last executing test programs: 43.195191587s ago: executing program 3 (id=935): r0 = fsopen(&(0x7f0000000400)='ocfs2_dlmfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 42.991779617s ago: executing program 3 (id=939): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000009, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000dc0)=0x1, 0x4) 42.858887793s ago: executing program 1 (id=940): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r0], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 42.52194621s ago: executing program 1 (id=944): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140)="f8", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) 42.48010426s ago: executing program 3 (id=945): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000001a21428c6c08586dd61bcc1d700006cff00000000000000000400000000ff010100000000000000000000000000000001"], 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 41.487890613s ago: executing program 1 (id=952): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) mremap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f00003eb000/0x1000)=nil) 41.163866075s ago: executing program 1 (id=954): openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) r0 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) 40.888294676s ago: executing program 1 (id=955): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fchmod(0xffffffffffffffff, 0x140) 37.508548158s ago: executing program 1 (id=962): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000002300)=ANY=[@ANYBLOB="0100000000000000a00d"]) 35.053934412s ago: executing program 3 (id=966): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x48, r0, 0x801, 0x0, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac02}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, '\x00\x00\x00 \x00'}]}]}, 0x48}}, 0x40000) 34.647378261s ago: executing program 3 (id=969): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x3) mount(0x0, &(0x7f0000003c40)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, &(0x7f0000000200)='gid=1\x00nk]e\xb2}\x9c6\b\xc1\x04\xbb\xbe \x9f\xe7\x8c\xc6\x06y\x89sd\xeb\xf4\x94\x1f\xdf\x91A!\xf9}\xee\xe7\x89\xcf\x99\n[\'\xca\xb3\x84\xb6j\xb9\x8c#\xf4\xf0\x96\x8e\xaa\x04\x82\x99f7\xf3\xd8\x17\xfc\x00\x00\x00\x00\x9c$Nn\x13\x8f\xf7\b\x00\x00\x00/\xf5|H\xe1\xbd0\x0fz\xbat\x0e-\x95c.j\xdd\xbe\x1dc3\xca\xd5\x91\xc8\x12f\x90\xac\x97\xdb\x06\x10?]\")\xb4\xe7tD6G\"<') r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mountinfo\x00') read$FUSE(r0, &(0x7f0000002380)={0x2020}, 0x2020) 34.099161904s ago: executing program 3 (id=972): recvmmsg(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x100}], 0x1, 0x2b, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x3ff, 0x9, 0x5, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000240), 0x20000402, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, &(0x7f0000000340), &(0x7f0000000000)=""/27}, 0x20) 32.079245798s ago: executing program 0 (id=977): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x9, 0x103103) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000440)={r0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200"}}) ioctl$TIOCGPGRP(r1, 0x4c07, 0x0) 31.368326199s ago: executing program 0 (id=979): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x42082) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0xc0f85403, &(0x7f0000000040)) 31.132631387s ago: executing program 0 (id=980): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 30.826231107s ago: executing program 0 (id=982): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000c00040005c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 30.475437175s ago: executing program 0 (id=984): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x23}, 0x10000}, 0x18, 0x0, 0x0, &(0x7f00000003c0)=[@tclass={{0x14, 0x29, 0x43, 0x8}}, @tclass={{0x14, 0x29, 0x43, 0xc}}], 0x30}, 0x40c0) 30.298450096s ago: executing program 4 (id=985): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x1) 30.248100599s ago: executing program 0 (id=986): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000140)=@x86={0x3, 0x8, 0x6, 0x0, 0x0, 0x2, 0x9, 0xfe, 0x1, 0x12, 0xfe, 0x0, 0x0, 0x4, 0xa, 0x0, 0x0, 0x8, 0x3, '\x00', 0x4, 0x8000000000002}) 29.906224676s ago: executing program 4 (id=988): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000640)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="bdb330", 0x3}, {&(0x7f0000000080)="5b76d0", 0x3}], 0x2}, 0x800) 29.743604322s ago: executing program 4 (id=989): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000002e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002120, &(0x7f0000002f00)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 29.435673315s ago: executing program 4 (id=991): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x2f8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x358) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000300)="d2ffdd934517f3e145f228e086dd", 0x0, 0xd5b4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 28.804283054s ago: executing program 4 (id=992): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7aa, &(0x7f0000000080)={{@any, 0xffffffff}}) 23.408849642s ago: executing program 2 (id=996): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 23.317136118s ago: executing program 2 (id=997): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpid() r2 = gettid() sendmsg$unix(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000009c0)="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", 0x8ec0}, {0x0, 0x803e}, {&(0x7f0000000140)="bd", 0x1}], 0x3, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {r1, 0x0, 0xee00}}}, @rights={{0x1c, 0x20000141, 0x1, [r0, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {r2, 0x0, 0xee01}}}], 0x60}, 0x0) 23.24878581s ago: executing program 2 (id=998): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000100)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0xc, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp_addr={0x44, 0x1c, 0x1a, 0x1, 0x8, [{@broadcast, 0x7ff}, {@remote, 0x2}, {@multicast2, 0x3}]}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 23.157882145s ago: executing program 2 (id=999): r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000003c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f00000005c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 23.07844548s ago: executing program 2 (id=1000): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000009702000020febfff7a0af0fff8ff00f869a4f0ff00000000b70600001218d1fe2d640500000000002404000000ffffffd404000020000000b7040000100000207207f0ff00000000850000002f000000b70000000a00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, 0x3b) 22.992781581s ago: executing program 2 (id=1001): openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x183822, 0x0) r0 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100)=0x0, &(0x7f00000007c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="1a", 0x1}, {0x0}], 0x2}) io_uring_enter(r0, 0x4d10, 0x2, 0x2, 0x0, 0x0) 22.066148004s ago: executing program 32 (id=962): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000002300)=ANY=[@ANYBLOB="0100000000000000a00d"]) 18.563575571s ago: executing program 33 (id=972): recvmmsg(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x100}], 0x1, 0x2b, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x3ff, 0x9, 0x5, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000240), 0x20000402, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, &(0x7f0000000340), &(0x7f0000000000)=""/27}, 0x20) 15.426837039s ago: executing program 4 (id=1004): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x38, 0x68, 0x1, 0x70bd25, 0xfffffffe, {}, [@NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @LWT_BPF_IN={0xc, 0x1, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8}}}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_OIF={0x8, 0x5, r1}]}, 0x38}}, 0x40040d0) 15.020820075s ago: executing program 34 (id=986): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000140)=@x86={0x3, 0x8, 0x6, 0x0, 0x0, 0x2, 0x9, 0xfe, 0x1, 0x12, 0xfe, 0x0, 0x0, 0x4, 0xa, 0x0, 0x0, 0x8, 0x3, '\x00', 0x4, 0x8000000000002}) 7.50247676s ago: executing program 35 (id=1001): openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x183822, 0x0) r0 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100)=0x0, &(0x7f00000007c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="1a", 0x1}, {0x0}], 0x2}) io_uring_enter(r0, 0x4d10, 0x2, 0x2, 0x0, 0x0) 0s ago: executing program 36 (id=1004): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x38, 0x68, 0x1, 0x70bd25, 0xfffffffe, {}, [@NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @LWT_BPF_IN={0xc, 0x1, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8}}}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_OIF={0x8, 0x5, r1}]}, 0x38}}, 0x40040d0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.153' (ED25519) to the list of known hosts. [ 89.075631][ T5825] cgroup: Unknown subsys name 'net' [ 89.315138][ T5825] cgroup: Unknown subsys name 'cpuset' [ 89.389120][ T5825] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.380250][ T5825] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.291889][ T31] cfg80211: failed to load regulatory.db [ 94.360213][ T5157] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.374938][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.375892][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.376440][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 94.380495][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 94.381667][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 94.381938][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.383096][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.383991][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 94.423684][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 94.458491][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 94.479964][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 94.481195][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 94.499004][ T5157] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 94.500768][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 94.520708][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 94.539254][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 94.548784][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 94.559327][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 94.560333][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 94.608065][ T5157] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 94.616987][ T5157] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 94.627138][ T5157] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 94.630264][ T5157] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 94.631244][ T5157] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 95.540887][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 95.663538][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 95.859748][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 95.955359][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 95.983180][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 96.520903][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.521134][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.521714][ T5837] bridge_slave_0: entered allmulticast mode [ 96.523898][ T5837] bridge_slave_0: entered promiscuous mode [ 96.609923][ T59] Bluetooth: hci1: command tx timeout [ 96.610527][ T5839] Bluetooth: hci0: command tx timeout [ 96.610624][ T5838] Bluetooth: hci2: command tx timeout [ 96.611018][ T5157] Bluetooth: hci3: command tx timeout [ 96.673652][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.673800][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.674015][ T5837] bridge_slave_1: entered allmulticast mode [ 96.676847][ T5837] bridge_slave_1: entered promiscuous mode [ 96.688860][ T5157] Bluetooth: hci4: command tx timeout [ 96.720357][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.720558][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.720790][ T5836] bridge_slave_0: entered allmulticast mode [ 96.723462][ T5836] bridge_slave_0: entered promiscuous mode [ 96.959935][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.960107][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.960303][ T5836] bridge_slave_1: entered allmulticast mode [ 96.963242][ T5836] bridge_slave_1: entered promiscuous mode [ 97.323302][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.421076][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.421230][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.421432][ T5842] bridge_slave_0: entered allmulticast mode [ 97.424826][ T5842] bridge_slave_0: entered promiscuous mode [ 97.564671][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.568055][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.568174][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.569079][ T5848] bridge_slave_0: entered allmulticast mode [ 97.573707][ T5848] bridge_slave_0: entered promiscuous mode [ 97.592738][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.592898][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.593130][ T5842] bridge_slave_1: entered allmulticast mode [ 97.599241][ T5842] bridge_slave_1: entered promiscuous mode [ 97.613326][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.613992][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.614101][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.614559][ T5846] bridge_slave_0: entered allmulticast mode [ 97.617790][ T5846] bridge_slave_0: entered promiscuous mode [ 97.860296][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.860449][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.860664][ T5848] bridge_slave_1: entered allmulticast mode [ 97.863637][ T5848] bridge_slave_1: entered promiscuous mode [ 97.975413][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.975670][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.975812][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.976007][ T5846] bridge_slave_1: entered allmulticast mode [ 98.002435][ T5846] bridge_slave_1: entered promiscuous mode [ 98.369238][ T5837] team0: Port device team_slave_0 added [ 98.460651][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.661887][ T5837] team0: Port device team_slave_1 added [ 98.676977][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.688532][ T5157] Bluetooth: hci0: command tx timeout [ 98.689845][ T5157] Bluetooth: hci3: command tx timeout [ 98.689875][ T5157] Bluetooth: hci2: command tx timeout [ 98.689898][ T5157] Bluetooth: hci1: command tx timeout [ 98.699777][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.740792][ T5836] team0: Port device team_slave_0 added [ 98.747714][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.769854][ T5838] Bluetooth: hci4: command tx timeout [ 98.873449][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.963005][ T5836] team0: Port device team_slave_1 added [ 99.204362][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.600332][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.600346][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.600366][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.741553][ T5842] team0: Port device team_slave_0 added [ 99.920366][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.920384][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.920415][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.922781][ T5848] team0: Port device team_slave_0 added [ 99.925273][ T5842] team0: Port device team_slave_1 added [ 99.926264][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.926275][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.926294][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.945102][ T5846] team0: Port device team_slave_0 added [ 99.992064][ T5848] team0: Port device team_slave_1 added [ 100.120792][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.120810][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.120840][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.123827][ T5846] team0: Port device team_slave_1 added [ 100.583166][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.583185][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.583214][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.769767][ T5838] Bluetooth: hci1: command tx timeout [ 100.769805][ T5838] Bluetooth: hci2: command tx timeout [ 100.769830][ T5838] Bluetooth: hci3: command tx timeout [ 100.769854][ T5838] Bluetooth: hci0: command tx timeout [ 100.820881][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.820900][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.820931][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.822401][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.822416][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.822446][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.825356][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.825371][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.825401][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.848708][ T5157] Bluetooth: hci4: command tx timeout [ 101.013800][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.013820][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.013850][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.122679][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.122703][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.122733][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.152985][ T5837] hsr_slave_0: entered promiscuous mode [ 101.155078][ T5837] hsr_slave_1: entered promiscuous mode [ 101.311102][ T5836] hsr_slave_0: entered promiscuous mode [ 101.312111][ T5836] hsr_slave_1: entered promiscuous mode [ 101.312973][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 101.313065][ T5836] Cannot create hsr debugfs directory [ 101.900834][ T5842] hsr_slave_0: entered promiscuous mode [ 101.902199][ T5842] hsr_slave_1: entered promiscuous mode [ 101.903314][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 101.903340][ T5842] Cannot create hsr debugfs directory [ 101.981366][ T5848] hsr_slave_0: entered promiscuous mode [ 101.983249][ T5848] hsr_slave_1: entered promiscuous mode [ 101.983894][ T5848] debugfs: 'hsr0' already exists in 'hsr' [ 101.983920][ T5848] Cannot create hsr debugfs directory [ 102.008626][ T5846] hsr_slave_0: entered promiscuous mode [ 102.010525][ T5846] hsr_slave_1: entered promiscuous mode [ 102.011599][ T5846] debugfs: 'hsr0' already exists in 'hsr' [ 102.011629][ T5846] Cannot create hsr debugfs directory [ 102.848662][ T5157] Bluetooth: hci0: command tx timeout [ 102.848683][ T5838] Bluetooth: hci3: command tx timeout [ 102.848699][ T5157] Bluetooth: hci2: command tx timeout [ 102.848710][ T5838] Bluetooth: hci1: command tx timeout [ 102.928554][ T5839] Bluetooth: hci4: command tx timeout [ 103.778070][ T5837] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.830456][ T5837] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.867824][ T5837] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.927200][ T5837] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.074687][ T5836] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 104.115880][ T5836] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 104.151245][ T5836] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 104.203591][ T5836] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 104.362290][ T5848] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 104.414222][ T5848] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 104.446220][ T5848] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 104.469531][ T5848] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 104.686057][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 104.742527][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 104.810833][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 104.856440][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 105.021917][ T5842] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 105.067245][ T5842] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 105.095837][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.114565][ T5842] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 105.151271][ T5842] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 105.290935][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.356394][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.375484][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.376219][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.463856][ T996] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.464086][ T996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.552401][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.576270][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.626742][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.626954][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.691500][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.691658][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.740672][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.818408][ T996] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.818605][ T996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.844807][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.891250][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.891473][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.029336][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.043037][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.093911][ T996] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.094141][ T996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.167625][ T987] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.168522][ T987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.259615][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.292998][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.293228][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.377460][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.377815][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.639477][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.919850][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.031738][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.165836][ T5837] veth0_vlan: entered promiscuous mode [ 107.226256][ T5837] veth1_vlan: entered promiscuous mode [ 107.269395][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.372580][ T5836] veth0_vlan: entered promiscuous mode [ 107.445218][ T5848] veth0_vlan: entered promiscuous mode [ 107.450267][ T5836] veth1_vlan: entered promiscuous mode [ 107.513372][ T5848] veth1_vlan: entered promiscuous mode [ 107.516378][ T5837] veth0_macvtap: entered promiscuous mode [ 107.524984][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.612258][ T5837] veth1_macvtap: entered promiscuous mode [ 107.718735][ T5846] veth0_vlan: entered promiscuous mode [ 107.787652][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.792038][ T5836] veth0_macvtap: entered promiscuous mode [ 107.813807][ T5846] veth1_vlan: entered promiscuous mode [ 107.852228][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.860938][ T5836] veth1_macvtap: entered promiscuous mode [ 107.894896][ T5848] veth0_macvtap: entered promiscuous mode [ 107.935679][ T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.950091][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.952777][ T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.954476][ T5848] veth1_macvtap: entered promiscuous mode [ 107.964123][ T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.082589][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.181581][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.230970][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.307604][ T5846] veth0_macvtap: entered promiscuous mode [ 108.321141][ T3630] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.339946][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.340028][ T3630] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.376681][ T987] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.392665][ T5846] veth1_macvtap: entered promiscuous mode [ 108.426232][ T987] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.471274][ T3630] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.521392][ T3630] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.525672][ T987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.525701][ T987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.558858][ T3630] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.583921][ T3630] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.759709][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.865885][ T5842] veth0_vlan: entered promiscuous mode [ 108.867189][ T987] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.867218][ T987] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.916280][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.074245][ T67] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.082079][ T67] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.087082][ T5842] veth1_vlan: entered promiscuous mode [ 109.113593][ T67] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.114775][ T987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.114796][ T987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.122286][ T67] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.348905][ T3630] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.348928][ T3630] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.522805][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.522828][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.599047][ T5826] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 109.699347][ T987] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.699369][ T987] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.773687][ T5842] veth0_macvtap: entered promiscuous mode [ 109.778474][ T5826] usb 1-1: Using ep0 maxpacket: 16 [ 109.778810][ T1010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.778825][ T1010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.826991][ T5826] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 109.827047][ T5826] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 109.827071][ T5826] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.919567][ T5826] usb 1-1: config 0 descriptor?? [ 109.993798][ T5842] veth1_macvtap: entered promiscuous mode [ 110.049002][ T5826] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input5 [ 110.249615][ T5193] bcm5974 1-1:0.0: could not read from device [ 110.309348][ T3630] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.309376][ T3630] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.333362][ T5826] bcm5974 1-1:0.0: could not read from device [ 110.361410][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.371271][ T5193] bcm5974 1-1:0.0: could not read from device [ 110.418171][ T44] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 110.434615][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.468971][ T1010] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.473229][ T1010] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.474958][ T1010] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.475724][ T1010] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.534993][ T5826] input: failed to attach handler mousedev to device input5, error: -5 [ 110.569903][ T5193] bcm5974 1-1:0.0: could not read from device [ 110.626361][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.626400][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.626443][ T44] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 110.626468][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.650134][ T5826] usb 1-1: USB disconnect, device number 2 [ 110.706877][ T44] usb 4-1: config 0 descriptor?? [ 111.368921][ T5969] vivid-002: disconnect [ 111.409104][ T5968] vivid-002: reconnect [ 111.436765][ T987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.436788][ T987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.598588][ T44] hid-led 0003:27B8:01ED.0001: probe with driver hid-led failed with error -71 [ 111.672975][ T44] usb 4-1: USB disconnect, device number 2 [ 111.787901][ T3641] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.787924][ T3641] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.132114][ T5981] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 112.767987][ T5988] can0: slcan on ttyS3. [ 112.935718][ T5994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15'. [ 112.935763][ T5994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15'. [ 113.039672][ T5990] can0 (unregistered): slcan off ttyS3. [ 114.078506][ T5826] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 114.228936][ T5826] usb 1-1: Using ep0 maxpacket: 16 [ 114.232044][ T5826] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 114.232071][ T5826] usb 1-1: config 0 has no interface number 0 [ 114.232119][ T5826] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 114.232146][ T5826] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 114.237721][ T5826] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 114.237763][ T5826] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 114.237785][ T5826] usb 1-1: Product: syz [ 114.237801][ T5826] usb 1-1: SerialNumber: syz [ 114.272685][ T5826] usb 1-1: config 0 descriptor?? [ 114.352793][ T5826] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 114.375505][ T5826] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input6 [ 114.804092][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 114.805430][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 114.806245][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 114.806503][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 114.806841][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 114.808581][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 114.808844][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 114.809090][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 114.809339][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 114.809889][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 114.833512][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 114.833577][ T5967] usb 1-1: USB disconnect, device number 3 [ 114.985806][ T5967] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 117.338722][ T6074] netlink: 12 bytes leftover after parsing attributes in process `syz.3.51'. [ 118.369431][ T5967] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 118.518445][ T5967] usb 2-1: Using ep0 maxpacket: 8 [ 118.522778][ T5967] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 118.522810][ T5967] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.641865][ T5967] pvrusb2: Hardware description: Terratec Grabster AV400 [ 118.641889][ T5967] pvrusb2: ********** [ 118.641897][ T5967] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 118.641910][ T5967] pvrusb2: Important functionality might not be entirely working. [ 118.641920][ T5967] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 118.641932][ T5967] pvrusb2: ********** [ 118.878427][ T2370] pvrusb2: Invalid write control endpoint [ 119.095174][ T5967] usb 2-1: USB disconnect, device number 2 [ 119.275232][ T2370] pvrusb2: Invalid write control endpoint [ 119.275258][ T2370] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 119.275268][ T2370] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 119.275278][ T2370] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 119.275289][ T2370] pvrusb2: Device being rendered inoperable [ 119.302396][ T2370] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 119.302475][ T2370] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 119.305776][ T2370] pvrusb2: Attached sub-driver cx25840 [ 119.305791][ T2370] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 119.305805][ T2370] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 119.758435][ T5925] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 119.909328][ T5925] usb 3-1: Using ep0 maxpacket: 16 [ 119.914119][ T5925] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 119.914154][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 119.921451][ T5925] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 119.921489][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.921515][ T5925] usb 3-1: Product: syz [ 119.921532][ T5925] usb 3-1: Manufacturer: syz [ 119.921550][ T5925] usb 3-1: SerialNumber: syz [ 119.946611][ T5925] usb 3-1: config 0 descriptor?? [ 120.006734][ T5925] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 120.006773][ T5925] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 120.599867][ T5925] em28xx 3-1:0.0: chip ID is em2765 [ 120.782028][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 120.804149][ T5925] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 120.804615][ T5925] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 120.804633][ T5925] em28xx 3-1:0.0: No AC97 audio processor [ 120.856646][ T5925] usb 3-1: USB disconnect, device number 2 [ 120.864249][ T5925] em28xx 3-1:0.0: Disconnecting em28xx [ 120.921153][ T5925] em28xx 3-1:0.0: Freeing device [ 120.935803][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.935840][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.935946][ T9] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 120.935972][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.013431][ T9] usb 4-1: config 0 descriptor?? [ 121.475760][ T9] sony 0003:054C:024B.0002: unexpected long global item [ 121.476617][ T9] sony 0003:054C:024B.0002: parse failed [ 121.476727][ T9] sony 0003:054C:024B.0002: probe with driver sony failed with error -22 [ 121.480281][ T5925] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 121.508388][ T1857] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 121.557235][ T6149] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 121.634536][ T5925] usb 1-1: Using ep0 maxpacket: 16 [ 121.637068][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.637111][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.637136][ T5925] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 121.637183][ T5925] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 121.637208][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.669410][ T5925] usb 1-1: config 0 descriptor?? [ 121.671579][ T1857] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.671625][ T1857] usb 5-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 121.671651][ T1857] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.793249][ T1857] usb 5-1: config 0 descriptor?? [ 121.879725][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 122.028472][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 122.034585][ T9] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 122.034616][ T9] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 122.034638][ T9] usb 3-1: config 0 has no interface number 0 [ 122.034753][ T9] usb 3-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 122.034783][ T9] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 122.034812][ T9] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 122.047911][ T9] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 122.047945][ T9] usb 3-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 122.047970][ T9] usb 3-1: Product: syz [ 122.047985][ T9] usb 3-1: Manufacturer: syz [ 122.136566][ T5826] usb 4-1: USB disconnect, device number 3 [ 122.239992][ T9] usb 3-1: config 0 descriptor?? [ 122.241342][ T6151] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 122.246219][ T1857] razer 0003:1532:010E.0004: unknown main item tag 0x1 [ 122.275703][ T5925] HID 045e:07da: Invalid code 65791 type 1 [ 122.374452][ T5925] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0003/input/input7 [ 122.479958][ T1857] razer 0003:1532:010E.0004: failed to enable macro keys: -71 [ 122.633469][ T5925] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 122.709585][ T1857] razer 0003:1532:010E.0004: hidraw1: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.4-1/input0 [ 122.730096][ T5925] usb 1-1: USB disconnect, device number 4 [ 122.775092][ T6156] /dev/nullb0: Can't open blockdev [ 122.803764][ T6156] /dev/nullb0: Can't open blockdev [ 122.886106][ T1857] usb 5-1: USB disconnect, device number 2 [ 122.924900][ T9] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.21/input/input8 [ 122.988677][ T6157] fido_id[6157]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 123.169132][ T6158] fido_id[6158]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 123.370283][ T9] usb 3-1: USB disconnect, device number 3 [ 123.370375][ C0] keyspan_remote 3-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 123.818470][ T5925] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 123.970191][ T5925] usb 1-1: Using ep0 maxpacket: 16 [ 123.972987][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.973022][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.973047][ T5925] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 123.973092][ T5925] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 123.973117][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.997456][ T5925] usb 1-1: config 0 descriptor?? [ 124.456697][ T5925] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 124.456733][ T5925] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 124.456761][ T5925] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 124.456789][ T5925] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 124.456817][ T5925] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 124.456845][ T5925] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 124.456873][ T5925] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 124.456910][ T5925] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 124.456939][ T5925] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 124.538976][ T5925] microsoft 0003:045E:07DA.0005: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 124.539014][ T5925] microsoft 0003:045E:07DA.0005: no inputs found [ 124.539029][ T5925] microsoft 0003:045E:07DA.0005: could not initialize ff, continuing anyway [ 124.682054][ T5963] usb 1-1: USB disconnect, device number 5 [ 124.702626][ T6175] fido_id[6175]: Failed to read report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0005/report_descriptor': No such device [ 125.338422][ T5967] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 125.491106][ T5967] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 125.491139][ T5967] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.501362][ T5967] usb 5-1: config 0 descriptor?? [ 125.720804][ T5967] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 125.801233][ T5925] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 125.964476][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.964514][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.964556][ T5925] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 125.964582][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.023099][ T5925] usb 1-1: config 0 descriptor?? [ 126.036957][ T5967] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 126.036986][ T5967] [drm] Initialized udl on minor 2 [ 126.172015][ T5967] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 126.190669][ T5967] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 126.368663][ T44] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 126.386169][ T9] usb 5-1: USB disconnect, device number 3 [ 126.453202][ T44] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 126.580137][ T5925] cp2112 0003:10C4:EA90.0006: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 126.653771][ T5925] cp2112 0003:10C4:EA90.0006: error requesting version [ 126.743606][ T5925] cp2112 0003:10C4:EA90.0006: probe with driver cp2112 failed with error -71 [ 126.825445][ T5925] usb 1-1: USB disconnect, device number 6 [ 126.892840][ T6199] batman_adv: batadv0: Adding interface: ipvlan2 [ 126.892860][ T6199] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.892891][ T6199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.892910][ T6199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.892926][ T6199] batman_adv: batadv0: Interface activated: ipvlan2 [ 127.350582][ T6207] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 127.350788][ T6207] FAT-fs (loop9): unable to read boot sector [ 127.808454][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 127.890188][ T6221] comedi comedi0: 8255: I/O port conflict (0xee,4) [ 127.890250][ T6221] comedi comedi0: 8255: I/O port conflict (0x7,4) [ 127.890382][ T6221] comedi comedi0: 8255: I/O port conflict (0xa,4) [ 127.978387][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 127.980719][ T9] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 127.980750][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.987559][ T9] usb 2-1: config 0 descriptor?? [ 128.106605][ T6227] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.108206][ T6227] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.239040][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 128.260624][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 128.278879][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 128.278972][ T9] usb 2-1: media controller created [ 128.342624][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 128.459185][ T9] az6027: usb out operation failed. (-71) [ 128.459627][ T9] az6027: usb out operation failed. (-71) [ 128.459642][ T9] stb0899_attach: Driver disabled by Kconfig [ 128.459652][ T9] az6027: no front-end attached [ 128.459652][ T9] [ 128.460072][ T9] az6027: usb out operation failed. (-71) [ 128.462521][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 128.517806][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input11 [ 128.558001][ T9] dvb-usb: schedule remote query interval to 400 msecs. [ 128.558026][ T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 128.631559][ T9] usb 2-1: USB disconnect, device number 3 [ 128.644620][ T5963] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 128.788342][ T5963] usb 3-1: Using ep0 maxpacket: 8 [ 128.816277][ T5963] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 128.816313][ T5963] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.816335][ T5963] usb 3-1: Product: syz [ 128.816351][ T5963] usb 3-1: Manufacturer: syz [ 128.816367][ T5963] usb 3-1: SerialNumber: syz [ 128.912649][ T5963] usb 3-1: config 0 descriptor?? [ 129.111395][ T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 129.177823][ T5963] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 129.196694][ T5967] IPVS: starting estimator thread 0... [ 129.308650][ T6246] IPVS: using max 7 ests per chain, 16800 per kthread [ 129.785307][ T5963] gspca_sunplus: reg_w_riv err -71 [ 129.785407][ T5963] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 129.818582][ T5963] usb 3-1: USB disconnect, device number 4 [ 130.193176][ T6266] netlink: 28 bytes leftover after parsing attributes in process `syz.4.126'. [ 131.054170][ T38] audit: type=1326 audit(1757194575.604:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6291 comm="syz.3.137" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f454d3cebe9 code=0x0 [ 131.894873][ T6320] netlink: 52 bytes leftover after parsing attributes in process `syz.1.148'. [ 133.268158][ T6360] netlink: 36 bytes leftover after parsing attributes in process `syz.4.166'. [ 133.418950][ T6364] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 133.426074][ T6364] netlink: 4 bytes leftover after parsing attributes in process `syz.1.167'. [ 133.847334][ T6364] bond0: (slave bond_slave_1): Releasing backup interface [ 133.959379][ T5917] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 134.118430][ T5917] usb 5-1: Using ep0 maxpacket: 16 [ 134.134037][ T5917] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 134.134064][ T5917] usb 5-1: config 0 has no interface number 0 [ 134.167960][ T5917] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 134.167993][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.168016][ T5917] usb 5-1: Product: syz [ 134.168032][ T5917] usb 5-1: Manufacturer: syz [ 134.168047][ T5917] usb 5-1: SerialNumber: syz [ 134.215976][ T5917] usb 5-1: config 0 descriptor?? [ 134.255453][ T5917] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 134.942548][ T6386] [U] [ 134.942710][ T6386] [U] )0 [ 134.942860][ T6386] [U] [ 134.942909][ T6386] [U] [ 134.942947][ T6386] [U] [ 134.943126][ T6386] [U] [ 134.943168][ T6386] [U] [ 134.943208][ T6386] [U] [ 134.943240][ T6386] [U] [ 134.943353][ T6386] [U] [ 134.943384][ T6386] [U] [ 134.943414][ T6386] [U] [ 134.950701][ T6385] [U] [ 135.049381][ T5917] gspca_spca1528: reg_w err -71 [ 135.068469][ T5917] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71 [ 135.091384][ T5917] usb 5-1: USB disconnect, device number 4 [ 135.621265][ T6405] netlink: 'syz.1.185': attribute type 1 has an invalid length. [ 136.640187][ T6430] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 136.640743][ T6430] macsec1: entered promiscuous mode [ 136.641022][ T6430] macsec1: entered allmulticast mode [ 136.641041][ T6430] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 137.437667][ T6445] mkiss: ax0: crc mode is auto. [ 138.190175][ T5208] udevd[5208]: worker [5891] terminated by signal 33 (Unknown signal 33) [ 138.190240][ T5208] udevd[5208]: worker [5891] failed while handling '/devices/virtual/block/loop0' [ 138.379429][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.379538][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.865434][ T44] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 139.026568][ T44] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 139.026600][ T44] usb 1-1: config 0 has no interface number 0 [ 139.031645][ T44] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 139.031683][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.031708][ T44] usb 1-1: Product: syz [ 139.031726][ T44] usb 1-1: Manufacturer: syz [ 139.031743][ T44] usb 1-1: SerialNumber: syz [ 139.040747][ T44] usb 1-1: config 0 descriptor?? [ 139.078862][ T6473] tipc: Started in network mode [ 139.078902][ T6473] tipc: Node identity ac14140f, cluster identity 4711 [ 139.086903][ T6473] tipc: New replicast peer: 255.255.255.255 [ 139.096112][ T6473] tipc: Enabled bearer , priority 10 [ 139.117617][ T6473] netlink: 12 bytes leftover after parsing attributes in process `syz.2.212'. [ 139.117647][ T6473] tipc: Disabling bearer [ 139.306165][ T44] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 139.342192][ T44] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 139.342630][ T44] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 139.342685][ T44] usb 1-1: media controller created [ 139.476300][ T44] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 140.643506][ T44] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 140.824704][ T44] usb 1-1: USB disconnect, device number 7 [ 141.760130][ T6528] netlink: 'syz.2.238': attribute type 3 has an invalid length. [ 141.765861][ T6528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.238'. [ 142.300664][ T6550] ======================================================= [ 142.300664][ T6550] WARNING: The mand mount option has been deprecated and [ 142.300664][ T6550] and is ignored by this kernel. Remove the mand [ 142.300664][ T6550] option from the mount to silence this warning. [ 142.300664][ T6550] ======================================================= [ 142.494173][ T6554] Zero length message leads to an empty skb [ 142.663465][ T6559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.253'. [ 142.714517][ T6561] netlink: 71 bytes leftover after parsing attributes in process `syz.4.255'. [ 142.947664][ T6565] tap0: tun_chr_ioctl cmd 2147767506 [ 143.358155][ T6583] capability: warning: `syz.3.265' uses 32-bit capabilities (legacy support in use) [ 144.507576][ T6619] tap0: tun_chr_ioctl cmd 1074025677 [ 144.507819][ T6619] tap0: linktype set to 804 [ 144.680361][ T6622] warning: `syz.3.282' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 144.904349][ T6631] netlink: 'syz.0.288': attribute type 10 has an invalid length. [ 145.087275][ T6631] bond0: (slave bond_slave_0): Releasing backup interface [ 146.287704][ T6684] tap0: tun_chr_ioctl cmd 1074025681 [ 146.488386][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 146.667069][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.667107][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.667149][ T9] usb 1-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 146.667174][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.671266][ T5963] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 146.720332][ T9] usb 1-1: config 0 descriptor?? [ 146.836924][ T5963] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.837097][ T5963] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 146.839009][ T5963] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 146.839043][ T5963] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 146.839067][ T5963] usb 4-1: SerialNumber: syz [ 146.987836][ T6707] bridge0: entered promiscuous mode [ 146.988174][ T6707] macvtap1: entered allmulticast mode [ 146.988193][ T6707] bridge0: entered allmulticast mode [ 147.036590][ T6707] bridge0: port 3(macvtap1) entered blocking state [ 147.037593][ T6707] bridge0: port 3(macvtap1) entered disabled state [ 147.155711][ T6707] bridge0: left allmulticast mode [ 147.157122][ T6707] bridge0: left promiscuous mode [ 147.195315][ T6709] block nbd0: shutting down sockets [ 147.235019][ T5963] usb 4-1: 0:2 : does not exist [ 147.255427][ T9] hid_parser_main: 2 callbacks suppressed [ 147.255452][ T9] hid-led 0003:1D34:0004.0007: unknown main item tag 0x0 [ 147.454828][ T9] hid-led 0003:1D34:0004.0007: hidraw0: USB HID v0.00 Device [HID 1d34:0004] on usb-dummy_hcd.0-1/input0 [ 147.493281][ T9] hid-led 0003:1D34:0004.0007: Dream Cheeky Webmail Notifier initialized [ 147.497024][ T5963] usb 4-1: USB disconnect, device number 4 [ 147.641360][ T5929] usb 1-1: USB disconnect, device number 8 [ 147.897172][ T6721] overlayfs: failed to clone lowerpath [ 148.920112][ T5917] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 149.092643][ T5917] usb 4-1: config 150 has an invalid interface number: 204 but max is 2 [ 149.092673][ T5917] usb 4-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 149.092695][ T5917] usb 4-1: config 150 has no interface number 0 [ 149.092750][ T5917] usb 4-1: config 150 interface 204 has no altsetting 0 [ 149.096083][ T5917] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 149.096116][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.096139][ T5917] usb 4-1: Product: syz [ 149.096154][ T5917] usb 4-1: Manufacturer: syz [ 149.096170][ T5917] usb 4-1: SerialNumber: syz [ 149.406556][ T5917] xr_serial 4-1:150.204: skipping garbage [ 149.406637][ T5917] xr_serial 4-1:150.204: xr_serial converter detected [ 149.613161][ T38] audit: type=1326 audit(1757194594.174:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6757 comm="syz.2.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe714eebe9 code=0x7ffc0000 [ 149.615640][ T38] audit: type=1326 audit(1757194594.174:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6757 comm="syz.2.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe714eebe9 code=0x7ffc0000 [ 149.665793][ T38] audit: type=1326 audit(1757194594.224:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6757 comm="syz.2.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fbe714eebe9 code=0x7ffc0000 [ 149.666307][ T38] audit: type=1326 audit(1757194594.224:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6757 comm="syz.2.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe714eebe9 code=0x7ffc0000 [ 149.667422][ T38] audit: type=1326 audit(1757194594.224:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6757 comm="syz.2.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe714eebe9 code=0x7ffc0000 [ 149.669052][ T38] audit: type=1326 audit(1757194594.234:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6757 comm="syz.2.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fbe714eebe9 code=0x7ffc0000 [ 149.671701][ T38] audit: type=1326 audit(1757194594.234:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6757 comm="syz.2.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe714eebe9 code=0x7ffc0000 [ 149.675308][ T38] audit: type=1326 audit(1757194594.234:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6757 comm="syz.2.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe714eebe9 code=0x7ffc0000 [ 149.677342][ T38] audit: type=1326 audit(1757194594.234:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6757 comm="syz.2.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fbe714eebe9 code=0x7ffc0000 [ 149.684629][ T38] audit: type=1326 audit(1757194594.244:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6757 comm="syz.2.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 150.063823][ T5917] xr_serial ttyUSB0: Failed to set reg 0x0d: -71 [ 150.063891][ T5917] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 150.105538][ T5917] usb 4-1: USB disconnect, device number 5 [ 150.133372][ T5917] xr_serial 4-1:150.204: device disconnected [ 150.323132][ T6770] netlink: 'syz.2.341': attribute type 83 has an invalid length. [ 150.815219][ T6772] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 150.815375][ T6772] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 150.922995][ T6772] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 150.983139][ T6772] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 151.018887][ T6772] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 151.020438][ T6772] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 151.095620][ T6772] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 151.161422][ T6772] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 151.161565][ T6772] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 151.234684][ T6772] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 151.317257][ T6772] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 151.317439][ T6772] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 151.385672][ T6772] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 151.470647][ T5929] kernel read not supported for file /dsp1 (pid: 5929 comm: kworker/1:6) [ 151.708470][ T5963] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 151.864464][ T5963] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 151.864498][ T5963] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 151.864519][ T5963] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 151.864542][ T5963] usb 3-1: config 220 has no interface number 2 [ 151.864646][ T5963] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 151.864676][ T5963] usb 3-1: config 220 interface 0 has no altsetting 0 [ 151.864696][ T5963] usb 3-1: config 220 interface 76 has no altsetting 0 [ 151.864716][ T5963] usb 3-1: config 220 interface 1 has no altsetting 0 [ 151.872698][ T5963] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 151.872745][ T5963] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.872770][ T5963] usb 3-1: Product: syz [ 151.872788][ T5963] usb 3-1: Manufacturer: syz [ 151.872806][ T5963] usb 3-1: SerialNumber: syz [ 152.160695][ T5963] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 152.160741][ T5963] usb 3-1: No valid video chain found. [ 152.160822][ T5963] usb 3-1: selecting invalid altsetting 0 [ 152.270462][ T5963] usb 3-1: selecting invalid altsetting 0 [ 152.270506][ T5963] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 152.328491][ T5963] usb 3-1: USB disconnect, device number 5 [ 152.773137][ T5839] Bluetooth: hci1: command 0x0c1a tx timeout [ 153.081873][ T6837] bridge0: entered promiscuous mode [ 153.083153][ T6837] macvtap1: entered allmulticast mode [ 153.083172][ T6837] bridge0: entered allmulticast mode [ 153.093206][ T5157] Bluetooth: hci2: command 0x0c1a tx timeout [ 153.117856][ T6837] bridge0: port 3(macvtap1) entered blocking state [ 153.126642][ T6837] bridge0: port 3(macvtap1) entered disabled state [ 153.168675][ T5839] Bluetooth: hci3: command 0x0c1a tx timeout [ 153.233976][ T6837] bridge0: left allmulticast mode [ 153.234044][ T6837] bridge0: left promiscuous mode [ 153.328530][ T5839] Bluetooth: hci4: command 0x0c1a tx timeout [ 154.055201][ T6866] netlink: 84 bytes leftover after parsing attributes in process `syz.4.384'. [ 154.852714][ T5839] Bluetooth: hci1: command 0x0c1a tx timeout [ 154.902888][ T6900] netlink: 64 bytes leftover after parsing attributes in process `syz.1.400'. [ 155.169986][ T5839] Bluetooth: hci2: command 0x0c1a tx timeout [ 155.248458][ T5839] Bluetooth: hci3: command 0x0c1a tx timeout [ 155.408385][ T5839] Bluetooth: hci4: command 0x0c1a tx timeout [ 156.245890][ T6942] netlink: 12 bytes leftover after parsing attributes in process `syz.4.418'. [ 156.392488][ T5967] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 156.574610][ T5967] usb 4-1: Using ep0 maxpacket: 16 [ 156.577370][ T5967] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 156.577400][ T5967] usb 4-1: config 0 has no interface number 0 [ 156.580723][ T5967] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 156.580757][ T5967] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.580780][ T5967] usb 4-1: Product: syz [ 156.580796][ T5967] usb 4-1: Manufacturer: syz [ 156.580812][ T5967] usb 4-1: SerialNumber: syz [ 156.596857][ T5967] usb 4-1: config 0 descriptor?? [ 156.631937][ T5967] hub 4-1:0.132: bad descriptor, ignoring hub [ 156.631996][ T5967] hub 4-1:0.132: probe with driver hub failed with error -5 [ 156.674094][ T5967] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.132/input/input13 [ 156.872038][ T6957] openvswitch: netlink: VXLAN extension message has 8 unknown bytes. [ 156.929113][ T5839] Bluetooth: hci1: command 0x0c1a tx timeout [ 157.248446][ T5839] Bluetooth: hci2: command 0x0c1a tx timeout [ 157.329183][ T5839] Bluetooth: hci3: command 0x0c1a tx timeout [ 157.488497][ T5839] Bluetooth: hci4: command 0x0c1a tx timeout [ 157.753886][ T6973] process 'syz.4.430' launched '/dev/fd/3' with NULL argv: empty string added [ 157.940827][ T38] kauditd_printk_skb: 2 callbacks suppressed [ 157.940847][ T38] audit: type=1326 audit(1757195115.501:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6952 comm="syz.0.422" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d0d86ebe9 code=0x0 [ 159.009612][ T5157] Bluetooth: hci1: command 0x0c1a tx timeout [ 159.723296][ T7032] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 160.348764][ T9] usb 4-1: USB disconnect, device number 6 [ 161.366694][ T7095] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 161.528896][ T7085] netlink: 40 bytes leftover after parsing attributes in process `syz.1.480'. [ 162.174167][ T38] audit: type=1326 audit(1757195119.741:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7110 comm="syz.0.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d0d86ebe9 code=0x7ffc0000 [ 162.174534][ T38] audit: type=1326 audit(1757195119.741:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7110 comm="syz.0.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d0d86ebe9 code=0x7ffc0000 [ 162.176561][ T38] audit: type=1326 audit(1757195119.741:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7110 comm="syz.0.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d0d86ebe9 code=0x7ffc0000 [ 162.182502][ T38] audit: type=1326 audit(1757195119.751:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7110 comm="syz.0.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d0d86ebe9 code=0x7ffc0000 [ 162.182832][ T38] audit: type=1326 audit(1757195119.751:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7110 comm="syz.0.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d0d86ebe9 code=0x7ffc0000 [ 162.183638][ T38] audit: type=1326 audit(1757195119.751:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7110 comm="syz.0.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d0d86ebe9 code=0x7ffc0000 [ 162.184367][ T38] audit: type=1326 audit(1757195119.751:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7110 comm="syz.0.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d0d86ebe9 code=0x7ffc0000 [ 162.184725][ T38] audit: type=1326 audit(1757195119.751:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7110 comm="syz.0.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7f8d0d86ebe9 code=0x7ffc0000 [ 162.186700][ T38] audit: type=1326 audit(1757195119.751:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7110 comm="syz.0.493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d0d86ebe9 code=0x7ffc0000 [ 162.641326][ T5929] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 162.641366][ T5929] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 162.641394][ T5929] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 162.641421][ T5929] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 162.641449][ T5929] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 162.641477][ T5929] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 162.641504][ T5929] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 162.641532][ T5929] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 162.641559][ T5929] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 162.641587][ T5929] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 162.686400][ T5929] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz0 [ 162.814324][ T6654] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.816877][ T6654] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.828578][ T6641] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.833677][ T57] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.147230][ T5917] kernel read not supported for file /usbmon9 (pid: 5917 comm: kworker/0:4) [ 165.245447][ T7202] Dead loop on virtual device ip6_vti0, fix it urgently! [ 165.311073][ T7204] capability: warning: `syz.4.537' uses deprecated v2 capabilities in a way that may be insecure [ 165.688787][ T9] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 165.795726][ T7216] netlink: 16 bytes leftover after parsing attributes in process `syz.1.543'. [ 165.841577][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.841606][ T9] usb 3-1: config 0 has no interfaces? [ 165.841637][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 165.841662][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.847659][ T9] usb 3-1: config 0 descriptor?? [ 166.089552][ T9] usb 3-1: USB disconnect, device number 6 [ 166.347469][ T7225] Invalid logical block size (7) [ 166.712776][ T7237] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 166.716973][ T7235] sp0: Synchronizing with TNC [ 166.761827][ T7235] sp0: Found TNC [ 167.103160][ T7250] netlink: 8 bytes leftover after parsing attributes in process `syz.2.558'. [ 167.103189][ T7250] netlink: 'syz.2.558': attribute type 9 has an invalid length. [ 167.125119][ T7250] macvlan3: entered allmulticast mode [ 167.125144][ T7250] veth0_macvtap: entered allmulticast mode [ 167.934589][ T7271] netlink: 31 bytes leftover after parsing attributes in process `syz.0.566'. [ 167.999100][ T7269] gretap0: entered promiscuous mode [ 168.363506][ T5963] kernel read not supported for file /usbmon9 (pid: 5963 comm: kworker/0:6) [ 168.394163][ T7285] bond0: entered promiscuous mode [ 168.394189][ T7285] bond_slave_0: entered promiscuous mode [ 168.394455][ T7285] bond_slave_1: entered promiscuous mode [ 168.397303][ T7285] batadv0: entered promiscuous mode [ 168.428833][ T7285] hsr1: entered promiscuous mode [ 168.429627][ T7285] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 168.477153][ T7286] bridge0: entered promiscuous mode [ 168.477272][ T7286] macvlan2: entered promiscuous mode [ 168.612438][ T7292] af_packet: tpacket_rcv: packet too big, clamped from 108 to 4294967272. macoff=96 [ 169.501664][ T7325] mkiss: ax0: crc mode is auto. [ 169.543978][ T7326] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 169.544190][ T7326] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 169.544358][ T7326] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 169.544529][ T7326] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 169.544697][ T7326] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 169.544871][ T7326] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 169.545598][ T7326] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 169.545777][ T7326] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 170.472170][ T38] kauditd_printk_skb: 1 callbacks suppressed [ 170.472192][ T38] audit: type=1400 audit(1757195128.031:26): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=wx pid=7356 comm="syz.1.608" name="128" dev="tmpfs" ino=667 [ 171.253372][ T7371] netlink: 256 bytes leftover after parsing attributes in process `syz.2.614'. [ 171.809975][ T5967] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 171.985773][ T5967] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.985806][ T5967] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.985844][ T5967] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 171.985866][ T5967] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.007083][ T5967] usb 4-1: config 0 descriptor?? [ 172.439067][ T9] IPVS: starting estimator thread 0... [ 172.447225][ T5967] hid_parser_main: 73 callbacks suppressed [ 172.447250][ T5967] arvo 0003:1E7D:30D4.0009: unknown main item tag 0x0 [ 172.501609][ T5967] arvo 0003:1E7D:30D4.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0 [ 172.590605][ T7398] IPVS: using max 7 ests per chain, 16800 per kthread [ 172.835075][ T7410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.631'. [ 172.886512][ T5963] usb 4-1: USB disconnect, device number 7 [ 172.985832][ T7410] : entered promiscuous mode [ 173.618437][ T5929] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 173.771465][ T5929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.771504][ T5929] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 173.771550][ T5929] usb 1-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 173.771576][ T5929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.781733][ T5929] usb 1-1: config 0 descriptor?? [ 174.217183][ T5929] hid-led 0003:1294:1320.000A: item fetching failed at offset 0/3 [ 174.218141][ T5929] hid-led 0003:1294:1320.000A: probe with driver hid-led failed with error -22 [ 174.406055][ T5917] usb 1-1: USB disconnect, device number 9 [ 174.416934][ T5963] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 174.568869][ T5963] usb 5-1: Using ep0 maxpacket: 32 [ 174.571633][ T5963] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 174.571662][ T5963] usb 5-1: config 0 has no interface number 0 [ 174.574812][ T5963] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 174.574844][ T5963] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.574866][ T5963] usb 5-1: Product: syz [ 174.574881][ T5963] usb 5-1: Manufacturer: syz [ 174.574896][ T5963] usb 5-1: SerialNumber: syz [ 174.642291][ T5963] usb 5-1: config 0 descriptor?? [ 174.647191][ T5963] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 174.905000][ T5963] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 174.962584][ T5963] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 175.124529][ T7468] netlink: 188 bytes leftover after parsing attributes in process `syz.2.657'. [ 175.310616][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 175.312204][ T31] usb 5-1: USB disconnect, device number 5 [ 175.363551][ T31] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 175.401350][ T31] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 175.402123][ T31] quatech2 5-1:0.51: device disconnected [ 177.060505][ T7506] netlink: 16 bytes leftover after parsing attributes in process `syz.2.673'. [ 177.253373][ T7510] net_ratelimit: 46 callbacks suppressed [ 177.253396][ T7510] sock: sock_set_timeout: `syz.3.675' (pid 7510) tries to set negative timeout [ 177.300266][ T7513] Illegal XDP return value 4294967274 on prog (id 66) dev N/A, expect packet loss! [ 177.511174][ T7517] binder: 7515:7517 ioctl 40046205 0 returned -22 [ 179.662719][ T7567] netlink: 28 bytes leftover after parsing attributes in process `syz.0.698'. [ 179.738412][ T975] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 179.893037][ T975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 179.893078][ T975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 179.893126][ T975] usb 3-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 179.893159][ T975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.941776][ T975] usb 3-1: config 0 descriptor?? [ 179.946334][ T7561] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 180.161296][ T7578] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 180.161491][ T7578] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 180.161665][ T7578] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 180.161863][ T7578] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 180.162046][ T7578] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 180.162212][ T7578] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 180.162374][ T7578] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 180.162540][ T7578] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 180.162708][ T7578] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 180.406689][ T975] glorious 0003:22D4:1503.000B: hidraw0: USB HID v0.00 Device [Glorious Model I] on usb-dummy_hcd.2-1/input0 [ 180.622826][ T5929] usb 3-1: USB disconnect, device number 7 [ 181.868670][ T38] audit: type=1326 audit(1757195139.431:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7626 comm="syz.3.725" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f454d3cebe9 code=0x0 [ 183.578318][ T7677] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 183.638747][ T7677] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 184.091623][ T7702] netlink: 4 bytes leftover after parsing attributes in process `syz.3.757'. [ 184.150388][ T7704] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.758'. [ 184.350431][ T7712] netlink: 8 bytes leftover after parsing attributes in process `syz.4.759'. [ 186.260669][ T7754] input: syz1 as /devices/virtual/input/input14 [ 186.338174][ T7757] Bluetooth: MGMT ver 1.23 [ 186.400614][ T7759] netlink: 'syz.0.782': attribute type 3 has an invalid length. [ 186.400638][ T7759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.782'. [ 186.400662][ T7759] netlink: 'syz.0.782': attribute type 3 has an invalid length. [ 186.400677][ T7759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.782'. [ 186.488627][ T7761] overlay: filesystem on ./file0 is read-only [ 186.707155][ T7767] loop7: detected capacity change from 0 to 7 [ 186.781688][ T7767] Dev loop7: unable to read RDB block 7 [ 186.781738][ T7767] loop7: AHDI p1 p2 [ 186.781772][ T7767] loop7: partition table partially beyond EOD, truncated [ 186.781899][ T7767] loop7: p1 start 1702000233 is beyond EOD, truncated [ 188.019261][ T7817] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 188.618047][ T7837] netlink: 24 bytes leftover after parsing attributes in process `syz.1.819'. [ 188.715912][ T7840] input: syz1 as /devices/virtual/input/input15 [ 189.225922][ T38] audit: type=1326 audit(1757195146.781:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7854 comm="syz.0.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d0d86ebe9 code=0x7ffc0000 [ 189.225981][ T38] audit: type=1326 audit(1757195146.791:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7854 comm="syz.0.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d0d86ebe9 code=0x7ffc0000 [ 189.293492][ T38] audit: type=1326 audit(1757195146.831:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7854 comm="syz.0.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f8d0d86ebe9 code=0x7ffc0000 [ 189.293545][ T38] audit: type=1326 audit(1757195146.861:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7854 comm="syz.0.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d0d86ebe9 code=0x7ffc0000 [ 189.293588][ T38] audit: type=1326 audit(1757195146.861:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7854 comm="syz.0.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d0d86ebe9 code=0x7ffc0000 [ 189.294368][ T38] audit: type=1326 audit(1757195146.861:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7854 comm="syz.0.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f8d0d86ebe9 code=0x7ffc0000 [ 189.294414][ T38] audit: type=1326 audit(1757195146.861:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7854 comm="syz.0.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d0d86ebe9 code=0x7ffc0000 [ 189.294458][ T38] audit: type=1326 audit(1757195146.861:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7854 comm="syz.0.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d0d86ebe9 code=0x7ffc0000 [ 189.298678][ T38] audit: type=1326 audit(1757195146.861:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7854 comm="syz.0.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f8d0d86ebe9 code=0x7ffc0000 [ 189.298731][ T38] audit: type=1326 audit(1757195146.871:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7854 comm="syz.0.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d0d86ebe9 code=0x7ffc0000 [ 191.078582][ T7906] net_ratelimit: 45 callbacks suppressed [ 191.078606][ T7906] openvswitch: netlink: Multiple metadata blocks provided [ 192.108433][ T31] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 192.206540][ T7941] netlink: 20 bytes leftover after parsing attributes in process `syz.2.865'. [ 192.274088][ T31] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 192.274121][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.286965][ T31] usb 1-1: config 0 descriptor?? [ 192.911678][ T31] ath6kl: mismatched byte count 0 vs. expected 12 [ 192.915217][ T31] ath6kl: Failed to init ath6kl core: -22 [ 192.915913][ T31] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 192.986342][ T7960] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.873'. [ 193.145295][ T31] usb 1-1: USB disconnect, device number 10 [ 193.348472][ T7970] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 193.348697][ T7970] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 193.348872][ T7970] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 193.349037][ T7970] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 193.349201][ T7970] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 193.349344][ T7970] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 193.349474][ T7970] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 193.349597][ T7970] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 193.349728][ T7970] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 193.542161][ T7977] ptrace attach of "./syz-executor exec"[5842] was attempted by "TIPCv2 [ 194.226067][ T7995] loop7: detected capacity change from 0 to 7 [ 194.234602][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 194.234896][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 194.241243][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 194.241288][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 194.241603][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 194.241633][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 194.241918][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 194.241949][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 194.242249][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 194.242279][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 194.242567][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 194.242598][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 194.242886][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 194.242917][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 194.243020][ T7995] ldm_validate_partition_table(): Disk read failed. [ 194.243211][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 194.243241][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 194.243645][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 194.243677][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 194.243996][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 194.244024][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 194.258376][ T7995] Dev loop7: unable to read RDB block 0 [ 194.268854][ T7995] loop7: unable to read partition table [ 194.269158][ T7995] loop7: partition table beyond EOD, truncated [ 194.269180][ T7995] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 194.700318][ T7998] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.889'. [ 194.700915][ T7997] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.889'. [ 194.706593][ T7997] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.889'. [ 194.931904][ T8003] netlink: 24 bytes leftover after parsing attributes in process `syz.4.888'. [ 195.063485][ T8007] misc userio: Invalid payload size [ 197.368479][ T5963] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 197.388463][ T5967] kernel read not supported for file /dsp1 (pid: 5967 comm: kworker/1:7) [ 197.518416][ T5963] usb 3-1: Using ep0 maxpacket: 8 [ 197.525532][ T5963] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 197.525564][ T5963] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.525586][ T5963] usb 3-1: Product: syz [ 197.525602][ T5963] usb 3-1: Manufacturer: syz [ 197.525617][ T5963] usb 3-1: SerialNumber: syz [ 197.593539][ T5963] usb 3-1: config 0 descriptor?? [ 197.606925][ T5963] gspca_main: se401-2.14.0 probing 047d:5003 [ 198.035010][ T5963] gspca_se401: ExtraFeatures: 24 [ 198.277138][ T5963] input: se401 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input16 [ 198.321915][ T5963] usb 3-1: USB disconnect, device number 8 [ 199.731439][ T38] audit: type=1326 audit(1757195157.301:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8081 comm="syz.1.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e22bbebe9 code=0x7ffc0000 [ 199.731502][ T38] audit: type=1326 audit(1757195157.301:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8081 comm="syz.1.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e22bbebe9 code=0x7ffc0000 [ 199.755580][ T38] audit: type=1326 audit(1757195157.321:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8081 comm="syz.1.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5e22b5adb9 code=0x7ffc0000 [ 199.755662][ T38] audit: type=1326 audit(1757195157.321:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8081 comm="syz.1.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5e22b5adb9 code=0x7ffc0000 [ 199.755722][ T38] audit: type=1326 audit(1757195157.321:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8081 comm="syz.1.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5e22b5adb9 code=0x7ffc0000 [ 199.760488][ T38] audit: type=1326 audit(1757195157.331:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8081 comm="syz.1.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5e22b5adb9 code=0x7ffc0000 [ 199.766420][ T38] audit: type=1326 audit(1757195157.331:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8081 comm="syz.1.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5e22b5adb9 code=0x7ffc0000 [ 199.766487][ T38] audit: type=1326 audit(1757195157.331:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8081 comm="syz.1.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5e22b5adb9 code=0x7ffc0000 [ 199.766537][ T38] audit: type=1326 audit(1757195157.331:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8081 comm="syz.1.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5e22b5adb9 code=0x7ffc0000 [ 199.771270][ T38] audit: type=1326 audit(1757195157.341:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8081 comm="syz.1.924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5e22b5adb9 code=0x7ffc0000 [ 199.832316][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.832399][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.739998][ T8118] netlink: 36 bytes leftover after parsing attributes in process `syz.1.940'. [ 201.002309][ T8124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.943'. [ 201.362700][ T8134] netlink: 'syz.2.947': attribute type 6 has an invalid length. [ 201.412108][ T8135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.948'. [ 206.538526][ T5963] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 206.749084][ T5963] usb 1-1: config 0 has an invalid interface number: 209 but max is 0 [ 206.749115][ T5963] usb 1-1: config 0 has no interface number 0 [ 206.749166][ T5963] usb 1-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=53.a6 [ 206.749192][ T5963] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.811536][ T5963] usb 1-1: config 0 descriptor?? [ 206.838138][ T5963] ftdi_sio 1-1:0.209: FTDI USB Serial Device converter detected [ 206.856115][ T5963] ftdi_sio ttyUSB0: unknown device type: 0x53a6 [ 207.060296][ T975] usb 1-1: USB disconnect, device number 11 [ 207.086951][ T975] ftdi_sio 1-1:0.209: device disconnected [ 207.672147][ T8169] input: syz0 as /devices/virtual/input/input17 [ 210.388418][ T5826] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 210.538374][ T5826] usb 5-1: Using ep0 maxpacket: 16 [ 210.546070][ T5826] usb 5-1: config 4 has an invalid interface number: 9 but max is 0 [ 210.546174][ T5826] usb 5-1: config 4 has no interface number 0 [ 210.546211][ T5826] usb 5-1: config 4 interface 9 has no altsetting 0 [ 210.588354][ T5826] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 210.588389][ T5826] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.588411][ T5826] usb 5-1: Product: syz [ 210.588427][ T5826] usb 5-1: Manufacturer: syz [ 210.588451][ T5826] usb 5-1: SerialNumber: syz [ 210.701700][ T8196] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 210.743796][ T8196] bridge0: entered allmulticast mode [ 210.844427][ T5826] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 211.786034][ T8153] usb 5-1: USB disconnect, device number 6 [ 211.868795][ T6653] usb 5-1: Failed to submit usb control message: -71 [ 211.868837][ T6653] usb 5-1: unable to send the bmi data to the device: -71 [ 211.868858][ T6653] usb 5-1: unable to get target info from device [ 211.868875][ T6653] usb 5-1: could not get target info (-71) [ 211.868914][ T6653] usb 5-1: could not probe fw (-71) [ 212.198474][ T5967] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 212.426495][ T5967] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 212.426529][ T5967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.426552][ T5967] usb 3-1: Product: syz [ 212.426568][ T5967] usb 3-1: Manufacturer: syz [ 212.426584][ T5967] usb 3-1: SerialNumber: syz [ 212.473126][ T5967] usb 3-1: config 0 descriptor?? [ 212.806475][ T5967] usb 3-1: USB disconnect, device number 9 [ 213.003976][ T8214] netlink: 'syz.4.983': attribute type 1 has an invalid length. [ 213.004003][ T8214] netlink: 'syz.4.983': attribute type 2 has an invalid length. [ 213.294944][ T8218] hub 1-0:1.0: USB hub found [ 213.316762][ T8218] hub 1-0:1.0: 1 port detected [ 221.867277][ T5157] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 221.896974][ T5157] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 221.906282][ T5157] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 221.917440][ T5157] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 221.931896][ T5157] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 222.524548][ T8257] chnl_net:caif_netlink_parms(): no params data found [ 224.048784][ T5839] Bluetooth: hci5: command tx timeout [ 225.311476][ T5157] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 225.345441][ T5157] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 225.356510][ T5157] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 225.372249][ T5157] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 225.386762][ T5157] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 226.128368][ T5157] Bluetooth: hci5: command tx timeout [ 227.408836][ T5157] Bluetooth: hci6: command tx timeout [ 228.208523][ T5157] Bluetooth: hci5: command tx timeout [ 229.435489][ T5839] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 229.473851][ T5839] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 229.475335][ T5839] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 229.476844][ T5839] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 229.498412][ T5839] Bluetooth: hci6: command tx timeout [ 229.507542][ T5839] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 230.289135][ T5157] Bluetooth: hci5: command tx timeout [ 231.570137][ T5157] Bluetooth: hci7: command tx timeout [ 231.570595][ T5157] Bluetooth: hci6: command tx timeout [ 233.648895][ T5838] Bluetooth: hci6: command tx timeout [ 233.648933][ T5838] Bluetooth: hci7: command tx timeout [ 235.656541][ C1] net_ratelimit: 45 callbacks suppressed [ 235.656564][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 235.728559][ T5157] Bluetooth: hci7: command tx timeout [ 236.882809][ T5838] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 236.905518][ T5838] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 236.906858][ T5838] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 236.911473][ T5838] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 237.176932][ T5838] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 237.808915][ T5838] Bluetooth: hci7: command tx timeout [ 239.248809][ T5838] Bluetooth: hci8: command tx timeout [ 241.328969][ T5838] Bluetooth: hci8: command tx timeout [ 243.414782][ T5838] Bluetooth: hci8: command tx timeout [ 244.431689][ T5157] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 244.479136][ T5157] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 244.480710][ T5157] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 244.482600][ T5157] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 244.483516][ T5157] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 245.488661][ T5157] Bluetooth: hci8: command tx timeout [ 246.608571][ T5157] Bluetooth: hci9: command tx timeout [ 248.698151][ T5157] Bluetooth: hci9: command tx timeout [ 250.768746][ T5157] Bluetooth: hci9: command tx timeout [ 252.852067][ T5157] Bluetooth: hci9: command tx timeout [ 261.312516][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.312603][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 283.412879][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 283.417811][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 283.420376][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 283.421734][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 283.422622][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 285.498411][ T5838] Bluetooth: hci0: command tx timeout [ 285.871963][ T5157] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 285.886477][ T5157] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 285.887857][ T5157] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 285.889530][ T5157] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 285.896206][ T5157] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 287.568849][ T5838] Bluetooth: hci0: command tx timeout [ 287.968869][ T5838] Bluetooth: hci1: command tx timeout [ 289.649197][ T5838] Bluetooth: hci0: command tx timeout [ 289.825559][ T5157] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 289.851130][ T5157] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 289.852603][ T5157] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 289.854034][ T5157] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 289.855000][ T5157] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 290.048775][ T5157] Bluetooth: hci1: command tx timeout [ 291.728662][ T5157] Bluetooth: hci0: command tx timeout [ 291.968979][ T5157] Bluetooth: hci2: command tx timeout [ 292.136779][ T5157] Bluetooth: hci1: command tx timeout [ 294.048673][ T5157] Bluetooth: hci2: command tx timeout [ 294.208378][ T5157] Bluetooth: hci1: command tx timeout [ 296.128834][ T5157] Bluetooth: hci2: command tx timeout [ 297.872105][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 297.945976][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 297.969267][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 297.990290][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 297.991176][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 298.208500][ T5838] Bluetooth: hci2: command tx timeout [ 300.048454][ T5838] Bluetooth: hci3: command tx timeout [ 302.128790][ T5838] Bluetooth: hci3: command tx timeout [ 304.219894][ T5838] Bluetooth: hci3: command tx timeout [ 304.924712][ T5157] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 304.943930][ T5157] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 304.945350][ T5157] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 304.946771][ T5157] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 304.947724][ T5157] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 306.288473][ T5157] Bluetooth: hci3: command tx timeout [ 307.088586][ T5157] Bluetooth: hci4: command tx timeout [ 309.177571][ T5157] Bluetooth: hci4: command tx timeout [ 311.248464][ T5157] Bluetooth: hci4: command tx timeout [ 313.355572][ T5157] Bluetooth: hci4: command tx timeout [ 322.700387][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.700471][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 342.991035][ T5838] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 343.010358][ T5838] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 343.012913][ T5838] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 343.014350][ T5838] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 343.015664][ T5838] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 345.090637][ T5157] Bluetooth: hci10: command tx timeout [ 345.250071][ T5839] Bluetooth: hci5: command 0x0406 tx timeout [ 346.006490][ T5157] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 346.041459][ T5157] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 346.042923][ T5157] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 346.044407][ T5157] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 346.074187][ T5157] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 347.171086][ T5839] Bluetooth: hci10: command tx timeout [ 349.248930][ T59] Bluetooth: hci10: command tx timeout [ 349.976268][ T5845] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 350.008543][ T5845] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 350.010725][ T5845] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 350.012150][ T5845] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 350.059771][ T5845] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 350.368407][ T59] Bluetooth: hci6: command 0x0406 tx timeout [ 351.328607][ T59] Bluetooth: hci10: command tx timeout [ 353.412957][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 355.499588][ T59] Bluetooth: hci7: command 0x0406 tx timeout [ 357.496476][ T5843] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 357.532765][ T5843] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 357.535001][ T5843] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 357.536441][ T5843] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 357.537662][ T5843] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 357.806687][ T8257] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR [ 360.608500][ T8327] Bluetooth: hci8: command 0x0406 tx timeout [ 366.191512][ T8327] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 366.231343][ T8327] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 366.318549][ T8327] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 366.329362][ T8327] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 366.330296][ T8327] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 371.430487][ T5845] Bluetooth: hci12: command tx timeout [ 373.488520][ T5157] Bluetooth: hci11: command tx timeout [ 373.488999][ T5157] Bluetooth: hci12: command tx timeout [ 375.568423][ T5157] Bluetooth: hci11: command tx timeout [ 375.570314][ T5839] Bluetooth: hci12: command tx timeout [ 377.651113][ T5157] Bluetooth: hci11: command tx timeout [ 377.652536][ T5839] Bluetooth: hci12: command tx timeout [ 379.728410][ T59] Bluetooth: hci11: command tx timeout [ 384.145638][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.145725][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 397.808725][ T5838] Bluetooth: hci13: command tx timeout [ 397.809277][ T59] Bluetooth: hci14: command tx timeout [ 399.898470][ T59] Bluetooth: hci14: command tx timeout [ 399.898516][ T59] Bluetooth: hci13: command tx timeout [ 401.968796][ T5838] Bluetooth: hci13: command tx timeout [ 401.968835][ T5838] Bluetooth: hci14: command tx timeout [ 403.554304][ T5838] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 403.596152][ T5838] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 403.611793][ T5838] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 403.613247][ T5838] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 403.614204][ T5838] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 404.051060][ T59] Bluetooth: hci14: command tx timeout [ 404.051094][ T59] Bluetooth: hci13: command tx timeout [ 406.607944][ T5847] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 406.633175][ T5847] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 406.634686][ T5847] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 406.635984][ T5847] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 406.637590][ T5847] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 406.694583][ T5847] Bluetooth: hci0: command 0x0406 tx timeout [ 410.100108][ T5157] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 410.124716][ T5157] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 410.126105][ T5157] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 410.127450][ T5157] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 410.157385][ T5157] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 411.809619][ T5839] Bluetooth: hci1: command 0x0406 tx timeout [ 416.939003][ T5839] Bluetooth: hci2: command 0x0406 tx timeout [ 417.765582][ T8327] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 417.796733][ T8327] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 417.818534][ T8327] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 417.837057][ T8327] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 417.847833][ T8327] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 422.130063][ T8360] Bluetooth: hci3: command 0x0406 tx timeout [ 425.263984][ T8324] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 425.291078][ T8324] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 425.293030][ T8324] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 425.294411][ T8324] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 425.323438][ T8324] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 427.178489][ T8324] Bluetooth: hci4: command 0x0406 tx timeout [ 437.248557][ T39] INFO: task syz.0.986:8219 blocked for more than 143 seconds. [ 437.248588][ T39] Not tainted syzkaller #0 [ 437.248600][ T39] Blocked by coredump. [ 437.248606][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 437.248620][ T39] task:syz.0.986 state:D stack:25128 pid:8219 tgid:8219 ppid:5837 task_flags:0x40044c flags:0x00004006 [ 437.248699][ T39] Call Trace: [ 437.248707][ T39] [ 437.248723][ T39] __schedule+0x16f3/0x4c20 [ 437.248778][ T39] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 437.248806][ T39] ? arch_stack_walk+0xfc/0x150 [ 437.248859][ T39] ? __pfx___schedule+0x10/0x10 [ 437.248923][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 437.248960][ T39] rt_mutex_schedule+0x77/0xf0 [ 437.248982][ T39] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 437.249011][ T39] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 437.249059][ T39] rt_mutex_slowlock+0x2b1/0x6e0 [ 437.249091][ T39] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 437.249121][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 437.249168][ T39] ? __pfx___fsnotify_parent+0x10/0x10 [ 437.249210][ T39] ? tun_chr_close+0x41/0x1c0 [ 437.249250][ T39] mutex_lock_nested+0x16a/0x1d0 [ 437.249281][ T39] ? __pfx_tun_chr_close+0x10/0x10 [ 437.249317][ T39] tun_chr_close+0x41/0x1c0 [ 437.249354][ T39] __fput+0x45b/0xa80 [ 437.249391][ T39] task_work_run+0x1d4/0x260 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 437.249419][ T39] ? __pfx_task_work_run+0x10/0x10 [ 437.249445][ T39] ? do_exit+0x6b0/0x2300 [ 437.249465][ T39] ? kmem_cache_free+0x195/0x510 [ 437.249504][ T39] do_exit+0x6b5/0x2300 [ 437.249525][ T39] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 437.249568][ T39] ? __lock_acquire+0xab9/0xd20 [ 437.249602][ T39] ? __pfx_do_exit+0x10/0x10 [ 437.249621][ T39] ? rt_mutex_slowunlock+0x493/0x8a0 [ 437.249654][ T39] ? rt_spin_lock+0x1bb/0x2c0 [ 437.249693][ T39] do_group_exit+0x21c/0x2d0 [ 437.249722][ T39] get_signal+0x125e/0x1310 [ 437.249777][ T39] arch_do_signal_or_restart+0x9a/0x750 [ 437.249809][ T39] ? blkcg_maybe_throttle_current+0x1a8/0xbc0 [ 437.249836][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 437.249872][ T39] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 437.249920][ T39] ? exit_to_user_mode_loop+0x40/0x110 [ 437.249955][ T39] exit_to_user_mode_loop+0x75/0x110 [ 437.249988][ T39] do_syscall_64+0x2bd/0x3b0 [ 437.250010][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 437.250045][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.250068][ T39] ? clear_bhb_loop+0x60/0xb0 [ 437.250097][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.250126][ T39] RIP: 0033:0x7f8d0d86ebe9 [ 437.250150][ T39] RSP: 002b:00007ffc7a5cb9b8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 437.250173][ T39] RAX: 0000000000000000 RBX: 0000000000033f46 RCX: 00007f8d0d86ebe9 [ 437.250189][ T39] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 437.250203][ T39] RBP: 00007f8d0daa7da0 R08: 0000000000000001 R09: 000000047a5cbcaf [ 437.250229][ T39] R10: 0000001b30720000 R11: 0000000000000246 R12: 00007f8d0daa5fac [ 437.250245][ T39] R13: 00007f8d0daa5fa0 R14: ffffffffffffffff R15: 00007ffc7a5cbad0 [ 437.250281][ T39] [ 437.250298][ T39] INFO: task syz-executor:8292 blocked for more than 143 seconds. [ 437.250313][ T39] Not tainted syzkaller #0 [ 437.250325][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 437.250335][ T39] task:syz-executor state:D stack:25416 pid:8292 tgid:8292 ppid:1 task_flags:0x400140 flags:0x00004004 [ 437.250403][ T39] Call Trace: [ 437.250411][ T39] [ 437.250424][ T39] __schedule+0x16f3/0x4c20 [ 437.250487][ T39] ? __pfx___schedule+0x10/0x10 [ 437.250542][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 437.250580][ T39] rt_mutex_schedule+0x77/0xf0 [ 437.250602][ T39] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 437.250631][ T39] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 437.250678][ T39] rt_mutex_slowlock+0x2b1/0x6e0 [ 437.250710][ T39] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 437.250740][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 437.250765][ T39] ? __lock_acquire+0xab9/0xd20 [ 437.250818][ T39] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 437.250852][ T39] ? is_bpf_text_address+0x26/0x2b0 [ 437.250891][ T39] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 437.250913][ T39] mutex_lock_nested+0x16a/0x1d0 [ 437.250948][ T39] inet_rtm_newaddr+0x3b0/0x18b0 [ 437.250985][ T39] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 437.251032][ T39] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 437.251057][ T39] rtnetlink_rcv_msg+0x7cf/0xb70 [ 437.251090][ T39] ? __lock_acquire+0xab9/0xd20 [ 437.251123][ T39] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 437.251155][ T39] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 437.251207][ T39] netlink_rcv_skb+0x205/0x470 [ 437.251246][ T39] ? __lock_acquire+0xab9/0xd20 [ 437.251278][ T39] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 437.251312][ T39] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 437.251359][ T39] ? netlink_deliver_tap+0x2e/0x1b0 [ 437.251402][ T39] netlink_unicast+0x843/0xa10 [ 437.251441][ T39] ? __pfx_netlink_unicast+0x10/0x10 [ 437.251473][ T39] ? netlink_sendmsg+0x642/0xb30 [ 437.251504][ T39] ? skb_put+0x11b/0x210 [ 437.251543][ T39] netlink_sendmsg+0x805/0xb30 [ 437.251588][ T39] ? __pfx_netlink_sendmsg+0x10/0x10 [ 437.251631][ T39] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 437.251655][ T39] ? __pfx_netlink_sendmsg+0x10/0x10 [ 437.251690][ T39] __sock_sendmsg+0x219/0x270 [ 437.251724][ T39] __sys_sendto+0x3c7/0x520 [ 437.251763][ T39] ? __pfx___sys_sendto+0x10/0x10 [ 437.251830][ T39] ? exc_page_fault+0x76/0xf0 [ 437.251868][ T39] ? do_user_addr_fault+0xc8a/0x1390 [ 437.251904][ T39] __x64_sys_sendto+0xde/0x100 [ 437.251943][ T39] do_syscall_64+0xfa/0x3b0 [ 437.251964][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 437.251998][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.252022][ T39] ? clear_bhb_loop+0x60/0xb0 [ 437.252050][ T39] entry_SYSCALL_64_after_h[ 437.252050][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.252073][ T39] RIP: 0033:0x7fca6be90a7c [ 437.252092][ T39] RSP: 002b:00007ffcd5beaa70 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 437.252115][ T39] RAX: ffffffffffffffda RBX: 00007fca6cbf4620 RCX: 00007fca6be90a7c [ 437.252132][ T39] RDX: 0000000000000028 RSI: 00007fca6cbf4670 RDI: 0000000000000003 [ 437.252147][ T39] RBP: 0000000000000000 R08: 00007ffcd5beaac4 R09: 000000000000000c [ 437.252162][ T39] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 437.252175][ T39] R13: 0000000000000000 R14: 00007fca6cbf4670 R15: 0000000000000000 [ 437.252210][ T39] [ 437.252227][ T39] INFO: task syz-executor:8295 blocked for more than 143 seconds. [ 437.252243][ T39] Not tainted syzkaller #0 [ 437.252254][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 437.252265][ T39] task:syz-executor state:D stack:26952 pid:8295 tgid:8295 ppid:1 task_flags:0x400140 flags:0x00004004 [ 437.252335][ T39] Call Trace: [ 437.252343][ T39] [ 437.252357][ T39] __schedule+0x16f3/0x4c20 [ 437.252420][ T39] ? __pfx___schedule+0x10/0x10 [ 437.252474][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 437.252514][ T39] rt_mutex_schedule+0x77/0xf0 [ 437.252536][ T39] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 437.252565][ T39] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 437.252613][ T39] rt_mutex_slowlock+0x2b1/0x6e0 [ 437.252644][ T39] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 437.252674][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 437.252700][ T39] ? __lock_acquire+0xab9/0xd20 [ 437.252744][ T39] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 437.252777][ T39] ? is_bpf_text_address+0x26/0x2b0 [ 437.252814][ T39] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 437.252838][ T39] mutex_lock_nested+0x16a/0x1d0 [ 437.252872][ T39] inet_rtm_newaddr+0x3b0/0x18b0 [ 437.252909][ T39] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 437.252956][ T39] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 437.252981][ T39] rtnetlink_rcv_msg+0x7cf/0xb70 [ 437.253012][ T39] ? __lock_acquire+0xab9/0xd20 [ 437.253046][ T39] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 437.253078][ T39] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 437.253130][ T39] netlink_rcv_skb+0x205/0x470 [ 437.253160][ T39] ? __lock_acquire+0xab9/0xd20 [ 437.253192][ T39] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 437.253233][ T39] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 437.253279][ T39] ? netlink_deliver_tap+0x2e/0x1b0 [ 437.253321][ T39] netlink_unicast+0x843/0xa10 [ 437.253361][ T39] ? __pfx_netlink_unicast+0x10/0x10 [ 437.253393][ T39] ? netlink_sendmsg+0x642/0xb30 [ 437.253424][ T39] ? skb_put+0x11b/0x210 [ 437.253464][ T39] netlink_sendmsg+0x805/0xb30 [ 437.253509][ T39] ? __pfx_netlink_sendmsg+0x10/0x10 [ 437.253552][ T39] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 437.253576][ T39] ? __pfx_netlink_sendmsg+0x10/0x10 [ 437.253609][ T39] __sock_sendmsg+0x219/0x270 [ 437.253642][ T39] __sys_sendto+0x3c7/0x520 [ 437.253681][ T39] ? __pfx___sys_sendto+0x10/0x10 [ 437.253747][ T39] ? exc_page_fault+0x76/0xf0 [ 437.253786][ T39] ? do_user_addr_fault+0xc8a/0x1390 [ 437.253819][ T39] __x64_sys_sendto+0xde/0x100 [ 437.253858][ T39] do_syscall_64+0xfa/0x3b0 [ 437.253878][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 437.253913][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.253936][ T39] ? clear_bhb_loop+0x60/0xb0 [ 437.253965][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.253988][ T39] RIP: 0033:0x7f9be5670a7c [ 437.254006][ T39] RSP: 002b:00007fff9bb23fb0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 437.254028][ T39] RAX: ffffffffffffffda RBX: 00007f9be63d4620 RCX: 00007f9be5670a7c [ 437.254046][ T39] RDX: 0000000000000028 RSI: 00007f9be63d4670 RDI: 0000000000000003 [ 437.254061][ T39] RBP: 0000000000000000 R08: 00007fff9bb24004 R09: 000000000000000c [ 437.254075][ T39] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 437.254090][ T39] R13: 0000000000000000 R14: 00007f9be63d4670 R15: 0000000000000000 [ 437.254124][ T39] [ 437.254133][ T39] INFO: task syz-executor:8298 blocked for more than 143 seconds. [ 437.254149][ T39] Not tainted syzkaller #0 [ 437.254160][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 437.254170][ T39] task:syz-executor state:D stack:26952 pid:8298 tgid:8298 ppid:1 task_flags:0x400140 flags:0x00004004 [ 437.254246][ T39] Call Trace: [ 437.254254][ T39] [ 437.254267][ T39] __schedule+0x16f3/0x4c20 [ 437.254330][ T39] ? __pfx___schedule+0x10/0x10 [ 437.254384][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 437.254423][ T39] rt_mutex_schedule+0x77/0xf0 [ 437.254445][ T39] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 437.254473][ T39] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 437.254521][ T39] rt_mutex_slowlock+0x2b1/0x6e0 [ 437.254552][ T39] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 437.254582][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 437.254608][ T39] ? __lock_acquire+0xab9/0xd20 [ 437.254651][ T39] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 437.254684][ T39] ? is_bpf_text_address+0x26/0x2b0 [ 437.254723][ T39] ? inet_rtm_newaddr+0x3b0/0x18b0 [ 437.254745][ T39] mutex_lock_nested+0x16a/0x1d0 [ 437.254779][ T39] inet_rtm_newaddr+0x3b0/0x18b0 [ 437.254816][ T39] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 437.254862][ T39] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 437.254887][ T39] rtnetlink_rcv_msg+0x7cf/0xb70 [ 437.254918][ T39] ? __lock_acquire+0xab9/0xd20 [ 437.254952][ T39] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 437.254984][ T39] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 437.255036][ T39] netlink_rcv_skb+0x205/0x470 [ 437.255066][ T39] ? __lock_acquire+0xab9/0xd20 [ 437.255112][ T39] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 437.255147][ T39] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 437.255193][ T39] ? netlink_deliver_tap+0x2e/0x1b0 [ 437.255241][ T39] netlink_unicast+0x843/0xa10 [ 437.255281][ T39] ? __pfx_netlink_unicast+0x10/0x10 [ 437.255313][ T39] ? netlink_sendmsg+0x642/0xb30 [ 437.255344][ T39] ? skb_put+0x11b/0x210 [ 437.255383][ T39] netlink_sendmsg+0x805/0xb30 [ 437.255428][ T39] ? __pfx_netlink_sendmsg+0x10/0x10 [ 437.255471][ T39] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 437.255495][ T39] ? __pfx_netlink_sendmsg+0x10/0x10 [ 437.255530][ T39] __sock_sendmsg+0x219/0x270 [ 437.255564][ T39] __sys_sendto+0x3c7/0x520 [ 437.255602][ T39] ? __pfx___sys_sendto+0x10/0x10 [ 437.255668][ T39] ? exc_page_fault+0x76/0xf0 [ 437.255706][ T39] ? do_user_addr_fault+0xc8a/0x1390 [ 437.255740][ T39] __x64_sys_sendto+0xde/0x100 [ 437.255779][ T39] do_syscall_64+0xfa/0x3b0 [ 437.255799][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 437.255833][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.255856][ T39] ? clear_bhb_loop+0x60/0xb0 [ 437.255886][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.255909][ T39] RIP: 0033:0x7f29c1c40a7c [ 437.255927][ T39] RSP: 002b:00007ffc3da08970 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 437.255950][ T39] RAX: ffffffffffffffda RBX: 00007f29c29a4620 RCX: 00007f29c1c40a7c [ 437.255966][ T39] RDX: 0000000000000028 RSI: 00007f29c29a4670 RDI: 0000000000000003 [ 437.255982][ T39] RBP: 0000000000000000 R08: 00007ffc3da089c4 R09: 000000000000000c [ 437.255996][ T39] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 437.256010][ T39] R13: 0000000000000000 R14: 00007f29c29a4670 R15: 0000000000000000 [ 437.256045][ T39] [ 437.256083][ T39] [ 437.256083][ T39] Showing all locks held in the system: [ 437.256097][ T39] 2 locks held by rcuc/1/28: [ 437.256110][ T39] #0: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 437.256172][ T39] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 437.256246][ T39] 7 locks held by ktimers/1/29: [ 437.256260][ T39] 4 locks held by kworker/1:0/31: [ 437.256272][ T39] #0: ffff88805c9dc138 ((wq_completion)wg-crypt-wg0){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 437.256333][ T39] #1: ffffc90000a5fbc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 437.256394][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 437.256453][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 437.256514][ T39] 1 lock held by khungtaskd/39: [ 437.256527][ T39] #0: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 437.256581][ T39] 4 locks held by kworker/1:1/44: [ 437.256596][ T39] 4 locks held by kworker/u8:3/57: [ 437.256609][ T39] #0: ffff88801a6f4138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 437.256668][ T39] #1: ffffc9000123fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 437.256728][ T39] #2: ffffffff8ecc6280 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 437.256790][ T39] #3: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: wg_netns_pre_exit+0x1c/0x1d0 [ 437.256848][ T39] 4 locks held by kworker/u9:0/59: [ 437.256861][ T39] #0: ffff88803b8dc938 ((wq_completion)hci6#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 437.256926][ T39] #1: ffffc9000125fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 437.256986][ T39] #2: ffff88805d6480a8 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xb1/0x1220 [ 437.257049][ T39] #3: ffffffff8ee3ab38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 [ 437.257147][ T39] 4 locks held by kworker/u9:1/5157: [ 437.257160][ T39] #0: ffff888060009938 ((wq_completion)hci15#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 437.257233][ T39] #1: ffffc9000fcbfbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 437.257293][ T39] #2: ffff88806e1ec0a8 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xb1/0x1220 [ 437.257356][ T39] #3: ffffffff8ee3ab38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 [ 437.257419][ T39] 2 locks held by getty/5599: [ 437.257432][ T39] #0: ffff88823bf728a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 437.257498][ T39] #1: ffffc90003e762e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 437.257559][ T39] 4 locks held by kworker/u9:2/5838: [ 437.257572][ T39] #0: ffff8880384ec938 ((wq_completion)hci5#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 437.257636][ T39] #1: ffffc90004d27bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 437.257696][ T39] #2: ffff88805f7f00a8 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xb1/0x1220 [ 437.257758][ T39] #3: ffffffff8ee3ab38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 [ 437.257819][ T39] 4 locks held by kworker/u9:3/5839: [ 437.257832][ T39] #0: ffff88805dd96938 ((wq_completion)hci7#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 437.257896][ T39] #1: ffffc90004d37bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 437.257957][ T39] #2: ffff888065a2c0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 437.258014][ T39] #3: ffffffff8ee3ab38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 437.258072][ T39] 6 locks held by kworker/u9:5/5845: [ 437.258085][ T39] #0: ffff88805fcb6138 ((wq_completion)hci2#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 437.649020][ T39] #1: ffffc90004da7bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 437.649083][ T39] #2: ffff888039150e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 437.649140][ T39] #3: ffff8880391500a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 437.649213][ T39] #4: ffffffff8ee3ab38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 437.649277][ T39] #5: ffff88803c9b6358 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 437.649351][ T39] 4 locks held by kworker/u9:6/5847: [ 437.649365][ T39] #0: ffff88806000c138 ((wq_completion)hci1#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 437.649430][ T39] #1: ffffc90004db7bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 437.649490][ T39] #2: ffff8880304c4e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 437.649544][ T39] #3: ffff8880304c40a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 437.649620][ T39] 4 locks held by kworker/1:5/5926: [ 437.649633][ T39] #0: ffff88805d0a1d38 ((wq_completion)wg-crypt-wg2#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 437.649698][ T39] #1: ffffc90005327bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 437.649780][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 437.649839][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 437.649900][ T39] 4 locks held by kworker/1:6/5929: [ 437.649913][ T39] #0: ffff88805cd3a138 ((wq_completion)wg-crypt-wg1#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 437.649979][ T39] #1: ffffc90005357bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 437.650061][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 437.650120][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 437.650191][ T39] 4 locks held by kworker/1:7/5967: [ 437.650204][ T39] #0: ffff888019899138 ((wq_completion)events_long){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 437.650264][ T39] #1: ffffc90005ca7bc0 ((work_completion)(&(&ipvs->defense_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 437.650324][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 437.650383][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 437.650444][ T39] 3 locks held by kworker/u8:15/6638: [ 437.650457][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 437.650517][ T39] #1: ffffc9000ca4fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 437.650577][ T39] #2: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 437.650632][ T39] 3 locks held by kworker/u8:20/6647: [ 437.650645][ T39] #0: ffff88814d1cc138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 437.650705][ T39] #1: ffffc9000b93fbc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 437.650767][ T39] #2: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 437.650826][ T39] 4 locks held by kworker/u8:25/6652: [ 437.650841][ T39] 2 locks held by kworker/u8:34/6665: [ 437.650856][ T39] 4 locks held by kworker/1:8/8153: [ 437.650868][ T39] #0: ffff88805cdbb138 ((wq_completion)wg-crypt-wg0#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 437.650934][ T39] #1: ffffc9000600fbc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 437.650996][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 437.651054][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 437.651114][ T39] 1 lock held by syz.0.986/8219: [ 437.651127][ T39] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 437.651200][ T39] 1 lock held by syz-executor/8257: [ 437.651213][ T39] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 437.651277][ T39] 4 locks held by kworker/1:11/8262: [ 437.651290][ T39] #0: ffff88805cd39138 ((wq_completion)wg-crypt-wg2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 437.651350][ T39] #1: ffffc90004897bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 437.651432][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 437.651491][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 437.651553][ T39] 1 lock held by syz.4.1004/8267: [ 437.651565][ T39] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 437.651629][ T39] 3 locks held by kworker/1:12/8274: [ 437.651642][ T39] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 437.651702][ T39] #1: ffffc900047bfbc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 437.651761][ T39] #2: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 437.651817][ T39] 4 locks held by kworker/1:13/8286: [ 437.651830][ T39] #0: ffff88805c9dc138 ((wq_completion)wg-crypt-wg0){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 437.651890][ T39] #1: ffffc900041ffbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 437.651981][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 437.652040][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 437.652101][ T39] 4 locks held by kworker/1:14/8287: [ 437.652114][ T39] #0: ffff88805c9a8938 ((wq_completion)wg-crypt-wg1){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 437.652176][ T39] #1: ffffc900042cfbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 437.652268][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 437.652326][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 437.652387][ T39] 4 locks held by kworker/1:15/8288: [ 437.652401][ T39] #0: ffff88802a260938 ((wq_completion)wg-crypt-wg0#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 437.652466][ T39] #1: ffffc900041afbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 437.652550][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 437.652609][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 437.652670][ T39] 1 lock held by syz-executor/8292: [ 437.652683][ T39] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 437.652739][ T39] 1 lock held by syz-executor/8295: [ 437.652752][ T39] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 437.652809][ T39] 1 lock held by syz-executor/8298: [ 437.652821][ T39] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 437.652876][ T39] 1 lock held by syz-executor/8301: [ 437.652889][ T39] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 437.652944][ T39] 1 lock held by syz-executor/8304: [ 437.652958][ T39] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 437.653015][ T39] 1 lock held by syz-executor/8313: [ 437.653028][ T39] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 437.653083][ T39] 1 lock held by syz-executor/8317: [ 437.653097][ T39] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 437.653152][ T39] 1 lock held by syz-executor/8320: [ 437.653164][ T39] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 437.653227][ T39] 1 lock held by syz-executor/8323: [ 437.653240][ T39] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 437.653296][ T39] 5 locks held by kworker/u9:8/8327: [ 437.653309][ T39] #0: ffff88805d78f138 ((wq_completion)hci3#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 437.653374][ T39] #1: ffffc9000467fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 437.653436][ T39] #2: ffff88805fd38e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 437.653491][ T39] #3: ffff88805fd380a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 437.653553][ T39] #4: ffffffff8ee3ab38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 437.653619][ T39] 1 lock held by syz-executor/8329: [ 437.653631][ T39] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 437.653687][ T39] 4 locks held by kworker/1:18/8337: [ 437.653700][ T39] #0: ffff88805cd39d38 ((wq_completion)wg-kex-wg1#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 437.653765][ T39] #1: ffffc90003f97bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 437.653849][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 437.653908][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 437.653969][ T39] 4 locks held by kworker/1:19/8338: [ 437.653982][ T39] #0: ffff88805d087d38 ((wq_completion)wg-crypt-wg1#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 437.654049][ T39] #1: ffffc90003fbfbc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 437.654110][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 437.654168][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 437.654238][ T39] 4 locks held by kworker/1:20/8339: [ 437.654252][ T39] #0: ffff88805d086538 ((wq_completion)wg-crypt-wg0#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 437.654318][ T39] #1: ffffc90003fcfbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 437.654401][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 437.654460][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 437.654521][ T39] 1 lock held by syz-executor/8344: [ 437.654534][ T39] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 437.654589][ T39] 1 lock held by syz-executor/8347: [ 437.654603][ T39] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 437.654657][ T39] 4 locks held by kworker/1:23/8349: [ 437.654671][ T39] #0: ffff88805cdbb138 ((wq_completion)wg-crypt-wg0#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 437.654736][ T39] #1: ffffc9000401fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 437.654821][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 437.654880][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 437.654941][ T39] 4 locks held by kworker/1:24/8350: [ 437.654954][ T39] #0: ffff88805d096138 ((wq_completion)wg-crypt-wg1#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 437.655020][ T39] #1: ffffc9000402fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 437.655103][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 437.655161][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 437.655228][ T39] 4 locks held by kworker/1:25/8351: [ 437.655241][ T39] #0: ffff88805d086538 ((wq_completion)wg-crypt-wg0#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 437.655305][ T39] #1: ffffc9000403fbc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 437.655366][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 437.655424][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 437.655485][ T39] 1 lock held by syz-executor/8355: [ 437.655498][ T39] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 437.655552][ T39] 1 lock held by syz-executor/8358: [ 437.655565][ T39] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 437.655619][ T39] 5 locks held by kworker/u9:9/8360: [ 437.655632][ T39] #0: ffff88805fe2c938 ((wq_completion)hci4#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 437.655696][ T39] #1: ffffc9000408fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 437.655757][ T39] #2: ffff8880278e8e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 437.655814][ T39] #3: ffff8880278e80a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 437.655877][ T39] #4: ffffffff8ee3ab38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 437.655942][ T39] 4 locks held by kworker/u9:10/8362: [ 437.655955][ T39] #0: ffff88803b8dc138 ((wq_completion)hci8#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 437.656020][ T39] #1: ffffc90004927bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 437.656080][ T39] #2: ffff88807b2180a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 437.656138][ T39] #3: ffffffff8ee3ab38 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 437.656203][ T39] 1 lock held by syz-executor/8363: [ 437.656216][ T39] #0: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 437.656274][ T39] [ 437.656280][ T39] ============================================= [ 437.656280][ T39] [ 437.656307][ T39] NMI backtrace for cpu 0 [ 437.656335][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 437.656361][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 437.656375][ T39] Call Trace: [ 437.656383][ T39] [ 437.656394][ T39] dump_stack_lvl+0x189/0x250 [ 437.656435][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 437.656469][ T39] ? __pfx__printk+0x10/0x10 [ 437.656509][ T39] nmi_cpu_backtrace+0x39e/0x3d0 [ 437.656542][ T39] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 437.656573][ T39] ? __pfx__printk+0x10/0x10 [ 437.656604][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 437.656636][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 437.656674][ T39] watchdog+0xf93/0xfe0 [ 437.656711][ T39] ? watchdog+0x1de/0xfe0 [ 437.656748][ T39] kthread+0x70e/0x8a0 [ 437.656786][ T39] ? __pfx_watchdog+0x10/0x10 [ 437.656814][ T39] ? __pfx_kthread+0x10/0x10 [ 437.656856][ T39] ? __pfx_kthread+0x10/0x10 [ 437.656892][ T39] ret_from_fork+0x3f9/0x770 [ 437.656926][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 437.656964][ T39] ? __switch_to_asm+0x39/0x70 [ 437.656984][ T39] ? __switch_to_asm+0x33/0x70 [ 437.657005][ T39] ? __pfx_kthread+0x10/0x10 [ 437.657042][ T39] ret_from_fork_asm+0x1a/0x30 [ 437.657083][ T39] [ 437.657092][ T39] Sending NMI from CPU 0 to CPUs 1: [ 437.657120][ C1] NMI backtrace for cpu 1 [ 437.657135][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 437.657157][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 437.657168][ C1] RIP: 0010:eth_type_trans+0x34e/0x760 [ 437.657201][ C1] Code: 42 80 3c 20 00 74 08 48 89 df e8 1d 60 1e f9 48 83 3b 00 0f 85 22 01 00 00 e8 fe 25 bf f8 eb 05 e8 f7 25 bf f8 48 8b 7c 24 40 <48> 8d 5f 0c 48 83 c7 0d 48 89 d8 48 c1 e8 03 42 0f b6 04 20 84 c0 [ 437.657218][ C1] RSP: 0018:ffffc90000a3f660 EFLAGS: 00000246 [ 437.657234][ C1] RAX: ffffffff88ff3969 RBX: 0000000000000000 RCX: ffff88801caf1dc0 [ 437.657247][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: ffff888083a58e32 [ 437.657260][ C1] RBP: ffffc90000a3f758 R08: 0000000000000000 R09: 0000000000000100 [ 437.657273][ C1] R10: dffffc0000000000 R11: ffffffff85f17090 R12: dffffc0000000000 [ 437.657286][ C1] R13: 1ffff92000147ed8 R14: 0000000000000000 R15: 0000ffffffffffff [ 437.657300][ C1] FS: 0000000000000000(0000) GS:ffff8881269bf000(0000) knlGS:0000000000000000 [ 437.657315][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 437.657328][ C1] CR2: 00007f67a80195e9 CR3: 000000000d7a6000 CR4: 00000000003526f0 [ 437.657344][ C1] Call Trace: [ 437.657351][ C1] [ 437.657364][ C1] ? __pfx_eth_type_trans+0x10/0x10 [ 437.657391][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 437.657420][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 437.657454][ C1] loopback_xmit+0x433/0x6f0 [ 437.657483][ C1] dev_hard_start_xmit+0x2ed/0x870 [ 437.657512][ C1] sch_direct_xmit+0x241/0x4b0 [ 437.657538][ C1] ? __pfx_sch_direct_xmit+0x10/0x10 [ 437.657562][ C1] ? rt_spin_lock+0x1bb/0x2c0 [ 437.657587][ C1] __qdisc_run+0xb1b/0x15c0 [ 437.657620][ C1] qdisc_run+0xc2/0x230 [ 437.657643][ C1] net_tx_action+0x7c9/0x980 [ 437.657666][ C1] ? net_tx_action+0x634/0x980 [ 437.657689][ C1] ? __pfx_migrate_enable+0x10/0x10 [ 437.657713][ C1] ? __pfx_net_tx_action+0x10/0x10 [ 437.657745][ C1] handle_softirqs+0x22f/0x710 [ 437.657774][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 437.657803][ C1] run_ktimerd+0xcf/0x190 [ 437.657829][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 437.657860][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 437.657882][ C1] smpboot_thread_fn+0x53f/0xa60 [ 437.657906][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 437.657940][ C1] kthread+0x70e/0x8a0 [ 437.657969][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 437.657992][ C1] ? __pfx_kthread+0x10/0x10 [ 437.658023][ C1] ? __pfx_kthread+0x10/0x10 [ 437.658051][ C1] ret_from_fork+0x3f9/0x770 [ 437.658076][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 437.658108][ C1] ? __switch_to_asm+0x39/0x70 [ 437.658126][ C1] ? __switch_to_asm+0x33/0x70 [ 437.658144][ C1] ? __pfx_kthread+0x10/0x10 [ 437.658175][ C1] ret_from_fork_asm+0x1a/0x30 [ 437.658203][ C1] [ 437.948625][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 437.948650][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 437.948678][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 437.948692][ T39] Call Trace: [ 437.948702][ T39] [ 437.948712][ T39] dump_stack_lvl+0x99/0x250 [ 437.948752][ T39] ? __asan_memcpy+0x40/0x70 [ 437.948778][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 437.948813][ T39] ? __pfx__printk+0x10/0x10 [ 437.948854][ T39] vpanic+0x281/0x750 [ 437.948892][ T39] ? __pfx_vpanic+0x10/0x10 [ 437.948926][ T39] ? preempt_schedule+0xae/0xc0 [ 437.948962][ T39] ? preempt_schedule_common+0x83/0xd0 [ 437.949003][ T39] panic+0xb9/0xc0 [ 437.949036][ T39] ? __pfx_panic+0x10/0x10 [ 437.949080][ T39] ? preempt_schedule_thunk+0x16/0x30 [ 437.949116][ T39] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 437.949148][ T39] watchdog+0xfd2/0xfe0 [ 437.949184][ T39] ? watchdog+0x1de/0xfe0 [ 437.949221][ T39] kthread+0x70e/0x8a0 [ 437.949260][ T39] ? __pfx_watchdog+0x10/0x10 [ 437.949290][ T39] ? __pfx_kthread+0x10/0x10 [ 437.949330][ T39] ? __pfx_kthread+0x10/0x10 [ 437.949367][ T39] ret_from_fork+0x3f9/0x770 [ 437.949401][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 437.949439][ T39] ? __switch_to_asm+0x39/0x70 [ 437.949461][ T39] ? __switch_to_asm+0x33/0x70 [ 437.949482][ T39] ? __pfx_kthread+0x10/0x10 [ 437.949517][ T39] ret_from_fork_asm+0x1a/0x30 [ 437.949558][ T39] [ 437.949933][ T39] Kernel Offset: disabled