last executing test programs: 32.572740044s ago: executing program 4 (id=653): r0 = socket$can_j1939(0x1d, 0x2, 0x7) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000140), 0x4) 32.39221117s ago: executing program 4 (id=657): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000001400)={0x3, 0x8934, 0xa4d3, 0x6, 0x25b}, 0x14) 32.21461059s ago: executing program 4 (id=660): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x183000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee4, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x7, "b546baa5cc590db033de259c2996817bc959ebab128deda525e19bdeffafde25"}) 31.874693212s ago: executing program 0 (id=664): r0 = socket$inet(0x2, 0x2, 0x1) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x6c6d}], 0x5}}, {{0x0, 0x0, &(0x7f0000000440), 0x56}}], 0x2, 0x2004000) 31.653506624s ago: executing program 0 (id=667): openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 31.093202898s ago: executing program 3 (id=675): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000002c0), &(0x7f0000000300)=0x8) 30.87581281s ago: executing program 3 (id=677): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback, 0xa09c}, {0xa, 0x0, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x1c}}, r1, 0x99d}}, 0x48) 30.676649127s ago: executing program 3 (id=679): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000bc0)=ANY=[@ANYBLOB="1c00000042000106"], 0x1c}], 0x1, 0x0, 0x0, 0x4}, 0x0) 30.670533146s ago: executing program 1 (id=680): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0, 0x0, 0xcbfb, 0x1, 0x60, 0x0, 0x5c}) 30.546182805s ago: executing program 0 (id=681): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x102, 0x5ffffffd) 30.469051805s ago: executing program 3 (id=682): syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) 30.453736774s ago: executing program 1 (id=683): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800010000000000fddbdf251d"], 0x24}}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 30.300384219s ago: executing program 4 (id=685): r0 = fsopen(&(0x7f0000001080)='msdos\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) 30.23441749s ago: executing program 1 (id=686): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r0, 0x1, 0x24, &(0x7f0000000000), 0x4) 30.232390631s ago: executing program 3 (id=687): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x50d, 0x3201, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x8, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc, 0x0, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000080)={0x0, 0x8, 0xa0, {0xa0, 0x5, "00f49eff437ad268de99e4340aaeb57dafa0ca5a1c2684c6d61937ee981edbe848b883e4acb705210e0b5cdbb7ba29d686faa95df353436193ab4eaec2de0ba735da895395e007e726f036f04b1e80ecdad189436a5993c20a3f6358d0b4efe35b07e3a9eca7d1847a8b2476aa46f160e340b7c58a98bd43bffcd9e0151fd226f69a40f5af57ebd8cad374e014f432f32ad909cf25bcc6e8359e0222dea2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 30.155414493s ago: executing program 0 (id=688): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r1, 0x1, 0x70bd2c, 0x25dbdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x54) 30.041983246s ago: executing program 4 (id=689): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x701, 0x0, 0xffffffff, {0x41}}, 0x14}}, 0x4c000) 29.198513283s ago: executing program 1 (id=691): r0 = gettid() rt_sigsuspend(&(0x7f0000000040)={[0x3]}, 0x8) tkill(r0, 0x7) 28.030450518s ago: executing program 1 (id=692): sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000037400061400060069703667726530000000000000000000080007003a090000140002"], 0x58}, 0x1, 0xffffffff00000003}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 27.540704022s ago: executing program 1 (id=695): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 27.236133755s ago: executing program 2 (id=696): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000000c0)=0x81) poll(&(0x7f0000000000)=[{r0, 0x202}], 0x1, 0xa0) 27.130148252s ago: executing program 3 (id=697): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pimreg0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cd, 0xffff0325) 26.791913691s ago: executing program 0 (id=698): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 26.782688977s ago: executing program 4 (id=699): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, 0x44118, 0x88f}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_NEIGH_SUPPRESS={0x5, 0x20, 0x1}, @IFLA_BRPORT_ISOLATED={0x5, 0x21, 0x1}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x811}, 0x4000000) 26.765821344s ago: executing program 2 (id=700): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open(&(0x7f0000000080)='.\x00', 0x2028c2, 0x21) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, 0x0, 0x0, 0x4}, 0x20) 26.373365171s ago: executing program 2 (id=701): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x8) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x13, 0x0, 0x3b) 26.118193114s ago: executing program 2 (id=702): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_clone(0x2801600, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)='T') mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) 16.927744398s ago: executing program 0 (id=703): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000160005020000000000000000100000ff"], 0x18}}, 0x0) 16.302620293s ago: executing program 2 (id=704): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x5) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) 15.217964951s ago: executing program 2 (id=705): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)={0x1c, r1, 0xf21, 0x3ffff, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x4000) 11.962723874s ago: executing program 32 (id=695): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 11.869000325s ago: executing program 33 (id=697): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pimreg0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cd, 0xffff0325) 11.414980521s ago: executing program 34 (id=699): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, 0x44118, 0x88f}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_NEIGH_SUPPRESS={0x5, 0x20, 0x1}, @IFLA_BRPORT_ISOLATED={0x5, 0x21, 0x1}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x811}, 0x4000000) 1.500312805s ago: executing program 35 (id=703): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000160005020000000000000000100000ff"], 0x18}}, 0x0) 0s ago: executing program 36 (id=705): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)={0x1c, r1, 0xf21, 0x3ffff, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x4000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.236' (ED25519) to the list of known hosts. [ 82.900754][ T5826] cgroup: Unknown subsys name 'net' [ 83.161924][ T5826] cgroup: Unknown subsys name 'cpuset' [ 83.237394][ T5826] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.997792][ T5826] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.580144][ T1238] cfg80211: failed to load regulatory.db [ 88.802572][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.805310][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.833260][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.833997][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.852687][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.853347][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.855214][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.856150][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.867439][ T5857] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.869970][ T5858] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.871848][ T5858] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.872658][ T5858] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.874687][ T5858] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.875555][ T5858] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.889495][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.962115][ T5158] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.975868][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.995242][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.998036][ T5158] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.013543][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.014079][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.014292][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.015229][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.016197][ T5158] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.027058][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.897312][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 89.923000][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 90.200896][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 90.218611][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 90.225495][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 90.831128][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.831992][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.832579][ T5842] bridge_slave_0: entered allmulticast mode [ 90.834543][ T5842] bridge_slave_0: entered promiscuous mode [ 90.863358][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.863491][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.864026][ T5853] bridge_slave_0: entered allmulticast mode [ 90.866703][ T5853] bridge_slave_0: entered promiscuous mode [ 90.900926][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.901101][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.901310][ T5842] bridge_slave_1: entered allmulticast mode [ 90.903463][ T5842] bridge_slave_1: entered promiscuous mode [ 90.926639][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.926771][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.927873][ T5853] bridge_slave_1: entered allmulticast mode [ 90.930701][ T5853] bridge_slave_1: entered promiscuous mode [ 90.978435][ T5848] Bluetooth: hci2: command tx timeout [ 90.978843][ T5848] Bluetooth: hci0: command tx timeout [ 90.979153][ T5847] Bluetooth: hci1: command tx timeout [ 91.057172][ T5847] Bluetooth: hci4: command tx timeout [ 91.137019][ T5847] Bluetooth: hci3: command tx timeout [ 91.681288][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.681485][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.681659][ T5841] bridge_slave_0: entered allmulticast mode [ 91.683589][ T5841] bridge_slave_0: entered promiscuous mode [ 91.698042][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.699508][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.699671][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.700217][ T5851] bridge_slave_0: entered allmulticast mode [ 91.703054][ T5851] bridge_slave_0: entered promiscuous mode [ 91.723082][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.725454][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.725598][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.725789][ T5852] bridge_slave_0: entered allmulticast mode [ 91.730238][ T5852] bridge_slave_0: entered promiscuous mode [ 91.739835][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.739976][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.740485][ T5841] bridge_slave_1: entered allmulticast mode [ 91.746960][ T5841] bridge_slave_1: entered promiscuous mode [ 91.753371][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.753958][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.754107][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.754299][ T5851] bridge_slave_1: entered allmulticast mode [ 91.768564][ T5851] bridge_slave_1: entered promiscuous mode [ 91.775441][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.777187][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.777357][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.777581][ T5852] bridge_slave_1: entered allmulticast mode [ 91.780512][ T5852] bridge_slave_1: entered promiscuous mode [ 92.593617][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.595475][ T5842] team0: Port device team_slave_0 added [ 92.600919][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.603800][ T5853] team0: Port device team_slave_0 added [ 92.610960][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.615372][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.620946][ T5842] team0: Port device team_slave_1 added [ 92.624703][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.628515][ T5853] team0: Port device team_slave_1 added [ 92.632840][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.057288][ T59] Bluetooth: hci0: command tx timeout [ 93.057321][ T59] Bluetooth: hci2: command tx timeout [ 93.057491][ T5847] Bluetooth: hci1: command tx timeout [ 93.137307][ T5847] Bluetooth: hci4: command tx timeout [ 93.217154][ T5847] Bluetooth: hci3: command tx timeout [ 93.360500][ T5841] team0: Port device team_slave_0 added [ 93.539369][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.539380][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.539396][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.541185][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.541198][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.541220][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.543322][ T5851] team0: Port device team_slave_0 added [ 93.545798][ T5852] team0: Port device team_slave_0 added [ 93.561793][ T5841] team0: Port device team_slave_1 added [ 93.564137][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.564151][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.564177][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.565739][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.565751][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.565778][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.578655][ T5851] team0: Port device team_slave_1 added [ 93.780332][ T5852] team0: Port device team_slave_1 added [ 94.128736][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.128754][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.128807][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.131880][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.131890][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.131905][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.132971][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.132982][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.133005][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.134212][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.134224][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.134248][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.382971][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.382993][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.383012][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.384117][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.384128][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.384145][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.609035][ T5842] hsr_slave_0: entered promiscuous mode [ 94.610350][ T5842] hsr_slave_1: entered promiscuous mode [ 94.621787][ T5853] hsr_slave_0: entered promiscuous mode [ 94.623089][ T5853] hsr_slave_1: entered promiscuous mode [ 94.624213][ T5853] debugfs: 'hsr0' already exists in 'hsr' [ 94.624326][ T5853] Cannot create hsr debugfs directory [ 95.137133][ T5848] Bluetooth: hci2: command tx timeout [ 95.137165][ T5848] Bluetooth: hci0: command tx timeout [ 95.137249][ T5847] Bluetooth: hci1: command tx timeout [ 95.217042][ T5847] Bluetooth: hci4: command tx timeout [ 95.261596][ T5851] hsr_slave_0: entered promiscuous mode [ 95.262420][ T5851] hsr_slave_1: entered promiscuous mode [ 95.262985][ T5851] debugfs: 'hsr0' already exists in 'hsr' [ 95.263003][ T5851] Cannot create hsr debugfs directory [ 95.280630][ T5841] hsr_slave_0: entered promiscuous mode [ 95.282032][ T5841] hsr_slave_1: entered promiscuous mode [ 95.283074][ T5841] debugfs: 'hsr0' already exists in 'hsr' [ 95.283099][ T5841] Cannot create hsr debugfs directory [ 95.296966][ T5847] Bluetooth: hci3: command tx timeout [ 95.299914][ T5852] hsr_slave_0: entered promiscuous mode [ 95.307436][ T5852] hsr_slave_1: entered promiscuous mode [ 95.308356][ T5852] debugfs: 'hsr0' already exists in 'hsr' [ 95.308383][ T5852] Cannot create hsr debugfs directory [ 96.939615][ T5842] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.984864][ T5842] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 97.022684][ T5842] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 97.076833][ T5842] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 97.220243][ T5847] Bluetooth: hci1: command tx timeout [ 97.220271][ T5847] Bluetooth: hci2: command tx timeout [ 97.222461][ T5853] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 97.228155][ T59] Bluetooth: hci0: command tx timeout [ 97.266144][ T5853] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 97.297285][ T59] Bluetooth: hci4: command tx timeout [ 97.324335][ T5853] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 97.363605][ T5853] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 97.377166][ T59] Bluetooth: hci3: command tx timeout [ 97.491895][ T5851] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.543417][ T5851] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.595519][ T5851] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.634845][ T5851] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.771248][ T5852] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.814931][ T5852] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.876809][ T5852] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.924598][ T5852] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 98.052439][ T5841] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 98.100125][ T5841] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 98.139898][ T5841] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 98.184722][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.199027][ T5841] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 98.340471][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.390335][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.405492][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.405922][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.455375][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.455499][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.542591][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.588470][ T744] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.588670][ T744] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.594568][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.643556][ T1444] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.643686][ T1444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.699724][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.725775][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.769733][ T744] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.770378][ T744] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.838586][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.838748][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.845525][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.882828][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.906255][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.906449][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.969968][ T744] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.970075][ T744] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.066759][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.126505][ T1444] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.127069][ T1444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.183442][ T1444] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.185070][ T1444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.301500][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.606716][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.707287][ T5842] veth0_vlan: entered promiscuous mode [ 99.792937][ T5842] veth1_vlan: entered promiscuous mode [ 99.832564][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.936659][ T5853] veth0_vlan: entered promiscuous mode [ 99.976721][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.006130][ T5842] veth0_macvtap: entered promiscuous mode [ 100.023042][ T5853] veth1_vlan: entered promiscuous mode [ 100.043569][ T5842] veth1_macvtap: entered promiscuous mode [ 100.079304][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.159011][ T5851] veth0_vlan: entered promiscuous mode [ 100.172991][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.201786][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.224689][ T5851] veth1_vlan: entered promiscuous mode [ 100.249699][ T5853] veth0_macvtap: entered promiscuous mode [ 100.263143][ T4175] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.284161][ T4175] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.310055][ T4175] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.333077][ T5853] veth1_macvtap: entered promiscuous mode [ 100.334416][ T4175] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.336172][ T5852] veth0_vlan: entered promiscuous mode [ 100.488941][ T5852] veth1_vlan: entered promiscuous mode [ 100.613120][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.653983][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.693849][ T5851] veth0_macvtap: entered promiscuous mode [ 100.733917][ T5851] veth1_macvtap: entered promiscuous mode [ 100.735535][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.755919][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.755941][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.770240][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.798259][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.815749][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.928867][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.928884][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.985444][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.997462][ T5852] veth0_macvtap: entered promiscuous mode [ 101.093353][ T5841] veth0_vlan: entered promiscuous mode [ 101.094763][ T5852] veth1_macvtap: entered promiscuous mode [ 101.102411][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.216311][ T153] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.239035][ T153] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.239635][ T5841] veth1_vlan: entered promiscuous mode [ 101.243486][ T153] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.247371][ T153] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.260780][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.260797][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.314293][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.441296][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.544034][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.544051][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.555358][ T67] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.555869][ T67] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.556124][ T67] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.559125][ T67] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.844709][ T5841] veth0_macvtap: entered promiscuous mode [ 101.881461][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.881478][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.976336][ T5841] veth1_macvtap: entered promiscuous mode [ 102.129090][ T5967] : renamed from hsr_slave_0 (while UP) [ 102.253866][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.253881][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.360051][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.435872][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.439264][ T1508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.439280][ T1508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.488551][ T5975] Driver unsupported XDP return value 0 on prog (id 2) dev N/A, expect packet loss! [ 102.526094][ T1508] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.547394][ T1508] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.551688][ T1508] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.631759][ T1508] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.750122][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.750140][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.936208][ T5981] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1'. [ 103.178094][ T1444] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.178114][ T1444] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.487637][ T1508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.487658][ T1508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.186349][ T6006] netlink: 'syz.0.22': attribute type 10 has an invalid length. [ 104.418349][ T5827] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 104.540956][ T6006] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 104.614521][ T5827] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 104.614546][ T5827] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.614564][ T5827] usb 4-1: Product: syz [ 104.614576][ T5827] usb 4-1: Manufacturer: syz [ 104.614588][ T5827] usb 4-1: SerialNumber: syz [ 104.614913][ T6003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.709415][ T5827] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 104.797453][ T5844] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 105.066122][ C0] usb 4-1: ath9k_htc: invalid pkt_len (b408) [ 105.361313][ T46] usb 4-1: USB disconnect, device number 2 [ 105.437086][ T5827] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 105.596826][ T5827] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 105.604781][ T5827] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 105.604807][ T5827] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.604827][ T5827] usb 5-1: Product: syz [ 105.604840][ T5827] usb 5-1: Manufacturer: syz [ 105.604866][ T5827] usb 5-1: SerialNumber: syz [ 105.653068][ T5827] usb 5-1: config 0 descriptor?? [ 105.863002][ T5844] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 105.880701][ T5844] ath9k_htc: Failed to initialize the device [ 105.922686][ T46] usb 4-1: ath9k_htc: USB layer deinitialized [ 106.220672][ T5929] usb 5-1: USB disconnect, device number 2 [ 106.476780][ T6036] udevd[6036]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 106.887323][ T31] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 106.933769][ T6050] sp0: Synchronizing with TNC [ 106.967152][ T5827] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 107.037931][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 107.040061][ T31] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.040085][ T31] usb 4-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 107.040108][ T31] usb 4-1: config 0 interface 0 has no altsetting 0 [ 107.040137][ T31] usb 4-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 107.040156][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.103582][ T31] usb 4-1: config 0 descriptor?? [ 107.119443][ T5827] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 107.119471][ T5827] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.119505][ T5827] usb 3-1: New USB device found, idVendor=056a, idProduct=0217, bcdDevice= 0.fc [ 107.119526][ T5827] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.182096][ T5827] usb 3-1: config 0 descriptor?? [ 107.641789][ T31] magicmouse 0003:05AC:0324.0001: unknown main item tag 0x0 [ 107.641825][ T31] magicmouse 0003:05AC:0324.0001: unknown main item tag 0x0 [ 107.641850][ T31] magicmouse 0003:05AC:0324.0001: unknown main item tag 0x0 [ 107.641873][ T31] magicmouse 0003:05AC:0324.0001: unknown main item tag 0x0 [ 107.641897][ T31] magicmouse 0003:05AC:0324.0001: unknown main item tag 0x0 [ 107.688875][ T5827] wacom 0003:056A:0217.0002: Unknown device_type for 'HID 056a:0217'. Ignoring. [ 107.722091][ T31] magicmouse 0003:05AC:0324.0001: hidraw0: USB HID v80.00 Device [HID 05ac:0324] on usb-dummy_hcd.3-1/input0 [ 107.722604][ T31] magicmouse 0003:05AC:0324.0001: magicmouse input not registered [ 107.784925][ T31] magicmouse 0003:05AC:0324.0001: probe with driver magicmouse failed with error -12 [ 107.843178][ T31] usb 4-1: USB disconnect, device number 3 [ 107.860855][ T5930] usb 3-1: USB disconnect, device number 2 [ 108.040146][ T6062] fido_id[6062]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 108.767800][ T5827] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 108.947105][ T5827] usb 5-1: Using ep0 maxpacket: 32 [ 108.949575][ T5827] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 108.949604][ T5827] usb 5-1: config 0 interface 0 has no altsetting 0 [ 108.949644][ T5827] usb 5-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 108.949665][ T5827] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.023464][ T5827] usb 5-1: config 0 descriptor?? [ 109.479595][ T5827] microsoft 0003:045E:009D.0003: unknown main item tag 0x0 [ 109.479629][ T5827] microsoft 0003:045E:009D.0003: unknown main item tag 0x0 [ 109.479654][ T5827] microsoft 0003:045E:009D.0003: unknown main item tag 0x0 [ 109.479678][ T5827] microsoft 0003:045E:009D.0003: unknown main item tag 0x0 [ 109.479702][ T5827] microsoft 0003:045E:009D.0003: unknown main item tag 0x0 [ 109.524718][ T5827] microsoft 0003:045E:009D.0003: hidraw0: USB HID v0.02 Device [HID 045e:009d] on usb-dummy_hcd.4-1/input0 [ 109.524745][ T5827] microsoft 0003:045E:009D.0003: no inputs found [ 109.524757][ T5827] microsoft 0003:045E:009D.0003: could not initialize ff, continuing anyway [ 109.742138][ T31] usb 5-1: USB disconnect, device number 3 [ 110.133958][ T6104] fido_id[6104]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 110.375510][ T6110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.61'. [ 110.375544][ T6110] netlink: 'syz.0.61': attribute type 2 has an invalid length. [ 110.375556][ T6110] netlink: 4 bytes leftover after parsing attributes in process `syz.0.61'. [ 110.909015][ T6099] syz.1.58 (6099): drop_caches: 2 [ 111.047060][ T31] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 111.217021][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 111.224924][ T31] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 111.238565][ T31] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 111.238598][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.238621][ T31] usb 5-1: Product: syz [ 111.238638][ T31] usb 5-1: Manufacturer: syz [ 111.238656][ T31] usb 5-1: SerialNumber: syz [ 111.266522][ T31] usb 5-1: config 0 descriptor?? [ 111.273183][ T6120] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 111.306786][ T31] hub 5-1:0.0: bad descriptor, ignoring hub [ 111.306821][ T31] hub 5-1:0.0: probe with driver hub failed with error -5 [ 111.402005][ T31] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input8 [ 111.537950][ T5930] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 111.577006][ T6120] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 111.577030][ T6120] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 111.598785][ T6120] vhci_hcd vhci_hcd.0: Device attached [ 111.687111][ T5930] usb 1-1: Using ep0 maxpacket: 16 [ 111.695735][ T5930] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.695764][ T5930] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.695906][ T5930] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 111.695945][ T5930] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 111.695965][ T5930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.791138][ T31] usb 5-1: USB disconnect, device number 4 [ 111.791233][ C1] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 111.802612][ T6140] vhci_hcd: connection closed [ 111.831085][ T5930] usb 1-1: config 0 descriptor?? [ 111.873345][ T3622] vhci_hcd: stop threads [ 111.873889][ T3622] vhci_hcd: release socket [ 111.887082][ T5827] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 111.891651][ T3622] vhci_hcd: disconnect device [ 112.216387][ T6146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.71'. [ 112.216408][ T6146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.71'. [ 112.263742][ T6152] syz.2.73 uses obsolete (PF_INET,SOCK_PACKET) [ 112.369179][ T5930] microsoft 0003:045E:07DA.0004: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 112.369209][ T5930] microsoft 0003:045E:07DA.0004: no inputs found [ 112.369222][ T5930] microsoft 0003:045E:07DA.0004: could not initialize ff, continuing anyway [ 112.482126][ T5843] usb 1-1: USB disconnect, device number 2 [ 112.595808][ T6154] fido_id[6154]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 112.786975][ T37] audit: type=1326 audit(1756931060.720:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6164 comm="syz.2.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a21c6ebe9 code=0x7ffc0000 [ 112.787031][ T37] audit: type=1326 audit(1756931060.720:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6164 comm="syz.2.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f8a21c6ebe9 code=0x7ffc0000 [ 112.787070][ T37] audit: type=1326 audit(1756931060.720:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6164 comm="syz.2.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a21c6ebe9 code=0x7ffc0000 [ 112.787110][ T37] audit: type=1326 audit(1756931060.720:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6164 comm="syz.2.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a21c6ebe9 code=0x7ffc0000 [ 112.889508][ T37] audit: type=1326 audit(1756931060.830:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6164 comm="syz.2.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f8a21c6ebe9 code=0x7ffc0000 [ 112.889560][ T37] audit: type=1326 audit(1756931060.830:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6164 comm="syz.2.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a21c6ebe9 code=0x7ffc0000 [ 112.893095][ T37] audit: type=1326 audit(1756931060.830:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6164 comm="syz.2.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a21c6ebe9 code=0x7ffc0000 [ 112.971808][ T6169] netlink: 12 bytes leftover after parsing attributes in process `syz.3.80'. [ 113.454773][ T5915] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 113.515271][ T5915] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz0 [ 113.838088][ T6187] fido_id[6187]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 113.857354][ T5930] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 113.927532][ T6195] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 114.023047][ T5930] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 114.023079][ T5930] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 114.023115][ T5930] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 114.023135][ T5930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.056508][ T6186] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 114.134102][ T5930] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 114.339411][ T6202] netlink: 72 bytes leftover after parsing attributes in process `syz.1.93'. [ 114.701819][ T5922] usb 1-1: USB disconnect, device number 3 [ 114.969958][ T6225] netlink: 8 bytes leftover after parsing attributes in process `syz.1.101'. [ 114.970117][ T6225] openvswitch: netlink: Unknown nsh attribute 0 [ 114.970143][ T6225] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 115.012835][ T6223] : entered promiscuous mode [ 115.093949][ T6046] udevd[6046]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 115.685198][ T6245] netlink: 'syz.3.110': attribute type 1 has an invalid length. [ 115.685217][ T6245] netlink: 612 bytes leftover after parsing attributes in process `syz.3.110'. [ 115.685251][ T6245] netlink: 'syz.3.110': attribute type 1 has an invalid length. [ 115.867088][ T5922] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 116.043601][ T5922] usb 2-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 116.043628][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.069229][ T5843] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 116.090655][ T5922] usb 2-1: config 0 descriptor?? [ 116.106561][ T5922] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 116.117964][ T6257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.116'. [ 116.117983][ T6257] netlink: 24 bytes leftover after parsing attributes in process `syz.0.116'. [ 116.117997][ T6257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.116'. [ 116.118011][ T6257] netlink: 'syz.0.116': attribute type 5 has an invalid length. [ 116.125075][ T5922] dvb_usb_af9015 2-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 116.249633][ T5843] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 116.249660][ T5843] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.249693][ T5843] usb 5-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 116.249712][ T5843] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.279881][ T5843] usb 5-1: config 0 descriptor?? [ 116.329610][ T9] usb 2-1: USB disconnect, device number 2 [ 116.393214][ T6261] xt_HMARK: spi-set and port-set can't be combined [ 116.437112][ T5922] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 116.607126][ T5922] usb 4-1: Using ep0 maxpacket: 32 [ 116.610201][ T5922] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 116.613303][ T5922] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 116.613327][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.613346][ T5922] usb 4-1: Product: syz [ 116.613359][ T5922] usb 4-1: Manufacturer: syz [ 116.613371][ T5922] usb 4-1: SerialNumber: syz [ 116.635581][ T5922] usb 4-1: config 0 descriptor?? [ 116.676390][ T6259] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 116.729003][ T5922] hub 4-1:0.0: bad descriptor, ignoring hub [ 116.729030][ T5922] hub 4-1:0.0: probe with driver hub failed with error -5 [ 116.734917][ T5922] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input10 [ 116.941363][ T5843] usb 5-1: USB disconnect, device number 5 [ 116.965358][ T6259] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 116.965379][ T6259] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 116.965593][ T6259] vhci_hcd vhci_hcd.0: Device attached [ 116.986541][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 117.006187][ T6267] vhci_hcd: connection closed [ 117.010424][ T5827] vhci_hcd: vhci_device speed not set [ 117.012898][ T1508] vhci_hcd: stop threads [ 117.012914][ T1508] vhci_hcd: release socket [ 117.015388][ T1508] vhci_hcd: disconnect device [ 117.046625][ T31] usb 4-1: USB disconnect, device number 4 [ 117.046709][ C1] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 117.137220][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 117.139683][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.139706][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.139736][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 117.139753][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.221320][ T10] usb 1-1: config 0 descriptor?? [ 117.681818][ T10] logitech 0003:046D:C20E.0007: rdesc size test failed for formula gp [ 117.683203][ T10] logitech 0003:046D:C20E.0007: unbalanced collection at end of report description [ 117.683992][ T10] logitech 0003:046D:C20E.0007: parse failed [ 117.684085][ T10] logitech 0003:046D:C20E.0007: probe with driver logitech failed with error -22 [ 117.843607][ T6282] capability: warning: `syz.2.126' uses deprecated v2 capabilities in a way that may be insecure [ 117.876926][ T31] usb 1-1: USB disconnect, device number 4 [ 118.023857][ T6288] comedi comedi0: Minor 3 could not be opened [ 118.109061][ T6292] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 118.354018][ T6302] atomic_op ffff888037cfa218 conn xmit_atomic 0000000000000000 [ 118.430351][ T6307] netlink: 'syz.1.138': attribute type 10 has an invalid length. [ 118.586946][ T5827] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 118.737054][ T5827] usb 3-1: Using ep0 maxpacket: 32 [ 118.744808][ T5827] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 118.768257][ T5827] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 118.768282][ T5827] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.768301][ T5827] usb 3-1: Product: syz [ 118.768315][ T5827] usb 3-1: Manufacturer: syz [ 118.768328][ T5827] usb 3-1: SerialNumber: syz [ 118.810166][ T5827] usb 3-1: config 0 descriptor?? [ 118.811382][ T6304] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 118.833026][ T5827] hub 3-1:0.0: bad descriptor, ignoring hub [ 118.833059][ T5827] hub 3-1:0.0: probe with driver hub failed with error -5 [ 118.843874][ T6307] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 118.872187][ T5827] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input11 [ 118.888601][ T6306] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.120835][ T6304] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 119.120859][ T6304] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 119.120948][ T6304] vhci_hcd vhci_hcd.0: Device attached [ 119.133373][ T6311] vhci_hcd: connection closed [ 119.136277][ T12] vhci_hcd: stop threads [ 119.136304][ T12] vhci_hcd: release socket [ 119.136338][ T12] vhci_hcd: disconnect device [ 119.140978][ T31] usb 3-1: USB disconnect, device number 3 [ 119.141152][ C0] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 119.920025][ T6305] syz.4.137 (6305): drop_caches: 2 [ 120.166944][ T5997] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 120.317040][ T5997] usb 1-1: Using ep0 maxpacket: 32 [ 120.319401][ T5997] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 120.319429][ T5997] usb 1-1: config 0 interface 0 has no altsetting 0 [ 120.319459][ T5997] usb 1-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 120.319479][ T5997] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.331137][ T5997] usb 1-1: config 0 descriptor?? [ 120.537157][ T5915] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 120.687192][ T5915] usb 3-1: Using ep0 maxpacket: 16 [ 120.689832][ T5915] usb 3-1: config 0 interface 0 has no altsetting 0 [ 120.689867][ T5915] usb 3-1: New USB device found, idVendor=05ac, idProduct=0250, bcdDevice= 0.00 [ 120.689888][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.694899][ T5915] usb 3-1: config 0 descriptor?? [ 120.783079][ T5997] microsoft 0003:045E:009D.0008: unknown main item tag 0x0 [ 120.783111][ T5997] microsoft 0003:045E:009D.0008: unknown main item tag 0x0 [ 120.783136][ T5997] microsoft 0003:045E:009D.0008: unknown main item tag 0x0 [ 120.783159][ T5997] microsoft 0003:045E:009D.0008: unknown main item tag 0x0 [ 120.783183][ T5997] microsoft 0003:045E:009D.0008: unknown main item tag 0x0 [ 120.823632][ T5997] microsoft 0003:045E:009D.0008: hidraw0: USB HID v0.02 Device [HID 045e:009d] on usb-dummy_hcd.0-1/input0 [ 120.823660][ T5997] microsoft 0003:045E:009D.0008: no inputs found [ 120.823672][ T5997] microsoft 0003:045E:009D.0008: could not initialize ff, continuing anyway [ 120.987635][ T5827] usb 1-1: USB disconnect, device number 5 [ 121.143502][ T5915] apple 0003:05AC:0250.0009: unknown main item tag 0x0 [ 121.143535][ T5915] apple 0003:05AC:0250.0009: unknown main item tag 0x0 [ 121.143559][ T5915] apple 0003:05AC:0250.0009: unknown main item tag 0x0 [ 121.143587][ T5915] apple 0003:05AC:0250.0009: unknown main item tag 0x0 [ 121.143610][ T5915] apple 0003:05AC:0250.0009: unknown main item tag 0x0 [ 121.246658][ T5915] apple 0003:05AC:0250.0009: hidraw0: USB HID v0.4b Device [HID 05ac:0250] on usb-dummy_hcd.2-1/input0 [ 121.265839][ T6352] fido_id[6352]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 121.396788][ T5915] usb 3-1: USB disconnect, device number 4 [ 121.763933][ T6370] netlink: 808 bytes leftover after parsing attributes in process `syz.1.164'. [ 121.765938][ T6365] fido_id[6365]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 122.128311][ T31] IPVS: starting estimator thread 0... [ 122.217113][ T6384] IPVS: using max 8 ests per chain, 19200 per kthread [ 122.498037][ T6397] netlink: 'syz.4.176': attribute type 10 has an invalid length. [ 122.752797][ T6397] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 122.753298][ T6399] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 122.819283][ T6396] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.081295][ T6418] netlink: 'syz.0.187': attribute type 1 has an invalid length. [ 123.081324][ T6418] netlink: 244 bytes leftover after parsing attributes in process `syz.0.187'. [ 123.103144][ T6419] netlink: 'syz.3.186': attribute type 1 has an invalid length. [ 123.103164][ T6419] netlink: 28 bytes leftover after parsing attributes in process `syz.3.186'. [ 123.103188][ T6419] nbd: illegal input index 65544 [ 123.261761][ T6423] netlink: 16 bytes leftover after parsing attributes in process `syz.0.188'. [ 123.295811][ T6425] warning: `syz.2.190' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 123.519481][ T37] audit: type=1326 audit(1756931071.440:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6429 comm="syz.0.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0653ebe9 code=0x7ffc0000 [ 123.519532][ T37] audit: type=1326 audit(1756931071.450:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6429 comm="syz.0.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0653ebe9 code=0x7ffc0000 [ 123.548672][ T37] audit: type=1326 audit(1756931071.480:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6429 comm="syz.0.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7eff0653ebe9 code=0x7ffc0000 [ 123.548745][ T37] audit: type=1326 audit(1756931071.480:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6429 comm="syz.0.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7eff0653ec23 code=0x7ffc0000 [ 123.548793][ T37] audit: type=1326 audit(1756931071.480:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6429 comm="syz.0.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7eff0653ec23 code=0x7ffc0000 [ 123.548849][ T37] audit: type=1326 audit(1756931071.480:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6429 comm="syz.0.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0653ebe9 code=0x7ffc0000 [ 123.548892][ T37] audit: type=1326 audit(1756931071.480:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6429 comm="syz.0.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0653ebe9 code=0x7ffc0000 [ 123.587088][ T37] audit: type=1326 audit(1756931071.520:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6429 comm="syz.0.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7eff0653ebe9 code=0x7ffc0000 [ 123.587140][ T37] audit: type=1326 audit(1756931071.520:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6429 comm="syz.0.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0653ebe9 code=0x7ffc0000 [ 124.158926][ T6457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.205'. [ 124.497227][ T5997] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 124.647194][ T5997] usb 5-1: Using ep0 maxpacket: 32 [ 124.651943][ T5997] usb 5-1: config 0 has an invalid interface number: 66 but max is 0 [ 124.651964][ T5997] usb 5-1: config 0 has no interface number 0 [ 124.656122][ T5997] usb 5-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 124.656154][ T5997] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.656173][ T5997] usb 5-1: Product: syz [ 124.656186][ T5997] usb 5-1: Manufacturer: syz [ 124.656198][ T5997] usb 5-1: SerialNumber: syz [ 124.740915][ T5997] usb 5-1: config 0 descriptor?? [ 124.759016][ T5997] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 124.759490][ T5997] dvb-usb: bulk message failed: -22 (2/0) [ 124.795356][ T5997] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 124.816683][ T5997] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 124.816765][ T5997] usb 5-1: media controller created [ 124.897563][ T5997] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 124.956736][ T6459] cxusb: i2c wr: len=85 is too big! [ 124.956736][ T6459] [ 125.000064][ T5997] cxusb: set interface failed [ 125.000079][ T5997] dvb-usb: bulk message failed: -22 (1/0) [ 125.137218][ T5997] DVB: Unable to find symbol lgdt330x_attach() [ 125.137239][ T5997] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 125.286928][ T5997] rc_core: IR keymap rc-dvico-portable not found [ 125.286947][ T5997] Registered IR keymap rc-empty [ 125.317509][ T5997] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 125.343338][ T5997] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input12 [ 125.389491][ T5997] dvb-usb: schedule remote query interval to 100 msecs. [ 125.389510][ T5997] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 125.407297][ T5997] usb 5-1: USB disconnect, device number 6 [ 125.662542][ T5997] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 126.000145][ T5827] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 126.156993][ T5827] usb 3-1: Using ep0 maxpacket: 8 [ 126.178578][ T5827] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 126.178607][ T5827] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.178628][ T5827] usb 3-1: Product: syz [ 126.178643][ T5827] usb 3-1: Manufacturer: syz [ 126.178658][ T5827] usb 3-1: SerialNumber: syz [ 126.193451][ T5827] usb 3-1: config 0 descriptor?? [ 126.218717][ T6515] autofs: Bad value for 'fd' [ 126.245744][ T5827] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 126.654947][ T6529] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 126.811162][ T5827] gspca_sonixj: reg_w1 err -71 [ 126.811248][ T5827] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 126.847612][ T5827] usb 3-1: USB disconnect, device number 5 [ 127.573657][ T6554] team_slave_0: entered promiscuous mode [ 127.573724][ T6554] team_slave_1: entered promiscuous mode [ 127.609052][ T6554] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 127.621688][ T6554] team0: Device macvtap1 is already an upper device of the team interface [ 127.718993][ T6554] team_slave_0: left promiscuous mode [ 127.719064][ T6554] team_slave_1: left promiscuous mode [ 127.790850][ T6564] netlink: 24 bytes leftover after parsing attributes in process `syz.2.256'. [ 128.426798][ T6579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.264'. [ 128.788920][ T6592] netlink: 76 bytes leftover after parsing attributes in process `syz.3.269'. [ 128.814282][ T6594] capability: warning: `syz.2.271' uses 32-bit capabilities (legacy support in use) [ 129.050865][ T6603] netlink: 32 bytes leftover after parsing attributes in process `syz.2.276'. [ 130.251916][ T6614] sd 0:0:1:0: device reset [ 131.476988][ T5827] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 131.526971][ T5922] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 131.567154][ T6660] netlink: 260 bytes leftover after parsing attributes in process `syz.0.304'. [ 131.567178][ T6660] netlink: 260 bytes leftover after parsing attributes in process `syz.0.304'. [ 131.626932][ T5827] usb 2-1: Using ep0 maxpacket: 8 [ 131.645985][ T5827] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db98, bcdDevice=30.0c [ 131.646009][ T5827] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.646026][ T5827] usb 2-1: Product: syz [ 131.646039][ T5827] usb 2-1: Manufacturer: syz [ 131.646052][ T5827] usb 2-1: SerialNumber: syz [ 131.706537][ T5827] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)' in warm state. [ 131.706585][ T5827] dvb-usb: bulk message failed: -22 (2/0) [ 131.720086][ T5922] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 131.720111][ T5922] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 66 [ 131.720176][ T5922] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.720217][ T5922] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 131.720238][ T5922] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 131.751085][ T5922] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 131.751112][ T5922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.751133][ T5922] usb 5-1: Product: syz [ 131.751146][ T5922] usb 5-1: Manufacturer: syz [ 131.751161][ T5922] usb 5-1: SerialNumber: syz [ 131.826975][ T5915] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 131.846364][ T5827] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 131.856807][ T5827] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)) [ 131.867952][ T5827] usb 2-1: media controller created [ 131.902963][ T5827] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 131.905138][ T6647] dvb-usb: bulk message failed: -22 (3/0) [ 131.943358][ T5827] usb 2-1: selecting invalid altsetting 1 [ 131.943373][ T5827] cxusb: set interface failed [ 131.943385][ T5827] dvb-usb: bulk message failed: -22 (1/0) [ 131.943407][ T5827] dvb-usb: bulk message failed: -22 (3/0) [ 131.943423][ T5827] usb 2-1: bluebird_gpio_write failed. [ 131.974369][ T5827] dvb-usb: bulk message failed: -22 (3/0) [ 131.974390][ T5827] usb 2-1: bluebird_gpio_write failed. [ 131.992280][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.992362][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.992383][ T5915] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 131.992420][ T5915] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 131.992440][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.060702][ T5915] usb 3-1: config 0 descriptor?? [ 132.156962][ T5827] DVB: Unable to find symbol dib7000p_attach() [ 132.156974][ T5827] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)' [ 132.270923][ T5827] rc_core: IR keymap rc-dvico-mce not found [ 132.270940][ T5827] Registered IR keymap rc-empty [ 132.273955][ T5827] rc rc0: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 132.311636][ T5827] input: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input14 [ 132.340160][ T5827] dvb-usb: schedule remote query interval to 100 msecs. [ 132.340177][ T5827] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) successfully initialized and connected. [ 132.343406][ T5827] usb 2-1: USB disconnect, device number 3 [ 132.490546][ T5915] hid (null): bogus close delimiter [ 132.491455][ T5827] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 4 ( successfully deinitialized and disconnected. [ 132.502926][ T5922] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 132.503070][ T5922] cdc_ncm 5-1:1.0: bind() failure [ 132.609708][ T5915] kye 0003:0458:5011.000A: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 132.610888][ T5915] kye 0003:0458:5011.000A: bogus close delimiter [ 132.610903][ T5915] kye 0003:0458:5011.000A: item 0 4 2 10 parsing failed [ 132.623027][ T5915] kye 0003:0458:5011.000A: parse failed [ 132.624321][ T5915] kye 0003:0458:5011.000A: probe with driver kye failed with error -22 [ 132.668422][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.668503][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.682263][ T5922] usb 5-1: USB disconnect, device number 7 [ 132.711100][ T5915] usb 3-1: USB disconnect, device number 6 [ 133.545643][ T5915] kernel write not supported for file /amidi2 (pid: 5915 comm: kworker/1:4) [ 133.717007][ T5922] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 133.870592][ T5922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.870621][ T5922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.870655][ T5922] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 133.870674][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.891576][ T5922] usb 1-1: config 0 descriptor?? [ 134.560991][ T5922] hid-led 0003:1D34:000A.000B: probe with driver hid-led failed with error -71 [ 134.568501][ T5922] usb 1-1: USB disconnect, device number 6 [ 134.623733][ T5997] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 134.748974][ T6724] netlink: 28 bytes leftover after parsing attributes in process `syz.3.332'. [ 134.776939][ T5997] usb 2-1: Using ep0 maxpacket: 32 [ 134.779171][ T5997] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.779196][ T5997] usb 2-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 134.779220][ T5997] usb 2-1: config 0 interface 0 has no altsetting 0 [ 134.779250][ T5997] usb 2-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 134.779270][ T5997] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.864250][ T5997] usb 2-1: config 0 descriptor?? [ 135.313084][ T5997] betop 0003:20BC:5500.000C: hidraw0: USB HID v8.00 Device [HID 20bc:5500] on usb-dummy_hcd.1-1/input0 [ 135.313115][ T5997] betop 0003:20BC:5500.000C: no inputs found [ 135.377011][ T5827] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 135.511359][ T5997] usb 2-1: USB disconnect, device number 4 [ 135.543906][ T5827] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.543934][ T5827] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.543967][ T5827] usb 4-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 135.543987][ T5827] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.615386][ T5827] usb 4-1: config 0 descriptor?? [ 135.818882][ T6739] fido_id[6739]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 136.084129][ T5827] stadia 0003:18D1:9400.000D: unexpected long global item [ 136.084869][ T5827] stadia 0003:18D1:9400.000D: parse failed [ 136.084935][ T5827] stadia 0003:18D1:9400.000D: probe with driver stadia failed with error -22 [ 136.204832][ T6746] mmap: syz.0.342 (6746) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 136.290659][ T5997] usb 4-1: USB disconnect, device number 5 [ 136.595994][ T6754] program syz.0.346 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 137.295835][ T6772] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 137.470726][ T5997] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 137.626942][ T5997] usb 4-1: Using ep0 maxpacket: 16 [ 137.629463][ T5997] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.629489][ T5997] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.629509][ T5997] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 137.629546][ T5997] usb 4-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 137.629566][ T5997] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.634604][ T5997] usb 4-1: config 0 descriptor?? [ 137.769785][ T6786] Invalid ELF header magic: != ELF [ 138.030725][ T6700] syz.4.321 (6700): drop_caches: 1 [ 138.073041][ T5997] hid_parser_main: 1266 callbacks suppressed [ 138.073060][ T5997] hid-multitouch 0003:0457:07DA.000E: unknown main item tag 0x0 [ 138.073087][ T5997] hid-multitouch 0003:0457:07DA.000E: unknown main item tag 0x0 [ 138.073110][ T5997] hid-multitouch 0003:0457:07DA.000E: unknown main item tag 0x0 [ 138.073134][ T5997] hid-multitouch 0003:0457:07DA.000E: unknown main item tag 0x0 [ 138.073158][ T5997] hid-multitouch 0003:0457:07DA.000E: unknown main item tag 0x0 [ 138.073181][ T5997] hid-multitouch 0003:0457:07DA.000E: unknown main item tag 0x0 [ 138.129592][ T5997] hid-multitouch 0003:0457:07DA.000E: unknown main item tag 0x0 [ 138.129628][ T5997] hid-multitouch 0003:0457:07DA.000E: unknown main item tag 0x0 [ 138.129662][ T5997] hid-multitouch 0003:0457:07DA.000E: unknown main item tag 0x0 [ 138.129687][ T5997] hid-multitouch 0003:0457:07DA.000E: unknown main item tag 0x0 [ 138.168101][ T5997] hid-multitouch 0003:0457:07DA.000E: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.3-1/input0 [ 138.290118][ T5997] usb 4-1: USB disconnect, device number 6 [ 138.589199][ T6803] netlink: 60 bytes leftover after parsing attributes in process `syz.0.369'. [ 138.681556][ T6792] fido_id[6792]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 138.876145][ T6810] netlink: 332 bytes leftover after parsing attributes in process `syz.1.370'. [ 138.876207][ T6810] netlink: 'syz.1.370': attribute type 9 has an invalid length. [ 138.876222][ T6810] netlink: 108 bytes leftover after parsing attributes in process `syz.1.370'. [ 138.876237][ T6810] netlink: 32 bytes leftover after parsing attributes in process `syz.1.370'. [ 139.296320][ T6822] mkiss: ax0: crc mode is auto. [ 140.004388][ T6844] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.530571][ T10] kernel write not supported for file /dsp1 (pid: 10 comm: kworker/0:1) [ 141.241414][ T6887] loop9: detected capacity change from 0 to 7 [ 141.256407][ T6887] Buffer I/O error on dev loop9, logical block 0, async page read [ 141.259150][ T6887] Buffer I/O error on dev loop9, logical block 0, async page read [ 141.259272][ T6887] Buffer I/O error on dev loop9, logical block 0, async page read [ 141.259389][ T6887] Buffer I/O error on dev loop9, logical block 0, async page read [ 141.259519][ T6887] Buffer I/O error on dev loop9, logical block 0, async page read [ 141.259640][ T6887] Buffer I/O error on dev loop9, logical block 0, async page read [ 141.259745][ T6887] Buffer I/O error on dev loop9, logical block 0, async page read [ 141.259818][ T6887] ldm_validate_partition_table(): Disk read failed. [ 141.259867][ T6887] Buffer I/O error on dev loop9, logical block 0, async page read [ 141.259976][ T6887] Buffer I/O error on dev loop9, logical block 0, async page read [ 141.261340][ T6887] Buffer I/O error on dev loop9, logical block 0, async page read [ 141.261576][ T6887] Dev loop9: unable to read RDB block 0 [ 141.262007][ T6887] loop9: unable to read partition table [ 141.262233][ T6887] loop9: partition table beyond EOD, truncated [ 141.262281][ T6887] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 141.262281][ T6887] ) failed (rc=-5) [ 141.294810][ T6890] Bluetooth: MGMT ver 1.23 [ 141.987269][ T5922] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 142.097036][ T6041] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 142.141694][ T5922] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 142.141719][ T5922] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 142.141736][ T5922] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 142.141753][ T5922] usb 2-1: config 220 has no interface number 2 [ 142.141818][ T5922] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 142.141843][ T5922] usb 2-1: config 220 interface 0 has no altsetting 0 [ 142.141859][ T5922] usb 2-1: config 220 interface 76 has no altsetting 0 [ 142.141875][ T5922] usb 2-1: config 220 interface 1 has no altsetting 0 [ 142.158492][ T5922] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 142.158522][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.158546][ T5922] usb 2-1: Product: syz [ 142.158562][ T5922] usb 2-1: Manufacturer: syz [ 142.158579][ T5922] usb 2-1: SerialNumber: syz [ 142.263674][ T6041] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 142.263754][ T6041] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.263775][ T6041] usb 5-1: config 0 interface 0 has no altsetting 0 [ 142.263804][ T6041] usb 5-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 142.263824][ T6041] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.312666][ T6041] usb 5-1: config 0 descriptor?? [ 142.354021][ T6918] syz.2.423 uses old SIOCAX25GETINFO [ 142.484693][ T5922] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 142.484728][ T5922] usb 2-1: No valid video chain found. [ 142.488641][ T5922] usb 2-1: selecting invalid altsetting 0 [ 142.660810][ T5922] usb 2-1: selecting invalid altsetting 0 [ 142.660847][ T5922] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 142.724288][ T5922] usb 2-1: USB disconnect, device number 5 [ 142.847713][ T6041] holtek_mouse 0003:04D9:A067.000F: hidraw0: USB HID v0.00 Device [HID 04d9:a067] on usb-dummy_hcd.4-1/input0 [ 143.046981][ T5827] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 143.051076][ T5922] usb 5-1: USB disconnect, device number 8 [ 143.201517][ T5827] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.201603][ T5827] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 143.201652][ T5827] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 143.201673][ T5827] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.290924][ T5827] usb 4-1: config 0 descriptor?? [ 143.379433][ T6932] fido_id[6932]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 143.919008][ T5827] Bluetooth: Can't get version to change to load ram patch err [ 143.920059][ T5827] Bluetooth: Loading sysconfig file failed [ 143.920096][ T5827] ath3k 4-1:0.0: probe with driver ath3k failed with error -71 [ 143.959210][ T5827] usb 4-1: USB disconnect, device number 7 [ 144.136629][ T6954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.439'. [ 144.628509][ T6974] process 'syz.2.448' launched '/dev/fd/3' with NULL argv: empty string added [ 145.160595][ T6993] futex_wake_op: syz.0.457 tries to shift op by -1; fix this program [ 145.266953][ T5827] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 145.419505][ T5827] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 145.419533][ T5827] usb 2-1: config 0 has no interface number 0 [ 145.422416][ T5827] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 145.422441][ T5827] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.422459][ T5827] usb 2-1: Product: syz [ 145.422471][ T5827] usb 2-1: Manufacturer: syz [ 145.422483][ T5827] usb 2-1: SerialNumber: syz [ 145.494232][ T5827] usb 2-1: config 0 descriptor?? [ 145.714668][ T5827] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected [ 145.743228][ T5827] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81 [ 145.743311][ T5827] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1 [ 145.743601][ T5827] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2 [ 145.804809][ T5827] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 146.189702][ T5997] usb 2-1: USB disconnect, device number 6 [ 146.226202][ T5997] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 146.240140][ T5997] keyspan 2-1:0.133: device disconnected [ 147.291011][ T7057] netlink: 96 bytes leftover after parsing attributes in process `syz.1.487'. [ 147.478521][ T7061] netlink: 'syz.3.489': attribute type 2 has an invalid length. [ 147.940794][ T7080] 9pnet_fd: Insufficient options for proto=fd [ 148.225948][ T7091] netlink: 'syz.4.502': attribute type 7 has an invalid length. [ 148.225967][ T7091] netlink: 'syz.4.502': attribute type 8 has an invalid length. [ 148.796580][ T7114] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 149.107080][ T31] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 149.285029][ T31] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 149.285060][ T31] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 149.285096][ T31] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 149.285117][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.293162][ T7116] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 149.321272][ T31] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 149.668246][ T31] usb 4-1: USB disconnect, device number 8 [ 150.248612][ T7154] netlink: 60 bytes leftover after parsing attributes in process `syz.0.530'. [ 150.248641][ T7154] netlink: 20 bytes leftover after parsing attributes in process `syz.0.530'. [ 150.248666][ T7154] netlink: 4 bytes leftover after parsing attributes in process `syz.0.530'. [ 150.921923][ T7165] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (22) [ 151.144616][ T7171] netlink: 24 bytes leftover after parsing attributes in process `syz.0.539'. [ 151.458959][ T7175] pim6reg: entered allmulticast mode [ 151.481094][ T7175] pim6reg: left allmulticast mode [ 151.775120][ T7188] netlink: 12 bytes leftover after parsing attributes in process `syz.2.547'. [ 152.015291][ T7195] netlink: 56 bytes leftover after parsing attributes in process `syz.1.550'. [ 152.015432][ T7195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.550'. [ 152.358934][ T7208] netlink: 12 bytes leftover after parsing attributes in process `syz.0.558'. [ 152.554009][ T7214] loop9: detected capacity change from 0 to 7 [ 152.578526][ T7214] buffer_io_error: 4 callbacks suppressed [ 152.578544][ T7214] Buffer I/O error on dev loop9, logical block 0, async page read [ 152.578665][ T7214] Buffer I/O error on dev loop9, logical block 0, async page read [ 152.578791][ T7214] Buffer I/O error on dev loop9, logical block 0, async page read [ 152.578902][ T7214] Buffer I/O error on dev loop9, logical block 0, async page read [ 152.579015][ T7214] Buffer I/O error on dev loop9, logical block 0, async page read [ 152.579122][ T7214] Buffer I/O error on dev loop9, logical block 0, async page read [ 152.579216][ T7214] Buffer I/O error on dev loop9, logical block 0, async page read [ 152.579279][ T7214] ldm_validate_partition_table(): Disk read failed. [ 152.579332][ T7214] Buffer I/O error on dev loop9, logical block 0, async page read [ 152.579425][ T7214] Buffer I/O error on dev loop9, logical block 0, async page read [ 152.579522][ T7214] Buffer I/O error on dev loop9, logical block 0, async page read [ 152.579666][ T7214] Dev loop9: unable to read RDB block 0 [ 152.579926][ T7214] loop9: unable to read partition table [ 152.580129][ T7214] loop9: partition table beyond EOD, truncated [ 152.580145][ T7214] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 152.580145][ T7214] ) failed (rc=-5) [ 152.860631][ T7218] netlink: 12 bytes leftover after parsing attributes in process `syz.1.562'. [ 152.860654][ T7218] netlink: 12 bytes leftover after parsing attributes in process `syz.1.562'. [ 153.018949][ T59] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 153.099963][ T7228] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 154.349765][ T7265] tipc: Enabling of bearer rejected, failed to enable media [ 154.871612][ T37] audit: type=1326 audit(1756931102.810:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7280 comm="syz.3.592" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9f0d03ebe9 code=0x0 [ 154.907217][ T6041] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 155.068161][ T6041] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.068207][ T6041] usb 3-1: New USB device found, idVendor=056a, idProduct=032b, bcdDevice= 0.00 [ 155.068232][ T6041] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.073150][ T6041] usb 3-1: config 0 descriptor?? [ 155.380580][ T7288] comedi: No check for data length of config insn id 3 is implemented [ 155.380596][ T7288] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 155.380607][ T7288] comedi: Assuming n=15 is correct [ 155.741519][ T5827] usb 3-1: USB disconnect, device number 7 [ 156.079677][ T7300] mkiss: ax0: crc mode is auto. [ 156.087036][ T31] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 156.236918][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 156.239269][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.239296][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.239330][ T31] usb 1-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 156.239350][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.244378][ T31] usb 1-1: config 0 descriptor?? [ 156.695758][ T31] waltop 0003:172F:0034.0011: item fetching failed at offset 0/2 [ 156.696542][ T31] waltop 0003:172F:0034.0011: probe with driver waltop failed with error -22 [ 156.913267][ T5922] usb 1-1: USB disconnect, device number 7 [ 157.613179][ T7336] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 158.047882][ T7353] netlink: 12 bytes leftover after parsing attributes in process `syz.4.624'. [ 159.257005][ T5827] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 159.377318][ T31] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 159.436579][ T5827] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 159.436606][ T5827] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.436623][ T5827] usb 3-1: Product: syz [ 159.436636][ T5827] usb 3-1: Manufacturer: syz [ 159.436651][ T5827] usb 3-1: SerialNumber: syz [ 159.476159][ T5827] usb 3-1: config 0 descriptor?? [ 159.535109][ T31] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 159.535135][ T31] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 159.535158][ T31] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 159.579178][ T31] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 159.579202][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.579219][ T31] usb 2-1: Product: syz [ 159.579232][ T31] usb 2-1: Manufacturer: syz [ 159.579245][ T31] usb 2-1: SerialNumber: syz [ 159.630944][ T31] usb 2-1: config 0 descriptor?? [ 159.631640][ T7388] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 159.631755][ T7388] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 159.673625][ T31] usb 2-1: ucan: probing device on interface #0 [ 159.787178][ T5827] usb 3-1: USB disconnect, device number 8 [ 159.934150][ T7402] netlink: 'syz.4.647': attribute type 10 has an invalid length. [ 160.002938][ T7402] team0: Port device syz_tun added [ 160.017464][ T37] audit: type=1326 audit(1756931107.940:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7403 comm="syz.3.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0d03ebe9 code=0x7ffc0000 [ 160.017514][ T37] audit: type=1326 audit(1756931107.940:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7403 comm="syz.3.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0d03ebe9 code=0x7ffc0000 [ 160.027778][ T37] audit: type=1326 audit(1756931107.960:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7403 comm="syz.3.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f9f0d03ebe9 code=0x7ffc0000 [ 160.027844][ T37] audit: type=1326 audit(1756931107.960:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7403 comm="syz.3.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0d03ebe9 code=0x7ffc0000 [ 160.027897][ T37] audit: type=1326 audit(1756931107.960:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7403 comm="syz.3.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0d03ebe9 code=0x7ffc0000 [ 160.038558][ T37] audit: type=1326 audit(1756931107.970:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7403 comm="syz.3.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f9f0d03ebe9 code=0x7ffc0000 [ 160.038611][ T37] audit: type=1326 audit(1756931107.970:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7403 comm="syz.3.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0d03ebe9 code=0x7ffc0000 [ 160.146165][ T6046] udevd[6046]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 160.306316][ T31] ucan 2-1:0.0: probe with driver ucan failed with error -71 [ 160.332656][ T31] usb 2-1: USB disconnect, device number 7 [ 160.442460][ T7412] netlink: 'syz.3.651': attribute type 30 has an invalid length. [ 161.786555][ T7454] rdma_op ffff888027459270 conn xmit_rdma 0000000000000000 [ 162.799906][ T7482] netlink: 40 bytes leftover after parsing attributes in process `syz.2.684'. [ 162.799926][ T7482] tipc: Invalid UDP bearer configuration [ 162.799961][ T7482] tipc: Enabling of bearer rejected, failed to enable media [ 162.988176][ C0] vkms_vblank_simulate: vblank timer overrun [ 163.014827][ C0] vkms_vblank_simulate: vblank timer overrun [ 163.062510][ C0] vkms_vblank_simulate: vblank timer overrun [ 163.117877][ C0] vkms_vblank_simulate: vblank timer overrun [ 163.197204][ T5922] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 163.197462][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 163.327280][ T5922] usb 4-1: device descriptor read/64, error -32 [ 163.577306][ T5922] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 163.577551][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 163.707984][ T5922] usb 4-1: device descriptor read/64, error -32 [ 163.818116][ T5922] usb usb4-port1: attempt power cycle [ 164.157319][ T5922] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 164.177938][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 164.178546][ T5922] usb 4-1: device descriptor read/8, error -32 [ 164.301780][ T5922] raw-gadget.0 gadget.3: failed to queue suspend event [ 164.302204][ T5922] raw-gadget.0 gadget.3: failed to queue reset event [ 164.427214][ T5922] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 164.453802][ T5922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 164.453843][ T5922] usb 4-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 164.453863][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.515811][ T5922] usb 4-1: config 0 descriptor?? [ 164.516969][ T7490] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 165.032986][ T5922] belkin 0003:050D:3201.0012: unbalanced collection at end of report description [ 165.033731][ T5922] belkin 0003:050D:3201.0012: parse failed [ 165.033796][ T5922] belkin 0003:050D:3201.0012: probe with driver belkin failed with error -22 [ 165.200578][ T5922] usb 4-1: USB disconnect, device number 12 [ 165.286695][ T7503] netlink: 8 bytes leftover after parsing attributes in process `syz.1.692'. [ 165.303210][ T7503] openvswitch: netlink: nsh attribute has 2338 unknown bytes. [ 165.303241][ T7503] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.697439][ T7507] team_slave_0: entered promiscuous mode [ 165.697490][ T7507] team_slave_1: entered promiscuous mode [ 165.700616][ T7507] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 165.701227][ T7507] team0: Device macvtap1 is already an upper device of the team interface [ 177.654993][ T7533] Falling back ldisc for ttyS3. [ 178.094420][ C0] sched: DL replenish lagged too much [ 182.329296][ T7507] team_slave_0: left promiscuous mode [ 182.329375][ T7507] team_slave_1: left promiscuous mode [ 182.780761][ T5847] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 182.802152][ T5847] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 182.805053][ T5158] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 182.820168][ T5847] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 182.853510][ T5158] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 182.854565][ T5847] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 182.883996][ T5847] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 182.884709][ T5847] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 182.932381][ T5847] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 182.934500][ T5847] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 183.235852][ T59] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 183.252016][ T59] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 183.265268][ T59] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 183.266536][ T59] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 183.282805][ T59] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 184.977053][ T5847] Bluetooth: hci6: command tx timeout [ 184.978757][ T59] Bluetooth: hci5: command tx timeout [ 185.297241][ T59] Bluetooth: hci7: command tx timeout [ 187.057135][ T5847] Bluetooth: hci6: command tx timeout [ 187.058229][ T59] Bluetooth: hci5: command tx timeout [ 187.377039][ T59] Bluetooth: hci7: command tx timeout [ 189.137321][ T5847] Bluetooth: hci6: command tx timeout [ 189.138151][ T59] Bluetooth: hci5: command tx timeout [ 189.457750][ T59] Bluetooth: hci7: command tx timeout [ 191.217371][ T59] Bluetooth: hci5: command tx timeout [ 191.217404][ T59] Bluetooth: hci6: command tx timeout [ 191.540727][ T5847] Bluetooth: hci7: command tx timeout [ 192.220902][ T59] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 192.224551][ T59] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 192.260427][ T59] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 192.267559][ T59] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 192.268435][ T59] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 193.779119][ T59] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 193.781531][ T59] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 193.782558][ T59] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 193.783937][ T59] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 193.818604][ T59] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 194.114738][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.114806][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.337063][ T5847] Bluetooth: hci8: command tx timeout [ 195.857360][ T5847] Bluetooth: hci9: command tx timeout [ 196.417105][ T5847] Bluetooth: hci8: command tx timeout [ 197.937428][ T59] Bluetooth: hci9: command tx timeout [ 198.496960][ T5847] Bluetooth: hci8: command tx timeout [ 200.017146][ T5847] Bluetooth: hci9: command tx timeout [ 200.577345][ T5847] Bluetooth: hci8: command tx timeout [ 202.096988][ T5847] Bluetooth: hci9: command tx timeout [ 211.617616][ T5158] Bluetooth: hci3: command 0x0406 tx timeout [ 211.697090][ T5850] Bluetooth: hci0: command 0x0406 tx timeout [ 211.697137][ T5158] Bluetooth: hci2: command 0x0406 tx timeout [ 211.922362][ T5850] Bluetooth: hci1: command 0x0406 tx timeout [ 211.922411][ T5158] Bluetooth: hci4: command 0x0406 tx timeout [ 217.223553][ T7517] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.511267][ T7542] chnl_net:caif_netlink_parms(): no params data found [ 235.550670][ T7549] chnl_net:caif_netlink_parms(): no params data found [ 235.592792][ T7541] chnl_net:caif_netlink_parms(): no params data found [ 235.792800][ T7564] chnl_net:caif_netlink_parms(): no params data found [ 242.790824][ T5857] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 242.796258][ T5857] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 242.803433][ T5857] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 242.817446][ T5857] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 242.833106][ T5857] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 242.933712][ T59] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 242.945458][ T59] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 242.960179][ T59] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 242.961704][ T59] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 242.962443][ T59] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 243.499102][ T5847] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 243.527484][ T5847] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 243.544569][ T5847] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 243.545764][ T5847] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 243.546503][ T5847] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 245.062612][ T5858] Bluetooth: hci10: command tx timeout [ 246.177151][ T5858] Bluetooth: hci11: command tx timeout [ 246.177353][ T5858] Bluetooth: hci3: command tx timeout [ 247.137239][ T5857] Bluetooth: hci10: command tx timeout [ 248.257073][ T5857] Bluetooth: hci3: command tx timeout [ 248.257104][ T5857] Bluetooth: hci11: command tx timeout [ 249.216991][ T5858] Bluetooth: hci10: command tx timeout [ 250.337241][ T5858] Bluetooth: hci11: command tx timeout [ 250.337284][ T5858] Bluetooth: hci3: command tx timeout [ 251.300068][ T5857] Bluetooth: hci10: command tx timeout [ 252.427320][ T5857] Bluetooth: hci3: command tx timeout [ 252.427353][ T5857] Bluetooth: hci11: command tx timeout [ 252.897706][ T5857] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 252.932830][ T5857] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 252.933944][ T5857] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 252.935054][ T5857] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 252.935793][ T5857] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 254.397949][ T5858] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 254.400509][ T5858] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 254.401574][ T5858] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 254.402761][ T5858] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 254.403478][ T5858] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 255.063800][ T5857] Bluetooth: hci1: command tx timeout [ 255.554780][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.554853][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.507143][ T5857] Bluetooth: hci2: command tx timeout [ 257.137541][ T5857] Bluetooth: hci1: command tx timeout [ 258.577230][ T5857] Bluetooth: hci2: command tx timeout [ 259.217804][ T5857] Bluetooth: hci1: command tx timeout [ 260.584374][ T7558] chnl_net:caif_netlink_parms(): no params data found [ 260.666908][ T5857] Bluetooth: hci2: command tx timeout [ 261.297312][ T5857] Bluetooth: hci1: command tx timeout [ 262.737123][ T5857] Bluetooth: hci2: command tx timeout [ 302.821962][ T5858] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 302.839142][ T5858] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 302.840339][ T5858] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 302.841410][ T5858] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 302.842596][ T5858] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 303.555678][ T5847] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 303.573160][ T5847] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 303.574367][ T5847] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 303.576166][ T5847] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 303.605063][ T5847] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 303.824147][ T59] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 303.844370][ T59] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 303.845980][ T59] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 303.862824][ T59] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 303.863603][ T59] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 313.434784][ T5848] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 313.445824][ T5848] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 313.459441][ T5848] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 313.460511][ T5848] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 313.461216][ T5848] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 314.951243][ T5158] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 314.971943][ T5158] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 314.973054][ T5158] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 314.975020][ T5158] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 314.976014][ T5158] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 316.993014][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.993091][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 332.563719][ T5857] Bluetooth: hci6: command tx timeout [ 334.576926][ T5857] Bluetooth: hci6: command tx timeout [ 336.657697][ T5857] Bluetooth: hci6: command tx timeout [ 337.540163][ T5848] Bluetooth: hci14: command tx timeout [ 338.737024][ T5857] Bluetooth: hci6: command tx timeout [ 339.617110][ T5857] Bluetooth: hci15: command tx timeout [ 339.617347][ T5857] Bluetooth: hci14: command tx timeout [ 339.617433][ T5857] Bluetooth: hci13: command tx timeout [ 339.617560][ T5857] Bluetooth: hci12: command tx timeout [ 341.697107][ T5857] Bluetooth: hci12: command tx timeout [ 341.697138][ T5857] Bluetooth: hci13: command tx timeout [ 341.697159][ T5857] Bluetooth: hci14: command tx timeout [ 341.697177][ T5857] Bluetooth: hci15: command tx timeout [ 343.777784][ T5858] Bluetooth: hci15: command tx timeout [ 343.777818][ T5858] Bluetooth: hci14: command tx timeout [ 343.777842][ T5858] Bluetooth: hci13: command tx timeout [ 343.777866][ T5858] Bluetooth: hci12: command tx timeout [ 345.860795][ T5858] Bluetooth: hci12: command tx timeout [ 345.860828][ T5858] Bluetooth: hci13: command tx timeout [ 345.860849][ T5858] Bluetooth: hci15: command tx timeout [ 360.813992][ T7517] team0: Port device syz_tun removed [ 363.136489][ T5858] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 363.182417][ T5858] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 363.183793][ T5858] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 363.184886][ T5858] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 363.185623][ T5858] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 364.010635][ T5848] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 364.016077][ T5848] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 364.032560][ T5848] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 364.033634][ T5848] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 364.034333][ T5848] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 364.418815][ T59] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 364.440041][ T59] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 364.441174][ T59] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 364.442492][ T59] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 364.444897][ T59] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 369.457540][ T38] INFO: task syz.1.695:7507 blocked for more than 143 seconds. [ 369.457569][ T38] Not tainted syzkaller #0 [ 369.457578][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 369.457591][ T38] task:syz.1.695 state:D stack:22728 pid:7507 tgid:7505 ppid:5852 task_flags:0x400140 flags:0x00004006 [ 369.457652][ T38] Call Trace: [ 369.457658][ T38] [ 369.457671][ T38] __schedule+0x16f3/0x4c20 [ 369.457750][ T38] ? __lock_acquire+0xab9/0xd20 [ 369.457782][ T38] ? __pfx___schedule+0x10/0x10 [ 369.457828][ T38] ? schedule+0x91/0x360 [ 369.457859][ T38] schedule+0x165/0x360 [ 369.457888][ T38] schedule_timeout+0x9a/0x270 [ 369.457915][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 369.457964][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 369.457993][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 369.458021][ T38] ? wait_for_completion+0x267/0x5d0 [ 369.458052][ T38] wait_for_completion+0x2bf/0x5d0 [ 369.458096][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 369.458133][ T38] ? __init_swait_queue_head+0xa9/0x150 [ 369.458164][ T38] rcu_barrier+0x463/0x570 [ 369.458199][ T38] netdev_run_todo+0x327/0xea0 [ 369.458242][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 369.458296][ T38] rtnl_newlink+0x177b/0x1c70 [ 369.458338][ T38] ? __pfx_rtnl_newlink+0x10/0x10 [ 369.458363][ T38] ? migrate_enable+0x29c/0x3c0 [ 369.458391][ T38] ? reacquire_held_locks+0x127/0x1d0 [ 369.458424][ T38] ? __pfx_migrate_enable+0x10/0x10 [ 369.458451][ T38] ? __pfx_migrate_enable+0x10/0x10 [ 369.458494][ T38] ? __local_bh_enable+0x23f/0x3d0 [ 369.458520][ T38] ? reacquire_held_locks+0x127/0x1d0 [ 369.458555][ T38] ? __pfx___local_bh_enable+0x10/0x10 [ 369.458591][ T38] ? __local_bh_enable_ip+0x1b2/0x270 [ 369.458618][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 369.458651][ T38] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 369.458677][ T38] ? dev_hard_start_xmit+0x7f5/0x870 [ 369.458710][ T38] ? __dev_queue_xmit+0x26f/0x3b70 [ 369.458739][ T38] ? __dev_queue_xmit+0x26f/0x3b70 [ 369.458760][ T38] ? __dev_queue_xmit+0x26f/0x3b70 [ 369.458783][ T38] ? __dev_queue_xmit+0x1d3d/0x3b70 [ 369.458810][ T38] ? __lock_acquire+0xab9/0xd20 [ 369.458868][ T38] ? __pfx_rtnl_newlink+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 369.458894][ T38] rtnetlink_rcv_msg+0x7cc/0xb70 [ 369.458943][ T38] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 369.458966][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 369.458987][ T38] ? ref_tracker_free+0x61e/0x7c0 [ 369.459013][ T38] ? __asan_memcpy+0x40/0x70 [ 369.459032][ T38] ? __pfx_ref_tracker_free+0x10/0x10 [ 369.459056][ T38] ? __skb_clone+0x63/0x7a0 [ 369.459094][ T38] netlink_rcv_skb+0x205/0x470 [ 369.459118][ T38] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 369.459143][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 369.459178][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 369.459209][ T38] netlink_unicast+0x843/0xa10 [ 369.459239][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 369.459262][ T38] ? netlink_sendmsg+0x642/0xb30 [ 369.459283][ T38] ? skb_put+0x11b/0x210 [ 369.459311][ T38] netlink_sendmsg+0x805/0xb30 [ 369.459345][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 369.459377][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 369.459396][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 369.459420][ T38] __sock_sendmsg+0x21c/0x270 [ 369.459444][ T38] ____sys_sendmsg+0x508/0x820 [ 369.459478][ T38] ? __pfx_____sys_sendmsg+0x10/0x10 [ 369.459515][ T38] ? import_iovec+0x74/0xa0 [ 369.459539][ T38] ___sys_s[ 369.459539][ T38] ___sys_sendmsg+0x21f/0x2a0 [ 369.459569][ T38] ? __pfx____sys_sendmsg+0x10/0x10 [ 369.459632][ T38] ? __fget_files+0x2a/0x420 [ 369.459658][ T38] ? __fget_files+0x3a6/0x420 [ 369.459694][ T38] __x64_sys_sendmsg+0x1a1/0x260 [ 369.459725][ T38] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 369.459763][ T38] ? rcu_is_watching+0x15/0xb0 [ 369.459796][ T38] ? do_syscall_64+0xbe/0x3b0 [ 369.459827][ T38] do_syscall_64+0xfa/0x3b0 [ 369.459851][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 369.459875][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.459894][ T38] ? clear_bhb_loop+0x60/0xb0 [ 369.459917][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.459951][ T38] RIP: 0033:0x7f9a19ffebe9 [ 369.459971][ T38] RSP: 002b:00007f9a1825e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 369.459990][ T38] RAX: ffffffffffffffda RBX: 00007f9a1a235fa0 RCX: 00007f9a19ffebe9 [ 369.460003][ T38] RDX: 0000000000004054 RSI: 00002000000002c0 RDI: 0000000000000003 [ 369.460016][ T38] RBP: 00007f9a1a081e19 R08: 0000000000000000 R09: 0000000000000000 [ 369.460027][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 369.460039][ T38] R13: 00007f9a1a236038 R14: 00007f9a1a235fa0 R15: 00007ffe6a5b5f28 [ 369.460068][ T38] [ 369.460101][ T38] [ 369.460101][ T38] Showing all locks held in the system: [ 369.460110][ T38] 3 locks held by kworker/u8:0/12: [ 369.460121][ T38] #0: ffff88802fffc138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 369.460171][ T38] #1: ffffc90000117bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 369.460219][ T38] #2: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 369.460264][ T38] 2 locks held by rcuc/0/20: [ 369.460276][ T38] 1 lock held by khungtaskd/38: [ 369.460286][ T38] #0: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 369.460330][ T38] 4 locks held by kworker/u9:0/59: [ 369.460340][ T38] #0: ffff88802349c138 ((wq_completion)hci8#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 369.460391][ T38] #1: ffffc9000125fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 369.460438][ T38] #2: ffff888073b8c0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 369.460482][ T38] #3: ffffffff8ee3a2b8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 369.460529][ T38] 3 locks held by kworker/u8:5/153: [ 369.460539][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 369.460586][ T38] #1: ffffc90003a77bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 369.460633][ T38] #2: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 369.460687][ T38] 3 locks held by kworker/1:2/991: [ 369.460697][ T38] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 369.460744][ T38] #1: ffffc900046f7bc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 369.460791][ T38] #2: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 369.460856][ T38] 2 locks held by kworker/u8:13/3622: [ 369.460869][ T38] 2 locks held by getty/5601: [ 369.460879][ T38] #0: ffff88823bf420a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 369.460930][ T38] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 369.460983][ T38] 4 locks held by kworker/u9:3/5848: [ 369.460993][ T38] #0: ffff888073dbe138 ((wq_completion)hci7#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 369.461042][ T38] #1: ffffc90004ba7bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 369.461088][ T38] #2: ffff8880742980a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 369.461130][ T38] #3: ffffffff8ee3a2b8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 369.461175][ T38] 4 locks held by kworker/u9:5/5857: [ 369.461185][ T38] #0: ffff888038553138 ((wq_completion)hci5#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 369.461237][ T38] #1: ffffc90004c27bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 369.461284][ T38] #2: ffff88804c21c0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 369.461327][ T38] #3: ffffffff8ee3a2b8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 369.461375][ T38] 4 locks held by kworker/0:6/5997: [ 369.461385][ T38] #0: ffff888019899938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 369.461433][ T38] #1: ffffc900052e7bc0 ((work_completion)(&(&tbl->managed_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 369.461481][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 369.461527][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 369.461574][ T38] 2 locks held by syz.1.695/7507: [ 369.461584][ T38] #0: ffffffff8f1d6e30 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 369.461636][ T38] #1: ffffffff8d9ae570 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 369.461679][ T38] 1 lock held by syz.3.697/7513: [ 369.461689][ T38] #0: ffffffff8d9ae570 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 369.461731][ T38] 1 lock held by syz.4.699/7517: [ 369.461741][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 369.461791][ T38] 4 locks held by kworker/0:9/7528: [ 369.461801][ T38] #0: ffff8880366fc938 ((wq_completion)wg-crypt-wg0){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 369.461848][ T38] #1: ffffc9001cda7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 369.461911][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 369.461962][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 369.462009][ T38] 1 lock held by syz.0.703/7531: [ 369.462019][ T38] #0: ffffffff8d9ae570 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 369.462061][ T38] 1 lock held by syz.2.705/7537: [ 369.462071][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 369.462118][ T38] 1 lock held by syz-executor/7541: [ 369.462128][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 369.462176][ T38] 1 lock held by syz-executor/7542: [ 369.462185][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 369.462233][ T38] 1 lock held by syz-executor/7549: [ 369.462243][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 369.462290][ T38] 1 lock held by syz-executor/7558: [ 369.462300][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 369.462347][ T38] 1 lock held by syz-executor/7564: [ 369.462357][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 369.462405][ T38] 8 locks held by kworker/0:11/7568: [ 369.462416][ T38] 4 locks held by syz-executor/7591: [ 369.462425][ T38] #0: ffff88805b898e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 369.462469][ T38] #1: ffff88805b8980a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 369.462516][ T38] #2: ffffffff8ee3a2b8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 369.462567][ T38] #3: ffff888038552358 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 369.462619][ T38] 2 locks held by syz-executor/7593: [ 369.462629][ T38] #0: ffff888035558e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 369.462672][ T38] #1: ffff8880355580a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 369.462719][ T38] 3 locks held by syz-executor/7596: [ 369.462729][ T38] #0: ffff888037144e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 369.462771][ T38] #1: ffff8880371440a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 369.462817][ T38] #2: ffffffff8ee3a2b8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 369.462869][ T38] 1 lock held by syz-executor/7608: [ 369.462879][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 369.462920][ T38] 1 lock held by syz-executor/7611: [ 369.462930][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 369.462977][ T38] 4 locks held by kworker/0:14/7615: [ 369.462987][ T38] #0: ffff8880366fdd38 ((wq_completion)wg-crypt-wg0#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 369.463038][ T38] #1: ffffc90005297bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 369.463101][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 369.463146][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 369.463193][ T38] 2 locks held by kworker/0:16/7617: [ 369.463204][ T38] 1 lock held by syz-executor/7622: [ 369.463214][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 369.463254][ T38] 1 lock held by syz-executor/7626: [ 369.463264][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 369.463304][ T38] 1 lock held by syz-executor/7628: [ 369.463314][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 369.463355][ T38] 1 lock held by syz-executor/7637: [ 369.463365][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 369.463406][ T38] 1 lock held by syz-executor/7643: [ 369.463416][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 369.463456][ T38] 4 locks held by kworker/0:17/7652: [ 369.463466][ T38] #0: ffff88805a8dd938 ((wq_completion)wg-crypt-wg2#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 369.463517][ T38] #1: ffffc90005047bc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 369.463565][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 369.463611][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 369.463658][ T38] 1 lock held by syz-executor/7659: [ 369.463668][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 369.463709][ T38] 1 lock held by syz-executor/7662: [ 369.463719][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 369.463759][ T38] 1 lock held by syz-executor/7665: [ 369.463769][ T38] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 369.463810][ T38] [ 369.463814][ T38] ============================================= [ 369.463814][ T38] [ 369.463830][ T38] NMI backtrace for cpu 1 [ 369.463869][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 369.463890][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 369.463901][ T38] Call Trace: [ 369.463909][ T38] [ 369.463916][ T38] dump_stack_lvl+0x189/0x250 [ 369.463958][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 369.463986][ T38] ? __pfx__printk+0x10/0x10 [ 369.464020][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 369.464044][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 369.464073][ T38] ? __pfx__printk+0x10/0x10 [ 369.464098][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 369.464125][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 369.464151][ T38] watchdog+0xf93/0xfe0 [ 369.464181][ T38] ? watchdog+0x1de/0xfe0 [ 369.464212][ T38] kthread+0x70e/0x8a0 [ 369.464245][ T38] ? __pfx_watchdog+0x10/0x10 [ 369.464269][ T38] ? __pfx_kthread+0x10/0x10 [ 369.464303][ T38] ? __pfx_kthread+0x10/0x10 [ 369.464332][ T38] ret_from_fork+0x3f9/0x770 [ 369.464361][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 369.464392][ T38] ? __switch_to_asm+0x39/0x70 [ 369.464409][ T38] ? __switch_to_asm+0x33/0x70 [ 369.464426][ T38] ? __pfx_kthread+0x10/0x10 [ 369.464456][ T38] ret_from_fork_asm+0x1a/0x30 [ 369.464490][ T38] [ 369.464497][ T38] Sending NMI from CPU 1 to CPUs 0: [ 369.464521][ C0] NMI backtrace for cpu 0 [ 369.464534][ C0] CPU: 0 UID: 0 PID: 7568 Comm: kworker/0:11 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 369.464552][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 369.464563][ C0] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 369.464585][ C0] RIP: 0010:preempt_count_add+0x42/0x1a0 [ 369.464604][ C0] Code: 01 99 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 f1 00 00 00 83 3d be 75 71 17 00 75 07 65 8b 05 a5 32 66 10 65 01 3d 9e 32 66 10 <48> c7 c0 40 33 01 99 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 ec 00 [ 369.464617][ C0] RSP: 0018:ffffc90023e4e2a0 EFLAGS: 00000082 [ 369.464630][ C0] RAX: 0000000080000000 RBX: ffff8880b883f4b0 RCX: ffffffff99013303 [ 369.464642][ C0] RDX: 0000000000000000 RSI: ffffffff8b620e60 RDI: 0000000000000001 [ 369.464652][ C0] RBP: ffffc90023e4e350 R08: ffffffff8f1d5137 R09: 1ffffffff1e3aa26 [ 369.464664][ C0] R10: dffffc0000000000 R11: fffffbfff1e3aa27 R12: dffffc0000000000 [ 369.464676][ C0] R13: ffff8880b883f4b0 R14: 0000000000000a02 R15: dffffc0000000000 [ 369.464688][ C0] FS: 0000000000000000(0000) GS:ffff8881268c1000(0000) knlGS:0000000000000000 [ 369.464701][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 369.464712][ C0] CR2: 00005595f34d0660 CR3: 000000000d7a6000 CR4: 00000000003526f0 [ 369.464726][ C0] Call Trace: [ 369.464732][ C0] [ 369.464739][ C0] _raw_spin_lock_irqsave+0x8c/0xf0 [ 369.464762][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 369.464789][ C0] rt_mutex_slowunlock+0xb0/0x8a0 [ 369.464806][ C0] ? reacquire_held_locks+0x127/0x1d0 [ 369.464834][ C0] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 369.464853][ C0] ? rt_spin_unlock+0x65/0x80 [ 369.464873][ C0] ___slab_alloc+0x4d3/0xdd0 [ 369.464897][ C0] ? synproxy_send_client_synack+0x8bb/0xe20 [ 369.464919][ C0] ? nft_synproxy_do_eval+0x345/0x570 [ 369.464955][ C0] ? nf_hook_slow+0xc5/0x220 [ 369.464974][ C0] ? NF_HOOK+0x206/0x3a0 [ 369.464991][ C0] ? ref_tracker_alloc+0x13b/0x450 [ 369.465014][ C0] __kmalloc_cache_noprof+0xe6/0x320 [ 369.465034][ C0] ? ref_tracker_alloc+0x13b/0x450 [ 369.465056][ C0] ref_tracker_alloc+0x13b/0x450 [ 369.465078][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 369.465105][ C0] ? dst_alloc+0x105/0x170 [ 369.465118][ C0] ? dst_alloc+0x105/0x170 [ 369.465132][ C0] dst_init+0xd9/0x450 [ 369.465157][ C0] dst_alloc+0x12a/0x170 [ 369.465171][ C0] ip_route_output_key_hash_rcu+0x1560/0x23e0 [ 369.465206][ C0] ? ip_route_output_key_hash+0xde/0x2e0 [ 369.465231][ C0] ip_route_output_key_hash+0x1b9/0x2e0 [ 369.465254][ C0] ? __lock_acquire+0xab9/0xd20 [ 369.465275][ C0] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 369.465302][ C0] ? ip_route_me_harder+0x4ad/0x1030 [ 369.465320][ C0] ip_route_output_flow+0x2a/0x150 [ 369.465348][ C0] ? ip_route_me_harder+0x6c0/0x1030 [ 369.465364][ C0] ip_route_me_harder+0x6d2/0x1030 [ 369.465385][ C0] ? __pfx_ip_route_me_harder+0x10/0x10 [ 369.465414][ C0] synproxy_send_tcp+0x359/0x6c0 [ 369.465438][ C0] synproxy_send_client_synack+0x8bb/0xe20 [ 369.465466][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 369.465486][ C0] ? nft_sock_get_eval_cgroupv2+0x88/0x270 [ 369.465508][ C0] ? synproxy_pernet+0x45/0x270 [ 369.465525][ C0] nft_synproxy_eval_v4+0x36e/0x560 [ 369.465552][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 369.465577][ C0] ? nf_ip_checksum+0x13c/0x510 [ 369.465602][ C0] nft_synproxy_do_eval+0x345/0x570 [ 369.465626][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 369.465651][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 369.465683][ C0] nft_do_chain+0x40c/0x1920 [ 369.465710][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 369.465734][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 369.465775][ C0] nft_do_chain_inet+0x25d/0x340 [ 369.465798][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 369.465820][ C0] ? __lock_acquire+0xab9/0xd20 [ 369.465845][ C0] ? NF_HOOK+0x9a/0x3a0 [ 369.465863][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 369.465886][ C0] nf_hook_slow+0xc5/0x220 [ 369.465908][ C0] NF_HOOK+0x206/0x3a0 [ 369.465927][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 369.465946][ C0] ? NF_HOOK+0x9a/0x3a0 [ 369.465963][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 369.465980][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 369.466001][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 369.466020][ C0] ? skb_dst+0x4f/0xd0 [ 369.466038][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 369.466058][ C0] NF_HOOK+0x309/0x3a0 [ 369.466077][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 369.466095][ C0] ? NF_HOOK+0x9a/0x3a0 [ 369.466112][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 369.466131][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 369.466154][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 369.466171][ C0] __netif_receive_skb+0x143/0x380 [ 369.466192][ C0] ? rt_spin_unlock+0x65/0x80 [ 369.466210][ C0] ? process_backlog+0x27b/0x900 [ 369.466227][ C0] process_backlog+0x31e/0x900 [ 369.466250][ C0] __napi_poll+0xb3/0x540 [ 369.466269][ C0] net_rx_action+0x707/0xe00 [ 369.466295][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 369.466315][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 369.466338][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 369.466359][ C0] handle_softirqs+0x22f/0x710 [ 369.466383][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 369.466406][ C0] __local_bh_enable_ip+0x179/0x270 [ 369.466425][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 369.466447][ C0] ? mod_peer_timer+0x21/0x260 [ 369.466462][ C0] ? mod_peer_timer+0x21/0x260 [ 369.466478][ C0] ? mod_peer_timer+0x20c/0x260 [ 369.466495][ C0] wg_packet_tx_worker+0x23e/0x7c0 [ 369.466513][ C0] ? wg_packet_tx_worker+0x24a/0x7c0 [ 369.466532][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 369.466552][ C0] process_scheduled_works+0xade/0x17b0 [ 369.466583][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 369.466610][ C0] worker_thread+0x8a0/0xda0 [ 369.466641][ C0] kthread+0x70e/0x8a0 [ 369.466665][ C0] ? __pfx_worker_thread+0x10/0x10 [ 369.466683][ C0] ? __pfx_kthread+0x10/0x10 [ 369.466708][ C0] ? __pfx_kthread+0x10/0x10 [ 369.466734][ C0] ret_from_fork+0x3f9/0x770 [ 369.466757][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 369.466780][ C0] ? __switch_to_asm+0x39/0x70 [ 369.466794][ C0] ? __switch_to_asm+0x33/0x70 [ 369.466807][ C0] ? __pfx_kthread+0x10/0x10 [ 369.466830][ C0] ret_from_fork_asm+0x1a/0x30 [ 369.466852][ C0] [ 369.856786][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 369.856807][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 369.856828][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 369.856839][ T38] Call Trace: [ 369.856846][ T38] [ 369.856854][ T38] dump_stack_lvl+0x99/0x250 [ 369.856886][ T38] ? __asan_memcpy+0x40/0x70 [ 369.856907][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 369.856934][ T38] ? __pfx__printk+0x10/0x10 [ 369.856966][ T38] vpanic+0x281/0x750 [ 369.856995][ T38] ? __pfx_vpanic+0x10/0x10 [ 369.857020][ T38] ? irqentry_exit+0x74/0x90 [ 369.857044][ T38] ? preempt_schedule+0xae/0xc0 [ 369.857069][ T38] ? preempt_schedule_common+0x83/0xd0 [ 369.857098][ T38] panic+0xb9/0xc0 [ 369.857124][ T38] ? __pfx_panic+0x10/0x10 [ 369.857152][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 369.857185][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 369.857209][ T38] watchdog+0xfd2/0xfe0 [ 369.857238][ T38] ? watchdog+0x1de/0xfe0 [ 369.857267][ T38] kthread+0x70e/0x8a0 [ 369.857297][ T38] ? __pfx_watchdog+0x10/0x10 [ 369.857320][ T38] ? __pfx_kthread+0x10/0x10 [ 369.857352][ T38] ? __pfx_kthread+0x10/0x10 [ 369.857380][ T38] ret_from_fork+0x3f9/0x770 [ 369.857407][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 369.857436][ T38] ? __switch_to_asm+0x39/0x70 [ 369.857452][ T38] ? __switch_to_asm+0x33/0x70 [ 369.857469][ T38] ? __pfx_kthread+0x10/0x10 [ 369.857497][ T38] ret_from_fork_asm+0x1a/0x30 [ 369.857530][ T38] [ 369.857880][ T38] Kernel Offset: disabled