last executing test programs: 35.375787533s ago: executing program 0 (id=707): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8000, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @multicast1, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @empty}}}}) 34.487042381s ago: executing program 0 (id=717): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) ptrace(0x4208, 0x0) 33.907023701s ago: executing program 0 (id=722): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1d}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 33.366613413s ago: executing program 3 (id=730): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x7ff}) fcntl$lock(r0, 0x25, &(0x7f0000000100)={0x2, 0x0, 0x5, 0x3}) 33.21441787s ago: executing program 0 (id=732): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000840)={0x2c, r1, 0x3, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x8010) 33.062443416s ago: executing program 3 (id=735): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r1, @ANYRES64=r0, @ANYBLOB="ed"], 0x20) 32.859633451s ago: executing program 0 (id=737): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) syz_clone(0x80000, 0x0, 0x11, 0x0, 0x0, 0x0) 32.765463857s ago: executing program 3 (id=738): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, &(0x7f0000002000)) fcntl$lock(r0, 0x24, &(0x7f0000000000)={0x1}) 32.45965352s ago: executing program 3 (id=742): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 32.242568196s ago: executing program 4 (id=745): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) dup(r0) 31.939361048s ago: executing program 3 (id=748): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r0, 0x7) ioctl$SIOCX25CALLACCPTAPPRV(r0, 0x89e8) 31.898450695s ago: executing program 4 (id=749): creat(&(0x7f0000000100)='./file0\x00', 0x3) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000480)=[0x8000000000000001, 0x3, 0x9], 0x0, 0x0, 0x227c}}, 0x40) 31.672212544s ago: executing program 3 (id=752): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@access_client}], [], 0x6b}}) 31.612453534s ago: executing program 4 (id=753): r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) pwritev2(r0, 0x0, 0x0, 0x9c00, 0x0, 0x3) 31.160977167s ago: executing program 4 (id=755): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) 30.755011077s ago: executing program 2 (id=756): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = dup(r0) ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f00000001c0)=ANY=[@ANYBLOB="03000000050100004503"]) 30.335411427s ago: executing program 2 (id=758): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000100)) 29.878828582s ago: executing program 2 (id=760): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) setresuid(0x0, 0xee01, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, 0x0) 29.502846525s ago: executing program 0 (id=762): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c8}}, 0x0) 29.458771434s ago: executing program 2 (id=763): unshare(0x22020600) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x5, &(0x7f0000002800)=ANY=[@ANYBLOB="18020000022000000000000002000000850000002e000000850000000e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r0, 0x0, 0xe, 0x0, &(0x7f0000000140)="e0b9547ed387dbeb00009b22562e", 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 27.634230897s ago: executing program 2 (id=764): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}, @NFTA_MATCH_INFO={0xe, 0x3, "7acc6338a90000b03bd9"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 27.420698682s ago: executing program 4 (id=765): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000540)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000240)=""/17, 0x11, 0x2, 0x4, 0x7, 0x4, 0xc08}}, 0x11c) read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020) 27.007025906s ago: executing program 1 (id=767): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "0f03c8c7e8da000000000000ffffff017f000000cce67e1d0000e565aa9a9d32c7627ffe7a54cdbd77b3000000000000000000060000000000000000deff00", 0x1}, 0x60) sendmmsg$nfc_llcp(r0, &(0x7f0000004180)=[{0x0, 0x0, 0x0}], 0x1, 0x0) 26.559278361s ago: executing program 1 (id=768): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="40000000010205000000000000000000020000002c0002801400018008000100ac1414aa08000200ac1414bb06000340000000000c000280"], 0x40}}, 0x80) 26.491442548s ago: executing program 4 (id=769): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x3c, r1, 0x1, 0x1000000, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x4}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 26.220080691s ago: executing program 1 (id=770): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000004850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x38, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 25.95755669s ago: executing program 1 (id=771): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) 25.678762485s ago: executing program 1 (id=772): r0 = semget$private(0x0, 0x7, 0x3c0) semop(r0, &(0x7f0000000040)=[{0x3, 0x3, 0x1000}, {0x2, 0x4, 0x1000}, {0x2, 0xa}, {0x4, 0x6f, 0x800}], 0x4) semctl$IPC_RMID(r0, 0x0, 0x0) 25.401918057s ago: executing program 1 (id=773): sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x44, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}]}]}, 0x44}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000040)={'wlan1\x00', @random="0100"}) 16.473460442s ago: executing program 32 (id=752): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}, {@access_client}], [], 0x6b}}) 15.355771435s ago: executing program 2 (id=775): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x1c, r1, 0x1}, 0x1c}}, 0x0) 14.020240105s ago: executing program 33 (id=762): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000060006000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5426c010880f4000080060005c00180000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff240002001bc715ee4868b12a49f4df11bc05475489f6a27c4d6483ad2fa5e45903b0ce851400040002000000ac1414aa00000000000000008c00098028000080060001000a00000014000200ff020000000000000000000000000001050003000000000028000080060001000a000000140002000000000000000000000000000000000105000300030000001c000080060001000200da0008000200e000000105000300000000001c000080060001000200000008000200ac141400050003000000000074000080200004000a004e2200000000fc0000000000000000000000000000000400000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff080003000100000024000200cde20bc0d9b90ac13642d7b66459dd9db5e20b4b16d3d23f2cb03a8aa417dce6080007000000000014000200776730"], 0x1c8}}, 0x0) 11.050711198s ago: executing program 34 (id=769): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x3c, r1, 0x1, 0x1000000, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x4}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 10.052847226s ago: executing program 35 (id=773): sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x44, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}]}]}, 0x44}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000040)={'wlan1\x00', @random="0100"}) 0s ago: executing program 36 (id=775): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x1c, r1, 0x1}, 0x1c}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.200' (ED25519) to the list of known hosts. [ 89.994963][ T5823] cgroup: Unknown subsys name 'net' [ 90.235172][ T5823] cgroup: Unknown subsys name 'cpuset' [ 90.299728][ T5823] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 92.113596][ T10] cfg80211: failed to load regulatory.db [ 92.443409][ T5823] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 95.143865][ T5154] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.146024][ T5154] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.164319][ T5154] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.165623][ T5154] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.167551][ T5154] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.307314][ T5154] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.320018][ T5154] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.339978][ T5154] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.362749][ T5154] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.363580][ T5154] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.457326][ T5154] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.467425][ T5154] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.470054][ T5154] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.484514][ T5154] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.485418][ T5154] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.531824][ T5154] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.533922][ T5154] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.540069][ T5154] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.569560][ T5154] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.571107][ T5154] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 95.604325][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 95.606834][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 95.607989][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 95.635240][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 95.636034][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 96.295882][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 96.558093][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 97.021799][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 97.047716][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.048817][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.049846][ T5833] bridge_slave_0: entered allmulticast mode [ 97.053401][ T5833] bridge_slave_0: entered promiscuous mode [ 97.079620][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 97.106082][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.106273][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.106519][ T5833] bridge_slave_1: entered allmulticast mode [ 97.109350][ T5833] bridge_slave_1: entered promiscuous mode [ 97.220690][ T5154] Bluetooth: hci0: command tx timeout [ 97.225973][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 97.459280][ T5154] Bluetooth: hci1: command tx timeout [ 97.549157][ T5154] Bluetooth: hci2: command tx timeout [ 97.630752][ T5154] Bluetooth: hci3: command tx timeout [ 97.680584][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.680733][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.680928][ T5836] bridge_slave_0: entered allmulticast mode [ 97.683896][ T5836] bridge_slave_0: entered promiscuous mode [ 97.703341][ T5154] Bluetooth: hci4: command tx timeout [ 97.750198][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.778781][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.784935][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.785220][ T5836] bridge_slave_1: entered allmulticast mode [ 97.791507][ T5836] bridge_slave_1: entered promiscuous mode [ 97.873922][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.474565][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.498727][ T5833] team0: Port device team_slave_0 added [ 98.506067][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.506266][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.506676][ T5839] bridge_slave_0: entered allmulticast mode [ 98.508589][ T5839] bridge_slave_0: entered promiscuous mode [ 98.772820][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.884190][ T5833] team0: Port device team_slave_1 added [ 98.884853][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.884966][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.885110][ T5839] bridge_slave_1: entered allmulticast mode [ 98.887024][ T5839] bridge_slave_1: entered promiscuous mode [ 98.888617][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.888762][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.898810][ T5841] bridge_slave_0: entered allmulticast mode [ 98.902337][ T5841] bridge_slave_0: entered promiscuous mode [ 99.222159][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.222328][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.222516][ T5841] bridge_slave_1: entered allmulticast mode [ 99.225715][ T5841] bridge_slave_1: entered promiscuous mode [ 99.299186][ T5154] Bluetooth: hci0: command tx timeout [ 99.316972][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.317119][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.317342][ T5843] bridge_slave_0: entered allmulticast mode [ 99.321733][ T5843] bridge_slave_0: entered promiscuous mode [ 99.544332][ T5836] team0: Port device team_slave_0 added [ 99.544884][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.545022][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.545212][ T5843] bridge_slave_1: entered allmulticast mode [ 99.547412][ T5843] bridge_slave_1: entered promiscuous mode [ 99.549166][ T5154] Bluetooth: hci1: command tx timeout [ 99.552245][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.552259][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.552288][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.558382][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.619388][ T5154] Bluetooth: hci2: command tx timeout [ 99.699265][ T5154] Bluetooth: hci3: command tx timeout [ 99.757185][ T5836] team0: Port device team_slave_1 added [ 99.780190][ T5154] Bluetooth: hci4: command tx timeout [ 99.846507][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.846525][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.846555][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.854916][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.866108][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.104879][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.197095][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.346204][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.346217][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.346236][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.351516][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.356276][ T5839] team0: Port device team_slave_0 added [ 100.471665][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.471679][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.471699][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.593084][ T5839] team0: Port device team_slave_1 added [ 100.691735][ T5841] team0: Port device team_slave_0 added [ 100.934541][ T5841] team0: Port device team_slave_1 added [ 101.072749][ T5843] team0: Port device team_slave_0 added [ 101.162443][ T5833] hsr_slave_0: entered promiscuous mode [ 101.163633][ T5833] hsr_slave_1: entered promiscuous mode [ 101.233227][ T5843] team0: Port device team_slave_1 added [ 101.234328][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.234346][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.234365][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.379098][ T5154] Bluetooth: hci0: command tx timeout [ 101.519465][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.519478][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.519498][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.521283][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.521297][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.521316][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.619021][ T5154] Bluetooth: hci1: command tx timeout [ 101.710850][ T5154] Bluetooth: hci2: command tx timeout [ 101.779408][ T5154] Bluetooth: hci3: command tx timeout [ 101.811831][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.811849][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.811876][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.823465][ T5836] hsr_slave_0: entered promiscuous mode [ 101.825026][ T5836] hsr_slave_1: entered promiscuous mode [ 101.826396][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 101.826536][ T5836] Cannot create hsr debugfs directory [ 101.828601][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.828617][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.828647][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.869289][ T5154] Bluetooth: hci4: command tx timeout [ 101.872254][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.872272][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.872304][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.476757][ T5839] hsr_slave_0: entered promiscuous mode [ 102.477775][ T5839] hsr_slave_1: entered promiscuous mode [ 102.478463][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 102.478486][ T5839] Cannot create hsr debugfs directory [ 102.753084][ T5841] hsr_slave_0: entered promiscuous mode [ 102.754838][ T5841] hsr_slave_1: entered promiscuous mode [ 102.755576][ T5841] debugfs: 'hsr0' already exists in 'hsr' [ 102.755602][ T5841] Cannot create hsr debugfs directory [ 102.943351][ T5843] hsr_slave_0: entered promiscuous mode [ 102.944856][ T5843] hsr_slave_1: entered promiscuous mode [ 102.945842][ T5843] debugfs: 'hsr0' already exists in 'hsr' [ 102.945867][ T5843] Cannot create hsr debugfs directory [ 103.459210][ T5154] Bluetooth: hci0: command tx timeout [ 103.699319][ T5154] Bluetooth: hci1: command tx timeout [ 103.779074][ T5154] Bluetooth: hci2: command tx timeout [ 103.859234][ T5154] Bluetooth: hci3: command tx timeout [ 103.944370][ T5154] Bluetooth: hci4: command tx timeout [ 104.438216][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.480660][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.528439][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.588158][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.704905][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 104.740493][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 104.795518][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 104.856506][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 105.017973][ T5841] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.070764][ T5841] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.098618][ T5841] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.166607][ T5841] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 105.376883][ T5839] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 105.421342][ T5839] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 105.455372][ T5839] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 105.516080][ T5839] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 105.721122][ T5843] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 105.762299][ T5843] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 105.816957][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.826205][ T5843] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 105.866726][ T5843] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 106.006450][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.011574][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.071133][ T3823] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.071765][ T3823] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.126465][ T3823] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.127245][ T3823] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.168680][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.231518][ T87] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.231781][ T87] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.257362][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.314677][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.314804][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.446530][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.465000][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.503622][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.503863][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.573121][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.573708][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.668611][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.736721][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.737480][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.805451][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.826968][ T1030] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.827147][ T1030] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.018038][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.125817][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.125966][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.203725][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.203880][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.224198][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.403773][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.715619][ T5833] veth0_vlan: entered promiscuous mode [ 107.772864][ T5833] veth1_vlan: entered promiscuous mode [ 107.853992][ T5836] veth0_vlan: entered promiscuous mode [ 107.967703][ T5836] veth1_vlan: entered promiscuous mode [ 108.010663][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.018752][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.085346][ T5833] veth0_macvtap: entered promiscuous mode [ 108.114751][ T5833] veth1_macvtap: entered promiscuous mode [ 108.193189][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.225022][ T5836] veth0_macvtap: entered promiscuous mode [ 108.268821][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.304267][ T5836] veth1_macvtap: entered promiscuous mode [ 108.328639][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.426158][ T192] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.438817][ T5839] veth0_vlan: entered promiscuous mode [ 108.441346][ T192] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.449555][ T5841] veth0_vlan: entered promiscuous mode [ 108.454675][ T192] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.466049][ T192] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.553433][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.598128][ T5839] veth1_vlan: entered promiscuous mode [ 108.627495][ T5841] veth1_vlan: entered promiscuous mode [ 108.716176][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.849357][ T1030] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.883775][ T1030] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.892587][ T1030] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.915180][ T1030] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.057465][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.057493][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.177427][ T5839] veth0_macvtap: entered promiscuous mode [ 109.276626][ T5841] veth0_macvtap: entered promiscuous mode [ 109.300799][ T5839] veth1_macvtap: entered promiscuous mode [ 109.308353][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.308375][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.353639][ T5841] veth1_macvtap: entered promiscuous mode [ 109.435883][ T1030] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.435908][ T1030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.438698][ T5843] veth0_vlan: entered promiscuous mode [ 109.521990][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.524601][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.526063][ T5843] veth1_vlan: entered promiscuous mode [ 109.611785][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.634808][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.652894][ T3823] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.652917][ T3823] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.762251][ T67] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.765995][ T67] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.786837][ T67] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.805184][ T67] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.825461][ T67] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.842027][ T67] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.852986][ T67] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.853288][ T67] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.300266][ T5843] veth0_macvtap: entered promiscuous mode [ 110.403629][ T5843] veth1_macvtap: entered promiscuous mode [ 110.539165][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.539188][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.583584][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.652053][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.702418][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.702568][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.702583][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.705095][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.749136][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.773319][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.982105][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.982128][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.269728][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.269751][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.460283][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.460307][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.646067][ T192] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.646091][ T192] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.079496][ T38] audit: type=1326 audit(1758338272.586:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5981 comm="syz.2.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef0bb7ec29 code=0x7ffc0000 [ 112.081045][ T38] audit: type=1326 audit(1758338272.606:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5981 comm="syz.2.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef0bb7ec29 code=0x7ffc0000 [ 112.081098][ T38] audit: type=1326 audit(1758338272.606:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5981 comm="syz.2.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fef0bb7ec29 code=0x7ffc0000 [ 112.081406][ T38] audit: type=1326 audit(1758338272.606:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5981 comm="syz.2.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef0bb7ec29 code=0x7ffc0000 [ 112.081454][ T38] audit: type=1326 audit(1758338272.606:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5981 comm="syz.2.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef0bb7ec29 code=0x7ffc0000 [ 112.142583][ T38] audit: type=1326 audit(1758338272.646:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5981 comm="syz.2.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7fef0bb7ec29 code=0x7ffc0000 [ 112.145427][ T38] audit: type=1326 audit(1758338272.666:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5981 comm="syz.2.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef0bb7ec29 code=0x7ffc0000 [ 112.145486][ T38] audit: type=1326 audit(1758338272.666:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5981 comm="syz.2.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef0bb7ec29 code=0x7ffc0000 [ 114.330785][ T6034] netlink: 56 bytes leftover after parsing attributes in process `syz.2.40'. [ 114.330974][ T6034] netlink: 24 bytes leftover after parsing attributes in process `syz.2.40'. [ 114.749961][ T6044] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 114.821010][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 114.891536][ T6047] netlink: 104 bytes leftover after parsing attributes in process `syz.0.45'. [ 115.009809][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 115.067784][ T9] usb 5-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 115.067816][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.067836][ T9] usb 5-1: Product: syz [ 115.067851][ T9] usb 5-1: Manufacturer: syz [ 115.067865][ T9] usb 5-1: SerialNumber: syz [ 115.111819][ T9] usb 5-1: config 0 descriptor?? [ 115.210339][ T9] radio-usb-si4713 5-1:0.0: Si4713 development board discovered: (10C4:8244) [ 115.812162][ T9] radio-usb-si4713 5-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 115.812755][ T9] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 115.868175][ T9] usb 5-1: USB disconnect, device number 2 [ 116.265168][ T6074] vlan2: entered allmulticast mode [ 116.285778][ T6074] bond0: entered allmulticast mode [ 116.285802][ T6074] bond_slave_0: entered allmulticast mode [ 116.285829][ T6074] bond_slave_1: entered allmulticast mode [ 116.564696][ T6080] netlink: 84 bytes leftover after parsing attributes in process `syz.2.60'. [ 116.730874][ T6090] capability: warning: `syz.0.65' uses deprecated v2 capabilities in a way that may be insecure [ 117.623847][ T6110] geneve2: entered promiscuous mode [ 117.734510][ T6116] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 0, id = 0 [ 118.142660][ T6130] ptrace attach of "./syz-executor exec"[5841] was attempted by ""[6130] [ 118.618086][ T6147] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 119.331572][ T6169] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 119.397678][ T6171] vim2m vim2m.0: vidioc_s_fmt queue busy [ 119.565240][ T6177] ======================================================= [ 119.565240][ T6177] WARNING: The mand mount option has been deprecated and [ 119.565240][ T6177] and is ignored by this kernel. Remove the mand [ 119.565240][ T6177] option from the mount to silence this warning. [ 119.565240][ T6177] ======================================================= [ 119.762410][ T5899] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 119.919066][ T5899] usb 1-1: Using ep0 maxpacket: 8 [ 119.923340][ T5899] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 119.928093][ T5899] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 119.928126][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.928147][ T5899] usb 1-1: Product: syz [ 119.928162][ T5899] usb 1-1: Manufacturer: syz [ 119.928177][ T5899] usb 1-1: SerialNumber: syz [ 119.985959][ T6188] netlink: 88 bytes leftover after parsing attributes in process `syz.4.111'. [ 120.018774][ T5899] usb 1-1: config 0 descriptor?? [ 120.048415][ T5899] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 120.048482][ T5899] usb 1-1: setting power ON [ 120.090204][ T5899] dvb-usb: bulk message failed: -22 (2/0) [ 120.236185][ T5899] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 120.267647][ T5899] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 120.267747][ T5899] usb 1-1: media controller created [ 120.297588][ T6174] dvb-usb: bulk message failed: -22 (3/0) [ 120.404733][ T6198] capability: warning: `syz.4.116' uses 32-bit capabilities (legacy support in use) [ 120.512916][ T5899] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 120.662161][ T5899] usb 1-1: selecting invalid altsetting 6 [ 120.662186][ T5899] usb 1-1: digital interface selection failed (-22) [ 120.662207][ T5899] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 120.666309][ T5899] usb 1-1: setting power OFF [ 120.666423][ T5899] dvb-usb: bulk message failed: -22 (2/0) [ 120.666443][ T5899] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 120.666457][ T5899] (NULL device *): no alternate interface [ 120.965313][ T5899] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 121.066570][ T5899] usb 1-1: USB disconnect, device number 2 [ 121.711341][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 121.870579][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 121.887896][ T9] usb 3-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 121.887929][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.887950][ T9] usb 3-1: Product: syz [ 121.887964][ T9] usb 3-1: Manufacturer: syz [ 121.887980][ T9] usb 3-1: SerialNumber: syz [ 121.943976][ T9] usb 3-1: config 0 descriptor?? [ 121.999245][ T9] ums-onetouch 3-1:0.0: USB Mass Storage device detected [ 122.177871][ T9] usb 3-1: USB disconnect, device number 2 [ 122.359990][ T5899] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 122.559111][ T5899] usb 1-1: unable to get BOS descriptor or descriptor too short [ 122.560077][ T5899] usb 1-1: not running at top speed; connect to a high speed hub [ 122.561624][ T5899] usb 1-1: config 3 has an invalid interface number: 106 but max is 0 [ 122.561649][ T5899] usb 1-1: config 3 has no interface number 0 [ 122.561706][ T5899] usb 1-1: config 3 interface 106 altsetting 10 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 122.561735][ T5899] usb 1-1: config 3 interface 106 altsetting 10 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 122.561763][ T5899] usb 1-1: config 3 interface 106 has no altsetting 0 [ 122.571011][ T5899] usb 1-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=e8.8a [ 122.571058][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.571082][ T5899] usb 1-1: Product: syz [ 122.571098][ T5899] usb 1-1: Manufacturer: syz [ 122.571116][ T5899] usb 1-1: SerialNumber: syz [ 122.615733][ T6234] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 122.616230][ T6234] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 122.918189][ T5899] kobil_sct 1-1:3.106: KOBIL USB smart card terminal converter detected [ 122.982342][ T5899] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 123.083665][ T5899] usb 1-1: USB disconnect, device number 3 [ 123.200848][ T5899] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 123.220860][ T5899] kobil_sct 1-1:3.106: device disconnected [ 123.894122][ T6269] netlink: 28 bytes leftover after parsing attributes in process `syz.2.148'. [ 125.249027][ T6051] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 125.416402][ T6051] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.416437][ T6051] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.416460][ T6051] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 125.416503][ T6051] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 125.416528][ T6051] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.515155][ T6051] usb 1-1: config 0 descriptor?? [ 125.988697][ T6051] plantronics 0003:047F:FFFF.0001: item 0 4 0 11 parsing failed [ 126.010047][ T6051] plantronics 0003:047F:FFFF.0001: parse failed [ 126.010165][ T6051] plantronics 0003:047F:FFFF.0001: probe with driver plantronics failed with error -22 [ 126.191199][ T5919] usb 1-1: USB disconnect, device number 4 [ 126.359053][ T5912] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 126.515746][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.515784][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.515826][ T5912] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 126.515851][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.596110][ T5912] usb 2-1: config 0 descriptor?? [ 127.058658][ T5912] kone 0003:1E7D:2CED.0002: unknown main item tag 0x4 [ 127.159259][ T5912] kone 0003:1E7D:2CED.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.1-1/input0 [ 127.169144][ T5896] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 127.251245][ T5899] usb 2-1: USB disconnect, device number 2 [ 127.291448][ T38] audit: type=1326 audit(1758338287.796:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6337 comm="syz.2.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef0bb7ec29 code=0x7ffc0000 [ 127.291503][ T38] audit: type=1326 audit(1758338287.796:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6337 comm="syz.2.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef0bb7ec29 code=0x7ffc0000 [ 127.293298][ T38] audit: type=1326 audit(1758338287.816:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6337 comm="syz.2.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fef0bb7ec29 code=0x7ffc0000 [ 127.293351][ T38] audit: type=1326 audit(1758338287.816:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6337 comm="syz.2.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef0bb7ec29 code=0x7ffc0000 [ 127.293397][ T38] audit: type=1326 audit(1758338287.816:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6337 comm="syz.2.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef0bb7ec29 code=0x7ffc0000 [ 127.297394][ T38] audit: type=1326 audit(1758338287.816:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6337 comm="syz.2.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7fef0bb7ec29 code=0x7ffc0000 [ 127.297447][ T38] audit: type=1326 audit(1758338287.816:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6337 comm="syz.2.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef0bb7ec29 code=0x7ffc0000 [ 127.297487][ T38] audit: type=1326 audit(1758338287.816:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6337 comm="syz.2.176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef0bb7ec29 code=0x7ffc0000 [ 127.332305][ T5896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 127.332341][ T5896] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 127.332385][ T5896] usb 1-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 127.332409][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.542679][ T5896] usb 1-1: config 0 descriptor?? [ 127.546550][ T6332] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 127.964562][ T6342] fido_id[6342]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 128.029182][ T5896] logitech 0003:046D:CA04.0003: unknown main item tag 0x6 [ 128.059216][ T5896] logitech 0003:046D:CA04.0003: hidraw0: USB HID vff.fa Device [HID 046d:ca04] on usb-dummy_hcd.0-1/input0 [ 128.059267][ T5896] logitech 0003:046D:CA04.0003: no inputs found [ 128.201110][ T6356] tipc: Enabling of bearer rejected, failed to enable media [ 128.229239][ T6051] usb 1-1: USB disconnect, device number 5 [ 128.783848][ T6364] fido_id[6364]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 129.139886][ T6051] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 129.289036][ T6051] usb 4-1: Using ep0 maxpacket: 16 [ 129.292548][ T6051] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.292588][ T6051] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.292613][ T6051] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 129.292658][ T6051] usb 4-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 129.292692][ T6051] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.419068][ T6051] usb 4-1: config 0 descriptor?? [ 129.921385][ T6051] hid-multitouch 0003:0457:07DA.0004: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.3-1/input0 [ 130.119074][ T5896] usb 4-1: USB disconnect, device number 2 [ 130.285210][ T6408] fido_id[6408]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 131.288637][ T6441] delete_channel: no stack [ 131.305022][ T6440] delete_channel: no stack [ 131.407975][ T6447] syz.2.223 uses obsolete (PF_INET,SOCK_PACKET) [ 131.912600][ T6051] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 132.075632][ T6466] 9pnet_rdma: rdma_create_trans (6466): problem binding to privport: 13 [ 132.076883][ T6467] program syz.3.232 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.079244][ T6051] usb 2-1: Using ep0 maxpacket: 32 [ 132.082358][ T6051] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 132.082387][ T6051] usb 2-1: config 0 has no interface number 0 [ 132.092214][ T6051] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 132.092247][ T6051] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.092270][ T6051] usb 2-1: Product: syz [ 132.092288][ T6051] usb 2-1: Manufacturer: syz [ 132.092305][ T6051] usb 2-1: SerialNumber: syz [ 132.134666][ T6051] usb 2-1: config 0 descriptor?? [ 132.176311][ T6051] smsc95xx v2.0.0 [ 132.782445][ T6051] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 132.782476][ T6051] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 132.783124][ T6051] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 132.784124][ T6051] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 132.859141][ T6051] usb 2-1: USB disconnect, device number 3 [ 134.576687][ T6521] pim6reg: entered allmulticast mode [ 135.649073][ T6051] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 135.801688][ T6051] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 135.801742][ T6051] usb 5-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 135.801766][ T6051] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.854681][ T6051] usb 5-1: config 0 descriptor?? [ 135.969086][ T5912] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 136.002171][ T6556] netlink: 4 bytes leftover after parsing attributes in process `syz.0.271'. [ 136.002417][ T6556] netlink: 'syz.0.271': attribute type 7 has an invalid length. [ 136.119146][ T5912] usb 4-1: Using ep0 maxpacket: 16 [ 136.124354][ T5912] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 136.124470][ T5912] usb 4-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 136.124497][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.193270][ T5912] usb 4-1: config 0 descriptor?? [ 136.317542][ T6051] logitech 0003:046D:C626.0005: ignoring exceeding usage max [ 136.327421][ T6051] logitech 0003:046D:C626.0005: unbalanced delimiter at end of report description [ 136.328819][ T6051] logitech 0003:046D:C626.0005: parse failed [ 136.337032][ T6051] logitech 0003:046D:C626.0005: probe with driver logitech failed with error -22 [ 136.549992][ T9] usb 5-1: USB disconnect, device number 3 [ 136.646669][ T5912] logitech-djreceiver 0003:046D:C71B.0006: unknown main item tag 0x3 [ 136.646707][ T5912] logitech-djreceiver 0003:046D:C71B.0006: unknown main item tag 0x5 [ 136.747858][ T6566] netlink: 'syz.1.276': attribute type 1 has an invalid length. [ 136.747883][ T6566] netlink: 240 bytes leftover after parsing attributes in process `syz.1.276'. [ 136.859898][ T9] usb 4-1: USB disconnect, device number 3 [ 136.919498][ T6568] tipc: Started in network mode [ 136.919524][ T6568] tipc: Node identity 4, cluster identity 4711 [ 136.919537][ T6568] tipc: Node number set to 4 [ 137.042520][ T6570] Driver unsupported XDP return value 0 on prog (id 21) dev N/A, expect packet loss! [ 137.359156][ T5896] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 137.511239][ T5896] usb 1-1: Using ep0 maxpacket: 32 [ 137.516383][ T5896] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 137.516412][ T5896] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 137.516434][ T5896] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 137.516456][ T5896] usb 1-1: config 1 has no interface number 0 [ 137.516521][ T5896] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 137.516549][ T5896] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 137.516593][ T5896] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 137.516614][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.587168][ T5896] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 137.980746][ T5896] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 138.149245][ T5899] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 138.199072][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.205380][ T5896] usb 1-1: USB disconnect, device number 6 [ 138.211335][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.235981][ T5896] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 138.302796][ T5899] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 138.302831][ T5899] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.302873][ T5899] usb 3-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 138.302896][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.321493][ T5899] usb 3-1: config 0 descriptor?? [ 138.398702][ T6598] delete_channel: no stack [ 138.404272][ T6597] delete_channel: no stack [ 138.809951][ T5899] samsung 0003:0419:0001.0007: hidraw0: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.2-1/input0 [ 138.969872][ T5912] usb 3-1: USB disconnect, device number 3 [ 138.979194][ T31] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 139.147090][ T31] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 139.147120][ T31] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 139.147140][ T31] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 139.147193][ T31] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 139.147220][ T31] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 139.147247][ T31] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 139.150116][ T31] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 139.150151][ T31] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 139.150173][ T31] usb 2-1: Product: syz [ 139.150191][ T31] usb 2-1: Manufacturer: syz [ 139.206141][ T6596] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 139.248468][ T31] cdc_wdm 2-1:1.0: skipping garbage [ 139.248491][ T31] cdc_wdm 2-1:1.0: skipping garbage [ 139.320640][ T31] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 139.320676][ T31] cdc_wdm 2-1:1.0: Unknown control protocol [ 139.414601][ T6617] fido_id[6617]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 139.497801][ T5896] usb 2-1: USB disconnect, device number 4 [ 140.539060][ T5912] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 140.712257][ T5912] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.712431][ T5912] usb 5-1: New USB device found, idVendor=093a, idProduct=010f, bcdDevice=c6.63 [ 140.712457][ T5912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.724085][ T5912] usb 5-1: config 0 descriptor?? [ 140.762532][ T5912] gspca_main: mr97310a-2.14.0 probing 093a:010f [ 140.762646][ T5912] gspca_mr97310a: reg write [21] error -22 [ 140.762741][ T5912] mr97310a 5-1:0.0: probe with driver mr97310a failed with error -22 [ 140.850309][ T6656] No buffer was provided with the request [ 140.859084][ T5896] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 140.951621][ T5912] usb 5-1: USB disconnect, device number 4 [ 141.011986][ T5896] usb 3-1: Using ep0 maxpacket: 16 [ 141.017459][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.017493][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.017517][ T5896] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 141.017561][ T5896] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 141.017585][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.086489][ T5896] usb 3-1: config 0 descriptor?? [ 141.116186][ T9] kernel write not supported for file /vcs (pid: 9 comm: kworker/0:0) [ 141.394798][ T6666] Bluetooth: MGMT ver 1.23 [ 141.544032][ T5896] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 141.544881][ T5896] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 141.544914][ T5896] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 141.544942][ T5896] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 141.544969][ T5896] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 141.544996][ T5896] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 141.545023][ T5896] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 141.545051][ T5896] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 141.640705][ T5896] microsoft 0003:045E:07DA.0008: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 141.640742][ T5896] microsoft 0003:045E:07DA.0008: no inputs found [ 141.640756][ T5896] microsoft 0003:045E:07DA.0008: could not initialize ff, continuing anyway [ 141.736501][ T5912] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 141.748425][ T5896] usb 3-1: USB disconnect, device number 4 [ 141.881266][ T5912] usb 1-1: Using ep0 maxpacket: 8 [ 141.883909][ T5912] usb 1-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 141.883939][ T5912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.921422][ T5912] usb 1-1: config 0 descriptor?? [ 142.046169][ T6673] fido_id[6673]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 142.416077][ T5912] hid_parser_main: 8 callbacks suppressed [ 142.416106][ T5912] magicmouse 0003:05AC:0269.0009: unknown main item tag 0x0 [ 142.416139][ T5912] magicmouse 0003:05AC:0269.0009: unknown main item tag 0x0 [ 142.416166][ T5912] magicmouse 0003:05AC:0269.0009: unknown main item tag 0x0 [ 142.416193][ T5912] magicmouse 0003:05AC:0269.0009: unknown main item tag 0x0 [ 142.416219][ T5912] magicmouse 0003:05AC:0269.0009: unknown main item tag 0x0 [ 142.468980][ T5912] magicmouse 0003:05AC:0269.0009: hidraw0: USB HID v0.05 Device [HID 05ac:0269] on usb-dummy_hcd.0-1/input0 [ 142.517185][ T5919] kernel write not supported for file /input/mice (pid: 5919 comm: kworker/1:5) [ 142.618342][ T6692] process 'syz.4.335' launched './file0' with NULL argv: empty string added [ 142.626919][ T5912] usb 1-1: USB disconnect, device number 7 [ 142.868309][ T6694] fido_id[6694]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 143.420713][ T6706] netlink: 'syz.1.340': attribute type 1 has an invalid length. [ 143.999098][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 144.149982][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 144.153089][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.153122][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.153146][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 144.153191][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 144.153216][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.219174][ T9] usb 2-1: config 0 descriptor?? [ 144.706676][ T9] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 144.706712][ T9] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 144.706738][ T9] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 144.706764][ T9] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 144.706791][ T9] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0 [ 144.752638][ T9] microsoft 0003:045E:07DA.000A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 144.752673][ T9] microsoft 0003:045E:07DA.000A: no inputs found [ 144.752687][ T9] microsoft 0003:045E:07DA.000A: could not initialize ff, continuing anyway [ 144.921435][ T9] usb 2-1: USB disconnect, device number 5 [ 145.269835][ T6752] netlink: 'syz.2.361': attribute type 6 has an invalid length. [ 145.289793][ T6747] fido_id[6747]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 145.810911][ T6762] gretap0: entered promiscuous mode [ 145.811597][ T6762] vlan2: entered promiscuous mode [ 145.880680][ T5919] kernel write not supported for file /input/mouse0 (pid: 5919 comm: kworker/1:5) [ 146.709085][ T5919] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 146.869282][ T5919] usb 1-1: Using ep0 maxpacket: 32 [ 146.875626][ T5919] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 146.875663][ T5919] usb 1-1: config 0 has no interface number 0 [ 146.889115][ T6795] netlink: 32 bytes leftover after parsing attributes in process `syz.3.381'. [ 146.889297][ T6795] Zero length message leads to an empty skb [ 146.939378][ T5919] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 146.939411][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.939431][ T5919] usb 1-1: Product: syz [ 146.939446][ T5919] usb 1-1: Manufacturer: syz [ 146.939461][ T5919] usb 1-1: SerialNumber: syz [ 146.979697][ T31] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 146.984703][ T5919] usb 1-1: config 0 descriptor?? [ 147.002997][ T5919] smsc95xx v2.0.0 [ 147.147390][ T31] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 147.147425][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 147.147515][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 147.147539][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 147.147585][ T31] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 147.147610][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.258117][ T31] usb 3-1: config 0 descriptor?? [ 147.580447][ T6807] gretap0: entered promiscuous mode [ 147.580594][ T6807] vlan3: entered promiscuous mode [ 147.621448][ T5919] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 147.621541][ T5919] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 147.622363][ T5919] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 147.622853][ T5919] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 147.727202][ T5919] usb 1-1: USB disconnect, device number 8 [ 147.746854][ T31] hid_parser_main: 10 callbacks suppressed [ 147.746887][ T31] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 147.860421][ T31] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 147.897740][ T31] usb 3-1: USB disconnect, device number 5 [ 148.123392][ T6818] netlink: 36 bytes leftover after parsing attributes in process `syz.4.390'. [ 148.201260][ T6816] fido_id[6816]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 148.911871][ T6837] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 148.911900][ T6837] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 148.954447][ T6837] vhci_hcd vhci_hcd.0: Device attached [ 149.087005][ T6051] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 149.189572][ T5933] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 149.234367][ T6051] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 149.234395][ T6051] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 149.235999][ T6051] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 149.236033][ T6051] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 149.236116][ T6051] usb 5-1: SerialNumber: syz [ 149.314621][ T6051] usb 5-1: 0:2 : does not exist [ 149.650896][ T38] audit: type=1800 audit(1758338310.156:18): pid=6849 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.405" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 149.720076][ T6051] usb 5-1: USB disconnect, device number 5 [ 149.855868][ T6838] usb 39-1: recv xbuf, 0 [ 149.886030][ T57] vhci_hcd: stop threads [ 149.886044][ T57] vhci_hcd: release socket [ 149.888069][ T57] vhci_hcd: disconnect device [ 149.890110][ T6183] udevd[6183]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 149.939750][ T5933] vhci_hcd: vhci_device speed not set [ 149.955742][ T6855] netlink: 524 bytes leftover after parsing attributes in process `syz.1.407'. [ 151.201208][ T6884] netlink: 'syz.2.420': attribute type 1 has an invalid length. [ 151.201234][ T6884] netlink: 140 bytes leftover after parsing attributes in process `syz.2.420'. [ 151.201252][ T6884] netlink: 96 bytes leftover after parsing attributes in process `syz.2.420'. [ 152.255077][ T38] audit: type=1800 audit(1758338312.776:19): pid=6913 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.434" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 152.389592][ T5933] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 152.509973][ T6920] gretap0: entered promiscuous mode [ 152.510138][ T6920] vlan2: entered promiscuous mode [ 152.549834][ T5933] usb 5-1: Using ep0 maxpacket: 16 [ 152.552491][ T5933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.552525][ T5933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.552549][ T5933] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 152.552595][ T5933] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 152.552709][ T5933] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.639672][ T5933] usb 5-1: config 0 descriptor?? [ 152.857930][ T6922] netlink: 28 bytes leftover after parsing attributes in process `syz.2.437'. [ 153.012282][ T6926] netlink: 'syz.1.440': attribute type 1 has an invalid length. [ 153.122407][ T5933] hid-multitouch 0003:0457:07DA.000C: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.4-1/input0 [ 153.305148][ T5912] usb 5-1: USB disconnect, device number 6 [ 153.418214][ T6939] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 153.418276][ T6939] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 153.418401][ T6939] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 153.419905][ T6939] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 153.419963][ T6939] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 153.420015][ T6939] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 153.420172][ T6939] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 153.420234][ T6939] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 153.420292][ T6939] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 153.420409][ T6939] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 153.420466][ T6939] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 153.420522][ T6939] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 153.723829][ T6941] fido_id[6941]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 153.870666][ T6948] netlink: 'syz.2.450': attribute type 21 has an invalid length. [ 154.375716][ T6962] netlink: 'syz.1.456': attribute type 3 has an invalid length. [ 155.089741][ T6984] netlink: 16 bytes leftover after parsing attributes in process `syz.4.468'. [ 155.099499][ T5919] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 155.254096][ T5919] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 155.254132][ T5919] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.254157][ T5919] usb 4-1: config 0 interface 0 has no altsetting 0 [ 155.254202][ T5919] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 155.254227][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.360396][ T5919] usb 4-1: config 0 descriptor?? [ 155.687404][ T6996] comedi comedi3: 8255: I/O port conflict (0x40404f26,4) [ 155.688027][ T6996] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 155.688086][ T6996] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 155.699515][ T6996] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 155.699575][ T6996] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 155.716026][ T6996] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 155.716168][ T6996] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 155.716333][ T6996] comedi comedi3: 8255: I/O port conflict (0x3bf,4) [ 155.716642][ T6996] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 155.716703][ T6996] comedi comedi3: 8255: I/O port conflict (0x20000001,4) [ 155.716834][ T6996] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 155.717018][ T6996] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 155.950074][ T5919] kovaplus 0003:1E7D:2D50.000D: unknown main item tag 0x0 [ 155.950114][ T5919] kovaplus 0003:1E7D:2D50.000D: unknown main item tag 0x0 [ 155.950147][ T5919] kovaplus 0003:1E7D:2D50.000D: unknown main item tag 0x0 [ 156.028103][ T5919] kovaplus 0003:1E7D:2D50.000D: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.3-1/input0 [ 156.106788][ T5933] usb 4-1: USB disconnect, device number 4 [ 156.179731][ T5912] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 156.329560][ T5912] usb 1-1: Using ep0 maxpacket: 32 [ 156.336176][ T5912] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 156.362326][ T5912] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 156.362356][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 156.362376][ T5912] usb 1-1: Product: syz [ 156.362391][ T5912] usb 1-1: Manufacturer: syz [ 156.362405][ T5912] usb 1-1: SerialNumber: syz [ 156.417125][ T5912] usb 1-1: config 0 descriptor?? [ 156.417997][ T7001] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 156.580591][ T7008] fido_id[7008]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 156.697170][ T31] usb 1-1: USB disconnect, device number 9 [ 157.001674][ T38] audit: type=1326 audit(1758338317.526:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7020 comm="syz.3.486" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff5bda4ec29 code=0x0 [ 157.153297][ T7027] netlink: 'syz.2.489': attribute type 3 has an invalid length. [ 158.112004][ T31] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 158.279103][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 158.285705][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.285764][ T31] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 158.287293][ T31] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 158.287321][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 158.287341][ T31] usb 1-1: SerialNumber: syz [ 158.424132][ T31] cdc_acm 1-1:1.0: skipping garbage [ 158.424155][ T31] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 158.424175][ T31] cdc_acm 1-1:1.0: This needs exactly 3 endpoints [ 158.424213][ T31] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -22 [ 158.576255][ T5933] usb 1-1: USB disconnect, device number 10 [ 159.365276][ T7080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.514'. [ 159.365860][ T7080] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 159.365908][ T7080] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 159.440229][ T7081] genirq: Flags mismatch irq 10. 00202000 (das16m1) vs. 00202080 (virtio2) [ 160.501330][ T7109] NILFS (nullb0): couldn't find nilfs on the device [ 160.508662][ T7113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.531'. [ 160.508688][ T7113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.531'. [ 160.830577][ T7120] Bluetooth: MGMT ver 1.23 [ 161.106903][ T7130] netlink: 16 bytes leftover after parsing attributes in process `syz.0.537'. [ 161.139171][ T31] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 161.309090][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 161.315785][ T31] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 161.315834][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 161.315878][ T31] usb 4-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 161.315901][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.372903][ T31] usb 4-1: config 0 descriptor?? [ 161.816455][ T31] saitek 0003:06A3:0621.000E: unknown main item tag 0x0 [ 161.816494][ T31] saitek 0003:06A3:0621.000E: unknown main item tag 0x0 [ 161.816521][ T31] saitek 0003:06A3:0621.000E: unknown main item tag 0x0 [ 161.816548][ T31] saitek 0003:06A3:0621.000E: unknown main item tag 0x0 [ 161.816576][ T31] saitek 0003:06A3:0621.000E: unknown main item tag 0x0 [ 161.838804][ T31] saitek 0003:06A3:0621.000E: hidraw0: USB HID v0.05 Device [HID 06a3:0621] on usb-dummy_hcd.3-1/input0 [ 162.084340][ T31] usb 4-1: USB disconnect, device number 5 [ 162.147445][ T7150] fido_id[7150]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 163.671281][ T7189] warning: `syz.1.566' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 164.356748][ T7210] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 164.356779][ T7210] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 164.356885][ T7210] vhci_hcd vhci_hcd.0: Device attached [ 164.503080][ T7214] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (virtio1-input.0) [ 164.629632][ T5912] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 164.929016][ T31] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 164.929688][ T5933] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 165.082105][ T5933] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 165.082133][ T5933] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 165.082152][ T5933] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 165.082171][ T5933] usb 3-1: config 220 has no interface number 2 [ 165.082267][ T5933] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 165.082297][ T5933] usb 3-1: config 220 interface 0 has no altsetting 0 [ 165.082315][ T5933] usb 3-1: config 220 interface 76 has no altsetting 0 [ 165.082334][ T5933] usb 3-1: config 220 interface 1 has no altsetting 0 [ 165.100827][ T5933] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 165.100859][ T5933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.100880][ T5933] usb 3-1: Product: syz [ 165.100896][ T5933] usb 3-1: Manufacturer: syz [ 165.100911][ T5933] usb 3-1: SerialNumber: syz [ 165.105940][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.105977][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.106004][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 165.106053][ T31] usb 2-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 165.106080][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.287797][ T31] usb 2-1: config 0 descriptor?? [ 165.484906][ T7211] usb 41-1: recv xbuf, 0 [ 165.487497][ T12] vhci_hcd: stop threads [ 165.487509][ T12] vhci_hcd: release socket [ 165.487592][ T12] vhci_hcd: disconnect device [ 165.540743][ T5933] usb 3-1: selecting invalid altsetting 0 [ 165.554601][ T5933] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 165.554641][ T5933] usb 3-1: No valid video chain found. [ 165.579489][ T5912] vhci_hcd: vhci_device speed not set [ 165.596529][ T5933] usb 3-1: selecting invalid altsetting 0 [ 165.596570][ T5933] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 165.617034][ T5933] usb 3-1: USB disconnect, device number 6 [ 165.894963][ T31] chicony 0003:04F2:1236.000F: hidraw0: USB HID v0.00 Device [HID 04f2:1236] on usb-dummy_hcd.1-1/input0 [ 166.029569][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 166.087917][ T6051] usb 2-1: USB disconnect, device number 6 [ 166.179552][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 166.183982][ T9] usb 4-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 166.184049][ T9] usb 4-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 166.184079][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 166.184114][ T9] usb 4-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 166.184137][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.255496][ T9] usb 4-1: config 0 descriptor?? [ 166.759797][ T9] elecom 0003:056E:011C.0010: hidraw0: USB HID vf4.f6 Device [HID 056e:011c] on usb-dummy_hcd.3-1/input0 [ 166.940733][ T5912] usb 4-1: USB disconnect, device number 6 [ 167.038169][ T7253] fido_id[7253]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 167.594743][ T7269] netlink: 'syz.4.602': attribute type 10 has an invalid length. [ 167.671942][ T31] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 167.711091][ T7274] netlink: 'syz.4.602': attribute type 10 has an invalid length. [ 167.711115][ T7274] netlink: 2 bytes leftover after parsing attributes in process `syz.4.602'. [ 167.736462][ T7269] batman_adv: batadv0: Adding interface: team0 [ 167.736482][ T7269] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.736516][ T7269] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 167.779720][ T7274] team0: entered promiscuous mode [ 167.779749][ T7274] team_slave_0: entered promiscuous mode [ 167.780059][ T7274] team_slave_1: entered promiscuous mode [ 167.804091][ T7274] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.804467][ T7274] batman_adv: batadv0: Interface activated: team0 [ 167.804515][ T7274] batman_adv: batadv0: Interface deactivated: team0 [ 167.804538][ T7274] batman_adv: batadv0: Removing interface: team0 [ 167.837270][ T7274] bridge0: port 3(team0) entered blocking state [ 167.839336][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 167.846062][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.846129][ T31] usb 2-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 167.846157][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.870035][ T7274] bridge0: port 3(team0) entered disabled state [ 167.870330][ T7274] team0: entered allmulticast mode [ 167.870350][ T7274] team_slave_0: entered allmulticast mode [ 167.870377][ T7274] team_slave_1: entered allmulticast mode [ 167.895753][ T31] usb 2-1: config 0 descriptor?? [ 167.916712][ T7274] bridge0: port 3(team0) entered blocking state [ 167.916888][ T7274] bridge0: port 3(team0) entered forwarding state [ 168.069062][ T5896] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 168.255004][ T5896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.255128][ T5896] usb 1-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 168.255153][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.343450][ T5896] usb 1-1: config 0 descriptor?? [ 168.430825][ T31] cypress 0003:04B4:07B1.0011: hidraw0: USB HID v0.00 Device [HID 04b4:07b1] on usb-dummy_hcd.1-1/input0 [ 168.620124][ T9] usb 2-1: USB disconnect, device number 7 [ 168.826406][ T5896] macally 0003:060B:0001.0012: item fetching failed at offset 0/2 [ 168.827328][ T5896] macally 0003:060B:0001.0012: probe with driver macally failed with error -22 [ 168.992986][ T7286] fido_id[7286]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 169.039760][ T5919] usb 1-1: USB disconnect, device number 11 [ 169.112782][ T7297] netlink: 8 bytes leftover after parsing attributes in process `syz.2.614'. [ 169.537445][ T7307] syz.3.619 (7307) used greatest stack depth: 18568 bytes left [ 169.659807][ T7309] netlink: 16 bytes leftover after parsing attributes in process `syz.4.620'. [ 170.123709][ T7321] tipc: Started in network mode [ 170.123740][ T7321] tipc: Node identity aaaaaaaaaa34, cluster identity 4711 [ 170.151151][ T7321] tipc: Enabled bearer , priority 10 [ 170.609561][ T5912] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 170.756298][ T38] audit: type=1326 audit(1758338331.276:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7337 comm="syz.0.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd13702ec29 code=0x7ffc0000 [ 170.757184][ T38] audit: type=1326 audit(1758338331.276:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7337 comm="syz.0.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd13702ec29 code=0x7ffc0000 [ 170.803569][ T38] audit: type=1326 audit(1758338331.326:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7337 comm="syz.0.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fd13702ec29 code=0x7ffc0000 [ 170.803623][ T38] audit: type=1326 audit(1758338331.326:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7337 comm="syz.0.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd13702ec29 code=0x7ffc0000 [ 170.803670][ T38] audit: type=1326 audit(1758338331.326:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7337 comm="syz.0.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd13702ec29 code=0x7ffc0000 [ 170.803715][ T38] audit: type=1326 audit(1758338331.326:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7337 comm="syz.0.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7fd13702ec29 code=0x7ffc0000 [ 170.803761][ T38] audit: type=1326 audit(1758338331.326:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7337 comm="syz.0.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd13702ec29 code=0x7ffc0000 [ 170.803807][ T38] audit: type=1326 audit(1758338331.326:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7337 comm="syz.0.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd13702ec29 code=0x7ffc0000 [ 170.807796][ T5912] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 170.807825][ T5912] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 170.807852][ T5912] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 170.807874][ T5912] usb 3-1: config 220 has no interface number 2 [ 170.807953][ T5912] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 170.807982][ T5912] usb 3-1: config 220 interface 0 has no altsetting 0 [ 170.808001][ T5912] usb 3-1: config 220 interface 76 has no altsetting 0 [ 170.808020][ T5912] usb 3-1: config 220 interface 1 has no altsetting 0 [ 170.900824][ T5912] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 170.900866][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.900885][ T5912] usb 3-1: Product: syz [ 170.900899][ T5912] usb 3-1: Manufacturer: syz [ 170.900913][ T5912] usb 3-1: SerialNumber: syz [ 171.199291][ T7346] IPVS: Error connecting to the multicast addr [ 171.251160][ T5896] tipc: Node number set to 10398378 [ 171.326518][ T5912] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 171.326553][ T5912] usb 3-1: No valid video chain found. [ 171.326613][ T5912] usb 3-1: selecting invalid altsetting 0 [ 171.369871][ T5912] usb 3-1: selecting invalid altsetting 0 [ 171.369913][ T5912] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 171.374452][ T5912] usb 3-1: USB disconnect, device number 7 [ 171.790861][ T7359] netlink: 260 bytes leftover after parsing attributes in process `syz.0.644'. [ 171.790891][ T7359] netlink: 260 bytes leftover after parsing attributes in process `syz.0.644'. [ 171.959124][ T5896] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 172.122758][ T5896] usb 2-1: Using ep0 maxpacket: 32 [ 172.136235][ T5896] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 172.136269][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.184580][ T5896] usb 2-1: config 0 descriptor?? [ 172.539593][ T6051] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 172.690267][ T5896] konepure 0003:1E7D:2DBE.0013: hidraw0: USB HID v1.01 Device [HID 1e7d:2dbe] on usb-dummy_hcd.1-1/input0 [ 172.713383][ T6051] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 172.713414][ T6051] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.713434][ T6051] usb 5-1: Product: syz [ 172.713448][ T6051] usb 5-1: Manufacturer: syz [ 172.713463][ T6051] usb 5-1: SerialNumber: syz [ 172.774635][ T6051] usb 5-1: config 0 descriptor?? [ 172.919384][ T44] usb 2-1: USB disconnect, device number 8 [ 173.063294][ T5919] usb 5-1: USB disconnect, device number 7 [ 173.251868][ T7384] fido_id[7384]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 174.450909][ T7418] syz.3.671 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 174.989715][ T7437] netlink: 'syz.1.678': attribute type 5 has an invalid length. [ 176.369260][ T5896] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 176.526410][ T5896] usb 3-1: Using ep0 maxpacket: 16 [ 176.536175][ T5896] usb 3-1: too many endpoints for config 0 interface 0 altsetting 255: 254, using maximum allowed: 30 [ 176.536222][ T5896] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 197, changing to 11 [ 176.536251][ T5896] usb 3-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 176.536277][ T5896] usb 3-1: config 0 interface 0 has no altsetting 0 [ 176.536319][ T5896] usb 3-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.00 [ 176.536360][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.585022][ T5896] usb 3-1: config 0 descriptor?? [ 177.087077][ T5896] topre 0003:0853:0148.0014: hidraw0: USB HID vc9.b6 Device [HID 0853:0148] on usb-dummy_hcd.2-1/input0 [ 177.260976][ T5919] usb 3-1: USB disconnect, device number 8 [ 177.485248][ T7488] fido_id[7488]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 177.525087][ T7492] can0: slcan on ptm0. [ 177.855279][ T7490] can0 (unregistered): slcan off ptm0. [ 177.975771][ T7509] CUSE: unknown device info "KJ H+ۤ2LhnL1`Ccn80(3նi>f_ٮ,<_eF" [ 177.975793][ T7509] CUSE: unknown device info "3ܟ,̘" [ 177.975805][ T7509] CUSE: unknown device info "J2S Z !e/J+-na4D|G$5O~q [ 177.975805][ T7509] fzXSAxjTǔw xRɐQ(hҏj pVdY0|M?2JIv^R@" [ 177.975823][ T7509] CUSE: unknown device info "!To}ݝ&|L+Uoϲ"FstV:׌E gJ<@c4TMM|0htvw 7:" [ 177.975837][ T7509] CUSE: DEVNAME unspecified [ 178.164703][ T7513] /dev/nullb0: Can't open blockdev [ 178.651136][ T38] audit: type=1326 audit(1758338339.146:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7523 comm="syz.0.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd13702ec29 code=0x7ffc0000 [ 178.651202][ T38] audit: type=1326 audit(1758338339.176:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7523 comm="syz.0.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fd13702ec29 code=0x7ffc0000 [ 178.651249][ T38] audit: type=1326 audit(1758338339.176:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7523 comm="syz.0.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd13702ec29 code=0x7ffc0000 [ 178.651305][ T38] audit: type=1326 audit(1758338339.176:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7523 comm="syz.0.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd13702ec29 code=0x7ffc0000 [ 178.651355][ T38] audit: type=1326 audit(1758338339.176:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7523 comm="syz.0.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fd13702ec29 code=0x7ffc0000 [ 178.651402][ T38] audit: type=1326 audit(1758338339.176:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7523 comm="syz.0.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd13702ec29 code=0x7ffc0000 [ 178.651455][ T38] audit: type=1326 audit(1758338339.176:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7523 comm="syz.0.717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd13702ec29 code=0x7ffc0000 [ 179.989113][ T44] IPVS: starting estimator thread 0... [ 180.099434][ T7563] IPVS: using max 7 ests per chain, 16800 per kthread [ 180.591035][ T7578] tipc: Started in network mode [ 180.591067][ T7578] tipc: Node identity e0000002, cluster identity 4711 [ 180.591122][ T7578] tipc: Enabling of bearer rejected, failed to enable media [ 180.709352][ T7581] netlink: 48 bytes leftover after parsing attributes in process `syz.2.744'. [ 181.223426][ T7592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.750'. [ 185.559147][ T7628] x_tables: ip_tables: udp match: only valid for protocol 17 [ 185.789591][ T5896] hid-generic 0002:0004:0007.0015: unknown main item tag 0x0 [ 185.789632][ T5896] hid-generic 0002:0004:0007.0015: unknown main item tag 0x0 [ 185.789660][ T5896] hid-generic 0002:0004:0007.0015: unknown main item tag 0x0 [ 185.789687][ T5896] hid-generic 0002:0004:0007.0015: unknown main item tag 0x0 [ 185.789713][ T5896] hid-generic 0002:0004:0007.0015: unknown main item tag 0x0 [ 185.789739][ T5896] hid-generic 0002:0004:0007.0015: unknown main item tag 0x0 [ 185.789766][ T5896] hid-generic 0002:0004:0007.0015: unknown main item tag 0x0 [ 185.789793][ T5896] hid-generic 0002:0004:0007.0015: unknown main item tag 0x0 [ 185.789820][ T5896] hid-generic 0002:0004:0007.0015: unknown main item tag 0x0 [ 185.790722][ T5896] hid-generic 0002:0004:0007.0015: unknown main item tag 0x0 [ 185.993123][ T5896] hid-generic 0002:0004:0007.0015: hidraw0: HID v0.04 Device [syz0] on syz0 [ 186.530050][ T7638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.768'. [ 186.589820][ T7635] fido_id[7635]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 186.828884][ C0] sched: DL replenish lagged too much [ 197.350635][ T5835] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 197.372031][ T5835] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 197.374160][ T5835] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 197.375525][ T5835] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 197.377002][ T5835] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 199.459142][ T5835] Bluetooth: hci5: command tx timeout [ 199.631309][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.631389][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.795541][ T5154] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 199.815811][ T5154] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 199.816971][ T5154] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 199.824267][ T5154] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 199.854926][ T5154] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 201.539092][ T5154] Bluetooth: hci5: command tx timeout [ 201.939242][ T5154] Bluetooth: hci6: command tx timeout [ 202.700475][ T5835] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 202.722197][ T5835] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 202.724387][ T5835] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 202.725717][ T5835] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 202.726591][ T5835] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 203.315122][ T5154] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 203.336619][ T5154] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 203.337961][ T5154] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 203.359178][ T5154] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 203.360577][ T5154] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 203.619043][ T5154] Bluetooth: hci5: command tx timeout [ 204.019082][ T5154] Bluetooth: hci6: command tx timeout [ 204.819235][ T5154] Bluetooth: hci7: command tx timeout [ 205.469393][ T5154] Bluetooth: hci8: command tx timeout [ 205.699167][ T5154] Bluetooth: hci5: command tx timeout [ 206.099366][ T5154] Bluetooth: hci6: command tx timeout [ 206.899550][ T5154] Bluetooth: hci7: command tx timeout [ 207.539791][ T5154] Bluetooth: hci8: command tx timeout [ 208.179283][ T5154] Bluetooth: hci6: command tx timeout [ 208.979397][ T5154] Bluetooth: hci7: command tx timeout [ 209.619438][ T5154] Bluetooth: hci8: command tx timeout [ 211.059324][ T5154] Bluetooth: hci7: command tx timeout [ 211.699896][ T5154] Bluetooth: hci8: command tx timeout [ 213.832619][ T5835] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 213.852325][ T5835] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 213.853592][ T5835] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 213.855019][ T5835] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 213.884895][ T5835] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 215.939261][ T5835] Bluetooth: hci9: command tx timeout [ 218.019547][ T5835] Bluetooth: hci9: command tx timeout [ 220.110963][ T5154] Bluetooth: hci9: command tx timeout [ 222.179248][ T7688] Bluetooth: hci9: command tx timeout [ 222.285513][ T7688] Bluetooth: hci2: command 0x0406 tx timeout [ 222.285562][ T7688] Bluetooth: hci1: command 0x0406 tx timeout [ 222.285603][ T7688] Bluetooth: hci3: command 0x0406 tx timeout [ 222.285631][ T7688] Bluetooth: hci4: command 0x0406 tx timeout [ 226.063908][ T7673] chnl_net:caif_netlink_parms(): no params data found [ 245.419388][ T7670] chnl_net:caif_netlink_parms(): no params data found [ 257.762472][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 257.789604][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 257.792013][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 257.793710][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 257.850989][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 260.257116][ T7686] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 260.274787][ T7686] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 260.275940][ T7686] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 260.277862][ T7686] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 260.278700][ T7686] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 261.066726][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.066804][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.257704][ T5154] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 263.284389][ T5154] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 263.285578][ T5154] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 263.304447][ T5154] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 263.316239][ T5154] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 264.384844][ T7687] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 264.387634][ T7687] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 264.388751][ T7687] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 264.419261][ T7687] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 264.450439][ T7687] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 273.389319][ T5154] Bluetooth: hci4: command tx timeout [ 273.389803][ T5154] Bluetooth: hci0: command tx timeout [ 273.390000][ T5154] Bluetooth: hci11: command tx timeout [ 273.390166][ T5154] Bluetooth: hci10: command tx timeout [ 274.380297][ T7687] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 274.406215][ T7687] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 274.408303][ T7687] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 274.425702][ T7687] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 274.427848][ T7687] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 275.461187][ T7687] Bluetooth: hci0: command tx timeout [ 275.461222][ T7687] Bluetooth: hci11: command tx timeout [ 275.461246][ T7687] Bluetooth: hci10: command tx timeout [ 275.461268][ T7687] Bluetooth: hci4: command tx timeout [ 276.499156][ T7687] Bluetooth: hci2: command tx timeout [ 277.539331][ T7687] Bluetooth: hci10: command tx timeout [ 277.539368][ T7687] Bluetooth: hci4: command tx timeout [ 277.539391][ T7687] Bluetooth: hci11: command tx timeout [ 277.539413][ T7687] Bluetooth: hci0: command tx timeout [ 278.582347][ T5154] Bluetooth: hci2: command tx timeout [ 279.619261][ T5154] Bluetooth: hci0: command tx timeout [ 279.619297][ T5154] Bluetooth: hci11: command tx timeout [ 279.619320][ T5154] Bluetooth: hci4: command tx timeout [ 279.619342][ T5154] Bluetooth: hci10: command tx timeout [ 280.659141][ T7687] Bluetooth: hci2: command tx timeout [ 282.739232][ T7687] Bluetooth: hci2: command tx timeout [ 294.009214][ T7673] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR [ 318.760297][ T5154] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 318.779005][ T5154] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 318.801816][ T5154] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 318.834353][ T5154] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 318.835740][ T5154] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 320.363556][ T59] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 320.380748][ T59] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 320.382008][ T59] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 320.383419][ T59] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 320.386666][ T59] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 322.508730][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.508935][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.878008][ T5154] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 323.896218][ T5154] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 323.897363][ T5154] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 323.927950][ T5154] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 323.947493][ T5154] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 324.778388][ T7686] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 324.823378][ T7686] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 324.850890][ T7686] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 324.852237][ T7686] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 324.853066][ T7686] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 335.257759][ T7764] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 335.276526][ T7764] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 335.306975][ T7764] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 335.314179][ T39] INFO: task syz.3.752:7597 blocked for more than 143 seconds. [ 335.314209][ T39] Not tainted syzkaller #0 [ 335.314221][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 335.314234][ T39] task:syz.3.752 state:D stack:26616 pid:7597 tgid:7595 ppid:5841 task_flags:0x400140 flags:0x00004006 [ 335.314317][ T39] Call Trace: [ 335.314324][ T39] [ 335.314340][ T39] __schedule+0x16f3/0x4c20 [ 335.314405][ T39] ? __lock_acquire+0xab9/0xd20 [ 335.314437][ T39] ? __pfx___schedule+0x10/0x10 [ 335.314497][ T39] ? schedule+0x91/0x360 [ 335.314533][ T39] schedule+0x165/0x360 [ 335.314567][ T39] schedule_timeout+0x9a/0x270 [ 335.314598][ T39] ? __pfx_schedule_timeout+0x10/0x10 [ 335.314644][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 335.314678][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 335.314709][ T39] ? wait_for_completion+0x267/0x5d0 [ 335.314744][ T39] wait_for_completion+0x2bf/0x5d0 [ 335.314792][ T39] ? __pfx_wait_for_completion+0x10/0x10 [ 335.314826][ T39] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 335.314860][ T39] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 335.314899][ T39] ? __init_swait_queue_head+0xa9/0x150 [ 335.314931][ T39] rcu_barrier+0x463/0x570 [ 335.314967][ T39] flush_rcu_work+0x84/0xb0 [ 335.315000][ T39] kvfree_rcu_barrier+0x12b/0x160 [ 335.315038][ T39] ? p9_client_destroy+0x4a7/0x4f0 [ 335.315066][ T39] kmem_cache_destroy+0x2e/0x160 [ 335.315101][ T39] p9_client_destroy+0x4a7/0x4f0 [ 335.315132][ T39] ? __pfx_p9_client_destroy+0x10/0x10 [ 335.315172][ T39] v9fs_session_close+0x4f/0x200 [ 335.315205][ T39] v9fs_kill_super+0x5c/0x90 [ 335.315240][ T39] deactivate_locked_super+0xb9/0x130 [ 335.315269][ T39] v9fs_mount+0x805/0xa50 [ 335.315307][ T39] ? __pfx_v9fs_mount+0x10/0x10 [ 335.315341][ T39] ? rcu_is_watching+0x15/0xb0 [ 335.315375][ T39] ? cap_capable+0x11f/0x460 [ 335.315406][ T39] legacy_get_tree+0xfd/0x1a0 [ 335.315438][ T39] ? __pfx_v9fs_mount+0x10/0x10 [ 335.315478][ T39] vfs_get_tree+0x8f/0x2b0 [ 335.315512][ T39] do_new_mount+0x2a2/0x9e0 [ 335.315549][ T39] ? ns_capable+0x8a/0xf0 [ 335.315576][ T39] ? __pfx_do_new_mount+0x10/0x10 [ 335.315607][ T39] ? path_mount+0x61c/0xfe0 [ 335.315649][ T39] __se_sys_mount+0x317/0x410 [ 335.315689][ T39] ? __pfx___se_sys_mount+0x10/0x10 [ 335.315717][ T39] ? rcu_is_watching+0x15/0xb0 [ 335.315757][ T39] ? do_syscall_64+0xbe/0x3b0 [ 335.315777][ T39] ? __x64_sys_mount+0x20/0xc0 [ 335.315813][ T39] do_syscall_64+0xfa/0x3b0 [ 335.315833][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 335.315866][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.315888][ T39] ? clear_bhb_loop+0x60/0xb0 [ 335.315916][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.315946][ T39] RIP: 0033:0x7ff5bda4ec29 [ 335.315969][ T39] RSP: 002b:00007ff5bbcae038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 335.315992][ T39] RAX: ffffffffffffffda RBX: 00007ff5bdc95fa0 RCX: 00007ff5bda4ec29 [ 335.316009][ T39] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 0000000000000000 [ 335.316024][ T39] RBP: 00007ff5bdad1e41 R08: 0000200000000540 R09: 0000000000000000 [ 335.316039][ T39] R10: 0000000002004000 R11: 0000000000000246 R12: 0000000000000000 [ 335.316054][ T39] R13: 00007ff5bdc96038 R14: 00007ff5bdc95fa0 R15: 00007fffa00249a8 [ 335.316090][ T39] [ 335.316130][ T39] [ 335.316130][ T39] Showing all locks held in the system: [ 335.316140][ T39] 3 locks held by kworker/u8:1/13: [ 335.316153][ T39] #0: ffff88814d294938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 335.316212][ T39] #1: ffffc90000127bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 335.316270][ T39] #2: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 335.316328][ T39] 2 locks held by ksoftirqd/0/15: [ 335.316340][ T39] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 335.316396][ T39] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 335.316453][ T39] 6 locks held by ktimers/0/16: [ 335.316472][ T39] 2 locks held by rcuc/0/20: [ 335.316484][ T39] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 335.316539][ T39] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 335.316598][ T39] 1 lock held by khungtaskd/39: [ 335.316610][ T39] #0: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 335.316664][ T39] 4 locks held by kworker/u9:0/59: [ 335.316676][ T39] #0: ffff88805c97e938 ((wq_completion)hci12#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 335.316738][ T39] #1: ffffc9000125fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 335.316794][ T39] #2: ffff88807f4c00a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 335.316852][ T39] #3: ffffffff8ee3b298 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 335.316909][ T39] 4 locks held by kworker/u8:5/87: [ 335.316921][ T39] #0: ffff8881404cb138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 335.316977][ T39] #1: ffffc9000154fbc0 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 335.317034][ T39] #2: ffff88814e6d80d0 (&type->s_umount_key#31){++++}-{4:4}, at: super_trylock_shared+0x20/0xf0 [ 335.317092][ T39] #3: ffff88814e6dac58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1cc/0x350 [ 335.317147][ T39] 3 locks held by kworker/u8:6/160: [ 335.317159][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 335.317216][ T39] #1: ffffc90003a5fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 335.317271][ T39] #2: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 335.317340][ T39] 2 locks held by kworker/u8:10/3619: [ 335.317354][ T39] 4 locks held by kworker/u9:1/5154: [ 335.317366][ T39] #0: ffff888033673138 ((wq_completion)hci14#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 335.317428][ T39] #1: ffffc9000fa47bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 335.317492][ T39] #2: ffff8880385540a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 335.317547][ T39] #3: ffffffff8ee3b298 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 335.317604][ T39] 2 locks held by getty/5597: [ 335.317616][ T39] #0: ffff88823bf6e8a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 335.317680][ T39] #1: ffffc90003e832e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 335.317737][ T39] 4 locks held by kworker/u9:2/5835: [ 335.317750][ T39] #0: ffff888038b19138 ((wq_completion)hci13#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 335.317811][ T39] #1: ffffc90004e27bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 335.317868][ T39] #2: ffff88806b1300a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 335.317923][ T39] #3: ffffffff8ee3b298 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 335.317985][ T39] 4 locks held by kworker/0:4/5911: [ 335.317998][ T39] #0: ffff888035aeed38 ((wq_completion)wg-crypt-wg0#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 335.318060][ T39] #1: ffffc90005a17bc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 335.318115][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 335.318171][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 335.318230][ T39] 4 locks held by kworker/0:6/5933: [ 335.318242][ T39] #0: ffff88805a392938 ((wq_completion)wg-crypt-wg0#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 335.318306][ T39] #1: ffffc90005aa7bc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 335.318365][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 335.318421][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 335.318485][ T39] 4 locks held by kworker/0:7/6051: [ 335.318498][ T39] #0: ffff888019899138 ((wq_completion)events_long){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 335.318556][ T39] #1: ffffc90005ce7bc0 ((work_completion)(&(&ipvs->defense_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 335.318615][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 335.318670][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 335.318727][ T39] 1 lock held by syz.3.752/7597: [ 335.318739][ T39] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 335.320435][ T39] 1 lock held by syz.0.762/7624: [ 335.320453][ T39] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 335.320523][ T39] 4 locks held by kworker/0:8/7626: [ 335.320537][ T39] 1 lock held by syz.4.769/7639: [ 335.320549][ T39] #0: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 335.320612][ T39] 1 lock held by syz.1.773/7649: [ 335.320624][ T39] #0: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 335.320686][ T39] 2 locks held by kworker/0:10/7657: [ 335.320699][ T39] 4 locks held by syz-executor/7659: [ 335.320711][ T39] #0: ffff888066a2ce80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 335.320768][ T39] #1: ffff888066a2c0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 335.320829][ T39] #2: ffffffff8ee3b298 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 335.320881][ T39] #3: ffff88805eb83b58 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 335.320937][ T39] 1 lock held by syz.2.775/7664: [ 335.320948][ T39] #0: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 335.321010][ T39] 2 locks held by syz-executor/7667: [ 335.321022][ T39] #0: ffff888026ecce80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 335.321078][ T39] #1: ffff888026ecc0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 335.321148][ T39] 3 locks held by syz-executor/7670: [ 335.321160][ T39] #0: ffff88805d0e0e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 335.321214][ T39] #1: ffff88805d0e00a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 335.321272][ T39] #2: ffffffff8ee3b298 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 335.321322][ T39] 3 locks held by syz-executor/7673: [ 335.321334][ T39] #0: ffff888061e60e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 335.321389][ T39] #1: ffff888061e600a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 335.321446][ T39] #2: ffffffff8ee3b298 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 335.321523][ T39] 3 locks held by syz-executor/7679: [ 335.321536][ T39] #0: ffff888049d90e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 335.321592][ T39] #1: ffff888049d900a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 335.321652][ T39] #2: ffffffff8ee3b298 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 335.321713][ T39] 3 locks held by kworker/u9:3/7686: [ 335.321725][ T39] #0: ffff88806cb45138 ((wq_completion)hci15){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 335.321781][ T39] #1: ffffc900292dfbc0 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 335.321835][ T39] #2: ffff888070020e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_power_on+0x1ac/0x680 [ 335.321888][ T39] 4 locks held by kworker/u9:4/7687: [ 335.321901][ T39] #0: ffff888060014938 ((wq_completion)hci1#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 335.321960][ T39] #1: ffffc900292bfbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 335.322015][ T39] #2: ffff8880840400a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 335.322069][ T39] #3: ffffffff8ee3b298 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 335.322127][ T39] 1 lock held by syz-executor/7716: [ 335.322139][ T39] #0: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 335.322198][ T39] 1 lock held by syz-executor/7722: [ 335.322209][ T39] #0: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 335.322265][ T39] 1 lock held by syz-executor/7725: [ 335.322277][ T39] #0: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 335.322333][ T39] 1 lock held by syz-executor/7728: [ 335.322345][ T39] #0: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 335.322397][ T39] 1 lock held by syz-executor/7734: [ 335.322409][ T39] #0: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 335.322460][ T39] 1 lock held by syz-executor/7740: [ 335.322477][ T39] #0: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 335.322528][ T39] 1 lock held by dhcpcd/7745: [ 335.322539][ T39] #0: ffff88803b2d5378 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 335.322598][ T39] 1 lock held by syz-executor/7746: [ 335.322609][ T39] #0: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 335.322659][ T39] 1 lock held by dhcpcd/7748: [ 335.322671][ T39] #0: ffff88803b1d0ff8 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 335.322729][ T39] 1 lock held by dhcpcd/7749: [ 335.322740][ T39] #0: ffff88803b1d60f8 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 335.322798][ T39] 1 lock held by dhcpcd/7750: [ 335.322810][ T39] #0: ffff88803b1d45f8 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 335.322867][ T39] 1 lock held by dhcpcd/7751: [ 335.322878][ T39] #0: ffff88803b1d0938 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 335.322936][ T39] 1 lock held by dhcpcd/7752: [ 335.322947][ T39] #0: ffff88805c5f0278 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 335.323005][ T39] 1 lock held by syz-executor/7754: [ 335.323016][ T39] #0: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 335.323068][ T39] 1 lock held by syz-executor/7759: [ 335.323080][ T39] #0: ffffffff8ecd3838 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 335.323131][ T39] 4 locks held by udevd/7763: [ 335.323143][ T39] 2 locks held by kworker/u9:6/7764: [ 335.323158][ T39] [ 335.323163][ T39] ============================================= [ 335.323163][ T39] [ 335.323183][ T39] NMI backtrace for cpu 1 [ 335.323213][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 335.323256][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 335.323277][ T39] Call Trace: [ 335.323291][ T39] [ 335.323307][ T39] dump_stack_lvl+0x189/0x250 [ 335.323373][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 335.323431][ T39] ? __pfx__printk+0x10/0x10 [ 335.323493][ T39] nmi_cpu_backtrace+0x39e/0x3d0 [ 335.323524][ T39] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 335.323574][ T39] ? __pfx__printk+0x10/0x10 [ 335.323603][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 335.323633][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 335.323665][ T39] watchdog+0xf93/0xfe0 [ 335.323699][ T39] ? watchdog+0x1de/0xfe0 [ 335.323734][ T39] kthread+0x70e/0x8a0 [ 335.323772][ T39] ? __pfx_watchdog+0x10/0x10 [ 335.323798][ T39] ? __pfx_kthread+0x10/0x10 [ 335.323837][ T39] ? __pfx_kthread+0x10/0x10 [ 335.323870][ T39] ret_from_fork+0x436/0x7d0 [ 335.323903][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 335.323939][ T39] ? __switch_to_asm+0x39/0x70 [ 335.323958][ T39] ? __switch_to_asm+0x33/0x70 [ 335.323977][ T39] ? __pfx_kthread+0x10/0x10 [ 335.324012][ T39] ret_from_fork_asm+0x1a/0x30 [ 335.324050][ T39] [ 335.324058][ T39] Sending NMI from CPU 1 to CPUs 0: [ 335.324086][ C0] NMI backtrace for cpu 0 [ 335.324101][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 335.324121][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 335.324131][ C0] RIP: 0010:rcu_is_watching+0x3a/0xb0 [ 335.324174][ C0] Code: e8 1b 13 52 09 89 c3 83 f8 08 73 65 49 bf 00 00 00 00 00 fc ff df 4c 8d 34 dd 10 2d 25 8d 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 <74> 08 4c 89 f7 e8 dc 9c 78 00 48 c7 c3 18 74 f7 91 49 03 1e 48 89 [ 335.324188][ C0] RSP: 0018:ffffc90000156330 EFLAGS: 00000246 [ 335.324203][ C0] RAX: 1ffffffff1a4a5a2 RBX: 0000000000000000 RCX: 3c7b5e076fa92f00 [ 335.324216][ C0] RDX: ffffc90000156401 RSI: ffffffff8b621660 RDI: ffffffff8b621620 [ 335.324229][ C0] RBP: dffffc0000000000 R08: ffffc90000156ad0 R09: 0000000000000000 [ 335.324241][ C0] R10: ffffc900001564d8 R11: fffff5200002ac9d R12: ffffc90000156ae0 [ 335.324254][ C0] R13: ffffffff8172c165 R14: ffffffff8d252d10 R15: dffffc0000000000 [ 335.324267][ C0] FS: 0000000000000000(0000) GS:ffff8881268bc000(0000) knlGS:0000000000000000 [ 335.324281][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 335.324293][ C0] CR2: 00007f9d82dfed00 CR3: 0000000034b94000 CR4: 00000000003526f0 [ 335.324309][ C0] Call Trace: [ 335.324315][ C0] [ 335.324322][ C0] ? unwind_next_frame+0xa5/0x2390 [ 335.324346][ C0] lock_release+0x4b/0x3e0 [ 335.324369][ C0] ? deref_stack_reg+0x19f/0x230 [ 335.324395][ C0] ? unwind_next_frame+0xa5/0x2390 [ 335.324419][ C0] unwind_next_frame+0x19a9/0x2390 [ 335.324447][ C0] ? unwind_next_frame+0xa5/0x2390 [ 335.324473][ C0] ? ip_route_output_key_hash_rcu+0x1560/0x23e0 [ 335.324496][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 335.324516][ C0] arch_stack_walk+0x11c/0x150 [ 335.324564][ C0] ? ip_route_output_key_hash+0x1b9/0x2e0 [ 335.324586][ C0] stack_trace_save+0x9c/0xe0 [ 335.324604][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 335.324622][ C0] ? do_raw_spin_lock+0x121/0x290 [ 335.324649][ C0] kasan_save_track+0x3e/0x80 [ 335.324670][ C0] ? kasan_save_track+0x3e/0x80 [ 335.324689][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 335.324710][ C0] ? __kmalloc_cache_noprof+0x1a8/0x320 [ 335.324740][ C0] ? ref_tracker_alloc+0x13b/0x450 [ 335.324767][ C0] ? dst_init+0xd9/0x450 [ 335.324784][ C0] ? dst_alloc+0x12a/0x170 [ 335.324800][ C0] ? ip_route_output_key_hash_rcu+0x1560/0x23e0 [ 335.324846][ C0] ? ref_tracker_alloc+0x13b/0x450 [ 335.324874][ C0] __kasan_kmalloc+0x93/0xb0 [ 335.324897][ C0] __kmalloc_cache_noprof+0x1a8/0x320 [ 335.324921][ C0] ? ref_tracker_alloc+0x13b/0x450 [ 335.324950][ C0] ref_tracker_alloc+0x13b/0x450 [ 335.324979][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 335.325013][ C0] ? dst_alloc+0x105/0x170 [ 335.325031][ C0] ? dst_alloc+0x105/0x170 [ 335.325051][ C0] dst_init+0xd9/0x450 [ 335.325071][ C0] dst_alloc+0x12a/0x170 [ 335.325091][ C0] ip_route_output_key_hash_rcu+0x1560/0x23e0 [ 335.325117][ C0] ? ip_route_output_key_hash+0xde/0x2e0 [ 335.325137][ C0] ip_route_output_key_hash+0x1b9/0x2e0 [ 335.325157][ C0] ? __lock_acquire+0xab9/0xd20 [ 335.325181][ C0] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 335.325205][ C0] ? ip_route_me_harder+0x4ad/0x1030 [ 335.325231][ C0] ip_route_output_flow+0x2a/0x150 [ 335.325247][ C0] ? ip_route_me_harder+0x6c0/0x1030 [ 335.325293][ C0] ip_route_me_harder+0x6d2/0x1030 [ 335.325322][ C0] ? __pfx_ip_route_me_harder+0x10/0x10 [ 335.325359][ C0] synproxy_send_tcp+0x359/0x6c0 [ 335.325391][ C0] synproxy_send_client_synack+0x8bb/0xe20 [ 335.325426][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 335.325454][ C0] ? nft_synproxy_eval_v6+0x378/0x560 [ 335.325474][ C0] ? synproxy_pernet+0x45/0x270 [ 335.325497][ C0] nft_synproxy_eval_v4+0x36e/0x560 [ 335.325520][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 335.325541][ C0] ? nf_ip_checksum+0x13c/0x510 [ 335.325562][ C0] nft_synproxy_do_eval+0x345/0x570 [ 335.325585][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 335.325605][ C0] ? __pfx___ip_vs_conn_in_get+0x10/0x10 [ 335.325634][ C0] nft_do_chain+0x409/0x1920 [ 335.325660][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 335.325682][ C0] ? __pfx_ip_vs_conn_out_get_proto+0x10/0x10 [ 335.325720][ C0] ? ip_vs_out_hook+0x9b5/0xef0 [ 335.325744][ C0] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 335.325770][ C0] nft_do_chain_inet+0x25d/0x340 [ 335.325789][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 335.325814][ C0] ? NF_HOOK+0x9a/0x3a0 [ 335.325839][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 335.325859][ C0] nf_hook_slow+0xc2/0x220 [ 335.325887][ C0] NF_HOOK+0x206/0x3a0 [ 335.325913][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 335.325938][ C0] ? NF_HOOK+0x9a/0x3a0 [ 335.325962][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 335.325985][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 335.326012][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 335.326039][ C0] ? skb_dst+0x4f/0xd0 [ 335.326063][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 335.326090][ C0] NF_HOOK+0x30c/0x3a0 [ 335.326115][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 335.326140][ C0] ? NF_HOOK+0x9a/0x3a0 [ 335.326163][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 335.326189][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 335.326220][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 335.326243][ C0] __netif_receive_skb+0x143/0x380 [ 335.326265][ C0] ? rt_spin_unlock+0x65/0x80 [ 335.326290][ C0] ? process_backlog+0x27b/0x900 [ 335.326313][ C0] process_backlog+0x31e/0x900 [ 335.326344][ C0] __napi_poll+0xb6/0x540 [ 335.326369][ C0] net_rx_action+0x707/0xe00 [ 335.326392][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 335.326428][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 335.326485][ C0] handle_softirqs+0x22f/0x710 [ 335.326512][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 335.326539][ C0] run_ktimerd+0xcf/0x190 [ 335.326564][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 335.326593][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 335.326614][ C0] smpboot_thread_fn+0x53f/0xa60 [ 335.326637][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 335.326663][ C0] kthread+0x70e/0x8a0 [ 335.326690][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 335.326712][ C0] ? __pfx_kthread+0x10/0x10 [ 335.326746][ C0] ? __pfx_kthread+0x10/0x10 [ 335.326773][ C0] ret_from_fork+0x436/0x7d0 [ 335.326796][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 335.326822][ C0] ? __switch_to_asm+0x39/0x70 [ 335.326838][ C0] ? __switch_to_asm+0x33/0x70 [ 335.326852][ C0] ? __pfx_kthread+0x10/0x10 [ 335.326879][ C0] ret_from_fork_asm+0x1a/0x30 [ 335.326904][ C0] [ 335.327089][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 335.327104][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 335.327128][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 335.327139][ T39] Call Trace: [ 335.327147][ T39] [ 335.327156][ T39] dump_stack_lvl+0x99/0x250 [ 335.327188][ T39] ? __asan_memcpy+0x40/0x70 [ 335.327211][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 335.327243][ T39] ? __pfx__printk+0x10/0x10 [ 335.327279][ T39] vpanic+0x281/0x750 [ 335.327314][ T39] ? __pfx_vpanic+0x10/0x10 [ 335.327343][ T39] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 335.327365][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 335.327408][ T39] panic+0xb9/0xc0 [ 335.327439][ T39] ? __pfx_panic+0x10/0x10 [ 335.327481][ T39] ? irq_work_queue+0xc3/0x140 [ 335.327513][ T39] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 335.327544][ T39] watchdog+0xfd2/0xfe0 [ 335.327577][ T39] ? watchdog+0x1de/0xfe0 [ 335.327610][ T39] kthread+0x70e/0x8a0 [ 335.327646][ T39] ? __pfx_watchdog+0x10/0x10 [ 335.327673][ T39] ? __pfx_kthread+0x10/0x10 [ 335.327711][ T39] ? __pfx_kthread+0x10/0x10 [ 335.327745][ T39] ret_from_fork+0x436/0x7d0 [ 335.327774][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 335.327807][ T39] ? __switch_to_asm+0x39/0x70 [ 335.327827][ T39] ? __switch_to_asm+0x33/0x70 [ 335.327845][ T39] ? __pfx_kthread+0x10/0x10 [ 335.327896][ T39] ret_from_fork_asm+0x1a/0x30 [ 335.327935][ T39] [ 335.328252][ T39] Kernel Offset: disabled