last executing test programs: 4m1.550847808s ago: executing program 2 (id=669): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x0, 0x7fff0006}]}) r0 = syz_io_uring_setup(0x3c63, &(0x7f0000000140)={0x0, 0xfffffffb, 0x10100, 0x2, 0x4000004}, &(0x7f00000002c0)=0x0, &(0x7f00000015c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2df0, 0x3ffffffe, 0x0, 0x0, 0x0) 4m1.328468853s ago: executing program 2 (id=673): r0 = syz_io_uring_setup(0x8c7, &(0x7f0000000240)={0x0, 0xad04, 0x1000, 0x2, 0x40002003}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x1d, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x42}, 0x0, 0x844}) io_uring_enter(r0, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 4m0.148288806s ago: executing program 2 (id=685): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000000)={&(0x7f00000000c0)={0x1d, r2}, 0x10, &(0x7f0000000140)={&(0x7f0000000180)=@can={{0x0, 0x0, 0x1}, 0x0, 0x0, 0x4, 0x0, "352bc764aef32890"}, 0x10}, 0x2, 0x0, 0x0, 0x4080}, 0x0) 3m59.882242401s ago: executing program 2 (id=689): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 3m59.59886846s ago: executing program 2 (id=692): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000200)={0x0, 0x0, 0x0}) 3m58.575217356s ago: executing program 2 (id=704): syz_usb_connect(0x2, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000380), 0x3, 0xbc01) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x103001, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000180)=""/135) 3m58.054098004s ago: executing program 32 (id=704): syz_usb_connect(0x2, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000380), 0x3, 0xbc01) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x103001, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000180)=""/135) 3m40.377582411s ago: executing program 0 (id=828): setreuid(0xee01, 0xee01) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m40.130244614s ago: executing program 0 (id=830): r0 = socket(0x10, 0x803, 0x0) unshare(0x24060400) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r1, 0x4) 3m39.961545116s ago: executing program 0 (id=833): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000200), 0x4) listen(r0, 0x0) 3m39.813397456s ago: executing program 0 (id=835): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000940)=@newqdisc={0x130, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x100, 0x2, {{0xfffffffe, 0x2, 0x40, 0x7, 0xe9, 0xcc36}, [@TCA_NETEM_LOSS={0xb4, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x1, 0xffff, 0x0, 0x6}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5, 0xfffffffa, 0xa, 0x4}}, @NETEM_LOSS_GE={0x11, 0x2, {0x1, 0x9, 0x1, 0x8}}, @NETEM_LOSS_GI={0x18, 0x1, {0xcfbb, 0x2, 0x10001, 0x8, 0x1}}, @NETEM_LOSS_GE={0x14, 0x2, {0x9, 0x5, 0x1003, 0xb}}, @NETEM_LOSS_GI={0x18, 0x1, {0x8, 0x0, 0xfffff001, 0xf6, 0x3}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x3, 0x5, 0x4, 0xea}}, @NETEM_LOSS_GI={0x18, 0x1, {0x6, 0x8, 0x10000, 0x2, 0x7fff}}]}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x8, 0x1000}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0xbba5, 0x2}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xff}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x1}]}}}]}, 0x130}}, 0x0) 3m39.630516694s ago: executing program 0 (id=838): r0 = socket$unix(0x1, 0x2, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000200)=0x10) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 3m39.28031274s ago: executing program 0 (id=840): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x3c, r0, 0x1, 0x71bd25, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc0}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}]}, 0x3c}}, 0x4) 3m24.111412541s ago: executing program 33 (id=840): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x3c, r0, 0x1, 0x71bd25, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc0}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}]}, 0x3c}}, 0x4) 2m43.004429019s ago: executing program 6 (id=1293): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001440)={'\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x9) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000040)) 2m42.900074645s ago: executing program 1 (id=1294): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) syz_emit_ethernet(0x4e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x18, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x80, 0x0}, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}}, 0x0) 2m42.595960911s ago: executing program 4 (id=1295): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000a00)={'wlan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="02030c65d66402000000", 0xa, 0x0, &(0x7f0000000140)={0x11, 0x8, r2, 0x1, 0x99, 0x6, @broadcast}, 0x14) 2m42.15479418s ago: executing program 3 (id=1297): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m41.480651301s ago: executing program 1 (id=1298): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0x3}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x16cc89b4, 0x200, 0x80, 0x10, 0x80000000, 0x4, 0x2, 0xffff6576, 0xd6a6, 0x9, 0x6, 0x9, 0x8, 0x1d, 0x3, 0x81, 0x7, 0x8, 0x8, 0x3f, 0x5, 0xfffffff7, 0x7fffffff, 0x1, 0x10001, 0xfffffff6, 0x5, 0x0, 0x80000001, 0x2, 0x1, 0x7, 0xb, 0x7, 0x0, 0x9bc100, 0x7, 0x999, 0x6, 0x4, 0xfe, 0x3, 0x8c1, 0xffff, 0x1, 0x9fc, 0x7fffffff, 0x2, 0x8, 0x4, 0x10000, 0x200, 0xe, 0x1, 0x0, 0x40, 0x7, 0xa5d8, 0x4, 0x6, 0x7000000, 0x3, 0x9, 0x4, 0x9, 0x0, 0x6, 0x9, 0x4, 0x80, 0x8, 0x10001, 0x6, 0x8, 0x200, 0x0, 0x7, 0x9, 0xffffffff, 0x100, 0x5, 0xff6, 0x35, 0x53, 0x7fffffff, 0x80000000, 0x200, 0x480000, 0x4, 0xfff, 0x6fd, 0x4, 0x3d4a3d97, 0xd4, 0x56, 0x7, 0x392a, 0x2, 0x2, 0x7, 0xe6, 0x7, 0x6, 0x8, 0xffff1362, 0x7, 0xe47a, 0x6, 0x6, 0x5, 0x9000000, 0x3, 0xc7, 0x708, 0x3, 0x0, 0x10, 0x9, 0x2, 0xd0, 0x1000, 0xf4, 0x432, 0x1ff, 0x401, 0x5, 0x97b2, 0x0, 0x1, 0x7, 0x80000000, 0x1, 0xdc, 0x10001, 0x9, 0x6, 0x1cd7, 0x6, 0xfffffffd, 0x1, 0x1, 0x9, 0xc, 0x1, 0x10, 0x747, 0x2, 0xffffff25, 0x7, 0x2, 0x97, 0x3, 0x7de8, 0x2, 0x6, 0x5, 0x3, 0x10000, 0x0, 0xf, 0x101, 0x2, 0x200, 0x4, 0x1, 0x3, 0x4, 0x4, 0x1c000000, 0x9, 0x200, 0x3, 0xc, 0xb, 0x9, 0x8000, 0x101, 0x8, 0x0, 0x2, 0x7, 0x6ac, 0x5, 0x1, 0x8, 0x101, 0x1, 0x65, 0xfffffff6, 0x0, 0x9, 0x401, 0x0, 0x3, 0x3744, 0x28, 0x2, 0x3, 0xfff, 0x0, 0x563d, 0x7, 0x8, 0x6, 0xb6, 0x8, 0x6, 0x4d, 0x7fff, 0xff, 0x2, 0x4, 0x3, 0x7, 0x3, 0x8, 0x2, 0xff, 0x0, 0x1, 0x2, 0x3, 0x4, 0x5, 0x4, 0x0, 0x8, 0xd, 0xe, 0x2, 0x4, 0x6, 0x4, 0x1, 0x401, 0x2, 0x5, 0xfff, 0x96b4, 0x2, 0x92ed36b9, 0x8000, 0x40, 0x4, 0x9, 0x9, 0x0, 0x0, 0xf4, 0x5, 0x0, 0x7, 0x7, 0x2, 0x9f14, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000) 2m41.480408981s ago: executing program 3 (id=1299): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e1f, @local}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000600)={r1, @in6={{0xa, 0x4e21, 0x1, @mcast2, 0x81}}, [0x5, 0x0, 0x0, 0xc, 0x7ff, 0x1, 0x40, 0x100000001, 0x7, 0x8, 0x7fffffff, 0x400, 0x0, 0x8, 0x2]}, &(0x7f0000000180)=0x100) 2m41.479686858s ago: executing program 3 (id=1300): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x318, 0x30, 0x300, 0x71bd22, 0x25dfdbff, {}, [{0x4}, {0x300, 0x1, [@m_csum={0x4c, 0x10, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x6, 0x4, 0x6}, 0x32}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_csum={0x1e8, 0x19, 0x0, 0x0, {{0x9}, {0x4}, {0x1ba, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0xc8, 0x1b, 0x0, 0x0, {{0x7}, {0x28, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "f90eb5b6534dc236c29b29a5cba5d7dd"}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x2b}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e20}]}, {0x79, 0x6, "77b227832b90d1ff89f7a47093e4fcd6469c1b0a38a78e003c28c0247261b6866b44c2243e65a09e57be964fc0687b627bbda1f8bb6cacd9cf613adc84e00b323e932cbec11bfdac677d727e7547301900bdc7e317fc3b634794c43c0613b919323039d6099d9f9f41e0f9da2176ba0bb6dd198d0c"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x318}, 0x1, 0x0, 0x0, 0x4000810}, 0x20040850) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 2m41.392963664s ago: executing program 4 (id=1302): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000008850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) setfsgid(0x0) 2m41.103648134s ago: executing program 4 (id=1303): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', '', [{0x20, '\xc0z\xa6\xd3\xdb\b\xeb\xa7\x80\xd9\xaf\xb4\xfc\b\t'}]}, 0x14) close(r0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 2m40.879900851s ago: executing program 4 (id=1304): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 2m36.217021295s ago: executing program 1 (id=1308): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 2m36.200854024s ago: executing program 3 (id=1309): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 2m36.151301357s ago: executing program 6 (id=1311): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000040)={0x2, 0x3, @remote}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @random="5a01f3c2f136", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @local, @remote, @random="5dd88726c571", @remote}}}}, 0x0) 2m34.814616448s ago: executing program 6 (id=1312): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000080)=0x80000049, 0x4) getsockopt$inet_tcp_int(r0, 0x6, 0x18, 0x0, &(0x7f0000000040)) 2m34.408750073s ago: executing program 6 (id=1313): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r0, 0x3b8b, &(0x7f00000001c0)={0x10, 0x1, r2}) 2m34.112350353s ago: executing program 6 (id=1314): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x380, 0x0}) 2m34.096355s ago: executing program 5 (id=1315): r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000840)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b1a03dc55ea62d43c809e0ed6e56163fdab317afd5c34d61436", 0x79, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) 2m33.771031399s ago: executing program 5 (id=1316): io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xb}) r0 = io_uring_setup(0x2c49, &(0x7f0000002240)={0x0, 0x0, 0x0, 0x3}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000900)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x18, &(0x7f0000000000), 0x1) 2m33.402903555s ago: executing program 5 (id=1317): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x2c, r0, 0x801, 0x0, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x88000}, 0x40000) 2m33.373274995s ago: executing program 3 (id=1318): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x800c5011, &(0x7f00000001c0)) 2m32.920549594s ago: executing program 4 (id=1319): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x68, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10}}}, @TCA_STAB={0x20, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x68}}, 0x0) 2m32.895475599s ago: executing program 1 (id=1320): setreuid(0x0, 0xee01) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x2000000) 2m32.890460343s ago: executing program 5 (id=1321): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@bridge_delneigh={0x20, 0x1e, 0x1, 0xfffffffc, 0x0, {0xa}, [@NDA_FDB_EXT_ATTRS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x44010) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 2m32.517733873s ago: executing program 5 (id=1322): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r1 = io_uring_setup(0x24cc, &(0x7f0000000140)) r2 = dup3(r0, r1, 0x0) ioctl$SG_SET_RESERVED_SIZE(r2, 0x4004550c, 0x0) 2m32.511377107s ago: executing program 1 (id=1323): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x0, 0x0) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/140, 0x8c}], 0x1, 0x0, 0x0) 2m32.230173643s ago: executing program 3 (id=1324): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0x9, @loopback, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000fffffe7e8ae000"/24, 0x18) 2m20.642339115s ago: executing program 6 (id=1325): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7cb, &(0x7f0000000980)={0x0}) 2m20.320094762s ago: executing program 1 (id=1326): r0 = socket$inet6(0xa, 0x3, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, 0x3}, 0x28) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x7c, 0x4) sendmmsg$inet6(r0, &(0x7f0000000400)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x20}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) 2m10.913602516s ago: executing program 5 (id=1327): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8001) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) write$evdev(r1, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 2m6.159256177s ago: executing program 4 (id=1328): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000480)={0x34, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}]]}, 0x34}}, 0x40) 1m56.76486341s ago: executing program 34 (id=1324): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0x9, @loopback, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000fffffe7e8ae000"/24, 0x18) 1m6.097228483s ago: executing program 35 (id=1325): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7cb, &(0x7f0000000980)={0x0}) 0s ago: executing program 36 (id=1326): r0 = socket$inet6(0xa, 0x3, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, 0x3}, 0x28) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x7c, 0x4) sendmmsg$inet6(r0, &(0x7f0000000400)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x20}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.223' (ED25519) to the list of known hosts. [ 92.158840][ T31] cfg80211: failed to load regulatory.db [ 92.912112][ T5826] cgroup: Unknown subsys name 'net' [ 93.154239][ T5826] cgroup: Unknown subsys name 'cpuset' [ 93.208294][ T5826] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 95.199363][ T5826] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 99.442291][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.446536][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.448059][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.458297][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.477378][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 99.477864][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.480494][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 99.481360][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 99.482862][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 99.483785][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 99.575313][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 99.585177][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 99.602048][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 99.603851][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 99.604441][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 99.607077][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 99.617212][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 99.625997][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 99.656952][ T5856] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 99.657005][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 99.657243][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 99.676867][ T5859] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 99.688067][ T5859] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 99.689889][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 99.690830][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 100.515354][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 100.636160][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 101.009129][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 101.145840][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 101.171222][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 101.339198][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.340532][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.340937][ T5843] bridge_slave_0: entered allmulticast mode [ 101.343104][ T5843] bridge_slave_0: entered promiscuous mode [ 101.481117][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.481288][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.481476][ T5843] bridge_slave_1: entered allmulticast mode [ 101.484508][ T5843] bridge_slave_1: entered promiscuous mode [ 101.509304][ T5848] Bluetooth: hci1: command tx timeout [ 101.588868][ T5848] Bluetooth: hci0: command tx timeout [ 101.748080][ T5848] Bluetooth: hci4: command tx timeout [ 101.779401][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.779638][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.779873][ T5844] bridge_slave_0: entered allmulticast mode [ 101.782857][ T5844] bridge_slave_0: entered promiscuous mode [ 101.828549][ T5848] Bluetooth: hci2: command tx timeout [ 101.828695][ T5848] Bluetooth: hci3: command tx timeout [ 101.950245][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.950391][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.950933][ T5844] bridge_slave_1: entered allmulticast mode [ 101.953586][ T5844] bridge_slave_1: entered promiscuous mode [ 102.081410][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.234674][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.373870][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.374040][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.374178][ T5853] bridge_slave_0: entered allmulticast mode [ 102.376140][ T5853] bridge_slave_0: entered promiscuous mode [ 102.533083][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.622410][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.622621][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.622831][ T5853] bridge_slave_1: entered allmulticast mode [ 102.624879][ T5853] bridge_slave_1: entered promiscuous mode [ 102.795218][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.909591][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.909874][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.910101][ T5850] bridge_slave_0: entered allmulticast mode [ 102.913107][ T5850] bridge_slave_0: entered promiscuous mode [ 103.019240][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.019392][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.019581][ T5851] bridge_slave_0: entered allmulticast mode [ 103.022565][ T5851] bridge_slave_0: entered promiscuous mode [ 103.029477][ T5843] team0: Port device team_slave_0 added [ 103.120571][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.120760][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.120951][ T5850] bridge_slave_1: entered allmulticast mode [ 103.123932][ T5850] bridge_slave_1: entered promiscuous mode [ 103.210342][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.210484][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.210730][ T5851] bridge_slave_1: entered allmulticast mode [ 103.213664][ T5851] bridge_slave_1: entered promiscuous mode [ 103.218234][ T5843] team0: Port device team_slave_1 added [ 103.408932][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.561447][ T5844] team0: Port device team_slave_0 added [ 103.587688][ T5848] Bluetooth: hci1: command tx timeout [ 103.633907][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.667922][ T5848] Bluetooth: hci0: command tx timeout [ 103.791389][ T5844] team0: Port device team_slave_1 added [ 103.795080][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.827781][ T5848] Bluetooth: hci4: command tx timeout [ 103.894711][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.901136][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.901153][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.901184][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.907924][ T5859] Bluetooth: hci3: command tx timeout [ 103.908023][ T5848] Bluetooth: hci2: command tx timeout [ 103.974336][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.224108][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.225122][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.225136][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.225164][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.411473][ T5853] team0: Port device team_slave_0 added [ 104.496160][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.496174][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.496193][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.582382][ T5853] team0: Port device team_slave_1 added [ 104.666138][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.666157][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.666186][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.669613][ T5850] team0: Port device team_slave_0 added [ 104.803141][ T5851] team0: Port device team_slave_0 added [ 104.817895][ T5850] team0: Port device team_slave_1 added [ 104.961781][ T5851] team0: Port device team_slave_1 added [ 105.040247][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.040265][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.040294][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.499726][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.499744][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.499772][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.531230][ T5843] hsr_slave_0: entered promiscuous mode [ 105.533445][ T5843] hsr_slave_1: entered promiscuous mode [ 105.667731][ T5848] Bluetooth: hci1: command tx timeout [ 105.735567][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.735584][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.735603][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.747783][ T5848] Bluetooth: hci0: command tx timeout [ 105.749258][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.749273][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.749305][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.904458][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.904471][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.904490][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.905636][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.905647][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.905666][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.917090][ T5844] hsr_slave_0: entered promiscuous mode [ 105.917814][ T5848] Bluetooth: hci4: command tx timeout [ 105.929592][ T5844] hsr_slave_1: entered promiscuous mode [ 105.930931][ T5844] debugfs: 'hsr0' already exists in 'hsr' [ 105.931082][ T5844] Cannot create hsr debugfs directory [ 105.987763][ T5848] Bluetooth: hci2: command tx timeout [ 105.987794][ T5848] Bluetooth: hci3: command tx timeout [ 106.359458][ T5853] hsr_slave_0: entered promiscuous mode [ 106.360972][ T5853] hsr_slave_1: entered promiscuous mode [ 106.361967][ T5853] debugfs: 'hsr0' already exists in 'hsr' [ 106.361994][ T5853] Cannot create hsr debugfs directory [ 106.799949][ T5850] hsr_slave_0: entered promiscuous mode [ 106.800940][ T5850] hsr_slave_1: entered promiscuous mode [ 106.801608][ T5850] debugfs: 'hsr0' already exists in 'hsr' [ 106.801633][ T5850] Cannot create hsr debugfs directory [ 106.808789][ T5851] hsr_slave_0: entered promiscuous mode [ 106.810379][ T5851] hsr_slave_1: entered promiscuous mode [ 106.811407][ T5851] debugfs: 'hsr0' already exists in 'hsr' [ 106.811436][ T5851] Cannot create hsr debugfs directory [ 107.757815][ T5859] Bluetooth: hci1: command tx timeout [ 107.827835][ T5859] Bluetooth: hci0: command tx timeout [ 107.987881][ T5859] Bluetooth: hci4: command tx timeout [ 108.078152][ T5859] Bluetooth: hci3: command tx timeout [ 108.078187][ T5859] Bluetooth: hci2: command tx timeout [ 108.330970][ T5843] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 108.371199][ T5843] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 108.404516][ T5843] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 108.463035][ T5843] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 108.573663][ T5853] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 108.608513][ T5853] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 108.650447][ T5853] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 108.713335][ T5853] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 108.853428][ T5850] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 108.909508][ T5850] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 108.959672][ T5850] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 109.021720][ T5850] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 109.210714][ T5851] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 109.247020][ T5851] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 109.283823][ T5851] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 109.335706][ T5851] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 109.514481][ T5844] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 109.555361][ T5844] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 109.594471][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.597376][ T5844] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 109.658833][ T5844] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 109.815821][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.875283][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.905670][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.906254][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.966437][ T3646] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.966618][ T3646] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.042066][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.082720][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.118678][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.118901][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.176522][ T3646] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.176653][ T3646] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.247348][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.282697][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.320489][ T3581] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.320746][ T3581] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.371438][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.371652][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.476996][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.582214][ T1182] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.582528][ T1182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.599417][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.660597][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.660747][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.813664][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.898758][ T3019] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.898932][ T3019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.981774][ T3019] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.983520][ T3019] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.017298][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.280245][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.436313][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.498660][ T5843] veth0_vlan: entered promiscuous mode [ 111.586283][ T5843] veth1_vlan: entered promiscuous mode [ 111.684456][ T5853] veth0_vlan: entered promiscuous mode [ 111.760061][ T5853] veth1_vlan: entered promiscuous mode [ 111.928915][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.960580][ T5843] veth0_macvtap: entered promiscuous mode [ 111.989135][ T5843] veth1_macvtap: entered promiscuous mode [ 112.093070][ T5853] veth0_macvtap: entered promiscuous mode [ 112.132779][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.134318][ T5853] veth1_macvtap: entered promiscuous mode [ 112.181835][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.202652][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.255033][ T3613] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.260578][ T5851] veth0_vlan: entered promiscuous mode [ 112.271657][ T3613] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.296334][ T3646] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.321468][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.321553][ T3646] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.412651][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.418545][ T5851] veth1_vlan: entered promiscuous mode [ 112.533309][ T1182] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.565199][ T1182] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.614565][ T1182] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.649819][ T1182] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.686886][ T5850] veth0_vlan: entered promiscuous mode [ 112.797435][ T3613] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.797463][ T3613] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.894682][ T5850] veth1_vlan: entered promiscuous mode [ 112.936728][ T5844] veth0_vlan: entered promiscuous mode [ 113.019744][ T5851] veth0_macvtap: entered promiscuous mode [ 113.023544][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.023563][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.082812][ T5844] veth1_vlan: entered promiscuous mode [ 113.129388][ T5851] veth1_macvtap: entered promiscuous mode [ 113.147084][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.147104][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.296957][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.296978][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.335597][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.370117][ T5850] veth0_macvtap: entered promiscuous mode [ 113.393120][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.449845][ T5850] veth1_macvtap: entered promiscuous mode [ 113.467794][ T5844] veth0_macvtap: entered promiscuous mode [ 113.480035][ T1182] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.503957][ T57] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.523690][ T57] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.535532][ T5844] veth1_macvtap: entered promiscuous mode [ 113.544594][ T57] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.686053][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.803229][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.808790][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.866307][ T5914] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 113.901620][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.926795][ T3646] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.946644][ T3646] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.950922][ T3646] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.951554][ T3646] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.993593][ T3581] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.026352][ T3581] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.049682][ T3581] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.059553][ T5914] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 114.059586][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.059752][ T5914] usb 1-1: Product: syz [ 114.059770][ T5914] usb 1-1: Manufacturer: syz [ 114.059788][ T5914] usb 1-1: SerialNumber: syz [ 114.094283][ T5914] usb 1-1: config 0 descriptor?? [ 114.127217][ T5914] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 114.150046][ T3581] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.172216][ T3613] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.172237][ T3613] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.485908][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.490887][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.592891][ T3646] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.592912][ T3646] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.835457][ T3581] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.835479][ T3581] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.927238][ T5914] gspca_sunplus: reg_r err -71 [ 114.927338][ T5914] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 115.027360][ T5914] usb 1-1: USB disconnect, device number 2 [ 115.320676][ T3646] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.320697][ T3646] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.403335][ T5971] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7'. [ 115.536085][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.536107][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.720168][ T5975] netlink: 'syz.3.8': attribute type 29 has an invalid length. [ 115.748303][ T5975] netlink: 'syz.3.8': attribute type 29 has an invalid length. [ 115.756686][ T5975] netlink: 'syz.3.8': attribute type 29 has an invalid length. [ 115.862804][ T5979] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 116.517809][ T5988] netlink: 216 bytes leftover after parsing attributes in process `syz.2.3'. [ 116.517835][ T5988] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3'. [ 116.517851][ T5988] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3'. [ 117.148219][ T5999] process 'syz.3.17' launched '/dev/fd/5' with NULL argv: empty string added [ 117.797248][ T5168] kernel write not supported for file /amidi2 (pid: 5168 comm: kworker/1:2) [ 118.078423][ T6014] capability: warning: `syz.1.24' uses 32-bit capabilities (legacy support in use) [ 118.451896][ T6023] program syz.1.27 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 119.895719][ T6063] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 120.478349][ T6072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.47'. [ 120.725729][ T6078] netlink: 28 bytes leftover after parsing attributes in process `syz.3.49'. [ 120.727285][ T6078] Zero length message leads to an empty skb [ 121.447646][ T5962] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 121.601938][ T5962] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.601973][ T5962] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.602012][ T5962] usb 1-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 121.602036][ T5962] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.651553][ T5962] usb 1-1: config 0 descriptor?? [ 122.144518][ T5962] hid-led 0003:1D34:0004.0001: unknown main item tag 0x0 [ 122.326109][ T5962] hid-led 0003:1D34:0004.0001: hidraw0: USB HID v0.00 Device [HID 1d34:0004] on usb-dummy_hcd.0-1/input0 [ 122.376999][ T5962] hid-led 0003:1D34:0004.0001: Dream Cheeky Webmail Notifier initialized [ 122.510308][ T5962] usb 1-1: USB disconnect, device number 3 [ 122.812267][ T6102] fido_id[6102]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 122.916439][ T6105] erspan0: entered promiscuous mode [ 123.623454][ T6117] netlink: 12 bytes leftover after parsing attributes in process `syz.3.67'. [ 124.013810][ T6126] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 124.013837][ T6126] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 124.049706][ T6126] vhci_hcd vhci_hcd.0: Device attached [ 124.139626][ T6127] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 124.169805][ T1164] vhci_hcd: stop threads [ 124.169819][ T1164] vhci_hcd: release socket [ 124.169876][ T1164] vhci_hcd: disconnect device [ 124.397648][ T38] audit: type=1326 audit(1758287225.229:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6133 comm="syz.4.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b546ec29 code=0x7ffc0000 [ 124.397703][ T38] audit: type=1326 audit(1758287225.229:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6133 comm="syz.4.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b546ec29 code=0x7ffc0000 [ 124.397749][ T38] audit: type=1326 audit(1758287225.239:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6133 comm="syz.4.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fc2b546ec29 code=0x7ffc0000 [ 124.397794][ T38] audit: type=1326 audit(1758287225.239:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6133 comm="syz.4.74" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc2b546ec29 code=0x0 [ 124.890562][ T6142] smc: net device bond0 applied user defined pnetid SYZ0 [ 124.896890][ T6142] smc: net device bond0 erased user defined pnetid SYZ0 [ 125.060531][ T6147] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 126.007740][ T6025] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 126.182759][ T6025] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 126.182788][ T6025] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.182807][ T6025] usb 2-1: Product: syz [ 126.182821][ T6025] usb 2-1: Manufacturer: syz [ 126.182834][ T6025] usb 2-1: SerialNumber: syz [ 126.279523][ T6025] usb 2-1: config 0 descriptor?? [ 126.322400][ T6025] ch341 2-1:0.0: ch341-uart converter detected [ 127.157798][ T6025] usb 2-1: failed to send control message: -71 [ 127.157857][ T6025] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 127.162725][ T6025] usb 2-1: USB disconnect, device number 2 [ 127.198323][ T6025] ch341 2-1:0.0: device disconnected [ 127.263725][ T6194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.101'. [ 127.263770][ T6194] netlink: 32 bytes leftover after parsing attributes in process `syz.0.101'. [ 127.720282][ T6201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.104'. [ 128.500389][ T6210] syz.1.108 (6210) used greatest stack depth: 16760 bytes left [ 128.924134][ T6224] netlink: 'syz.1.113': attribute type 10 has an invalid length. [ 129.051651][ T6224] bond0: (slave bond_slave_0): Releasing backup interface [ 130.120650][ T6259] netlink: 12 bytes leftover after parsing attributes in process `syz.2.129'. [ 130.123618][ T6259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.129'. [ 130.483008][ T6270] warning: `syz.2.133' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 130.957704][ T6025] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 131.114595][ T6025] usb 1-1: Using ep0 maxpacket: 32 [ 131.123178][ T6025] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 131.123204][ T6025] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 131.123226][ T6025] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 131.123281][ T6025] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 131.123303][ T6025] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 131.123328][ T6025] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 131.123373][ T6025] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 131.123396][ T6025] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.224624][ T6025] usb 1-1: config 0 descriptor?? [ 131.485901][ T6025] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 131.769867][ T5962] usb 1-1: USB disconnect, device number 4 [ 131.785313][ T6025] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 131.790323][ T5962] usblp0: removed [ 131.932966][ T6025] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 131.933000][ T6025] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.976585][ T6025] usb 3-1: config 0 descriptor?? [ 131.996528][ T6025] cp210x 3-1:0.0: cp210x converter detected [ 132.151141][ T6301] misc userio: Can't change port type on an already running userio instance [ 132.422746][ T6025] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 132.470279][ T6025] usb 3-1: cp210x converter now attached to ttyUSB0 [ 132.636125][ T5962] usb 3-1: USB disconnect, device number 2 [ 132.652462][ T5962] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 132.810126][ T5962] cp210x 3-1:0.0: device disconnected [ 133.180795][ T6320] netem: invalid attributes len -3 [ 133.180816][ T6320] netem: change failed [ 133.237850][ T5928] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 133.387813][ T5928] usb 5-1: Using ep0 maxpacket: 16 [ 133.390540][ T5928] usb 5-1: config 0 has an invalid interface number: 24 but max is 0 [ 133.390565][ T5928] usb 5-1: config 0 has no interface number 0 [ 133.390613][ T5928] usb 5-1: config 0 interface 24 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.390640][ T5928] usb 5-1: config 0 interface 24 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.390697][ T5928] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 133.390730][ T5928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.489655][ T5928] usb 5-1: config 0 descriptor?? [ 133.968316][ T5928] hid (null): unknown global tag 0x39 [ 133.968354][ T5928] hid (null): report_id 0 is invalid [ 134.085293][ T6335] netlink: 'syz.2.161': attribute type 2 has an invalid length. [ 134.151420][ T5921] usb 5-1: USB disconnect, device number 2 [ 135.015394][ T6354] hugetlbfs: syz.2.170 (6354): Using mlock ulimits for SHM_HUGETLB is obsolete [ 136.143757][ T6379] input: syz1 as /devices/virtual/input/input6 [ 137.028734][ T6397] vxcan1: tx address claim with dest, not broadcast [ 137.717897][ T6418] Illegal XDP return value 4294967289 on prog (id 20) dev N/A, expect packet loss! [ 137.800442][ T6423] netlink: 4 bytes leftover after parsing attributes in process `syz.1.202'. [ 138.238695][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.238796][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.787657][ T5859] Bluetooth: hci3: command 0x0405 tx timeout [ 139.366360][ T6471] program syz.3.225 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 139.422482][ T6473] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 139.770070][ T5914] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 139.930744][ T5914] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 139.930774][ T5914] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 139.930795][ T5914] usb 5-1: config 0 has no interface number 0 [ 139.930844][ T5914] usb 5-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 139.930883][ T5914] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 139.930910][ T5914] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 139.930937][ T5914] usb 5-1: config 0 interface 52 has no altsetting 0 [ 139.934188][ T5914] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 139.934216][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 139.934237][ T5914] usb 5-1: Product: syz [ 139.934252][ T5914] usb 5-1: SerialNumber: syz [ 140.041261][ T5914] usb 5-1: config 0 descriptor?? [ 140.127801][ T5928] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 140.269616][ T5914] input: syz (Stick) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.52/input/input7 [ 140.288470][ T5928] usb 1-1: Using ep0 maxpacket: 16 [ 140.296260][ T5928] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 140.296292][ T5928] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 140.326960][ T5928] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 140.326998][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.327018][ T5928] usb 1-1: Product: syz [ 140.327032][ T5928] usb 1-1: Manufacturer: syz [ 140.327048][ T5928] usb 1-1: SerialNumber: syz [ 140.363750][ T5928] usb 1-1: config 0 descriptor?? [ 140.430198][ T5928] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 140.430239][ T5928] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 140.489877][ T5914] usb 5-1: USB disconnect, device number 3 [ 140.867736][ T5859] Bluetooth: hci3: command 0x0405 tx timeout [ 140.994345][ T5928] em28xx 1-1:0.0: chip ID is em28178 [ 141.211423][ T5962] usb 1-1: USB disconnect, device number 5 [ 141.214006][ T5962] em28xx 1-1:0.0: Disconnecting em28xx [ 141.244454][ T5962] em28xx 1-1:0.0: Freeing device [ 141.593629][ T6511] netlink: 4 bytes leftover after parsing attributes in process `syz.4.244'. [ 143.563455][ T5962] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 143.581612][ T6567] vxlan0: entered promiscuous mode [ 143.581643][ T6567] vxlan0: entered allmulticast mode [ 143.582596][ T3646] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.582644][ T3646] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.582680][ T3646] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.582714][ T3646] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.710537][ T5962] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 143.710572][ T5962] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.727279][ T5962] usb 3-1: config 0 descriptor?? [ 143.750841][ T5962] cp210x 3-1:0.0: cp210x converter detected [ 144.219275][ T5928] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 144.369613][ T5962] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 144.369670][ T5962] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 144.386182][ T5962] usb 3-1: cp210x converter now attached to ttyUSB0 [ 144.400649][ T5928] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 144.400679][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.417970][ T5962] usb 3-1: USB disconnect, device number 3 [ 144.434022][ T5928] usb 4-1: config 0 descriptor?? [ 144.446490][ T5928] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 144.448447][ T5962] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 144.448911][ T5962] cp210x 3-1:0.0: device disconnected [ 144.649885][ T5928] gp8psk: usb in 128 operation failed. [ 144.758301][ T5930] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 144.851677][ T5928] gp8psk: FW Version = 244.249.196 (0xf4f9c4) Build 2015/223/09 [ 144.941098][ T5930] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 144.941127][ T5930] usb 5-1: config 0 has no interface number 0 [ 144.946690][ T5930] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 144.946719][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.946738][ T5930] usb 5-1: Product: syz [ 144.946753][ T5930] usb 5-1: Manufacturer: syz [ 144.946768][ T5930] usb 5-1: SerialNumber: syz [ 144.987186][ T5930] usb 5-1: config 0 descriptor?? [ 145.055278][ T5928] gp8psk: usb in 149 operation failed. [ 145.055297][ T5928] gp8psk: failed to get FPGA version [ 145.055690][ T5928] gp8psk: usb in 138 operation failed. [ 145.055725][ T5928] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 145.055766][ T5928] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 145.108116][ T5928] usb 4-1: USB disconnect, device number 2 [ 145.206591][ T5930] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 145.235790][ T5930] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 145.236610][ T5930] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 145.236688][ T5930] usb 5-1: media controller created [ 145.257036][ T6597] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 145.257036][ T6597] The task syz.1.281 (6597) triggered the difference, watch for misbehavior. [ 145.342764][ T5930] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 145.672277][ T6603] netlink: 24 bytes leftover after parsing attributes in process `syz.0.285'. [ 146.478245][ T5930] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 146.663549][ T5930] usb 5-1: USB disconnect, device number 4 [ 146.811057][ T6625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.295'. [ 147.337685][ T5928] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 147.494239][ T5928] usb 1-1: config 0 has an invalid interface number: 106 but max is 0 [ 147.494268][ T5928] usb 1-1: config 0 has no interface number 0 [ 147.494302][ T5928] usb 1-1: config 0 interface 106 has no altsetting 0 [ 147.497319][ T5928] usb 1-1: New USB device found, idVendor=413c, idProduct=8217, bcdDevice=b2.59 [ 147.497347][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.497367][ T5928] usb 1-1: Product: syz [ 147.497382][ T5928] usb 1-1: Manufacturer: syz [ 147.497397][ T5928] usb 1-1: SerialNumber: syz [ 147.594865][ T5928] usb 1-1: config 0 descriptor?? [ 147.824841][ T5928] usb 1-1: USB disconnect, device number 6 [ 147.836662][ T5930] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 147.910640][ T6650] netlink: 40 bytes leftover after parsing attributes in process `syz.2.306'. [ 147.956222][ T5914] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 147.997685][ T5930] usb 2-1: Using ep0 maxpacket: 32 [ 148.000243][ T5930] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 148.005238][ T5930] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 148.005268][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 148.005290][ T5930] usb 2-1: Product: syz [ 148.005305][ T5930] usb 2-1: Manufacturer: syz [ 148.005320][ T5930] usb 2-1: SerialNumber: syz [ 148.026621][ T5930] usb 2-1: config 0 descriptor?? [ 148.028069][ T6642] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 148.033062][ T5930] hub 2-1:0.0: bad descriptor, ignoring hub [ 148.033106][ T5930] hub 2-1:0.0: probe with driver hub failed with error -5 [ 148.113339][ T5914] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 148.113372][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.141609][ T5914] usb 5-1: config 0 descriptor?? [ 148.147311][ T5914] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 148.388296][ T5930] usb 2-1: USB disconnect, device number 3 [ 148.585275][ T5914] cpia1 5-1:0.0: unexpected state after lo power cmd: 00 [ 148.789153][ T5914] gspca_cpia1: usb_control_msg 01, error -32 [ 148.795705][ T5914] gspca_cpia1: usb_control_msg 01, error -71 [ 148.795726][ T5914] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 148.839033][ T5914] usb 5-1: USB disconnect, device number 5 [ 148.934462][ T5930] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 149.087674][ T5930] usb 2-1: Using ep0 maxpacket: 32 [ 149.090820][ T5930] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 149.097066][ T5930] usb 2-1: string descriptor 0 read error: -22 [ 149.097217][ T5930] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 149.097241][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 149.113767][ T5930] usb 2-1: config 0 descriptor?? [ 149.115262][ T6642] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 149.123818][ T5930] hub 2-1:0.0: bad descriptor, ignoring hub [ 149.123860][ T5930] hub 2-1:0.0: probe with driver hub failed with error -5 [ 149.468085][ T5930] usb 2-1: USB disconnect, device number 4 [ 149.807668][ T5930] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 149.974597][ T5930] usb 4-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 149.974626][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.974657][ T5930] usb 4-1: Product: syz [ 149.974670][ T5930] usb 4-1: Manufacturer: syz [ 149.974684][ T5930] usb 4-1: SerialNumber: syz [ 149.993240][ T5930] usb 4-1: config 0 descriptor?? [ 150.295597][ T6701] mmap: syz.1.330 (6701) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 150.469434][ T5962] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 150.644618][ T5962] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 150.644949][ T5962] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.712395][ T5962] usb 5-1: config 0 descriptor?? [ 150.746294][ T5962] cp210x 5-1:0.0: cp210x converter detected [ 150.839561][ T6711] netlink: 12 bytes leftover after parsing attributes in process `syz.1.334'. [ 150.883777][ T5930] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 150.883811][ T5930] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 150.884713][ T5930] asix 4-1:0.0: probe with driver asix failed with error -71 [ 150.944866][ T5930] usb 4-1: USB disconnect, device number 3 [ 151.411350][ T5962] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 151.411407][ T5962] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 151.433481][ T5962] usb 5-1: cp210x converter now attached to ttyUSB0 [ 151.448290][ T5962] usb 5-1: USB disconnect, device number 6 [ 151.478958][ T5962] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 151.479643][ T5962] cp210x 5-1:0.0: device disconnected [ 151.517711][ T5928] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 151.681581][ T5928] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 151.681613][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.687316][ T5928] usb 3-1: config 0 descriptor?? [ 151.724662][ T5928] cp210x 3-1:0.0: cp210x converter detected [ 152.014728][ T6738] loop8: detected capacity change from 0 to 8 [ 152.053522][ T6738] Dev loop8: unable to read RDB block 8 [ 152.053629][ T6738] loop8: unable to read partition table [ 152.053992][ T6738] loop8: partition table beyond EOD, truncated [ 152.054024][ T6738] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 152.135477][ T5928] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 152.159517][ T5928] usb 3-1: cp210x converter now attached to ttyUSB0 [ 152.346621][ T5921] usb 3-1: USB disconnect, device number 4 [ 152.366064][ T5921] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 152.519460][ T5921] cp210x 3-1:0.0: device disconnected [ 154.775254][ T6803] IPv6: NLM_F_CREATE should be specified when creating new route [ 155.243412][ T5168] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 155.279922][ T5168] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 155.475834][ T6818] netlink: 'syz.0.383': attribute type 13 has an invalid length. [ 155.708110][ T6818] macvtap0: entered promiscuous mode [ 155.728499][ T6818] macvtap0: refused to change device tx_queue_len [ 155.984718][ T6824] loop5: detected capacity change from 0 to 524255232 [ 156.134089][ T6831] loop9: detected capacity change from 0 to 8 [ 156.143896][ T6831] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 156.143931][ T6831] loop9: partition table partially beyond EOD, truncated [ 156.144038][ T6831] loop9: p1 size 81768186 extends beyond EOD, truncated [ 156.367008][ T6835] netlink: 8 bytes leftover after parsing attributes in process `syz.2.393'. [ 156.367043][ T6835] netlink: 48 bytes leftover after parsing attributes in process `syz.2.393'. [ 156.432250][ T6835] vlan2: entered allmulticast mode [ 156.517793][ T5168] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 156.612440][ T6843] input: syz1 as /devices/virtual/input/input9 [ 156.682155][ T5168] usb 2-1: unable to get BOS descriptor or descriptor too short [ 156.683353][ T5168] usb 2-1: no configurations [ 156.683369][ T5168] usb 2-1: can't read configurations, error -22 [ 157.686527][ T5848] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 157.736437][ T6884] netlink: 8 bytes leftover after parsing attributes in process `syz.0.412'. [ 157.736474][ T6884] netlink: 12 bytes leftover after parsing attributes in process `syz.0.412'. [ 157.840913][ T3019] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.844219][ T3019] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.844269][ T3019] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.844307][ T3019] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.176665][ T6895] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 159.303648][ T6936] syz.2.436 uses obsolete (PF_INET,SOCK_PACKET) [ 159.323587][ T6935] capability: warning: `syz.4.435' uses deprecated v2 capabilities in a way that may be insecure [ 159.333565][ T38] audit: type=1400 audit(1758287260.169:6): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=wx pid=6933 comm="syz.4.435" name="78" dev="tmpfs" ino=408 [ 159.923808][ T6953] netlink: 32 bytes leftover after parsing attributes in process `syz.2.445'. [ 160.069173][ T6955] sp0: Synchronizing with TNC [ 161.257775][ T6990] netlink: 'syz.3.458': attribute type 12 has an invalid length. [ 161.257811][ T6990] netlink: 8 bytes leftover after parsing attributes in process `syz.3.458'. [ 161.668629][ T6996] bridge0: entered promiscuous mode [ 161.668850][ T6996] macvlan2: entered promiscuous mode [ 163.620162][ T5168] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 163.777431][ T5168] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 163.777463][ T5168] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.777484][ T5168] usb 4-1: Product: syz [ 163.777500][ T5168] usb 4-1: Manufacturer: syz [ 163.791240][ T5168] usb 4-1: SerialNumber: syz [ 163.863299][ T5168] r8152-cfgselector 4-1: Unknown version 0x0000 [ 163.863326][ T5168] r8152-cfgselector 4-1: config 0 descriptor?? [ 164.307797][ T5914] r8152-cfgselector 4-1: USB disconnect, device number 4 [ 164.963597][ T7088] netlink: 12 bytes leftover after parsing attributes in process `syz.3.504'. [ 164.997799][ T5168] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 165.049672][ T7090] netlink: 'syz.3.505': attribute type 8 has an invalid length. [ 165.157710][ T5168] usb 1-1: Using ep0 maxpacket: 32 [ 165.168508][ T5168] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 165.168542][ T5168] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.168577][ T5168] usb 1-1: Product: syz [ 165.168593][ T5168] usb 1-1: Manufacturer: syz [ 165.168610][ T5168] usb 1-1: SerialNumber: syz [ 165.210394][ T5168] usb 1-1: config 0 descriptor?? [ 165.329800][ T7096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.508'. [ 165.658773][ T5168] airspy 1-1:0.0: Board ID: 00 [ 165.658795][ T5168] airspy 1-1:0.0: Firmware version: [ 166.068837][ T5168] airspy 1-1:0.0: usb_control_msg() failed -71 request 0e [ 166.087421][ T5168] airspy 1-1:0.0: Registered as swradio24 [ 166.087444][ T5168] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 166.103772][ T5930] IPVS: starting estimator thread 0... [ 166.104259][ T5168] usb 1-1: USB disconnect, device number 7 [ 166.198044][ T7123] IPVS: using max 7 ests per chain, 16800 per kthread [ 166.529692][ T38] audit: type=1326 audit(1758287267.369:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7131 comm="syz.4.527" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc2b546ec29 code=0x0 [ 166.579139][ T5848] Bluetooth: hci3: link tx timeout [ 166.579421][ T5848] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 167.977768][ T989] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 168.137374][ T989] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.137408][ T989] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.137465][ T989] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 168.137488][ T989] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.185940][ T7196] team0: No ports can be present during mode change [ 168.195390][ T989] usb 1-1: config 0 descriptor?? [ 168.265076][ T7197] vlan2: entered allmulticast mode [ 168.627873][ T5859] Bluetooth: hci3: command 0x0405 tx timeout [ 168.657189][ T989] prodikeys 0003:041E:2801.0004: unknown main item tag 0x0 [ 168.657233][ T989] prodikeys 0003:041E:2801.0004: unknown main item tag 0x0 [ 168.657259][ T989] prodikeys 0003:041E:2801.0004: item fetching failed at offset 2/7 [ 168.688413][ T989] prodikeys 0003:041E:2801.0004: hid parse failed [ 168.688527][ T989] prodikeys 0003:041E:2801.0004: probe with driver prodikeys failed with error -22 [ 168.843575][ T5168] usb 1-1: USB disconnect, device number 8 [ 169.474956][ T7224] netlink: 28 bytes leftover after parsing attributes in process `syz.2.565'. [ 169.475001][ T7224] netlink: 28 bytes leftover after parsing attributes in process `syz.2.565'. [ 169.897396][ T7240] Bluetooth: MGMT ver 1.23 [ 170.167811][ T5921] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 170.320206][ T5921] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 170.320238][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.344835][ T5921] usb 5-1: config 0 descriptor?? [ 171.003627][ T5921] ath6kl: mismatched byte count 0 vs. expected 12 [ 171.025349][ T5921] ath6kl: Failed to init ath6kl core: -22 [ 171.026421][ T5921] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 171.081473][ T7272] input: syz0 as /devices/virtual/input/input10 [ 171.217281][ T5906] usb 5-1: USB disconnect, device number 7 [ 171.548065][ T7285] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 172.151881][ T7308] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 172.167618][ T5921] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 172.329914][ T5921] usb 1-1: Using ep0 maxpacket: 32 [ 172.343811][ T5921] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 172.343843][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.343863][ T5921] usb 1-1: Product: syz [ 172.343878][ T5921] usb 1-1: Manufacturer: syz [ 172.343892][ T5921] usb 1-1: SerialNumber: syz [ 172.382706][ T5921] usb 1-1: config 0 descriptor?? [ 173.028287][ T5921] peak_usb 1-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 173.028323][ T5921] peak_usb 1-1:0.0 can0: sending command failure: -22 [ 173.028388][ T5921] peak_usb 1-1:0.0 can0: sending command failure: -22 [ 173.137663][ T5168] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 173.239901][ T5921] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -22 [ 173.277817][ T5921] usb 1-1: USB disconnect, device number 9 [ 173.307686][ T5168] usb 5-1: Using ep0 maxpacket: 16 [ 173.310791][ T5168] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.310823][ T5168] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.310863][ T5168] usb 5-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 173.310888][ T5168] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.332620][ T5168] usb 5-1: config 0 descriptor?? [ 173.814768][ T5168] input: HID 0458:5012 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5012.0005/input/input11 [ 173.916395][ T5168] input: HID 0458:5012 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5012.0005/input/input12 [ 173.966967][ T5168] kye 0003:0458:5012.0005: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5012] on usb-dummy_hcd.4-1/input0 [ 174.138434][ T989] usb 5-1: USB disconnect, device number 8 [ 174.581616][ T7357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.624'. [ 175.097804][ T31] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 175.131086][ T7376] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.633'. [ 175.271267][ T31] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 175.271295][ T31] usb 4-1: config 0 has no interface number 0 [ 175.274406][ T31] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 175.274434][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.274456][ T31] usb 4-1: Product: syz [ 175.274470][ T31] usb 4-1: Manufacturer: syz [ 175.274485][ T31] usb 4-1: SerialNumber: syz [ 175.325949][ T31] usb 4-1: config 0 descriptor?? [ 175.411740][ T7384] sp0: Synchronizing with TNC [ 175.458378][ T7388] netlink: 12 bytes leftover after parsing attributes in process `syz.1.637'. [ 176.008674][ T31] usb 4-1: Firmware: major: 0, minor: 11, hardware type: UNKNOWN (170) [ 176.213449][ T31] usb 4-1: failed to fetch extended address, random address set [ 176.213659][ T31] usb 4-1: atusb_probe: initialization failed, error = -524 [ 176.214422][ T31] atusb 4-1:0.128: probe with driver atusb failed with error -524 [ 176.257229][ T31] usb 4-1: USB disconnect, device number 5 [ 177.063328][ T7429] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 178.064171][ T7464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.671'. [ 179.498706][ T7497] sch_fq: defrate 0 ignored. [ 179.874690][ T7512] netlink: 20 bytes leftover after parsing attributes in process `syz.1.696'. [ 180.119123][ T5906] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 180.290308][ T5906] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.290334][ T5906] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 180.290388][ T5906] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 180.290411][ T5906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.311367][ T5906] usb 1-1: config 0 descriptor?? [ 180.747112][ T5906] Bluetooth: Can't get version to change to load ram patch err [ 180.747130][ T5906] Bluetooth: Loading patch file failed [ 180.747170][ T5906] ath3k 1-1:0.0: probe with driver ath3k failed with error -32 [ 180.809668][ T5906] usb 1-1: USB disconnect, device number 10 [ 181.471023][ T79] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.606754][ T7533] netlink: 12 bytes leftover after parsing attributes in process `syz.0.707'. [ 182.023598][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 182.052852][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 182.054181][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 182.055834][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 182.072337][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 182.094190][ T79] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.487083][ T79] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.621932][ T7564] program syz.0.729 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 182.628419][ T5168] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 182.723059][ T7567] kvm: kvm [7566]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x40000015) = 0x0 [ 182.779479][ T5168] usb 2-1: Using ep0 maxpacket: 32 [ 182.782239][ T5168] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.782272][ T5168] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.782311][ T5168] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 182.782335][ T5168] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.831574][ T5168] usb 2-1: config 0 descriptor?? [ 183.282694][ T5168] ft260 0003:0403:6030.0006: unknown main item tag 0x7 [ 183.298793][ T79] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.483951][ T5168] ft260 0003:0403:6030.0006: chip code: 6424 8183 [ 183.568778][ T31] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 183.689971][ T5168] ft260 0003:0403:6030.0006: failed to retrieve system status [ 183.690446][ T5168] ft260 0003:0403:6030.0006: probe with driver ft260 failed with error -71 [ 183.709572][ T5168] usb 2-1: USB disconnect, device number 7 [ 183.723927][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 183.723979][ T31] usb 5-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 183.724002][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.759287][ T31] usb 5-1: config 0 descriptor?? [ 183.762918][ T7581] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 184.148297][ T5848] Bluetooth: hci0: command tx timeout [ 184.186242][ T31] ryos 0003:1E7D:3138.0007: unknown main item tag 0x0 [ 184.186281][ T31] ryos 0003:1E7D:3138.0007: unknown main item tag 0x1 [ 184.198944][ T31] ryos 0003:1E7D:3138.0007: hidraw0: USB HID v1.01 Device [HID 1e7d:3138] on usb-dummy_hcd.4-1/input0 [ 184.301285][ T79] bridge_slave_1: left allmulticast mode [ 184.301485][ T79] bridge_slave_1: left promiscuous mode [ 184.309484][ T79] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.407910][ T989] usb 5-1: USB disconnect, device number 9 [ 184.435682][ T79] bridge_slave_0: left promiscuous mode [ 184.436556][ T79] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.228347][ T5848] Bluetooth: hci0: command tx timeout [ 186.886177][ T7630] netlink: 36 bytes leftover after parsing attributes in process `syz.3.749'. [ 187.010090][ T79] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.094717][ T79] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.132960][ T79] bond0 (unregistering): Released all slaves [ 187.217573][ T7544] chnl_net:caif_netlink_parms(): no params data found [ 188.314658][ T5848] Bluetooth: hci0: command tx timeout [ 188.525912][ T7660] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 188.526049][ T7660] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 188.610280][ T7660] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 188.697785][ T7660] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 188.697913][ T7660] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 188.784309][ T7660] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 188.831433][ T7675] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 188.901235][ T7660] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 188.901305][ T7660] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 189.003384][ T7660] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 189.066541][ T7544] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.066735][ T7544] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.066978][ T7544] bridge_slave_0: entered allmulticast mode [ 189.071519][ T7544] bridge_slave_0: entered promiscuous mode [ 189.075708][ T7544] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.075932][ T7544] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.076156][ T7544] bridge_slave_1: entered allmulticast mode [ 189.079355][ T7544] bridge_slave_1: entered promiscuous mode [ 189.135407][ T7660] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 189.202981][ T7660] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 189.203103][ T7660] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 189.338655][ T7660] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 189.338757][ T7660] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 189.409109][ T7660] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 189.497904][ T7683] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 189.504692][ T7544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.592518][ T7544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.824045][ T79] hsr_slave_0: left promiscuous mode [ 189.879635][ T79] hsr_slave_1: left promiscuous mode [ 189.885829][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.885906][ T79] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.930623][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.930658][ T79] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.160272][ T79] veth1_macvtap: left promiscuous mode [ 190.160521][ T79] veth0_macvtap: left promiscuous mode [ 190.160855][ T79] veth1_vlan: left promiscuous mode [ 190.161603][ T79] veth0_vlan: left promiscuous mode [ 190.554200][ T5848] Bluetooth: hci1: command 0x0c1a tx timeout [ 190.711560][ T5848] Bluetooth: hci2: command 0x0c1a tx timeout [ 190.947658][ T5848] Bluetooth: hci4: command 0x0c1a tx timeout [ 191.267732][ T5848] Bluetooth: hci3: command 0x0405 tx timeout [ 191.347657][ T5848] Bluetooth: hci0: command 0x0c1a tx timeout [ 192.157338][ T1182] wlan1: Trigger new scan to find an IBSS to join [ 192.627990][ T5848] Bluetooth: hci1: command 0x0c1a tx timeout [ 192.787895][ T5848] Bluetooth: hci2: command 0x0c1a tx timeout [ 193.027676][ T5848] Bluetooth: hci4: command 0x0c1a tx timeout [ 193.065163][ T79] team0 (unregistering): Port device team_slave_1 removed [ 193.295325][ T79] team0 (unregistering): Port device team_slave_0 removed [ 193.348010][ T5848] Bluetooth: hci3: command 0x0405 tx timeout [ 193.427796][ T5848] Bluetooth: hci0: command 0x0c1a tx timeout [ 194.712779][ T5848] Bluetooth: hci1: command 0x0c1a tx timeout [ 194.867677][ T5848] Bluetooth: hci2: command 0x0c1a tx timeout [ 195.108221][ T5848] Bluetooth: hci4: command 0x0c1a tx timeout [ 195.187896][ T3019] wlan1: Trigger new scan to find an IBSS to join [ 195.507761][ T5848] Bluetooth: hci0: command 0x0c1a tx timeout [ 195.646908][ T7695] team_slave_0: entered promiscuous mode [ 195.646995][ T7695] team_slave_1: entered promiscuous mode [ 195.664328][ T7695] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 195.665790][ T7726] netlink: 'syz.0.791': attribute type 25 has an invalid length. [ 195.665811][ T7726] netlink: 'syz.0.791': attribute type 1 has an invalid length. [ 195.665928][ T7726] bridge0: port 1(bridge_slave_0) entered learning state [ 195.677796][ T7729] netlink: 'syz.1.793': attribute type 1 has an invalid length. [ 195.677822][ T7729] netlink: 4 bytes leftover after parsing attributes in process `syz.1.793'. [ 195.776236][ T7745] netlink: 52 bytes leftover after parsing attributes in process `syz.1.798'. [ 195.776686][ T7745] netlink: 32 bytes leftover after parsing attributes in process `syz.1.798'. [ 195.860997][ T7747] netlink: 4 bytes leftover after parsing attributes in process `syz.4.799'. [ 196.240263][ T7544] team0: Port device team_slave_0 added [ 196.247794][ T7544] team0: Port device team_slave_1 added [ 196.453039][ T7765] netlink: 16 bytes leftover after parsing attributes in process `syz.1.807'. [ 196.552274][ T7769] netlink: 4 bytes leftover after parsing attributes in process `syz.1.809'. [ 196.624140][ T5168] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 196.672108][ T7544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.672126][ T7544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.672154][ T7544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.703674][ T7544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.703695][ T7544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.703726][ T7544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.775834][ T5168] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.775861][ T5168] usb 1-1: config 0 has no interfaces? [ 196.775892][ T5168] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 196.775916][ T5168] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.814421][ T5168] usb 1-1: config 0 descriptor?? [ 197.034423][ T5168] usb 1-1: USB disconnect, device number 11 [ 197.153155][ T7775] loop7: detected capacity change from 0 to 7 [ 197.187847][ T5848] Bluetooth: hci4: command 0x0c1a tx timeout [ 197.220786][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 197.220943][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 197.245022][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 197.245059][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 197.270332][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 197.270369][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 197.273577][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 197.273608][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 197.273890][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 197.273917][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 197.274167][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 197.274194][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 197.274428][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 197.274455][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 197.274676][ T7775] ldm_validate_partition_table(): Disk read failed. [ 197.274937][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 197.274965][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 197.275222][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 197.275249][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 197.280899][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 197.280934][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 197.287893][ T7775] Dev loop7: unable to read RDB block 0 [ 197.289140][ T7775] loop7: unable to read partition table [ 197.289426][ T7775] loop7: partition table beyond EOD, truncated [ 197.289447][ T7775] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 197.340415][ T7544] hsr_slave_0: entered promiscuous mode [ 197.341935][ T7544] hsr_slave_1: entered promiscuous mode [ 197.342922][ T7544] debugfs: 'hsr0' already exists in 'hsr' [ 197.342949][ T7544] Cannot create hsr debugfs directory [ 197.594870][ T7781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.814'. [ 198.157724][ T68] wlan1: Trigger new scan to find an IBSS to join [ 199.088905][ T68] wlan1: Creating new IBSS network, BSSID ee:54:31:a3:de:4a [ 199.101425][ T7544] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 199.144755][ T7544] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 199.188177][ T7544] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 199.299443][ T7544] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 199.505900][ T7828] netem: incorrect ge model size [ 199.505927][ T7828] netem: change failed [ 199.527740][ T5906] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 199.656253][ T7832] netlink: 'syz.4.837': attribute type 3 has an invalid length. [ 199.656297][ T7832] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 199.677776][ T5906] usb 2-1: Using ep0 maxpacket: 8 [ 199.678473][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.678547][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.680691][ T5906] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.707782][ T5906] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 199.707812][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 199.707832][ T5906] usb 2-1: SerialNumber: syz [ 199.753142][ T5906] usb 2-1: config 0 descriptor?? [ 199.772454][ T5906] usb 2-1: Found UVC 0.00 device (05ac:8501) [ 199.773083][ T5906] usb 2-1: Failed to create links for entity 255 [ 199.773102][ T5906] usb 2-1: Failed to register entities (-22). [ 199.856943][ T7544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.908800][ T7544] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.963886][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.964034][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.977741][ T989] usb 2-1: USB disconnect, device number 8 [ 200.016625][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.016920][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.985502][ T7544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.215133][ T7852] netlink: 132 bytes leftover after parsing attributes in process `syz.4.843'. [ 201.547770][ T989] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 201.703357][ T989] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.703386][ T989] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 201.703440][ T989] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 201.703464][ T989] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.712287][ T989] usb 2-1: config 0 descriptor?? [ 201.749285][ T989] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 201.749351][ T989] dvb-usb: bulk message failed: -22 (3/0) [ 201.812341][ T989] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 201.816865][ T989] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 201.816925][ T989] usb 2-1: media controller created [ 201.831241][ T989] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 201.926157][ T989] dvb-usb: bulk message failed: -22 (6/0) [ 201.926297][ T989] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 201.947916][ T989] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input13 [ 201.975312][ T989] dvb-usb: schedule remote query interval to 150 msecs. [ 201.975334][ T989] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 202.137200][ T5906] dvb-usb: bulk message failed: -22 (1/0) [ 202.137250][ T5906] dvb-usb: error while querying for an remote control event. [ 202.221221][ T7544] veth0_vlan: entered promiscuous mode [ 202.288161][ T989] dvb-usb: bulk message failed: -22 (1/0) [ 202.288194][ T989] dvb-usb: error while querying for an remote control event. [ 202.290519][ T7544] veth1_vlan: entered promiscuous mode [ 202.296228][ T7871] binder: 7870:7871 ioctl 40046205 0 returned -22 [ 202.447661][ T5906] dvb-usb: bulk message failed: -22 (1/0) [ 202.447694][ T5906] dvb-usb: error while querying for an remote control event. [ 202.494727][ T7544] veth0_macvtap: entered promiscuous mode [ 202.537182][ T7544] veth1_macvtap: entered promiscuous mode [ 202.607850][ T5906] dvb-usb: bulk message failed: -22 (1/0) [ 202.607882][ T5906] dvb-usb: error while querying for an remote control event. [ 202.691026][ T7544] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.753188][ T7544] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.771873][ T5906] dvb-usb: bulk message failed: -22 (1/0) [ 202.771906][ T5906] dvb-usb: error while querying for an remote control event. [ 202.793622][ T3019] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.796724][ T3019] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.797020][ T3019] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.798525][ T3019] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.928782][ T989] dvb-usb: bulk message failed: -22 (1/0) [ 202.928814][ T989] dvb-usb: error while querying for an remote control event. [ 202.929118][ T5906] usb 2-1: USB disconnect, device number 9 [ 203.229716][ T5906] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 203.393311][ T3019] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.393331][ T3019] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.502460][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.502482][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.951867][ T7894] sock: sock_timestamping_bind_phc: sock not bind to device [ 204.777799][ T5906] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 204.927763][ T5906] usb 4-1: Using ep0 maxpacket: 8 [ 204.930573][ T5906] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 204.930597][ T5906] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 204.930651][ T5906] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 204.930675][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.955396][ T5906] hub 4-1:1.0: bad descriptor, ignoring hub [ 204.955443][ T5906] hub 4-1:1.0: probe with driver hub failed with error -5 [ 205.169252][ T7910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.174390][ T7910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.184906][ T7910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.188917][ T7910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.195237][ T5848] Bluetooth: hci3: Unknown advertising packet type: 0x5f [ 205.308250][ T5906] usb 4-1: USB disconnect, device number 6 [ 205.469772][ T7925] netlink: 12 bytes leftover after parsing attributes in process `syz.1.872'. [ 205.469799][ T7925] netlink: 28 bytes leftover after parsing attributes in process `syz.1.872'. [ 205.469818][ T7925] netlink: 12 bytes leftover after parsing attributes in process `syz.1.872'. [ 205.473501][ T7925] netlink: 28 bytes leftover after parsing attributes in process `syz.1.872'. [ 205.473531][ T7925] netlink: 'syz.1.872': attribute type 6 has an invalid length. [ 205.667732][ T5921] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 205.830029][ T5921] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 205.830065][ T5921] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 205.835788][ T5921] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 205.835817][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.835838][ T5921] usb 5-1: Product: syz [ 205.835853][ T5921] usb 5-1: Manufacturer: syz [ 205.835868][ T5921] usb 5-1: SerialNumber: syz [ 205.970319][ T7931] netlink: 'syz.3.875': attribute type 15 has an invalid length. [ 206.108433][ T5921] usb 5-1: 0:2 : does not exist [ 206.149458][ T5921] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 206.220832][ T5921] usb 5-1: USB disconnect, device number 10 [ 206.282261][ T7936] sp0: Synchronizing with TNC [ 206.284461][ T7938] sp0: Found TNC [ 206.446238][ T7942] netlink: 8 bytes leftover after parsing attributes in process `syz.5.880'. [ 209.732921][ T5914] kernel read not supported for file /dsp1 (pid: 5914 comm: kworker/0:4) [ 209.982183][ T8010] [U]  [ 210.384673][ T8024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.916'. [ 211.027773][ T5914] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 211.180112][ T5914] usb 6-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 211.180143][ T5914] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.193986][ T5914] usb 6-1: config 0 descriptor?? [ 211.202583][ T5914] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 212.036587][ T5914] gspca_sunplus: reg_w_riv err -71 [ 212.038368][ T5914] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 212.061393][ T5914] usb 6-1: USB disconnect, device number 2 [ 213.092123][ T8068] nbd1: detected capacity change from 0 to 127 [ 213.112936][ T5848] block nbd1: Receive control failed (result -32) [ 213.485752][ T8076] block device autoloading is deprecated and will be removed. [ 214.040904][ T8091] netlink: 8 bytes leftover after parsing attributes in process `syz.5.947'. [ 214.913388][ T8120] input: syz1 as /devices/virtual/input/input14 [ 215.570857][ T38] audit: type=1326 audit(1758287316.409:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8138 comm="syz.1.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8b6c1ec29 code=0x7ffc0000 [ 215.570918][ T38] audit: type=1326 audit(1758287316.409:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8138 comm="syz.1.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8b6c1ec29 code=0x7ffc0000 [ 215.581365][ T38] audit: type=1326 audit(1758287316.419:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8138 comm="syz.1.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fe8b6c1ec29 code=0x7ffc0000 [ 215.807714][ T38] audit: type=1326 audit(1758287316.639:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8138 comm="syz.1.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8b6c1ec29 code=0x7ffc0000 [ 215.807774][ T38] audit: type=1326 audit(1758287316.649:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8138 comm="syz.1.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8b6c1ec29 code=0x7ffc0000 [ 216.180485][ T5849] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 216.189906][ T5849] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 216.193156][ T5849] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 216.205277][ T5849] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 216.213038][ T5849] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 216.527714][ T8165] program syz.5.980 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.255305][ T8188] netlink: 64 bytes leftover after parsing attributes in process `syz.5.992'. [ 217.582930][ T1182] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.582969][ T1182] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.836895][ T8199] netlink: 24 bytes leftover after parsing attributes in process `syz.5.996'. [ 218.012432][ T1182] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.012472][ T1182] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.017700][ T5928] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 218.180125][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.180171][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.180212][ T5928] usb 4-1: New USB device found, idVendor=1b96, idProduct=000f, bcdDevice= 0.00 [ 218.180236][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.232337][ T5928] usb 4-1: config 0 descriptor?? [ 218.308341][ T5848] Bluetooth: hci5: command tx timeout [ 218.388328][ T5168] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 218.396787][ T1182] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.396825][ T1182] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.547722][ T5168] usb 6-1: Using ep0 maxpacket: 8 [ 218.551326][ T5168] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 218.551355][ T5168] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.602745][ T5168] pvrusb2: Hardware description: Terratec Grabster AV400 [ 218.602767][ T5168] pvrusb2: ********** [ 218.602774][ T5168] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 218.602786][ T5168] pvrusb2: Important functionality might not be entirely working. [ 218.602794][ T5168] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 218.602805][ T5168] pvrusb2: ********** [ 218.659219][ T5928] ntrig 0003:1B96:000F.0008: unknown main item tag 0x0 [ 218.664702][ T5928] ntrig 0003:1B96:000F.0008: hidraw0: USB HID v0.00 Device [HID 1b96:000f] on usb-dummy_hcd.3-1/input0 [ 218.822457][ T2368] pvrusb2: Invalid write control endpoint [ 218.857370][ T5928] ntrig 0003:1B96:000F.0008: Firmware version: 7.15.12.55.4 (3dbf fc9e) [ 218.903381][ T1182] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.903420][ T1182] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.029535][ T8205] pvrusb2: Invalid write control endpoint [ 219.037048][ T5928] usb 6-1: USB disconnect, device number 3 [ 219.072352][ T2368] pvrusb2: Invalid write control endpoint [ 219.072368][ T2368] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 219.072378][ T2368] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 219.072387][ T2368] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 219.072397][ T2368] pvrusb2: Device being rendered inoperable [ 219.120606][ T2368] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 219.120674][ T2368] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 219.153384][ T5168] usb 4-1: USB disconnect, device number 7 [ 219.170005][ T2368] pvrusb2: Attached sub-driver cx25840 [ 219.170032][ T2368] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 219.170043][ T2368] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 219.401969][ T8152] chnl_net:caif_netlink_parms(): no params data found [ 219.428224][ T5849] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 220.136940][ T8233] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 220.167886][ T5928] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 220.296520][ T8238] program syz.5.1010 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 220.330748][ T5928] usb 2-1: unable to get BOS descriptor or descriptor too short [ 220.333781][ T5928] usb 2-1: config 1 interface 0 altsetting 64 bulk endpoint 0x82 has invalid maxpacket 1024 [ 220.333813][ T5928] usb 2-1: config 1 interface 0 altsetting 64 endpoint 0x3 has invalid maxpacket 7227, setting to 1024 [ 220.333840][ T5928] usb 2-1: config 1 interface 0 altsetting 64 bulk endpoint 0x3 has invalid maxpacket 1024 [ 220.333865][ T5928] usb 2-1: config 1 interface 0 has no altsetting 0 [ 220.346736][ T5928] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 220.346765][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.346785][ T5928] usb 2-1: Product: syz [ 220.346813][ T5928] usb 2-1: Manufacturer: syz [ 220.346827][ T5928] usb 2-1: SerialNumber: syz [ 220.387734][ T5848] Bluetooth: hci5: command tx timeout [ 220.438033][ T8219] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 220.438187][ T8219] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 220.665757][ T5928] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 220.689807][ T8152] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.689947][ T8152] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.690172][ T8152] bridge_slave_0: entered allmulticast mode [ 220.693067][ T8152] bridge_slave_0: entered promiscuous mode [ 220.696699][ T5928] usb 2-1: USB disconnect, device number 10 [ 220.738306][ T8152] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.738451][ T8152] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.738695][ T8152] bridge_slave_1: entered allmulticast mode [ 220.744203][ T8152] bridge_slave_1: entered promiscuous mode [ 220.879785][ T1182] bridge_slave_1: left allmulticast mode [ 220.879818][ T1182] bridge_slave_1: left promiscuous mode [ 220.880082][ T1182] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.983731][ T1182] bridge_slave_0: left allmulticast mode [ 220.983767][ T1182] bridge_slave_0: left promiscuous mode [ 220.984037][ T1182] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.805267][ T8271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1024'. [ 222.467673][ T5848] Bluetooth: hci5: command tx timeout [ 223.208592][ T1182] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.298453][ T1182] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.343970][ T1182] bond0 (unregistering): Released all slaves [ 223.387924][ T8246] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1014'. [ 223.521856][ T8152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.526365][ T8152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.220621][ T8152] team0: Port device team_slave_0 added [ 224.302749][ T8152] team0: Port device team_slave_1 added [ 224.548675][ T5848] Bluetooth: hci5: command tx timeout [ 225.378756][ T8152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.378774][ T8152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.378814][ T8152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.695924][ T8323] program syz.3.1046 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 225.696361][ T1182] hsr_slave_0: left promiscuous mode [ 225.762358][ T1182] hsr_slave_1: left promiscuous mode [ 225.763879][ T1182] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.763908][ T1182] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.812201][ T1182] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.812234][ T1182] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.012795][ T1182] veth1_macvtap: left promiscuous mode [ 226.013135][ T1182] veth0_macvtap: left promiscuous mode [ 226.013445][ T1182] veth1_vlan: left promiscuous mode [ 226.013704][ T1182] veth0_vlan: left promiscuous mode [ 227.222995][ T8334] syz.1.1052 (8334): drop_caches: 2 [ 228.709403][ T5849] Bluetooth: hci1: command 0x1003 tx timeout [ 228.717978][ T5848] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 228.970089][ T1182] team0 (unregistering): Port device team_slave_1 removed [ 229.139678][ T3019] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 229.179790][ T1182] team0 (unregistering): Port device team_slave_0 removed [ 231.479537][ T8152] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.479555][ T8152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.479584][ T8152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.483873][ T8345] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1057'. [ 231.631127][ T8349] dvmrp0: tun_chr_ioctl cmd 2148553947 [ 232.101823][ T8365] tun0: tun_chr_ioctl cmd 1074025678 [ 232.101850][ T8365] tun0: group set to 0 [ 232.539425][ T8152] hsr_slave_0: entered promiscuous mode [ 232.549306][ T8152] hsr_slave_1: entered promiscuous mode [ 233.653930][ T8152] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 233.708988][ T8152] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 233.757635][ T8152] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 233.805685][ T8152] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 233.997661][ T31] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 234.037851][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802d18a400: rx timeout, send abort [ 234.041246][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802d18a400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 234.045958][ T8152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.107311][ T8152] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.160141][ T31] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 234.160263][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.161639][ T3019] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.161796][ T3019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.192170][ T3019] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.192346][ T3019] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.219195][ T31] usb 2-1: config 0 descriptor?? [ 234.223303][ T31] cp210x 2-1:0.0: cp210x converter detected [ 234.303860][ T8403] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1080'. [ 234.645522][ T31] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 234.676957][ T31] usb 2-1: cp210x converter now attached to ttyUSB0 [ 234.702456][ T8409] openvswitch: netlink: IPv4 tunnel dst address is zero [ 234.859438][ T31] usb 2-1: USB disconnect, device number 11 [ 234.880527][ T31] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 235.002584][ T31] cp210x 2-1:0.0: device disconnected [ 235.038500][ T8152] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.274806][ T8429] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1090'. [ 235.606330][ T8436] loop2: detected capacity change from 0 to 7 [ 236.273256][ T8152] veth0_vlan: entered promiscuous mode [ 236.350824][ T8152] veth1_vlan: entered promiscuous mode [ 236.552821][ T8152] veth0_macvtap: entered promiscuous mode [ 236.579919][ T8152] veth1_macvtap: entered promiscuous mode [ 236.655728][ T8152] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.667162][ T5914] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 236.704755][ T8152] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.786068][ T57] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.797161][ T57] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.818081][ T5914] usb 5-1: Using ep0 maxpacket: 8 [ 236.823866][ T5914] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 236.823899][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.823920][ T5914] usb 5-1: Product: syz [ 236.823936][ T5914] usb 5-1: Manufacturer: syz [ 236.823951][ T5914] usb 5-1: SerialNumber: syz [ 236.831183][ T57] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.838712][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.879756][ T5914] usb 5-1: config 0 descriptor?? [ 237.157201][ T5914] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 237.231854][ T8480] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1113'. [ 237.248102][ T8480] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1113'. [ 237.252958][ T8480] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1113'. [ 237.509150][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.509174][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.735377][ T5914] gspca_sunplus: reg_w_riv err -71 [ 237.735466][ T5914] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 237.755455][ T5914] usb 5-1: USB disconnect, device number 11 [ 237.783187][ T1182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.783205][ T1182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.581398][ T8516] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1128'. [ 239.888140][ T8521] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1130'. [ 239.888249][ T8521] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1130'. [ 241.965518][ T8556] cgroup: fork rejected by pids controller in /syz3 [ 242.220952][ T8643] netlink: 'syz.4.1150': attribute type 25 has an invalid length. [ 242.220976][ T8643] netlink: 'syz.4.1150': attribute type 8 has an invalid length. [ 243.927701][ T5168] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 244.100864][ T5168] usb 2-1: Using ep0 maxpacket: 32 [ 244.103861][ T5168] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 244.103889][ T5168] usb 2-1: config 0 has no interface number 0 [ 244.103938][ T5168] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.103965][ T5168] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.104006][ T5168] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 244.104030][ T5168] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.125838][ T5168] usb 2-1: config 0 descriptor?? [ 244.292392][ T989] kernel read not supported for file /dsp (pid: 989 comm: kworker/0:2) [ 244.823793][ T5168] uclogic 0003:28BD:0094.0009: pen parameters not found [ 244.823820][ T5168] uclogic 0003:28BD:0094.0009: interface is invalid, ignoring [ 244.830191][ T5921] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 245.000147][ T5921] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 245.000176][ T5921] usb 4-1: config 0 has no interface number 0 [ 245.003676][ T5921] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 245.003710][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.003730][ T5921] usb 4-1: Product: syz [ 245.003746][ T5921] usb 4-1: Manufacturer: syz [ 245.003761][ T5921] usb 4-1: SerialNumber: syz [ 245.020037][ T5921] usb 4-1: config 0 descriptor?? [ 245.024941][ T5928] usb 2-1: USB disconnect, device number 12 [ 245.357701][ T5848] Bluetooth: hci5: command 0x0405 tx timeout [ 245.459254][ T5921] usb 4-1: Firmware: major: 177, minor: 79, hardware type: HULUSB (4) [ 245.664856][ T5921] usb 4-1: failed to fetch extended address, random address set [ 245.766692][ T5921] usb 4-1: USB disconnect, device number 8 [ 245.779566][ T5168] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 245.937664][ T5168] usb 5-1: Using ep0 maxpacket: 32 [ 245.940384][ T5168] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 245.940410][ T5168] usb 5-1: config 0 has no interface number 0 [ 245.946778][ T5168] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 245.946807][ T5168] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.946826][ T5168] usb 5-1: Product: syz [ 245.946841][ T5168] usb 5-1: Manufacturer: syz [ 245.946856][ T5168] usb 5-1: SerialNumber: syz [ 245.954539][ T5168] usb 5-1: config 0 descriptor?? [ 245.970160][ T5168] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 246.219804][ T5168] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 246.267632][ T5168] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 246.378934][ T8979] af_packet: tpacket_rcv: packet too big, clamped from 114 to 4294967272. macoff=96 [ 246.627268][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 246.628277][ T31] usb 5-1: USB disconnect, device number 12 [ 246.672361][ T31] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 246.697136][ T31] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 246.700081][ T31] quatech2 5-1:0.51: device disconnected [ 248.264258][ T9033] netlink: 'syz.5.1215': attribute type 1 has an invalid length. [ 248.264282][ T9033] netlink: 'syz.5.1215': attribute type 2 has an invalid length. [ 248.318103][ T9033] netlink: 'syz.5.1215': attribute type 1 has an invalid length. [ 248.318128][ T9033] netlink: 'syz.5.1215': attribute type 2 has an invalid length. [ 248.696888][ T9046] netlink: 'syz.1.1221': attribute type 7 has an invalid length. [ 248.696912][ T9046] netlink: 'syz.1.1221': attribute type 8 has an invalid length. [ 248.696925][ T9046] netlink: 'syz.1.1221': attribute type 4 has an invalid length. [ 248.696939][ T9046] netlink: 212 bytes leftover after parsing attributes in process `syz.1.1221'. [ 248.782211][ T9049] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 248.857896][ T31] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 249.023622][ T31] usb 6-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 249.023653][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.023673][ T31] usb 6-1: Product: syz [ 249.023688][ T31] usb 6-1: Manufacturer: syz [ 249.023702][ T31] usb 6-1: SerialNumber: syz [ 249.040069][ T31] usb 6-1: config 0 descriptor?? [ 249.050930][ T31] i2c-tiny-usb 6-1:0.0: version 6d.cc found at bus 006 address 004 [ 249.265466][ T9061] netlink: 'syz.1.1228': attribute type 2 has an invalid length. [ 249.485321][ T31] (null): failure reading functionality [ 249.506782][ T31] i2c i2c-1: connected i2c-tiny-usb device [ 249.710469][ T5962] usb 6-1: USB disconnect, device number 4 [ 252.057826][ T5928] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 252.218376][ T5928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.218412][ T5928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.218453][ T5928] usb 5-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 252.218477][ T5928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.270190][ T5928] usb 5-1: config 0 descriptor?? [ 252.695892][ T5928] sony 0003:054C:024B.000A: unexpected long global item [ 252.717112][ T5928] sony 0003:054C:024B.000A: parse failed [ 252.717221][ T5928] sony 0003:054C:024B.000A: probe with driver sony failed with error -22 [ 252.903096][ T5928] usb 5-1: USB disconnect, device number 13 [ 254.317618][ T5962] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 254.482295][ T5962] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.482331][ T5962] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.482373][ T5962] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 254.482399][ T5962] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.490129][ T5962] usb 5-1: config 0 descriptor?? [ 254.991963][ T5962] hid-steam 0003:28DE:1142.000B: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 255.971395][ T5962] hid-steam 0003:28DE:1142.000B: Steam wireless receiver connected [ 255.995364][ T5962] hid-steam 0003:28DE:1142.000C: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 256.200842][ T5962] usb 5-1: USB disconnect, device number 14 [ 256.575670][ T9208] tap0: tun_chr_ioctl cmd 2147767507 [ 257.736043][ T5962] hid-steam 0003:28DE:1142.000B: Steam wireless receiver disconnected [ 258.307850][ T5914] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 258.461910][ T5914] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.461939][ T5914] usb 6-1: config 0 has no interfaces? [ 258.461971][ T5914] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 258.461996][ T5914] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.527078][ T5914] usb 6-1: config 0 descriptor?? [ 258.768189][ T9231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.768663][ T9231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.798947][ T5914] usb 6-1: USB disconnect, device number 5 [ 260.101449][ T1182] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 261.131879][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.131962][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.429745][ T6025] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 263.589462][ T6025] usb 6-1: Using ep0 maxpacket: 16 [ 263.592866][ T6025] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.592898][ T6025] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.592922][ T6025] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 263.592950][ T6025] usb 6-1: config 0 interface 0 has no altsetting 0 [ 263.592987][ T6025] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 263.593010][ T6025] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.718801][ T6025] usb 6-1: config 0 descriptor?? [ 264.009295][ C1] sched: DL replenish lagged too much [ 264.297860][ T6025] hid (null): unknown global tag 0xc [ 264.297953][ T6025] hid (null): bogus close delimiter [ 264.297999][ T6025] hid (null): invalid report_size 12466 [ 264.408519][ T9236] kthread_run failed with err -4 [ 264.505101][ T6025] usb 6-1: USB disconnect, device number 6 [ 264.943206][ T9260] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 332.408401][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 332.417910][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 401.009059][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 401.641490][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 424.529999][ T5849] Bluetooth: hci5: command 0x0405 tx timeout [ 449.110637][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 449.119977][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 464.652352][ T39] INFO: task kworker/1:0:31 blocked for more than 144 seconds. [ 464.652384][ T39] Not tainted syzkaller #0 [ 464.652396][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 464.652410][ T39] task:kworker/1:0 state:D stack:20776 pid:31 tgid:31 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 464.652473][ T39] Workqueue: events_power_efficient reg_check_chans_work [ 464.652523][ T39] Call Trace: [ 464.652530][ T39] [ 464.652546][ T39] __schedule+0x16f3/0x4c20 [ 464.652594][ T39] ? __lock_acquire+0xab9/0xd20 [ 464.652638][ T39] ? __pfx___schedule+0x10/0x10 [ 464.652698][ T39] rt_mutex_schedule+0x77/0xf0 [ 464.652720][ T39] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 464.652764][ T39] ? rt_mutex_slowlock_block+0x351/0x6d0 [ 464.652796][ T39] rt_mutex_slowlock+0x2b1/0x6e0 [ 464.652827][ T39] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 464.652856][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 464.652880][ T39] ? __lock_acquire+0xab9/0xd20 [ 464.652922][ T39] ? reg_check_chans_work+0x164/0xf30 [ 464.652959][ T39] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 464.652995][ T39] ? __lock_acquire+0xab9/0xd20 [ 464.653031][ T39] ? reg_check_chans_work+0x164/0xf30 [ 464.653063][ T39] mutex_lock_nested+0x16a/0x1d0 [ 464.653089][ T39] ? reg_check_chans_work+0x95/0xf30 [ 464.653128][ T39] reg_check_chans_work+0x164/0xf30 [ 464.653169][ T39] ? __lock_acquire+0xab9/0xd20 [ 464.653207][ T39] ? __pfx_reg_check_chans_work+0x10/0x10 [ 464.653243][ T39] ? process_scheduled_works+0x9ef/0x17b0 [ 464.653278][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 464.653319][ T39] ? process_scheduled_works+0x9ef/0x17b0 [ 464.653345][ T39] ? process_scheduled_works+0x9ef/0x17b0 [ 464.653376][ T39] process_scheduled_works+0xade/0x17b0 [ 464.653437][ T39] ? __pfx_process_scheduled_works+0x10/0x10 [ 464.653486][ T39] worker_thread+0x8a0/0xda0 [ 464.653546][ T39] kthread+0x70e/0x8a0 [ 464.653584][ T39] ? __pfx_worker_thread+0x10/0x10 [ 464.653613][ T39] ? __pfx_kthread+0x10/0x10 [ 464.653653][ T39] ? __pfx_kthread+0x10/0x10 [ 464.653688][ T39] ret_from_fork+0x436/0x7d0 [ 464.653721][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 464.653758][ T39] ? __switch_to_asm+0x39/0x70 [ 464.653779][ T39] ? __switch_to_asm+0x33/0x70 [ 464.653799][ T39] ? __pfx_kthread+0x10/0x10 [ 464.653834][ T39] ret_from_fork_asm+0x1a/0x30 [ 464.653874][ T39] [ 464.653970][ T39] INFO: task kworker/R-ipv6_:3225 blocked for more than 144 seconds. [ 464.653987][ T39] Not tainted syzkaller #0 [ 464.653998][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 464.654008][ T39] task:kworker/R-ipv6_ state:D stack:29112 pid:3225 tgid:3225 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 464.654076][ T39] Workqueue: ipv6_addrconf addrconf_verify_work [ 464.654104][ T39] Call Trace: [ 464.654111][ T39] [ 464.654124][ T39] __schedule+0x16f3/0x4c20 [ 464.654170][ T39] ? __lock_acquire+0xab9/0xd20 [ 464.654212][ T39] ? __pfx___schedule+0x10/0x10 [ 464.654271][ T39] rt_mutex_schedule+0x77/0xf0 [ 464.654302][ T39] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 464.654344][ T39] ? rt_mutex_slowlock_block+0x351/0x6d0 [ 464.654376][ T39] rt_mutex_slowlock+0x2b1/0x6e0 [ 464.654406][ T39] ? rt_mutex_slowlock+0x1c[ 464.654406][ T39] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 464.654435][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 464.654475][ T39] ? addrconf_verify_work+0x19/0x30 [ 464.654511][ T39] ? process_scheduled_works+0x9ef/0x17b0 [ 464.654543][ T39] ? addrconf_verify_work+0x19/0x30 [ 464.654569][ T39] mutex_lock_nested+0x16a/0x1d0 [ 464.654595][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 464.654633][ T39] addrconf_verify_work+0x19/0x30 [ 464.654659][ T39] ? process_scheduled_works+0x9ef/0x17b0 [ 464.654685][ T39] process_scheduled_works+0xade/0x17b0 [ 464.654747][ T39] ? __pfx_process_scheduled_works+0x10/0x10 [ 464.654787][ T39] ? assign_work+0x381/0x410 [ 464.654820][ T39] rescuer_thread+0x53c/0xdd0 [ 464.654859][ T39] ? rescuer_thread+0xbb/0xdd0 [ 464.654911][ T39] kthread+0x70e/0x8a0 [ 464.654949][ T39] ? __pfx_rescuer_thread+0x10/0x10 [ 464.654980][ T39] ? __pfx_kthread+0x10/0x10 [ 464.655020][ T39] ? __pfx_kthread+0x10/0x10 [ 464.655055][ T39] ret_from_fork+0x436/0x7d0 [ 464.655087][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 464.655124][ T39] ? __switch_to_asm+0x39/0x70 [ 464.655145][ T39] ? __switch_to_asm+0x33/0x70 [ 464.655164][ T39] ? __pfx_kthread+0x10/0x10 [ 464.655199][ T39] ret_from_fork_asm+0x1a/0x30 [ 464.655238][ T39] [ 464.655321][ T39] [ 464.655321][ T39] Showing all locks held in the system: [ 464.655331][ T39] 4 locks held by kworker/0:1/10: [ 464.655344][ T39] #0: ffff8880518d7d38 ((wq_completion)wg-kex-wg2#10){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 464.655410][ T39] #1: ffffc900000f7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 464.655486][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 464.655543][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 464.655600][ T39] 2 locks held by kworker/u8:0/12: [ 464.655613][ T39] 4 locks held by kworker/u8:1/13: [ 464.655625][ T39] #0: ffff88814d089138 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 464.655680][ T39] #1: ffffc90000127bc0 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 464.655737][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 464.655793][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 464.655850][ T39] 2 locks held by ksoftirqd/0/15: [ 464.655861][ T39] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 464.655914][ T39] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 464.655971][ T39] 7 locks held by ktimers/0/16: [ 464.655985][ T39] 2 locks held by rcuc/1/28: [ 464.655996][ T39] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 464.656052][ T39] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 464.656108][ T39] 2 locks held by ksoftirqd/1/30: [ 464.656120][ T39] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 464.656176][ T39] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 464.656232][ T39] 4 locks held by kworker/1:0/31: [ 464.656244][ T39] #0: ffff888019899938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 464.656308][ T39] #1: ffffc90000a5fbc0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 464.656363][ T39] #2: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x95/0xf30 [ 464.656426][ T39] #3: ffff888062bc0898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_check_chans_work+0x164/0xf30 [ 464.656489][ T39] 6 locks held by kworker/u8:2/37: [ 464.656501][ T39] #0: ffff888061a52138 ((wq_completion)wg-kex-wg0#9){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 464.656563][ T39] #1: ffffc90000ac7bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 464.656621][ T39] #2: ffff8880279a15f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 464.656677][ T39] #3: ffff888033134388 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 464.656732][ T39] #4: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 464.656788][ T39] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 464.656844][ T39] 1 lock held by khungtaskd/39: [ 464.656856][ T39] #0: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 464.656908][ T39] 4 locks held by kworker/1:1/44: [ 464.656923][ T39] 5 locks held by kworker/u8:3/57: [ 464.656935][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 464.656991][ T39] #1: ffffc9000123fbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 464.657049][ T39] #2: ffff88804c6d0898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 464.657109][ T39] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 464.657164][ T39] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 464.657221][ T39] 5 locks held by kworker/u8:4/68: [ 464.657233][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 464.657296][ T39] #1: ffffc9000153fbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 464.657353][ T39] #2: ffff88805ec60898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 464.723092][ T39] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 464.723149][ T39] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 464.723206][ T39] 7 locks held by kworker/u8:5/79: [ 464.723219][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 464.723274][ T39] #1: ffffc9000157fbc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 464.723332][ T39] #2: ffff888028c8a300 (&devlink->lock_key#7){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 464.723398][ T39] #3: ffff8880323f0920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 464.723459][ T39] #4: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 464.723512][ T39] #5: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 464.723585][ T39] #6: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 464.723649][ T39] 4 locks held by kworker/0:2/989: [ 464.723661][ T39] #0: ffff888023c1ed38 ((wq_completion)wg-crypt-wg2#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 464.723723][ T39] #1: ffffc900044d7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 464.723799][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 464.723855][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 464.723913][ T39] 6 locks held by kworker/u8:6/1164: [ 464.723925][ T39] #0: ffff88805b101138 ((wq_completion)wg-kex-wg1#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 464.723987][ T39] #1: ffffc900049bfbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 464.724056][ T39] #2: ffff88805b1215f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 464.724113][ T39] #3: ffff88805cb758b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 464.724168][ T39] #4: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 464.724224][ T39] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 464.724281][ T39] 5 locks held by kworker/u8:7/1170: [ 464.724294][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 464.724351][ T39] #1: ffffc900049efbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 464.724408][ T39] #2: ffff888062bb0898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 464.724467][ T39] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 464.724523][ T39] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 464.724578][ T39] 5 locks held by kworker/u8:8/1182: [ 464.724591][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 464.724647][ T39] #1: ffffc90004a8fbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 464.724704][ T39] #2: ffff88805e060898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 464.724763][ T39] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 464.724818][ T39] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 464.724890][ T39] 5 locks held by kworker/u8:9/3019: [ 464.724903][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 464.724959][ T39] #1: ffffc9000cbd7bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 464.725016][ T39] #2: ffff88805e200898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 464.725082][ T39] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 464.725137][ T39] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 464.725194][ T39] 3 locks held by kworker/R-ipv6_/3225: [ 464.725207][ T39] #0: ffff88814c8cd138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 464.725263][ T39] #1: ffffc9000d017ba0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 464.725321][ T39] #2: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 464.725380][ T39] 5 locks held by kworker/u8:10/3581: [ 464.725392][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 464.725448][ T39] #1: ffffc9000d6d7bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 464.725505][ T39] #2: ffff88805e9e0898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 464.725564][ T39] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 464.725619][ T39] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 464.725676][ T39] 4 locks held by kworker/u8:11/3613: [ 464.725688][ T39] 5 locks held by kworker/u8:12/3620: [ 464.725700][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 464.725757][ T39] #1: ffffc9000d877bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 464.725813][ T39] #2: ffff888062bc0898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 464.725873][ T39] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 464.725928][ T39] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 464.725985][ T39] 5 locks held by kworker/u8:13/3646: [ 464.725997][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 464.726061][ T39] #1: ffffc9000d857bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 464.726118][ T39] #2: ffff888063540898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 464.726177][ T39] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 464.726232][ T39] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 464.726290][ T39] 4 locks held by kworker/1:2/5168: [ 464.726302][ T39] #0: ffff888023933d38 ((wq_completion)wg-kex-wg1#12){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 464.726364][ T39] #1: ffffc9000faafbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 464.726440][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 464.726495][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 464.726563][ T39] 4 locks held by dhcpcd/5502: [ 464.726576][ T39] 3 locks held by crond/5582: [ 464.726588][ T39] 2 locks held by getty/5596: [ 464.726600][ T39] #0: ffff88823bf760a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 464.726664][ T39] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 464.726721][ T39] 3 locks held by syz-executor/5826: [ 464.726734][ T39] #0: ffff88803653b110 (sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_sendmsg+0x21/0x50 [ 464.726789][ T39] #1: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 464.726845][ T39] #2: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 464.726902][ T39] 4 locks held by kworker/u9:3/5848: [ 464.726914][ T39] #0: ffff88814d02a938 ((wq_completion)krxrpcd){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 464.726970][ T39] #1: ffffc90004c5fbc0 ((work_completion)(&rxnet->peer_keepalive_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 464.727033][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 464.727089][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 464.727146][ T39] 4 locks held by syz-executor/5850: [ 464.727158][ T39] #0: ffff88805bdc1d78 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 464.727218][ T39] #1: ffff8880280bf350 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_close+0x1d/0x110 [ 464.727285][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 464.727339][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 464.745395][ T39] 6 locks held by kworker/u9:6/5859: [ 464.745416][ T39] #0: ffff88804f4fa138 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 464.745481][ T39] #1: ffffc90004cffbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 464.745541][ T39] #2: ffff88805eb30e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 464.745596][ T39] #3: ffff88805eb300a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 464.745658][ T39] #4: ffffffff8ee3b198 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 464.745720][ T39] #5: ffff888023562358 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 464.745778][ T39] 4 locks held by kworker/0:3/5906: [ 464.745791][ T39] #0: ffff888019899938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 464.745849][ T39] #1: ffffc9000578fbc0 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 464.745907][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 464.745963][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 464.746022][ T39] 2 locks held by napi/wg2-0/5912: [ 464.746042][ T39] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 464.746099][ T39] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 464.746156][ T39] 5 locks held by kworker/0:4/5914: [ 464.746169][ T39] #0: ffff8880518d4538 ((wq_completion)wg-kex-wg1#10){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 464.746232][ T39] #1: ffffc9000581fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 464.746311][ T39] #2: ffff88805d219928 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x38/0xbe0 [ 464.746368][ T39] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 464.746424][ T39] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 464.746482][ T39] 4 locks held by kworker/1:4/5921: [ 464.746495][ T39] #0: ffff888019899138 ((wq_completion)events_long){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 464.746550][ T39] #1: ffffc9000588fbc0 ((work_completion)(&(&ipvs->defense_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 464.746614][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 464.746670][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 464.746729][ T39] 4 locks held by kworker/0:5/5928: [ 464.746741][ T39] #0: ffff88805adc3138 ((wq_completion)wg-kex-wg0#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 464.746802][ T39] #1: ffffc900058ffbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 464.746881][ T39] #2: ffff888039eb15f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x150/0x900 [ 464.746938][ T39] #3: ffff88805d2183f8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x4de/0x900 [ 464.746996][ T39] 4 locks held by kworker/0:6/6003: [ 464.747008][ T39] #0: ffff888019899138 ((wq_completion)events_long){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 464.747073][ T39] #1: ffffc90005aefbc0 ((work_completion)(&(&ipvs->defense_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 464.747131][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 464.747188][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 464.747245][ T39] 6 locks held by kworker/0:7/6025: [ 464.747257][ T39] #0: ffff88805d488538 ((wq_completion)wg-kex-wg0#10){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 464.747320][ T39] #1: ffffc90005bafbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 464.747472][ T39] #2: ffff8880279a15f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x115/0x970 [ 464.747531][ T39] #3: ffff8880331338f0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x126/0x970 [ 464.747587][ T39] #4: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 464.747643][ T39] #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 464.747700][ T39] 4 locks held by kworker/0:8/6028: [ 464.747713][ T39] #0: ffff88805d4edd38 ((wq_completion)wg-kex-wg2#12){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 464.747776][ T39] #1: ffffc90005bcfbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 464.747855][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 464.747910][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 464.747968][ T39] 2 locks held by syz-executor/7544: [ 464.747980][ T39] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 464.748043][ T39] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 464.748102][ T39] 2 locks held by napi/wg0-0/7821: [ 464.748115][ T39] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 464.748171][ T39] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 464.748231][ T39] 5 locks held by kworker/1:8/9244: [ 464.748243][ T39] #0: ffff8880518d4538 ((wq_completion)wg-kex-wg1#10){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 464.748306][ T39] #1: ffffc900055efbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 464.748384][ T39] #2: ffff888033134e20 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x38/0xbe0 [ 464.748441][ T39] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 464.748497][ T39] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 464.748554][ T39] 4 locks held by kworker/1:9/9282: [ 464.748566][ T39] #0: ffff88805d4ec938 ((wq_completion)wg-crypt-wg2#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 464.748627][ T39] #1: ffffc900059cfbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 464.748703][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 464.748758][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 464.748815][ T39] 4 locks held by kworker/1:10/9286: [ 464.748827][ T39] #0: ffff88805e045938 ((wq_completion)wg-kex-wg0#12){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 464.748890][ T39] #1: ffffc90005b8fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 464.748969][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 464.749025][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 464.749090][ T39] 1 lock held by syz.3.1324/9289: [ 464.749103][ T39] #0: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 464.749163][ T39] 7 locks held by kworker/u8:14/9291: [ 464.749176][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 464.749232][ T39] #1: ffffc90005b0fbc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 464.749293][ T39] #2: ffff88805c9b4300 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 464.749361][ T39] #3: ffff88805c8c4520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 464.749425][ T39] #4: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 464.749482][ T39] #5: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 464.749538][ T39] #6: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 464.749595][ T39] 7 locks held by kworker/u8:15/9292: [ 464.749608][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 464.749665][ T39] #1: ffffc90005b7fbc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 464.749725][ T39] #2: ffff88803cdf7300 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 464.749793][ T39] #3: ffff888033414120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 464.749856][ T39] #4: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 464.749911][ T39] #5: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 464.749968][ T39] #6: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 464.750032][ T39] 6 locks held by kworker/u8:16/9293: [ 464.750045][ T39] #0: ffff88805acc7938 ((wq_completion)wg-kex-wg0#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 464.750107][ T39] #1: ffffc90005bbfbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 464.750166][ T39] #2: ffff888039eb15f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 464.750222][ T39] #3: ffff88805d2183f8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 464.750277][ T39] #4: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 464.750334][ T39] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 464.750392][ T39] 4 locks held by kworker/u8:17/9294: [ 464.750405][ T39] #0: ffff88805acc7938 ((wq_completion)wg-kex-wg0#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 464.750467][ T39] #1: ffffc90005b1fbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 464.750525][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 464.750581][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 464.750639][ T39] 6 locks held by kworker/u8:18/9295: [ 464.750651][ T39] #0: ffff8880366c1938 ((wq_completion)wg-kex-wg1#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 464.750713][ T39] #1: ffffc9000590fbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 464.750772][ T39] #2: ffff88805abfd5f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 464.750829][ T39] #3: ffff88805cb72e58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 464.750885][ T39] #4: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 464.750941][ T39] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 464.750999][ T39] 4 locks held by kworker/u8:19/9296: [ 464.751012][ T39] #0: ffff888025055938 ((wq_completion)wg-kex-wg1#9){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 464.751080][ T39] #1: ffffc900056bfbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 464.751138][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 464.751194][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 464.751252][ T39] 6 locks held by kworker/u8:20/9297: [ 464.751265][ T39] #0: ffff888036898938 ((wq_completion)wg-kex-wg0#11){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 464.751328][ T39] #1: ffffc90005b3fbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 464.751386][ T39] #2: ffff88802ac595f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 464.751443][ T39] #3: ffff8880331323c0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 464.751498][ T39] #4: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 464.751554][ T39] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 464.751612][ T39] 5 locks held by kworker/0:9/9298: [ 464.751624][ T39] #0: ffff88805ade8938 ((wq_completion)wg-kex-wg2#8){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 464.751686][ T39] #1: ffffc90005c67bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 464.751765][ T39] #2: ffff88805b2715f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_response+0x1c7/0xb00 [ 464.751822][ T39] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 464.751878][ T39] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 464.751935][ T39] 3 locks held by kworker/0:10/9300: [ 464.751948][ T39] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 464.752006][ T39] #1: ffffc90005c87bc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 464.752070][ T39] #2: ffffffff8ecd3738 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 464.752123][ T39] 4 locks held by kworker/u8:21/9301: [ 464.752136][ T39] #0: ffff888030e07938 ((wq_completion)wg-kex-wg2#7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 464.752198][ T39] #1: ffffc90005c97bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 464.752256][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 464.752312][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 464.752370][ T39] 2 locks held by kworker/0:11/9303: [ 464.752382][ T39] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 464.752440][ T39] #1: ffffc90005ca7bc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 464.752497][ T39] 4 locks held by kworker/1:13/9304: [ 464.752509][ T39] #0: ffff88805adc1d38 ((wq_completion)wg-crypt-wg0#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 464.752571][ T39] #1: ffffc90004b0fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 464.752650][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 464.752705][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 464.752762][ T39] 2 locks held by syz-executor/9305: [ 464.752775][ T39] 4 locks held by kworker/u8:22/9306: [ 464.752788][ T39] #0: ffff888025055938 ((wq_completion)wg-kex-wg1#9){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 464.752851][ T39] #1: ffffc90005cb7bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 464.752908][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 464.752964][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 464.753023][ T39] 6 locks held by kworker/u8:23/9307: [ 464.753042][ T39] #0: ffff888025182938 ((wq_completion)wg-kex-wg1#11){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 464.753105][ T39] #1: ffffc90005cd7bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 464.753162][ T39] #2: ffff8880362595f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 464.753218][ T39] #3: ffff8880331303f8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 464.753275][ T39] #4: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 464.753331][ T39] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 464.753389][ T39] 4 locks held by kworker/0:12/9308: [ 464.753401][ T39] #0: ffff88805d4ec938 ((wq_completion)wg-crypt-wg2#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 464.753464][ T39] #1: ffffc90005d17bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 464.753542][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 464.753598][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 464.753656][ T39] 4 locks held by kworker/1:14/9310: [ 464.753669][ T39] #0: ffff8880518d7d38 ((wq_completion)wg-kex-wg2#10){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 464.753732][ T39] #1: ffffc90005d47bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 464.753810][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 464.753866][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 464.753923][ T39] 5 locks held by kworker/u8:24/9312: [ 464.753936][ T39] 3 locks held by kworker/0:13/9313: [ 464.753950][ T39] 3 locks held by syz-executor/9314: [ 464.753963][ T39] 4 locks held by kworker/1:15/9315: [ 464.753975][ T39] #0: ffff88805ade8d38 ((wq_completion)wg-crypt-wg2#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 464.754046][ T39] #1: ffffc9000496fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 464.754124][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 464.754181][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 464.754239][ T39] 4 locks held by kworker/u8:25/9316: [ 464.754251][ T39] #0: ffff88805acc6938 ((wq_completion)wg-kex-wg2#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 464.754314][ T39] #1: ffffc90005d07bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 464.754372][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 464.754427][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 464.754485][ T39] 4 locks held by kworker/0:14/9318: [ 464.754497][ T39] #0: ffff88805d4ec938 ((wq_completion)wg-crypt-wg2#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 464.754559][ T39] #1: ffffc90005b6fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 464.754638][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 464.754694][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 464.754752][ T39] 1 lock held by dhcpcd/9319: [ 464.754764][ T39] #0: ffff888035d92350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 464.754823][ T39] 7 locks held by kworker/u8:26/9320: [ 464.754835][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 464.754893][ T39] #1: ffffc90004ccfbc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 464.754953][ T39] #2: ffff88805ce74300 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 464.755020][ T39] #3: ffff88805cd63d20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 464.755090][ T39] #4: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 464.755146][ T39] #5: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 464.755209][ T39] #6: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 464.755268][ T39] 6 locks held by kworker/u8:27/9321: [ 464.755281][ T39] #0: ffff888035483938 ((wq_completion)wg-kex-wg2#11){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 464.755345][ T39] #1: ffffc90005d37bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 464.755402][ T39] #2: ffff888060b495f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 464.755459][ T39] #3: ffff88805d21ae58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 464.755515][ T39] #4: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 464.755571][ T39] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 464.755628][ T39] 4 locks held by kworker/0:15/9322: [ 464.755640][ T39] #0: ffff888023933d38 ((wq_completion)wg-kex-wg1#12){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 464.755702][ T39] #1: ffffc900082bfbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 464.755781][ T39] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 464.755838][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 464.755895][ T39] 2 locks held by syz-executor/9323: [ 464.755912][ T39] [ 464.755918][ T39] ============================================= [ 464.755918][ T39] [ 464.755942][ T39] NMI backtrace for cpu 1 [ 464.755972][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 464.756018][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 464.756041][ T39] Call Trace: [ 464.756050][ T39] [ 464.756060][ T39] dump_stack_lvl+0x189/0x250 [ 464.756098][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 464.756131][ T39] ? __pfx__printk+0x10/0x10 [ 464.756180][ T39] nmi_cpu_backtrace+0x39e/0x3d0 [ 464.756231][ T39] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 464.756263][ T39] ? __pfx__printk+0x10/0x10 [ 464.756293][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 464.756323][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 464.756356][ T39] watchdog+0xf93/0xfe0 [ 464.756390][ T39] ? watchdog+0x1de/0xfe0 [ 464.756425][ T39] kthread+0x70e/0x8a0 [ 464.756462][ T39] ? __pfx_watchdog+0x10/0x10 [ 464.756489][ T39] ? __pfx_kthread+0x10/0x10 [ 464.756527][ T39] ? __pfx_kthread+0x10/0x10 [ 464.756560][ T39] ret_from_fork+0x436/0x7d0 [ 464.756592][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 464.756628][ T39] ? __switch_to_asm+0x39/0x70 [ 464.756648][ T39] ? __switch_to_asm+0x33/0x70 [ 464.756668][ T39] ? __pfx_kthread+0x10/0x10 [ 464.756702][ T39] ret_from_fork_asm+0x1a/0x30 [ 464.756741][ T39] [ 464.756750][ T39] Sending NMI from CPU 1 to CPUs 0: [ 464.756778][ C0] NMI backtrace for cpu 0 [ 464.756794][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 464.756828][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 464.756849][ C0] RIP: 0010:unwind_next_frame+0x643/0x2390 [ 464.756877][ C0] Code: 28 00 74 08 48 89 df e8 eb ed aa 00 48 8b 3b 48 85 ff 0f 84 5b 10 00 00 48 83 c7 10 e9 73 01 00 00 83 fb 04 0f 84 7b 01 00 00 <83> fb 05 0f 85 36 0c 00 00 48 8b 44 24 58 80 3c 28 00 74 11 4c 89 [ 464.756893][ C0] RSP: 0018:ffffc90000156a98 EFLAGS: 00000202 [ 464.756909][ C0] RAX: ffffc90000156b9d RBX: 0000000000000005 RCX: ffffffff8f8c3c28 [ 464.756922][ C0] RDX: ffffffff90307b18 RSI: ffffffff90307b1c RDI: ffffffff8b621620 [ 464.756935][ C0] RBP: dffffc0000000000 R08: 0000000000000001 R09: ffffffff8172c165 [ 464.756947][ C0] R10: ffffc90000156bb8 R11: ffffffff81aaf310 R12: ffffffff90307b1d [ 464.756959][ C0] R13: ffffc90000156bb8 R14: ffffc90000156b68 R15: ffffc90000156ba0 [ 464.756972][ C0] FS: 0000000000000000(0000) GS:ffff8881268bc000(0000) knlGS:0000000000000000 [ 464.756986][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 464.756998][ C0] CR2: 00007f8c871a8740 CR3: 000000000d7a6000 CR4: 00000000003526f0 [ 464.757014][ C0] Call Trace: [ 464.757020][ C0] [ 464.757032][ C0] ? unwind_next_frame+0xa5/0x2390 [ 464.757059][ C0] ? ip6_input+0x16a/0x270 [ 464.757087][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 464.757108][ C0] arch_stack_walk+0x11c/0x150 [ 464.757138][ C0] ? ip6_input+0x16a/0x270 [ 464.757166][ C0] stack_trace_save+0x9c/0xe0 [ 464.757185][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 464.757203][ C0] ? kasan_save_free_info+0x46/0x50 [ 464.757221][ C0] ? consume_skb+0x9e/0xf0 [ 464.757248][ C0] ? nft_synproxy_eval_v6+0x376/0x560 [ 464.757267][ C0] ? nft_synproxy_do_eval+0x3d7/0x570 [ 464.757294][ C0] ? __lock_acquire+0xab9/0xd20 [ 464.757319][ C0] kasan_save_track+0x3e/0x80 [ 464.757340][ C0] ? kasan_save_track+0x3e/0x80 [ 464.757360][ C0] ? kasan_save_free_info+0x46/0x50 [ 464.757381][ C0] ? __kasan_slab_free+0x5b/0x80 [ 464.757405][ C0] ? kmem_cache_free+0x195/0x510 [ 464.757431][ C0] ? nft_synproxy_eval_v6+0x376/0x560 [ 464.757449][ C0] ? nft_synproxy_do_eval+0x3d7/0x570 [ 464.757468][ C0] ? nft_do_chain+0x40c/0x1920 [ 464.757485][ C0] ? nft_do_chain_inet+0x25d/0x340 [ 464.757503][ C0] ? nf_hook_slow+0xc2/0x220 [ 464.757528][ C0] ? NF_HOOK+0x206/0x3a0 [ 464.757550][ C0] ? ip6_input+0x16a/0x270 [ 464.757601][ C0] kasan_save_free_info+0x46/0x50 [ 464.757618][ C0] __kasan_slab_free+0x5b/0x80 [ 464.757640][ C0] ? nft_synproxy_eval_v6+0x376/0x560 [ 464.757659][ C0] kmem_cache_free+0x195/0x510 [ 464.757687][ C0] nft_synproxy_eval_v6+0x376/0x560 [ 464.757710][ C0] ? __pfx_nft_synproxy_eval_v6+0x10/0x10 [ 464.757732][ C0] ? nf_ip_checksum+0x13c/0x510 [ 464.757754][ C0] nft_synproxy_do_eval+0x3d7/0x570 [ 464.757777][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 464.757796][ C0] ? __local_bh_enable_ip+0x1b2/0x270 [ 464.757819][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 464.757855][ C0] nft_do_chain+0x40c/0x1920 [ 464.757882][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 464.757899][ C0] ? ipv6_find_hdr+0xc78/0x1050 [ 464.757947][ C0] nft_do_chain_inet+0x25d/0x340 [ 464.757966][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 464.757984][ C0] ? __lock_acquire+0xab9/0xd20 [ 464.758034][ C0] ? NF_HOOK+0x9a/0x3a0 [ 464.758059][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 464.758079][ C0] nf_hook_slow+0xc2/0x220 [ 464.758108][ C0] NF_HOOK+0x206/0x3a0 [ 464.758133][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 464.758158][ C0] ? NF_HOOK+0x9a/0x3a0 [ 464.758181][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 464.758207][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 464.758239][ C0] ip6_input+0x16a/0x270 [ 464.758263][ C0] ? ip6_input+0x23/0x270 [ 464.758294][ C0] NF_HOOK+0x309/0x3a0 [ 464.758317][ C0] ? skb_orphan+0xaf/0xd0 [ 464.758342][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 464.758365][ C0] ? NF_HOOK+0x9a/0x3a0 [ 464.758388][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 464.758414][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 464.758445][ C0] __netif_receive_skb+0xd3/0x380 [ 464.758466][ C0] ? rt_spin_unlock+0x65/0x80 [ 464.758491][ C0] ? process_backlog+0x27b/0x900 [ 464.758515][ C0] process_backlog+0x31e/0x900 [ 464.758546][ C0] __napi_poll+0xb3/0x540 [ 464.758571][ C0] net_rx_action+0x707/0xe00 [ 464.758595][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 464.758632][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 464.758678][ C0] handle_softirqs+0x22f/0x710 [ 464.758706][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 464.758735][ C0] run_ktimerd+0xcf/0x190 [ 464.758760][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 464.758785][ C0] ? schedule+0x91/0x360 [ 464.758813][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 464.758835][ C0] smpboot_thread_fn+0x53f/0xa60 [ 464.758859][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 464.758886][ C0] kthread+0x70e/0x8a0 [ 464.758915][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 464.758938][ C0] ? __pfx_kthread+0x10/0x10 [ 464.758968][ C0] ? __pfx_kthread+0x10/0x10 [ 464.758996][ C0] ret_from_fork+0x436/0x7d0 [ 464.759020][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 464.759049][ C0] ? __switch_to_asm+0x39/0x70 [ 464.759064][ C0] ? __switch_to_asm+0x33/0x70 [ 464.759081][ C0] ? __pfx_kthread+0x10/0x10 [ 464.759109][ C0] ret_from_fork_asm+0x1a/0x30 [ 464.759136][ C0] [ 468.286369][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 468.286395][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 468.286424][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 468.286438][ T39] Call Trace: [ 468.286447][ T39] [ 468.286456][ T39] dump_stack_lvl+0x99/0x250 [ 468.286495][ T39] ? __asan_memcpy+0x40/0x70 [ 468.286520][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 468.286554][ T39] ? __pfx__printk+0x10/0x10 [ 468.286603][ T39] vpanic+0x281/0x750 [ 468.286638][ T39] ? __pfx_vpanic+0x10/0x10 [ 468.286669][ T39] ? preempt_schedule+0xae/0xc0 [ 468.286702][ T39] ? preempt_schedule_common+0x83/0xd0 [ 468.286740][ T39] panic+0xb9/0xc0 [ 468.286772][ T39] ? __pfx_panic+0x10/0x10 [ 468.286812][ T39] ? preempt_schedule_thunk+0x16/0x30 [ 468.286845][ T39] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 468.286877][ T39] watchdog+0xfd2/0xfe0 [ 468.286911][ T39] ? watchdog+0x1de/0xfe0 [ 468.286945][ T39] kthread+0x70e/0x8a0 [ 468.286982][ T39] ? __pfx_watchdog+0x10/0x10 [ 468.287009][ T39] ? __pfx_kthread+0x10/0x10 [ 468.287047][ T39] ? __pfx_kthread+0x10/0x10 [ 468.287081][ T39] ret_from_fork+0x436/0x7d0 [ 468.287113][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 468.287148][ T39] ? __switch_to_asm+0x39/0x70 [ 468.287168][ T39] ? __switch_to_asm+0x33/0x70 [ 468.287188][ T39] ? __pfx_kthread+0x10/0x10 [ 468.287221][ T39] ret_from_fork_asm+0x1a/0x30 [ 468.287259][ T39] [ 468.287684][ T39] Kernel Offset: disabled