 351.223671][ T38] ? __lock_acquire+0xab9/0xd20 [ 351.223700][ T38] netlink_rcv_skb+0x205/0x470 [ 351.223729][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 351.223754][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 351.223790][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 351.223810][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 351.223835][ T38] genl_rcv+0x28/0x40 [ 351.223856][ T38] netlink_unicast+0x843/0xa10 [ 351.223884][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 351.223905][ T38] ? netlink_sendmsg+0x642/0xb30 [ 351.223923][ T38] ? skb_put+0x11b/0x210 [ 351.223947][ T38] netlink_sendmsg+0x805/0xb30 [ 351.223977][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 351.224007][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 351.224024][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 351.224045][ T38] __sock_sendmsg+0x21c/0x270 [ 351.224069][ T38] ____sys_sendmsg+0x508/0x820 [ 351.224098][ T38] ? __pfx_____sys_sendmsg+0x10/0x10 [ 351.224131][ T38] ? import_iovec+0x74/0xa0 [ 351.224154][ T38] ___sys_sendmsg+0x21f/0x2a0 [ 351.224180][ T38] ? __pfx____sys_sendmsg+0x10/0x10 [ 351.224242][ T38] ? __fget_files+0x2a/0x420 [ 351.224263][ T38] ? __fget_files+0x3a6/0x420 [ 351.224296][ T38] __x64_sys_sendmsg+0x1a1/0x260 [ 351.224321][ T38] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 351.224356][ T38] ? rcu_is_watching+0x15/0xb0 [ 351.224385][ T38] ? do_syscall_64+0xbe/0x3b0 [ 351.224411][ T38] do_syscall_64+0xfa/0x3b0 [ 351.224438][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 351.224459][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.224476][ T38] ? clear_bhb_loop+0x60/0xb0 [ 351.224497][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.224514][ T38] RIP: 0033:0x7f1572c3ebe9 [ 351.224536][ T38] RSP: 002b:00007f1570ea6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 351.224553][ T38] RAX: ffffffffffffffda RBX: 00007f1572e75fa0 RCX: 00007f1572c3ebe9 [ 351.224566][ T38] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 351.224578][ T38] RBP: 00007f1572cc1e19 R08: 0000000000000000 R09: 0000000000000000 [ 351.224588][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 351.224599][ T38] R13: 00007f1572e76038 R14: 00007f1572e75fa0 R15: 00007ffc6a32b6b8 [ 351.224629][ T38] [ 351.224638][ T38] INFO: task syz.1.850:7883 blocked for more than 145 seconds. [ 351.224650][ T38] Not tainted syzkaller #0 [ 351.224658][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 351.224665][ T38] task:syz.1.850 state:D stack:27752 pid:7883 tgid:7882 ppid:5843 task_flags:0x400140 flags:0x00004004 [ 351.224708][ T38] Call Trace: [ 351.224714][ T38] [ 351.224725][ T38] __schedule+0x16f3/0x4c20 [ 351.224758][ T38] ? __lock_acquire+0xab9/0xd20 [ 351.224791][ T38] ? __pfx___schedule+0x10/0x10 [ 351.224830][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 351.224855][ T38] rt_mutex_schedule+0x77/0xf0 [ 351.224871][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 351.224889][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 351.224925][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 351.224946][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 351.224965][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 351.224981][ T38] ? __lock_acquire+0xab9/0xd20 [ 351.225012][ T38] ? rtnetlink_rcv_msg+0x71c/0xb70 [ 351.225047][ T38] ? rtnetlink_rcv_msg+0x71c/0xb70 [ 351.225064][ T38] mutex_lock_nested+0x16a/0x1d0 [ 351.225087][ T38] rtnetlink_rcv_msg+0x71c/0xb70 [ 351.225107][ T38] ? __lock_acquire+0xab9/0xd20 [ 351.225129][ T38] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 351.225148][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 351.225186][ T38] netlink_rcv_skb+0x205/0x470 [ 351.225204][ T38] ? __lock_acquire+0xab9/0xd20 [ 351.225225][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 351.225247][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 351.225280][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 351.225309][ T38] netlink_unicast+0x843/0xa10 [ 351.225337][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 351.225358][ T38] ? netlink_sendmsg+0x642/0xb30 [ 351.225376][ T38] ? skb_put+0x11b/0x210 [ 351.225401][ T38] netlink_sendmsg+0x805/0xb30 [ 351.225438][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 351.225467][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 351.225484][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 351.225506][ T38] __sock_sendmsg+0x21c/0x270 [ 351.225528][ T38] ____sys_sendmsg+0x508/0x820 [ 351.225557][ T38] ? __pfx_____sys_sendmsg+0x10/0x10 [ 351.225591][ T38] ? import_iovec+0x74/0xa0 [ 351.225613][ T38] ___sys_sendmsg+0x21f/0x2a0 [ 351.225639][ T38] ? __pfx____sys_sendmsg+0x10/0x10 [ 351.225700][ T38] ? __fget_files+0x2a/0x420 [ 351.225720][ T38] ? __fget_files+0x3a6/0x420 [ 351.225754][ T38] __x64_sys_sendmsg+0x1a1/0x260 [ 351.225780][ T38] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 351.225814][ T38] ? rcu_is_watching+0x15/0xb0 [ 351.225842][ T38] ? do_syscall_64+0xbe/0x3b0 [ 351.225867][ T38] do_syscall_64+0xfa/0x3b0 [ 351.225887][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 351.225907][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.225924][ T38] ? clear_bhb_loop+0x60/0xb0 [ 351.225945][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.225961][ T38] RIP: 0033:0x7fa6d40eebe9 [ 351.225975][ T38] RSP: 002b:00007fa6d234e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 351.225992][ T38] RAX: ffffffffffffffda RBX: 00007fa6d4325fa0 RCX: 00007fa6d40eebe9 [ 351.226006][ T38] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 351.226017][ T38] RBP: 00007fa6d4171e19 R08: 0000000000000000 R09: 0000000000000000 [ 351.226028][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 351.226039][ T38] R13: 00007fa6d4326038 R14: 00007fa6d4325fa0 R15: 00007ffed9471908 [ 351.226069][ T38] [ 351.226077][ T38] INFO: task syz.2.844:7887 blocked for more than 145 seconds. [ 351.226089][ T38] Not tainted syzkaller #0 [ 351.226098][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 351.226106][ T38] task:syz.2.844 state:D stack:26824 pid:7887 tgid:7885 ppid:5851 task_flags:0x400140 flags:0x00004004 [ 351.226148][ T38] Call Trace: [ 351.226153][ T38] [ 351.226164][ T38] __schedule+0x16f3/0x4c20 [ 351.226205][ T38] ? __kernel_text_address+0xd/0x40 [ 351.226228][ T38] ? __pfx___schedule+0x10/0x10 [ 351.226267][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 351.226291][ T38] rt_mutex_schedule+0x77/0xf0 [ 351.226308][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 351.226327][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 351.226363][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 351.226384][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 351.226403][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 351.226426][ T38] ? __lock_acquire+0xab9/0xd20 [ 351.226458][ T38] ? nl80211_pre_doit+0x5f/0x930 [ 351.226482][ T38] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 351.226505][ T38] ? nl80211_pre_doit+0x5f/0x930 [ 351.226519][ T38] mutex_lock_nested+0x16a/0x1d0 [ 351.226536][ T38] ? __nla_parse+0x40/0x60 [ 351.226562][ T38] nl80211_pre_doit+0x5f/0x930 [ 351.226578][ T38] ? genl_family_rcv_msg_attrs_parse+0x212/0x2a0 [ 351.226602][ T38] genl_family_rcv_msg_doit+0x1bb/0x300 [ 351.226633][ T38] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 351.226669][ T38] ? bpf_lsm_capable+0x9/0x20 [ 351.226688][ T38] ? security_capable+0x7e/0x2e0 [ 351.226713][ T38] genl_rcv_msg+0x60e/0x790 [ 351.226739][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 351.226758][ T38] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 351.226770][ T38] ? __pfx_nl80211_vendor_cmd+0x10/0x10 [ 351.226789][ T38] ? __pfx_nl80211_post_doit+0x10/0x10 [ 351.226808][ T38] ? __lock_acquire+0xab9/0xd20 [ 351.226838][ T38] netlink_rcv_skb+0x205/0x470 [ 351.226859][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 351.226884][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 351.226920][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 351.226939][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 351.226964][ T38] genl_rcv+0x28/0x40 [ 351.226985][ T38] netlink_unicast+0x843/0xa10 [ 351.227014][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 351.227035][ T38] ? netlink_sendmsg+0x642/0xb30 [ 351.227053][ T38] ? skb_put+0x11b/0x210 [ 351.227078][ T38] netlink_sendmsg+0x805/0xb30 [ 351.227108][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 351.227137][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 351.227154][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 351.227175][ T38] __sock_sendmsg+0x21c/0x270 [ 351.227197][ T38] ____sys_sendmsg+0x508/0x820 [ 351.227226][ T38] ? __pfx_____sys_sendmsg+0x10/0x10 [ 351.227259][ T38] ? import_iovec+0x74/0xa0 [ 351.227281][ T38] ___sys_sendmsg+0x21f/0x2a0 [ 351.227307][ T38] ? __pfx____sys_sendmsg+0x10/0x10 [ 351.227369][ T38] ? __fget_files+0x2a/0x420 [ 351.227390][ T38] ? __fget_files+0x3a6/0x420 [ 351.227431][ T38] __x64_sys_sendmsg+0x1a1/0x260 [ 351.227458][ T38] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 351.227492][ T38] ? rcu_is_watching+0x15/0xb0 [ 351.227521][ T38] ? do_syscall_64+0xbe/0x3b0 [ 351.227546][ T38] do_syscall_64+0xfa/0x3b0 [ 351.227566][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 351.227586][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.227603][ T38] ? clear_bhb_loop+0x60/0xb0 [ 351.227624][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.227641][ T38] RIP: 0033:0x7f283b0aebe9 [ 351.227655][ T38] RSP: 002b:00007f2839316038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 351.227672][ T38] RAX: ffffffffffffffda RBX: 00007f283b2e5fa0 RCX: 00007f283b0aebe9 [ 351.227685][ T38] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 351.227696][ T38] RBP: 00007f283b131e19 R08: 0000000000000000 R09: 0000000000000000 [ 351.227707][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 351.227718][ T38] R13: 00007f283b2e6038 R14: 00007f283b2e5fa0 R15: 00007ffe6ed84b08 [ 351.227748][ T38] [ 351.227782][ T38] [ 351.227782][ T38] Showing all locks held in the system: [ 351.227792][ T38] 4 locks held by kworker/0:0/9: [ 351.227802][ T38] #0: ffff888019899938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 351.227850][ T38] #1: ffffc900000e7bc0 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 351.227894][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 351.227937][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 351.227980][ T38] 4 locks held by kworker/0:1/10: [ 351.227990][ T38] #0: ffff88805b1f3538 ((wq_completion)wg-crypt-wg1#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 352.589507][ T7940] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 353.785819][ T38] #1: ffffc900000f7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 353.785895][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 353.785940][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 353.785986][ T38] 4 locks held by kworker/u8:0/12: [ 353.785996][ T38] #0: ffff88803da5a138 ((wq_completion)wg-kex-wg2#11){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 353.786044][ T38] #1: ffffc90000117bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 353.786089][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 353.786131][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 353.786172][ T38] 7 locks held by kworker/u8:1/13: [ 353.786182][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 353.786225][ T38] #1: ffffc90000127bc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 353.786270][ T38] #2: ffff88803556d300 (&devlink->lock_key#7){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 353.786320][ T38] #3: ffff88805dcf3d20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 353.786365][ T38] #4: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 353.786407][ T38] #5: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 353.786456][ T38] #6: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 353.786500][ T38] 2 locks held by ksoftirqd/0/15: [ 353.786510][ T38] #0: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 353.786552][ T38] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 353.786595][ T38] 15 locks held by ktimers/0/16: [ 353.786605][ T38] 4 locks held by pr/legacy/17: [ 353.786616][ T38] 2 locks held by rcuc/0/20: [ 353.786625][ T38] #0: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 353.786667][ T38] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 353.786711][ T38] 2 locks held by rcuc/1/28: [ 353.786720][ T38] #0: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 353.786762][ T38] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 353.786805][ T38] 10 locks held by ktimers/1/29: [ 353.786815][ T38] 2 locks held by ksoftirqd/1/30: [ 353.786825][ T38] #0: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 353.786867][ T38] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 353.786910][ T38] 1 lock held by khungtaskd/38: [ 353.786919][ T38] #0: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 353.786959][ T38] 5 locks held by kworker/u8:2/43: [ 353.786971][ T38] 7 locks held by kworker/u8:3/57: [ 353.786980][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 353.787024][ T38] #1: ffffc9000123fbc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 353.787068][ T38] #2: ffff88801a3c8300 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 353.787113][ T38] #3: ffff88805ca93120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 353.787156][ T38] #4: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 353.787195][ T38] #5: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 353.787237][ T38] #6: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 353.787282][ T38] 6 locks held by kworker/u8:5/85: [ 353.787292][ T38] #0: ffff88805fab9938 ((wq_completion)wg-kex-wg1#9){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 353.787340][ T38] #1: ffffc900015afbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 353.787384][ T38] #2: ffff88803d25d5f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 353.787433][ T38] #3: ffff88805da94e20 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 353.787474][ T38] #4: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 353.787516][ T38] #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 353.787563][ T38] 5 locks held by kworker/u8:6/158: [ 353.787573][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 353.787616][ T38] #1: ffffc90003a4fbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 353.787660][ T38] #2: ffff888032d60898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 353.787703][ T38] #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 353.787745][ T38] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 353.787792][ T38] 4 locks held by kworker/0:2/993: [ 353.787801][ T38] #0: ffff88803441d938 ((wq_completion)wg-crypt-wg0#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 353.787848][ T38] #1: ffffc900044c7bc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 353.787892][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 353.787935][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 353.787981][ T38] 4 locks held by kworker/1:2/1197: [ 353.787991][ T38] #0: ffff88805b370d38 ((wq_completion)wg-crypt-wg0){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 353.788088][ T38] #1: ffffc90004b17bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 353.788144][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 353.788185][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 353.788229][ T38] 5 locks held by kworker/u8:7/1207: [ 353.788239][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 353.788282][ T38] #1: ffffc90004a57bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 353.788323][ T38] #2: ffff88805eba0898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 353.788365][ T38] #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 353.788407][ T38] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 353.788455][ T38] 4 locks held by kworker/u8:8/1233: [ 353.788465][ T38] #0: ffff8880392c2138 ((wq_completion)wg-kex-wg2#9){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 353.788511][ T38] #1: ffffc90004ce7bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 353.788554][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 353.788596][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 353.788654][ T38] 5 locks held by kworker/u8:9/3529: [ 353.788664][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 353.788707][ T38] #1: ffffc9000d4efbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 353.788749][ T38] #2: ffff888063290898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 353.788790][ T38] #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 353.788833][ T38] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 353.788875][ T38] 6 locks held by kworker/u8:10/3554: [ 353.788886][ T38] #0: ffff8880347cd938 ((wq_completion)wg-kex-wg0){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 353.788929][ T38] #1: ffffc9000d65fbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 353.788973][ T38] #2: ffff8880360295f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 353.789015][ T38] #3: ffff888037b483f8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 353.789056][ T38] #4: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 353.789098][ T38] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 353.789141][ T38] 7 locks held by kworker/u8:11/3600: [ 353.789151][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 353.789193][ T38] #1: ffffc9000d86fbc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 353.789237][ T38] #2: ffff88805d4d2300 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 353.789286][ T38] #3: ffff88805d36a120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 353.789331][ T38] #4: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 353.789371][ T38] #5: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 353.789413][ T38] #6: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 353.789463][ T38] 7 locks held by kworker/u8:12/3607: [ 353.789474][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 353.789517][ T38] #1: ffffc9000d9cfbc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 353.789563][ T38] #2: ffff88805c45b300 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 353.789612][ T38] #3: ffff88805e22e120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 353.789657][ T38] #4: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 353.789697][ T38] #5: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 353.789739][ T38] #6: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 353.789782][ T38] 3 locks held by kworker/u8:13/3625: [ 353.789792][ T38] 4 locks held by kworker/u8:14/3653: [ 353.789803][ T38] #0: ffff888049897938 ((wq_completion)wg-kex-wg1#11){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 353.789851][ T38] #1: ffffc9000d54fbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 353.789894][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 353.789937][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 353.789982][ T38] 2 locks held by getty/5600: [ 353.789992][ T38] #0: ffff88823bf3e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 353.790037][ T38] #1: ffffc90003e762e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 353.790079][ T38] 3 locks held by syz-executor/5826: [ 353.790089][ T38] #0: ffff888037b43110 (sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_recvmsg+0xd3/0x560 [ 353.790131][ T38] #1: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 353.790173][ T38] #2: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 353.790217][ T38] 4 locks held by kworker/0:3/5827: [ 353.790227][ T38] #0: ffff88805b1c7d38 ((wq_completion)wg-crypt-wg1){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 353.790271][ T38] #1: ffffc90004d77bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 353.790328][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 353.790370][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 353.790413][ T38] 3 locks held by kworker/u9:3/5846: [ 353.790433][ T38] #0: ffff88806934c138 ((wq_completion)hci9){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 353.790476][ T38] #1: ffffc90004e67bc0 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 353.790525][ T38] #2: ffff88808279ce80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_power_on+0x1ac/0x680 [ 353.790566][ T38] 4 locks held by kworker/u9:4/5848: [ 353.790577][ T38] #0: ffff88814d4de138 ((wq_completion)krxrpcd){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 353.790619][ T38] #1: ffffc90004e87bc0 ((work_completion)(&rxnet->peer_keepalive_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 353.790663][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 353.790706][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 353.790752][ T38] 4 locks held by kworker/0:4/5911: [ 353.790762][ T38] #0: ffff88805b80c138 ((wq_completion)wg-kex-wg2#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 353.790810][ T38] #1: ffffc900059e7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 353.790867][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 353.790909][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 353.790953][ T38] 4 locks held by kworker/1:5/5925: [ 353.790963][ T38] #0: ffff88805e956d38 ((wq_completion)wg-crypt-wg0#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 353.791011][ T38] #1: ffffc90005ad7bc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 353.791056][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 353.791098][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 353.791145][ T38] 4 locks held by kworker/0:5/5927: [ 353.791155][ T38] #0: ffff88805b80c538 ((wq_completion)wg-crypt-wg2#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 353.791200][ T38] #1: ffffc90005af7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 353.791256][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 353.791298][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 353.791341][ T38] 4 locks held by kworker/0:6/5935: [ 353.791351][ T38] #0: ffff88803441d938 ((wq_completion)wg-crypt-wg0#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 353.791397][ T38] #1: ffffc90005b57bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 353.791460][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 353.791501][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 353.791544][ T38] 4 locks held by kworker/0:7/6021: [ 353.791554][ T38] #0: ffff88805b1c7d38 ((wq_completion)wg-crypt-wg1){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 353.791597][ T38] #1: ffffc9000614fbc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 353.791641][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 353.791684][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 353.791726][ T38] 4 locks held by kworker/0:8/6022: [ 353.791737][ T38] #0: ffff88805e956d38 ((wq_completion)wg-crypt-wg0#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 353.791783][ T38] #1: ffffc9000617fbc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 353.791832][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 353.791874][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 353.791923][ T38] 2 locks held by syz.5.848/7879: [ 353.791933][ T38] #0: ffffffff8ed38940 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 353.791977][ T38] #1: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5f/0x930 [ 353.792039][ T38] 1 lock held by syz.4.849/7880: [ 353.792049][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 353.792092][ T38] 1 lock held by syz.1.850/7883: [ 353.792102][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x71c/0xb70 [ 353.792145][ T38] 2 locks held by syz.2.844/7887: [ 353.792155][ T38] #0: ffffffff8ed38940 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 353.792192][ T38] #1: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5f/0x930 [ 353.792224][ T38] 4 locks held by kworker/1:10/7893: [ 353.792232][ T38] #0: ffff88803441d938 ((wq_completion)wg-crypt-wg0#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 353.792268][ T38] #1: ffffc90005ab7bc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 353.792309][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 353.792351][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 353.792394][ T38] 6 locks held by kworker/u8:16/7897: [ 353.792405][ T38] #0: ffff888034d5b138 ((wq_completion)wg-kex-wg2#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 353.792458][ T38] #1: ffffc90005a67bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 353.792501][ T38] #2: ffff888035bbd5f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 353.792543][ T38] #3: ffff888037b4c388 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 353.792583][ T38] #4: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 353.792625][ T38] #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 353.792668][ T38] 3 locks held by kworker/u8:17/7898: [ 353.792678][ T38] #0: ffff88803038b938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 353.792722][ T38] #1: ffffc900059d7bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 353.792766][ T38] #2: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 353.792808][ T38] 6 locks held by kworker/u8:18/7899: [ 353.792818][ T38] #0: ffff888049896138 ((wq_completion)wg-kex-wg0#11){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 353.792865][ T38] #1: ffffc90004927bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 353.792908][ T38] #2: ffff888062e0d5f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 353.792950][ T38] #3: ffff88805da96de8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 353.792990][ T38] #4: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 353.793032][ T38] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 353.793075][ T38] 5 locks held by kworker/u8:19/7900: [ 353.793085][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 353.793129][ T38] #1: ffffc900048c7bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 353.793171][ T38] #2: ffff88805e650898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 353.793205][ T38] #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 353.793244][ T38] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 353.793287][ T38] 5 locks held by kworker/u8:20/7902: [ 353.793297][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 353.793340][ T38] #1: ffffc900059b7bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 353.793383][ T38] #2: ffff88803b2e0898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 353.793432][ T38] #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 353.793474][ T38] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 353.793522][ T38] 6 locks held by kworker/u8:21/7904: [ 353.793532][ T38] #0: ffff888049896138 ((wq_completion)wg-kex-wg0#11){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 353.793583][ T38] #1: ffffc90005997bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 353.793626][ T38] #2: ffff888062e0d5f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 353.793667][ T38] #3: ffff88805da97880 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 353.793708][ T38] #4: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 353.793750][ T38] #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 353.793793][ T38] 6 locks held by kworker/u8:22/7905: [ 353.793803][ T38] #0: ffff88802901f938 ((wq_completion)wg-kex-wg0#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 353.793851][ T38] #1: ffffc90005987bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 353.793895][ T38] #2: ffff88803d1f15f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 353.793941][ T38] #3: ffff88801a341928 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 353.793982][ T38] #4: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 353.794025][ T38] #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 353.794068][ T38] 6 locks held by kworker/u8:24/7907: [ 353.794078][ T38] #0: ffff88803013a938 ((wq_completion)wg-kex-wg1#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 353.794125][ T38] #1: ffffc900058b7bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 353.794168][ T38] #2: ffff88803d1f55f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 353.794211][ T38] #3: ffff888037b4ae58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 353.794252][ T38] #4: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 353.794294][ T38] #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 353.794338][ T38] 4 locks held by kworker/u8:25/7909: [ 353.794348][ T38] #0: ffff88814d566138 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 353.794391][ T38] #1: ffffc90004da7bc0 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 353.794442][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 353.794484][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 353.794527][ T38] 5 locks held by kworker/u8:26/7910: [ 353.794537][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 353.794580][ T38] #1: ffffc90005367bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 353.794623][ T38] #2: ffff88804de10898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 353.794665][ T38] #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 353.794707][ T38] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 353.794751][ T38] 4 locks held by kworker/1:16/7912: [ 353.794761][ T38] #0: ffff888019899938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 353.794804][ T38] #1: ffffc90004887bc0 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 353.794848][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 353.794891][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 353.794933][ T38] 1 lock held by dhcpcd/7913: [ 353.794943][ T38] #0: ffff888022232438 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 353.794988][ T38] 1 lock held by dhcpcd/7915: [ 353.794998][ T38] #0: ffff88805efd1d78 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 353.795042][ T38] 1 lock held by syz-executor/7917: [ 353.795052][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 353.795092][ T38] 4 locks held by kworker/1:18/7919: [ 353.795101][ T38] #0: ffff88805b1f0538 ((wq_completion)wg-crypt-wg0#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 353.795149][ T38] #1: ffffc90004827bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 353.795206][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 353.795248][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 353.795292][ T38] 1 lock held by dhcpcd/7921: [ 353.795301][ T38] #0: ffff88802a0e4350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 353.795344][ T38] 1 lock held by dhcpcd/7923: [ 353.795353][ T38] #0: ffff88801a374350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 353.795395][ T38] 1 lock held by dhcpcd/7924: [ 353.795405][ T38] #0: ffff8880386b6350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 353.795451][ T38] 1 lock held by dhcpcd/7925: [ 353.795461][ T38] #0: ffff8880386b0350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 353.795504][ T38] 5 locks held by kworker/0:9/7930: [ 353.795514][ T38] #0: ffff888019899938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 353.795558][ T38] #1: ffffc9000694fbc0 ((work_completion)(&(&gc_work->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 353.795601][ T38] #2: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: gc_worker+0x274/0x13f0 [ 353.795641][ T38] #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 353.795684][ T38] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 353.795728][ T38] 3 locks held by syz-executor/7932: [ 353.795738][ T38] #0: ffff888060af8350 (sk_lock-AF_BLUETOOTH-BTPROTO_HCI){+.+.}-{0:0}, at: hci_sock_ioctl+0x247/0x910 [ 353.795784][ T38] #1: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 353.795826][ T38] #2: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 353.795869][ T38] 3 locks held by syz-executor/7934: [ 353.795880][ T38] #0: ffff888060afc350 (sk_lock-AF_BLUETOOTH-BTPROTO_HCI){+.+.}-{0:0}, at: hci_sock_ioctl+0x247/0x910 [ 353.795924][ T38] #1: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 353.795966][ T38] #2: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 353.796010][ T38] 3 locks held by syz-executor/7936: [ 353.796020][ T38] #0: ffff88805b026350 (sk_lock-AF_BLUETOOTH-BTPROTO_HCI){+.+.}-{0:0}, at: hci_sock_ioctl+0x247/0x910 [ 353.796063][ T38] #1: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 353.796105][ T38] #2: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 353.796148][ T38] 3 locks held by syz-executor/7938: [ 353.796158][ T38] #0: ffff88805b021350 (sk_lock-AF_BLUETOOTH-BTPROTO_HCI){+.+.}-{0:0}, at: hci_sock_ioctl+0x247/0x910 [ 353.796199][ T38] #1: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 353.796241][ T38] #2: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 353.796284][ T38] 3 locks held by kworker/u9:5/7940: [ 353.796297][ T38] [ 353.796302][ T38] ============================================= [ 353.796302][ T38] [ 353.796329][ T38] NMI backtrace for cpu 1 [ 353.796370][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 353.796425][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 353.796436][ T38] Call Trace: [ 353.796444][ T38] [ 353.796452][ T38] dump_stack_lvl+0x189/0x250 [ 353.796487][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 353.796510][ T38] ? __pfx__printk+0x10/0x10 [ 353.796540][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 353.796562][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 353.796584][ T38] ? __pfx__printk+0x10/0x10 [ 353.796606][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 353.796629][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 353.796650][ T38] watchdog+0xf93/0xfe0 [ 353.796677][ T38] ? watchdog+0x1de/0xfe0 [ 353.796703][ T38] kthread+0x70e/0x8a0 [ 353.796729][ T38] ? __pfx_watchdog+0x10/0x10 [ 353.796749][ T38] ? __pfx_kthread+0x10/0x10 [ 353.796776][ T38] ? __pfx_kthread+0x10/0x10 [ 353.796800][ T38] ret_from_fork+0x3f9/0x770 [ 353.796823][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 353.796849][ T38] ? __switch_to_asm+0x39/0x70 [ 353.796864][ T38] ? __switch_to_asm+0x33/0x70 [ 353.796879][ T38] ? __pfx_kthread+0x10/0x10 [ 353.796902][ T38] ret_from_fork_asm+0x1a/0x30 [ 353.796934][ T38] [ 353.796940][ T38] Sending NMI from CPU 1 to CPUs 0: [ 353.796967][ C0] NMI backtrace for cpu 0 [ 353.796981][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 353.797000][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 353.797010][ C0] RIP: 0010:lock_is_held_type+0x51/0x190 [ 353.797034][ C0] Code: dd 26 04 00 0f 84 fe 00 00 00 65 8b 05 c8 ab ff 06 85 c0 0f 85 ef 00 00 00 65 4c 8b 2c 25 08 f0 f5 91 41 83 bd 1c 0b 00 00 00 <0f> 85 d8 00 00 00 89 f5 49 89 fe 48 c7 04 24 00 00 00 00 9c 8f 04 [ 353.797048][ C0] RSP: 0018:ffffc90000156bd8 EFLAGS: 00000246 [ 353.797063][ C0] RAX: 0000000000000000 RBX: 00000000ffffffff RCX: c2c2517b3192cd00 [ 353.797075][ C0] RDX: 0000000000000100 RSI: 00000000ffffffff RDI: ffffffff8d9a8bc0 [ 353.797087][ C0] RBP: ffffc90000156df0 R08: 0000000000000000 R09: 0000000000000100 [ 353.797098][ C0] R10: dffffc0000000000 R11: ffffed10107bd64d R12: 0000000000000000 [ 353.797110][ C0] R13: ffff88801ae85940 R14: dffffc0000000000 R15: ffff888083a75640 [ 353.797123][ C0] FS: 0000000000000000(0000) GS:ffff8881268c1000(0000) knlGS:0000000000000000 [ 353.797137][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 353.797149][ C0] CR2: 00007ffe61058768 CR3: 0000000035c42000 CR4: 00000000003526f0 [ 353.797164][ C0] Call Trace: [ 353.797177][ C0] [ 353.797186][ C0] ip_route_me_harder+0xe8/0x1030 [ 353.797209][ C0] ? __pfx_ip_route_me_harder+0x10/0x10 [ 353.797230][ C0] ? kmalloc_reserve+0xbd/0x290 [ 353.797252][ C0] ? kmalloc_reserve+0xbd/0x290 [ 353.797269][ C0] ? siphash_2u64+0x25/0x2a0 [ 353.797295][ C0] synproxy_send_tcp+0x359/0x6c0 [ 353.797320][ C0] synproxy_send_client_synack+0x8bb/0xe20 [ 353.797348][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 353.797368][ C0] ? nft_sock_get_eval_cgroupv2+0x88/0x270 [ 353.797391][ C0] ? synproxy_pernet+0x45/0x270 [ 353.797408][ C0] nft_synproxy_eval_v4+0x36e/0x560 [ 353.797435][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 353.797459][ C0] ? nf_ip_checksum+0x13c/0x510 [ 353.797484][ C0] nft_synproxy_do_eval+0x345/0x570 [ 353.797510][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 353.797534][ C0] ? __pfx___ip_vs_conn_in_get+0x10/0x10 [ 353.797556][ C0] nft_do_chain+0x40c/0x1920 [ 353.797583][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 353.797608][ C0] ? __pfx_ip_vs_conn_out_get_proto+0x10/0x10 [ 353.797635][ C0] ? ip_vs_out_hook+0x9b5/0xef0 [ 353.797652][ C0] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 353.797672][ C0] nft_do_chain_inet+0x25d/0x340 [ 353.797694][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 353.797723][ C0] ? NF_HOOK+0x9a/0x3a0 [ 353.797742][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 353.797765][ C0] nf_hook_slow+0xc5/0x220 [ 353.797787][ C0] NF_HOOK+0x206/0x3a0 [ 353.797805][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 353.797825][ C0] ? NF_HOOK+0x9a/0x3a0 [ 353.797842][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 353.797858][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 353.797879][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 353.797899][ C0] ? skb_dst+0x4f/0xd0 [ 353.797917][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 353.797943][ C0] NF_HOOK+0x309/0x3a0 [ 353.797962][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 353.797980][ C0] ? NF_HOOK+0x9a/0x3a0 [ 353.797997][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 353.798016][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 353.798043][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 353.798057][ C0] __netif_receive_skb+0x143/0x380 [ 353.798072][ C0] ? rt_spin_unlock+0x65/0x80 [ 353.798090][ C0] ? process_backlog+0x27b/0x900 [ 353.798108][ C0] process_backlog+0x31e/0x900 [ 353.798132][ C0] __napi_poll+0xb3/0x540 [ 353.798151][ C0] net_rx_action+0x707/0xe00 [ 353.798176][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 353.798205][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 353.798240][ C0] handle_softirqs+0x22f/0x710 [ 353.798264][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 353.798290][ C0] run_ktimerd+0xcf/0x190 [ 353.798311][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 353.798336][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 353.798354][ C0] smpboot_thread_fn+0x53f/0xa60 [ 353.798373][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 353.798396][ C0] kthread+0x70e/0x8a0 [ 353.798419][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 353.798438][ C0] ? __pfx_kthread+0x10/0x10 [ 353.798462][ C0] ? __pfx_kthread+0x10/0x10 [ 353.798488][ C0] ret_from_fork+0x3f9/0x770 [ 353.798509][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 353.798531][ C0] ? __switch_to_asm+0x39/0x70 [ 353.798546][ C0] ? __switch_to_asm+0x33/0x70 [ 353.798560][ C0] ? __pfx_kthread+0x10/0x10 [ 353.798582][ C0] ret_from_fork_asm+0x1a/0x30 [ 353.798605][ C0] [ 353.799947][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 353.799966][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 353.799986][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 353.799996][ T38] Call Trace: [ 353.800004][ T38] [ 353.800011][ T38] dump_stack_lvl+0x99/0x250 [ 353.800037][ T38] ? __asan_memcpy+0x40/0x70 [ 353.800057][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 353.800080][ T38] ? __pfx__printk+0x10/0x10 [ 353.800111][ T38] vpanic+0x281/0x750 [ 353.800136][ T38] ? __pfx_vpanic+0x10/0x10 [ 353.800158][ T38] ? preempt_schedule+0xae/0xc0 [ 353.800179][ T38] ? preempt_schedule_common+0x83/0xd0 [ 353.800206][ T38] panic+0xb9/0xc0 [ 353.800227][ T38] ? __pfx_panic+0x10/0x10 [ 353.800251][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 353.800276][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 353.800298][ T38] watchdog+0xfd2/0xfe0 [ 353.800324][ T38] ? watchdog+0x1de/0xfe0 [ 353.800351][ T38] kthread+0x70e/0x8a0 [ 353.800377][ T38] ? __pfx_watchdog+0x10/0x10 [ 353.800396][ T38] ? __pfx_kthread+0x10/0x10 [ 353.800465][ T38] ? __pfx_kthread+0x10/0x10 [ 353.800490][ T38] ret_from_fork+0x3f9/0x770 [ 353.800514][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 353.800539][ T38] ? __switch_to_asm+0x39/0x70 [ 353.800555][ T38] ? __switch_to_asm+0x33/0x70 [ 353.800570][ T38] ? __pfx_kthread+0x10/0x10 [ 353.800593][ T38] ret_from_fork_asm+0x1a/0x30 [ 353.800625][ T38] [ 353.801267][ T38] Kernel Offset: disabled