last executing test programs: 2m32.162284267s ago: executing program 3 (id=1675): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x4, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x0, 0x0, 0x30314247}}) 2m31.859237207s ago: executing program 3 (id=1681): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000880)={0x0, @in6={{0xa, 0x4e22, 0x1, @empty, 0x1f8}}, 0x1, 0x7}, 0x90) 2m31.730956805s ago: executing program 4 (id=1682): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x31, 0xffffffffffffffff, &(0x7f00000000c0)=0x2c) 2m31.398995662s ago: executing program 4 (id=1688): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1000000000000000000000000e00000018000000000000001001000001"], 0x28}, 0x0) 2m31.161401731s ago: executing program 0 (id=1689): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x48, 0x0, 0x0) 2m31.134508092s ago: executing program 4 (id=1692): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000400110000000a600e41b0000900ac000604110000001e0012000a0003150248035c3b61c1d67f6f94207134cf6efb8000a007a20ed7fa0346fbf97209c514c516f4e090457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008a", 0xd8}], 0x1}, 0x4000804) 2m30.849380563s ago: executing program 4 (id=1694): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x23, 0x0, &(0x7f00000001c0)) 2m30.848803004s ago: executing program 0 (id=1695): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cpuinfo\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000380)=""/85, 0x55, 0x81ffffffbfffffc) 2m30.499158365s ago: executing program 3 (id=1697): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4562f067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 2m30.424445769s ago: executing program 0 (id=1698): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000070605000000000000000000050000050500010007"], 0x24}, 0x1, 0x0, 0x0, 0x44010}, 0x10) 2m30.413619613s ago: executing program 1 (id=1699): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x10, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x88}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2a, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) 2m30.382607211s ago: executing program 4 (id=1700): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=ANY=[@ANYBLOB="170000001500010029bd7000fedbdf252d"], 0x18}}, 0x20000000) 2m29.945123585s ago: executing program 3 (id=1703): prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) 2m29.944199494s ago: executing program 4 (id=1704): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002000)=ANY=[@ANYBLOB="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"], 0x1608}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2m29.917866788s ago: executing program 0 (id=1705): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB="200000006d0001002abd8200fbdb912551a786201c3d"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) 2m29.916342439s ago: executing program 1 (id=1706): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='decodes n'], 0xd) 2m29.522875322s ago: executing program 1 (id=1707): r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000004a00010000000000000000000a008000", @ANYRES32=r0, @ANYBLOB="00000000140001"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2m29.474900608s ago: executing program 3 (id=1709): r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000340)={0x2, 0xfff, 0x8007, 0x2, 0x100, 0x80, 0x408200, 0x2007}, 0x20) 2m29.474830121s ago: executing program 0 (id=1710): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) 2m29.031512019s ago: executing program 0 (id=1711): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c00098008000140ff"], 0x90}}, 0x0) 2m29.010000465s ago: executing program 1 (id=1712): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="4daa000000000000791098000000000018090000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, 0xffffffffffffffff, 0x18, 0x0, @val=@netkit={@void, @value=r0}}, 0x1c) 2m28.979052255s ago: executing program 3 (id=1714): r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000280)) 2m28.559298651s ago: executing program 1 (id=1716): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="140000004e0025000307f4f9002304000aa6c504", 0x14) 2m28.348070919s ago: executing program 1 (id=1718): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) io_setup(0x5, &(0x7f0000000080)) 2m27.143055026s ago: executing program 2 (id=1723): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x25, 0x1, 0xfffffffd, 0x0, {0x2, 0x2}}, 0x14}}, 0x20000090) 2m27.087734014s ago: executing program 2 (id=1724): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0) write$sequencer(r0, &(0x7f0000000080)=[@t={0x81, 0x4, 0x10}], 0x8) 2m26.965829713s ago: executing program 2 (id=1725): r0 = openat$smackfs_ipv6host(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$smackfs_ipv6host(r0, 0x0, 0xb1) 2m26.86480659s ago: executing program 2 (id=1726): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x9c}}, 0x0) 2m26.726914969s ago: executing program 2 (id=1727): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x18, {0xa, 0x4e20, 0x9c000000, @ipv4={'\x00', '\xff\xff', @remote}, 0x1df}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x10, 0x110, 0x1, "dc"}], 0x10}, 0x40) 2m14.035529159s ago: executing program 2 (id=1728): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_key={0x2, 0x8, 0x10, 0x0, '4-'}]}, 0x60}, 0x1, 0x7}, 0x0) 2m12.716027505s ago: executing program 32 (id=1711): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c00098008000140ff"], 0x90}}, 0x0) 2m6.875412713s ago: executing program 33 (id=1704): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002000)=ANY=[@ANYBLOB="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"], 0x1608}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1m29.384603037s ago: executing program 34 (id=1718): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) io_setup(0x5, &(0x7f0000000080)) 1m18.163121192s ago: executing program 35 (id=1714): r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000280)) 32.11736583s ago: executing program 5 (id=1729): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) pwritev(r0, &(0x7f00000000c0), 0x300, 0x0, 0x0) 0s ago: executing program 36 (id=1728): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_key={0x2, 0x8, 0x10, 0x0, '4-'}]}, 0x60}, 0x1, 0x7}, 0x0) kernel console output (not intermixed with test programs): ig 0 has no interface number 0 [ 127.909562][ T5942] usb 1-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 127.922445][ T5942] usb 1-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 127.922475][ T5942] usb 1-1: New USB device strings: Mfr=32, Product=0, SerialNumber=0 [ 127.922494][ T5942] usb 1-1: Manufacturer: syz [ 127.977358][ T5852] usb 4-1: Using ep0 maxpacket: 16 [ 127.983270][ T37] audit: type=1326 audit(1759086076.289:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6626 comm="syz.2.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5bd1ceec9 code=0x7ffc0000 [ 127.985642][ T5852] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 127.985670][ T5852] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.985689][ T5852] usb 4-1: Product: syz [ 127.985704][ T5852] usb 4-1: Manufacturer: syz [ 127.985717][ T5852] usb 4-1: SerialNumber: syz [ 127.989948][ T37] audit: type=1326 audit(1759086076.299:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6626 comm="syz.2.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7fb5bd1ceec9 code=0x7ffc0000 [ 127.989993][ T37] audit: type=1326 audit(1759086076.299:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6626 comm="syz.2.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5bd1ceec9 code=0x7ffc0000 [ 127.990030][ T37] audit: type=1326 audit(1759086076.299:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6626 comm="syz.2.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5bd1ceec9 code=0x7ffc0000 [ 128.014883][ T5942] usb 1-1: config 0 descriptor?? [ 128.139160][ T5852] usb 4-1: config 0 descriptor?? [ 128.173361][ T5942] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.120/input/input10 [ 128.199680][ T5852] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 128.279342][ T5942] usb 1-1: USB disconnect, device number 8 [ 128.377558][ T5852] usb 4-1: clie_3_5_startup: get config number bad return length: 0 [ 128.377711][ T5852] visor 4-1:0.0: probe with driver visor failed with error -5 [ 128.619221][ T9] usb 4-1: USB disconnect, device number 3 [ 128.728878][ T5847] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 128.728977][ T5847] Bluetooth: hci1: Injecting HCI hardware error event [ 128.731788][ T5847] Bluetooth: hci1: hardware error 0x00 [ 129.110410][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 129.170342][ T6657] netlink: 'syz.0.333': attribute type 5 has an invalid length. [ 129.193130][ T6657] ip6erspan0: entered promiscuous mode [ 129.265972][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 129.279390][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 129.279419][ T9] usb 3-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 129.279437][ T9] usb 3-1: Product: syz [ 129.279451][ T9] usb 3-1: Manufacturer: syz [ 129.279463][ T9] usb 3-1: SerialNumber: syz [ 129.320155][ T9] usb 3-1: config 0 descriptor?? [ 129.344383][ T9] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 129.778271][ T9] gspca_zc3xx: reg_r err -71 [ 129.778361][ T9] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 129.796087][ T9] usb 3-1: USB disconnect, device number 4 [ 130.378993][ T6686] netlink: 'syz.3.347': attribute type 3 has an invalid length. [ 131.056442][ T5847] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 131.226208][ T6712] program syz.4.359 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.456481][ T5930] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 132.566100][ T5942] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 132.612231][ T5930] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 132.612260][ T5930] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 132.612278][ T5930] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 132.612329][ T5930] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12592, setting to 64 [ 132.614561][ T5930] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 132.614586][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 132.614605][ T5930] usb 2-1: Product: syz [ 132.614618][ T5930] usb 2-1: Manufacturer: syz [ 132.625118][ T6743] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 132.647242][ T5930] cdc_wdm 2-1:1.0: skipping garbage [ 132.647261][ T5930] cdc_wdm 2-1:1.0: skipping garbage [ 132.653074][ T5930] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 132.653093][ T5930] cdc_wdm 2-1:1.0: Unknown control protocol [ 132.718473][ T5942] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.718499][ T5942] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 132.718548][ T5942] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 132.729180][ T5942] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 132.729207][ T5942] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.729225][ T5942] usb 5-1: Product: syz [ 132.729238][ T5942] usb 5-1: Manufacturer: syz [ 132.729251][ T5942] usb 5-1: SerialNumber: syz [ 132.788844][ T5942] cdc_ncm 5-1:1.0: invalid descriptor buffer length [ 132.788870][ T5942] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 132.788911][ T5942] cdc_ncm 5-1:1.0: bind() failure [ 132.823543][ T6759] netlink: 180 bytes leftover after parsing attributes in process `syz.2.384'. [ 132.823984][ T6759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.384'. [ 132.871898][ T5942] usb 2-1: USB disconnect, device number 5 [ 132.894986][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.895055][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.034335][ T1239] usb 5-1: USB disconnect, device number 4 [ 133.829593][ T6764] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 133.829758][ T6764] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 133.969915][ T6764] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 134.174395][ T6764] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 134.175013][ T6764] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 134.457845][ T6764] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 134.685935][ T6764] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 134.686054][ T6764] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 134.842031][ T6764] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 134.923689][ T6813] netlink: 24 bytes leftover after parsing attributes in process `syz.2.410'. [ 134.954712][ T6764] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 134.954826][ T6764] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 135.126311][ T5847] Bluetooth: hci0: command 0x0c1a tx timeout [ 135.159298][ T6764] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 136.182923][ T6848] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 136.251302][ T5847] Bluetooth: hci2: command 0x0c1a tx timeout [ 136.459696][ T6861] netlink: 'syz.0.435': attribute type 2 has an invalid length. [ 136.495376][ T6864] trusted_key: encrypted_key: master key parameter is missing [ 136.732476][ T5847] Bluetooth: hci3: command 0x0c1a tx timeout [ 136.970081][ T5847] Bluetooth: hci4: command 0x0c1a tx timeout [ 137.156186][ T37] audit: type=1326 audit(1759086085.449:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6885 comm="syz.1.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42a155eec9 code=0x7ffc0000 [ 137.156233][ T37] audit: type=1326 audit(1759086085.449:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6885 comm="syz.1.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42a155eec9 code=0x7ffc0000 [ 137.159215][ T37] audit: type=1326 audit(1759086085.469:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6885 comm="syz.1.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f42a155eec9 code=0x7ffc0000 [ 137.159260][ T37] audit: type=1326 audit(1759086085.469:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6885 comm="syz.1.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42a155eec9 code=0x7ffc0000 [ 137.159299][ T37] audit: type=1326 audit(1759086085.469:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6885 comm="syz.1.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42a155eec9 code=0x7ffc0000 [ 137.208251][ T5847] Bluetooth: hci0: command 0x0c1a tx timeout [ 137.488963][ T6897] netlink: 'syz.3.455': attribute type 3 has an invalid length. [ 137.488983][ T6897] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.455'. [ 137.726955][ T6908] netlink: 12 bytes leftover after parsing attributes in process `syz.0.458'. [ 138.084451][ T6920] 9p: Unknown access argument `: -22 [ 138.250474][ T37] audit: type=1326 audit(1759086086.559:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6925 comm="syz.4.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a9114eec9 code=0x7ffc0000 [ 138.256127][ T37] audit: type=1326 audit(1759086086.559:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6925 comm="syz.4.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a9114eec9 code=0x7ffc0000 [ 138.285465][ T37] audit: type=1326 audit(1759086086.589:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6925 comm="syz.4.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f7a9114eec9 code=0x7ffc0000 [ 138.285515][ T37] audit: type=1326 audit(1759086086.589:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6925 comm="syz.4.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a9114eec9 code=0x7ffc0000 [ 138.285553][ T37] audit: type=1326 audit(1759086086.589:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6925 comm="syz.4.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a9114eec9 code=0x7ffc0000 [ 138.326040][ T5847] Bluetooth: hci2: command 0x0c1a tx timeout [ 138.580733][ T6936] netlink: 68 bytes leftover after parsing attributes in process `syz.3.471'. [ 138.806089][ T5847] Bluetooth: hci3: command 0x0c1a tx timeout [ 139.002656][ T6949] ieee802154 phy0 wpan0: encryption failed: -22 [ 139.047511][ T5847] Bluetooth: hci4: command 0x0c1a tx timeout [ 139.166243][ T6957] netlink: 56 bytes leftover after parsing attributes in process `syz.1.480'. [ 139.290307][ T5847] Bluetooth: hci0: command 0x0c1a tx timeout [ 139.379772][ T6960] netlink: 'syz.1.484': attribute type 1 has an invalid length. [ 139.379792][ T6960] netlink: 'syz.1.484': attribute type 1 has an invalid length. [ 139.473126][ T6965] overlayfs: missing 'lowerdir' [ 139.780815][ T6975] bridge_slave_1: left allmulticast mode [ 139.780845][ T6975] bridge_slave_1: left promiscuous mode [ 139.785627][ T6975] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.805406][ T6978] netlink: 'syz.0.493': attribute type 21 has an invalid length. [ 139.902989][ T6975] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 139.903169][ T6978] netlink: 156 bytes leftover after parsing attributes in process `syz.0.493'. [ 139.933326][ T44] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 140.089372][ T44] usb 2-1: unable to get BOS descriptor or descriptor too short [ 140.091097][ T44] usb 2-1: not running at top speed; connect to a high speed hub [ 140.092610][ T44] usb 2-1: config 12 has an invalid interface number: 187 but max is 0 [ 140.092635][ T44] usb 2-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 140.092653][ T44] usb 2-1: config 12 has no interface number 0 [ 140.092700][ T44] usb 2-1: config 12 interface 187 altsetting 64 endpoint 0xA has invalid wMaxPacketSize 0 [ 140.092722][ T44] usb 2-1: config 12 interface 187 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 140.092748][ T44] usb 2-1: config 12 interface 187 has no altsetting 0 [ 140.095648][ T44] usb 2-1: config 12 has an invalid interface number: 187 but max is 0 [ 140.095672][ T44] usb 2-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 140.095690][ T44] usb 2-1: config 12 has no interface number 0 [ 140.095736][ T44] usb 2-1: config 12 interface 187 altsetting 64 endpoint 0xA has invalid wMaxPacketSize 0 [ 140.095758][ T44] usb 2-1: config 12 interface 187 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 140.095784][ T44] usb 2-1: config 12 interface 187 has no altsetting 0 [ 140.109685][ T44] usb 2-1: config 12 has an invalid interface number: 187 but max is 0 [ 140.109712][ T44] usb 2-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 140.109730][ T44] usb 2-1: config 12 has no interface number 0 [ 140.109773][ T44] usb 2-1: config 12 interface 187 altsetting 64 endpoint 0xA has invalid wMaxPacketSize 0 [ 140.109795][ T44] usb 2-1: config 12 interface 187 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 140.109820][ T44] usb 2-1: config 12 interface 187 has no altsetting 0 [ 140.112043][ T44] usb 2-1: config 12 has an invalid interface number: 187 but max is 0 [ 140.112065][ T44] usb 2-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 140.112083][ T44] usb 2-1: config 12 has no interface number 0 [ 140.112126][ T44] usb 2-1: config 12 interface 187 altsetting 64 endpoint 0xA has invalid wMaxPacketSize 0 [ 140.112146][ T44] usb 2-1: config 12 interface 187 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 140.112171][ T44] usb 2-1: config 12 interface 187 has no altsetting 0 [ 140.123861][ T44] usb 2-1: config 12 has an invalid interface number: 187 but max is 0 [ 140.123887][ T44] usb 2-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 140.123905][ T44] usb 2-1: config 12 has no interface number 0 [ 140.123961][ T44] usb 2-1: config 12 interface 187 altsetting 64 endpoint 0xA has invalid wMaxPacketSize 0 [ 140.123982][ T44] usb 2-1: config 12 interface 187 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 140.124007][ T44] usb 2-1: config 12 interface 187 has no altsetting 0 [ 140.194120][ T44] usb 2-1: config 12 has an invalid interface number: 187 but max is 0 [ 140.194146][ T44] usb 2-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 140.194164][ T44] usb 2-1: config 12 has no interface number 0 [ 140.194207][ T44] usb 2-1: config 12 interface 187 altsetting 64 endpoint 0xA has invalid wMaxPacketSize 0 [ 140.194229][ T44] usb 2-1: config 12 interface 187 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 140.194254][ T44] usb 2-1: config 12 interface 187 has no altsetting 0 [ 140.199849][ T44] usb 2-1: config 12 has an invalid interface number: 187 but max is 0 [ 140.199873][ T44] usb 2-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 140.199891][ T44] usb 2-1: config 12 has no interface number 0 [ 140.199935][ T44] usb 2-1: config 12 interface 187 altsetting 64 endpoint 0xA has invalid wMaxPacketSize 0 [ 140.199966][ T44] usb 2-1: config 12 interface 187 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 140.199991][ T44] usb 2-1: config 12 interface 187 has no altsetting 0 [ 140.206494][ T44] usb 2-1: New USB device found, idVendor=110a, idProduct=1130, bcdDevice=4e.fa [ 140.206521][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.206539][ T44] usb 2-1: Product: syz [ 140.206552][ T44] usb 2-1: Manufacturer: syz [ 140.206565][ T44] usb 2-1: SerialNumber: syz [ 140.295980][ T6988] netlink: 'syz.4.497': attribute type 10 has an invalid length. [ 140.351181][ T6988] team0: Device ipvlan1 failed to register rx_handler [ 140.406089][ T5847] Bluetooth: hci2: command 0x0c1a tx timeout [ 140.659500][ T44] ti_usb_3410_5052 2-1:12.187: TI USB 3410 1 port adapter converter detected [ 140.659699][ T44] ti_usb_3410_5052 2-1:12.187: missing endpoints [ 140.718509][ T44] usb 2-1: USB disconnect, device number 6 [ 140.789944][ T6997] 9pnet_fd: Insufficient options for proto=fd [ 140.902611][ T5847] Bluetooth: hci3: command 0x0c1a tx timeout [ 141.126009][ T5847] Bluetooth: hci4: command 0x0c1a tx timeout [ 141.241322][ T7014] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 141.915122][ T7039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.522'. [ 142.088209][ T7041] overlayfs: failed to resolve 'smackfsdef=&:': -2 [ 142.370719][ T7044] 8021q: adding VLAN 0 to HW filter on device bond1 [ 142.557402][ T7060] libceph: resolve '4' (ret=-3): failed [ 142.940818][ T7075] binder: 7072:7075 ioctl c018620c 0 returned -14 [ 143.214036][ T7086] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 143.214052][ T7086] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 143.214065][ T7086] overlayfs: missing 'lowerdir' [ 144.256048][ T1239] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 144.416008][ T1239] usb 1-1: Using ep0 maxpacket: 16 [ 144.420978][ T1239] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 144.421005][ T1239] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.421021][ T1239] usb 1-1: Product: syz [ 144.421033][ T1239] usb 1-1: Manufacturer: syz [ 144.421046][ T1239] usb 1-1: SerialNumber: syz [ 144.448411][ T1239] usb 1-1: config 0 descriptor?? [ 144.701882][ T1239] speedtch 1-1:0.0: speedtch_bind: data interface not found! [ 144.701910][ T1239] speedtch 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 144.833390][ T7133] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 144.846681][ T7132] netlink: 'syz.2.568': attribute type 3 has an invalid length. [ 144.903518][ T1239] usb 1-1: USB disconnect, device number 9 [ 144.913519][ T7137] openvswitch: netlink: Flow key attribute not present in set flow. [ 145.256134][ T5930] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 145.418117][ T5930] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 145.418146][ T5930] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.419651][ T5930] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 145.419677][ T5930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 145.419696][ T5930] usb 3-1: SerialNumber: syz [ 145.543799][ T5930] cdc_ether 3-1:1.0: skipping garbage [ 145.544055][ T5930] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 145.544740][ T5930] usb-storage 3-1:1.0: USB Mass Storage device detected [ 145.628608][ T5930] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 145.843192][ T5930] usb 3-1: USB disconnect, device number 5 [ 146.407958][ T7184] netlink: 'syz.1.592': attribute type 21 has an invalid length. [ 146.408024][ T7184] netlink: 'syz.1.592': attribute type 6 has an invalid length. [ 146.408037][ T7184] netlink: 132 bytes leftover after parsing attributes in process `syz.1.592'. [ 146.999290][ T7205] binder: 7203:7205 ioctl 40046210 0 returned -14 [ 147.509076][ T7221] gfs2: error -5 reading superblock [ 147.996094][ T1239] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 148.158229][ T1239] usb 1-1: Using ep0 maxpacket: 16 [ 148.163213][ T1239] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 148.163246][ T1239] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 148.205012][ T1239] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 148.205041][ T1239] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.205060][ T1239] usb 1-1: Product: syz [ 148.205074][ T1239] usb 1-1: Manufacturer: syz [ 148.205087][ T1239] usb 1-1: SerialNumber: syz [ 148.348939][ T7250] netlink: 'syz.1.624': attribute type 8 has an invalid length. [ 148.458387][ T1239] usb 1-1: 0:2 : does not exist [ 148.458499][ T1239] usb 1-1: unit 9 not found! [ 148.500440][ T1239] usb 1-1: 4:0: cannot get min/max values for control 3 (id 4) [ 148.516603][ T1239] usb 1-1: 4:0: cannot get min/max values for control 4 (id 4) [ 148.521581][ T1239] usb 1-1: 4:0: cannot get min/max values for control 6 (id 4) [ 148.561596][ T1239] usb 1-1: USB disconnect, device number 10 [ 148.562960][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 148.562974][ T37] audit: type=1326 audit(1759086096.869:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7254 comm="syz.2.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5bd1ceec9 code=0x7ffc0000 [ 148.565783][ T37] audit: type=1326 audit(1759086096.869:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7254 comm="syz.2.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5bd1ceec9 code=0x7ffc0000 [ 148.646001][ T37] audit: type=1326 audit(1759086096.949:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7254 comm="syz.2.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7fb5bd1ceec9 code=0x7ffc0000 [ 148.646368][ T37] audit: type=1326 audit(1759086096.959:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7254 comm="syz.2.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5bd1ceec9 code=0x7ffc0000 [ 148.646417][ T37] audit: type=1326 audit(1759086096.959:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7254 comm="syz.2.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5bd1ceec9 code=0x7ffc0000 [ 148.894335][ T5897] udevd[5897]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 148.950367][ T7265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.632'. [ 149.252439][ T7274] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 149.596378][ T7284] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 150.111482][ T7306] capability: warning: `syz.4.653' uses deprecated v2 capabilities in a way that may be insecure [ 150.386030][ T37] audit: type=1326 audit(1759086098.689:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7315 comm="syz.4.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a9114eec9 code=0x7ffc0000 [ 150.394946][ T37] audit: type=1326 audit(1759086098.699:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7315 comm="syz.4.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a9114eec9 code=0x7ffc0000 [ 150.446835][ T37] audit: type=1326 audit(1759086098.759:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7315 comm="syz.4.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f7a9114eec9 code=0x7ffc0000 [ 150.447106][ T37] audit: type=1326 audit(1759086098.759:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7315 comm="syz.4.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a9114eec9 code=0x7ffc0000 [ 150.447503][ T37] audit: type=1326 audit(1759086098.759:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7315 comm="syz.4.659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a9114eec9 code=0x7ffc0000 [ 150.761465][ T7329] netlink: 11 bytes leftover after parsing attributes in process `syz.1.663'. [ 151.021702][ T7339] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 151.021728][ T7339] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 152.352821][ T7388] netlink: 'syz.2.694': attribute type 1 has an invalid length. [ 152.508919][ T31] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 152.658880][ T31] usb 5-1: config 0 has an invalid interface number: 231 but max is 0 [ 152.658906][ T31] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.658924][ T31] usb 5-1: config 0 has no interface number 0 [ 152.658969][ T31] usb 5-1: config 0 interface 231 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 152.658995][ T31] usb 5-1: config 0 interface 231 has no altsetting 0 [ 152.667287][ T31] usb 5-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=21.78 [ 152.667314][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.667332][ T31] usb 5-1: Product: syz [ 152.667345][ T31] usb 5-1: Manufacturer: syz [ 152.667358][ T31] usb 5-1: SerialNumber: syz [ 152.710989][ T31] usb 5-1: config 0 descriptor?? [ 152.982173][ T31] asix 5-1:0.231 (unnamed net_device) (uninitialized): invalid hw address, using random [ 153.182005][ T31] asix 5-1:0.231 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 153.182033][ T31] asix 5-1:0.231 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 153.182300][ T31] asix 5-1:0.231: probe with driver asix failed with error -71 [ 153.229775][ T5852] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 153.263841][ T31] usb 5-1: USB disconnect, device number 5 [ 153.378053][ T5852] usb 2-1: config 0 has an invalid interface number: 156 but max is 0 [ 153.378082][ T5852] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.378100][ T5852] usb 2-1: config 0 has no interface number 0 [ 153.378145][ T5852] usb 2-1: config 0 interface 156 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 153.378187][ T5852] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice=d6.b9 [ 153.378209][ T5852] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.471033][ T5852] usb 2-1: config 0 descriptor?? [ 153.495168][ T5852] gspca_main: spca561-2.14.0 probing abcd:cdee [ 153.693528][ T5852] spca561 2-1:0.156: probe with driver spca561 failed with error -22 [ 153.695150][ T5852] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 153.695204][ T5852] usb 2-1: MIDIStreaming interface descriptor not found [ 153.736025][ T5930] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 153.906071][ T5930] usb 4-1: Using ep0 maxpacket: 16 [ 153.921467][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 153.921492][ T5930] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 153.921515][ T5930] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x6B, changing to 0xB [ 153.921537][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 153.921562][ T5930] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 153.929429][ T5930] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 153.929457][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 153.929476][ T5930] usb 4-1: Product: syz [ 153.929489][ T5930] usb 4-1: Manufacturer: syz [ 153.929502][ T5930] usb 4-1: SerialNumber: syz [ 153.979326][ T5852] usb 2-1: USB disconnect, device number 7 [ 154.031301][ T5930] usb 4-1: config 0 descriptor?? [ 154.042997][ T5930] usb 4-1: NFC: intf ffff88802a48f000 id ffffffff8e2e64a0 [ 154.264888][ T31] usb 4-1: USB disconnect, device number 4 [ 154.926920][ T7451] netlink: 8 bytes leftover after parsing attributes in process `syz.4.721'. [ 154.993121][ T7454] netlink: 24 bytes leftover after parsing attributes in process `syz.3.722'. [ 154.993150][ T7454] netlink: 24 bytes leftover after parsing attributes in process `syz.3.722'. [ 155.538917][ T7477] netlink: 8 bytes leftover after parsing attributes in process `syz.4.732'. [ 155.550296][ T7476] ieee802154 phy0 wpan0: encryption failed: -22 [ 156.146364][ T7495] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 156.146380][ T7495] IPv6: NLM_F_CREATE should be set when creating new route [ 156.146486][ T7495] IPv6: NLM_F_CREATE should be set when creating new route [ 156.355976][ T37] audit: type=1326 audit(1759086104.659:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7501 comm="syz.3.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07b1deec9 code=0x7ffc0000 [ 156.356179][ T37] audit: type=1326 audit(1759086104.669:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7501 comm="syz.3.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07b1deec9 code=0x7ffc0000 [ 156.425615][ T37] audit: type=1326 audit(1759086104.729:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7501 comm="syz.3.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fa07b1deec9 code=0x7ffc0000 [ 156.425662][ T37] audit: type=1326 audit(1759086104.729:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7501 comm="syz.3.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07b1deec9 code=0x7ffc0000 [ 156.425697][ T37] audit: type=1326 audit(1759086104.729:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7501 comm="syz.3.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa07b1deec9 code=0x7ffc0000 [ 157.531955][ T7545] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 4, id = 0 [ 157.850646][ T5930] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 157.998793][ T5930] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 157.998848][ T5930] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 157.998870][ T5930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.058619][ T5930] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 158.184537][ T7571] netlink: 4 bytes leftover after parsing attributes in process `syz.2.778'. [ 158.396287][ T7579] netlink: 1 bytes leftover after parsing attributes in process `syz.2.783'. [ 158.556078][ T31] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 158.614696][ T5847] Bluetooth: hci0: unexpected event for opcode 0x203e [ 158.706036][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 158.708325][ T31] usb 4-1: config 4 has an invalid interface number: 51 but max is 0 [ 158.708351][ T31] usb 4-1: config 4 has no interface number 0 [ 158.708398][ T31] usb 4-1: config 4 interface 51 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16 [ 158.708423][ T31] usb 4-1: config 4 interface 51 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 158.708446][ T31] usb 4-1: config 4 interface 51 has no altsetting 0 [ 158.712551][ T31] usb 4-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 158.712579][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.712597][ T31] usb 4-1: Product: syz [ 158.712610][ T31] usb 4-1: Manufacturer: syz [ 158.712623][ T31] usb 4-1: SerialNumber: syz [ 158.805567][ T7575] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 158.805685][ T7575] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 159.060935][ T7575] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 159.061093][ T7575] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 159.131268][ T5930] stv0680 2-1:4.0: STV(e): camera ping failed!! [ 159.157941][ T31] cdc_eem 4-1:4.51 usb0: register 'cdc_eem' at usb-dummy_hcd.3-1, CDC EEM Device, 2a:71:84:a5:ab:23 [ 159.284286][ T31] usb 4-1: USB disconnect, device number 5 [ 159.302109][ T31] cdc_eem 4-1:4.51 usb0: unregister 'cdc_eem' usb-dummy_hcd.3-1, CDC EEM Device [ 159.341405][ T5930] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 159.341429][ T5930] stv0680 2-1:4.0: last error: 0, command = 0x0 [ 159.385584][ T5930] usb 2-1: USB disconnect, device number 8 [ 160.206267][ T7626] netlink: 'syz.2.807': attribute type 1 has an invalid length. [ 161.454271][ T7676] netlink: 8 bytes leftover after parsing attributes in process `syz.4.830'. [ 161.899067][ T7695] netlink: 60 bytes leftover after parsing attributes in process `syz.1.840'. [ 163.894229][ T7775] netlink: 5 bytes leftover after parsing attributes in process `syz.4.862'. [ 163.894464][ T7775] 0ªX¹¦D: renamed from gretap0 (while UP) [ 163.963147][ T7775] 0ªX¹¦D: entered allmulticast mode [ 163.963799][ T7775] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 164.676743][ T7791] program syz.4.869 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 165.886010][ T31] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 166.045966][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 166.051465][ T31] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 166.051494][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.051512][ T31] usb 4-1: Product: syz [ 166.051592][ T31] usb 4-1: Manufacturer: syz [ 166.051606][ T31] usb 4-1: SerialNumber: syz [ 166.119648][ T31] r8152-cfgselector 4-1: Unknown version 0x0000 [ 166.119672][ T31] r8152-cfgselector 4-1: config 0 descriptor?? [ 166.621044][ T5930] r8152-cfgselector 4-1: USB disconnect, device number 6 [ 167.026505][ T7866] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 167.123438][ T7871] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 167.166816][ T7872] netlink: 4 bytes leftover after parsing attributes in process `syz.1.910'. [ 167.913168][ T7902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.924'. [ 168.176495][ T7910] netlink: 'syz.2.928': attribute type 13 has an invalid length. [ 168.479802][ T7922] netlink: 'syz.1.934': attribute type 9 has an invalid length. [ 168.662810][ T7930] netlink: 'syz.3.939': attribute type 21 has an invalid length. [ 168.662832][ T7930] netlink: 128 bytes leftover after parsing attributes in process `syz.3.939'. [ 168.731053][ T7930] netlink: 'syz.3.939': attribute type 5 has an invalid length. [ 168.731073][ T7930] netlink: 'syz.3.939': attribute type 6 has an invalid length. [ 168.731084][ T7930] netlink: 3 bytes leftover after parsing attributes in process `syz.3.939'. [ 168.952987][ T7938] netlink: 'syz.2.942': attribute type 3 has an invalid length. [ 168.953009][ T7938] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.942'. [ 169.832358][ T7972] usb usb8: usbfs: process 7972 (syz.4.959) did not claim interface 0 before use [ 170.220777][ T37] audit: type=1326 audit(1759086118.529:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7988 comm="syz.1.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42a155eec9 code=0x7ffc0000 [ 170.220827][ T37] audit: type=1326 audit(1759086118.529:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7988 comm="syz.1.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42a155eec9 code=0x7ffc0000 [ 170.220866][ T37] audit: type=1326 audit(1759086118.529:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7988 comm="syz.1.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42a155eec9 code=0x7ffc0000 [ 170.220904][ T37] audit: type=1326 audit(1759086118.529:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7988 comm="syz.1.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42a155eec9 code=0x7ffc0000 [ 170.235936][ T37] audit: type=1326 audit(1759086118.539:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7988 comm="syz.1.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=301 compat=0 ip=0x7f42a155eec9 code=0x7ffc0000 [ 170.236003][ T37] audit: type=1326 audit(1759086118.539:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7988 comm="syz.1.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42a155eec9 code=0x7ffc0000 [ 170.236042][ T37] audit: type=1326 audit(1759086118.539:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7988 comm="syz.1.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42a155eec9 code=0x7ffc0000 [ 170.236078][ T37] audit: type=1326 audit(1759086118.539:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7988 comm="syz.1.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42a155eec9 code=0x7ffc0000 [ 170.236113][ T37] audit: type=1326 audit(1759086118.539:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7988 comm="syz.1.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f42a155eec9 code=0x7ffc0000 [ 170.236149][ T37] audit: type=1326 audit(1759086118.539:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7988 comm="syz.1.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f42a155eec9 code=0x7ffc0000 [ 170.868559][ T8010] netlink: 52 bytes leftover after parsing attributes in process `syz.4.978'. [ 171.495729][ T8035] netlink: 'syz.0.991': attribute type 32 has an invalid length. [ 171.495748][ T8035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.991'. [ 171.513138][ T8035] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 172.048908][ T5852] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 172.150798][ T8059] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1001'. [ 172.150824][ T8059] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1001'. [ 172.150841][ T8059] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1001'. [ 172.196092][ T5852] usb 4-1: Using ep0 maxpacket: 8 [ 172.202372][ T5852] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=1b.21 [ 172.202402][ T5852] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.202421][ T5852] usb 4-1: Product: syz [ 172.202435][ T5852] usb 4-1: Manufacturer: syz [ 172.202448][ T5852] usb 4-1: SerialNumber: syz [ 172.264549][ T5852] usb 4-1: config 0 descriptor?? [ 172.293743][ T5852] usb_ehset_test 4-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 172.458681][ T8060] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 172.459203][ T8060] block device autoloading is deprecated and will be removed. [ 172.506339][ T8066] netlink: 'syz.1.1005': attribute type 10 has an invalid length. [ 172.599648][ T5930] usb 4-1: USB disconnect, device number 7 [ 172.846637][ T8077] netlink: 'syz.0.1011': attribute type 1 has an invalid length. [ 173.079640][ T8085] __nla_validate_parse: 2 callbacks suppressed [ 173.079661][ T8085] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1016'. [ 173.226093][ T977] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 173.378423][ T977] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 173.378451][ T977] usb 3-1: config 0 has no interface number 0 [ 173.378500][ T977] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 173.378521][ T977] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 173.378545][ T977] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 173.378569][ T977] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 173.378592][ T977] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 173.378614][ T977] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 173.378654][ T977] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 173.378676][ T977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.450808][ T977] usb 3-1: config 0 descriptor?? [ 173.452115][ T8080] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 173.452324][ T8080] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 173.519336][ T977] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 173.709424][ T5930] usb 3-1: USB disconnect, device number 6 [ 173.734896][ T5930] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 173.879309][ T8110] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1028'. [ 173.879333][ T8110] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1028'. [ 173.879348][ T8110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1028'. [ 174.180292][ T5852] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 174.283383][ T8123] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1033'. [ 174.283415][ T8123] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1033'. [ 174.336087][ T5852] usb 1-1: Using ep0 maxpacket: 8 [ 174.338384][ T5852] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 174.338410][ T5852] usb 1-1: config 0 has no interface number 0 [ 174.338459][ T5852] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 174.338481][ T5852] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 174.338501][ T5852] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 174.338523][ T5852] usb 1-1: config 0 interface 2 altsetting 0 has an endpoint descriptor with address 0x5F, changing to 0xF [ 174.338547][ T5852] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0xF has invalid maxpacket 28271, setting to 1024 [ 174.338572][ T5852] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 174.359154][ T5852] usb 1-1: New USB device found, idVendor=05da, idProduct=0099, bcdDevice=d5.82 [ 174.359183][ T5852] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.359201][ T5852] usb 1-1: Product: syz [ 174.359215][ T5852] usb 1-1: Manufacturer: syz [ 174.359229][ T5852] usb 1-1: SerialNumber: syz [ 174.438068][ T5852] usb 1-1: config 0 descriptor?? [ 174.439062][ T8112] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 174.501980][ T8128] netlink: 'syz.3.1036': attribute type 3 has an invalid length. [ 174.502000][ T8128] netlink: 'syz.3.1036': attribute type 1 has an invalid length. [ 174.502013][ T8128] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1036'. [ 174.502043][ T8128] NCSI netlink: No device for ifindex 33022 [ 174.648814][ T5852] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 2 is not bulk. [ 174.648880][ T5852] microtek usb (rev 0.4.3): can only deal with one output endpoints. Bailing out. [ 174.686512][ T5852] usb 1-1: USB disconnect, device number 11 [ 174.878969][ T8138] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1041'. [ 175.142319][ T8144] mac80211_hwsim hwsim2 €: renamed from wlan0 (while UP) [ 175.142974][ T8143] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1042'. [ 176.033133][ T8159] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 177.176070][ T44] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 177.327405][ T44] usb 5-1: Using ep0 maxpacket: 16 [ 177.329756][ T44] usb 5-1: config 0 has an invalid interface number: 126 but max is 0 [ 177.329782][ T44] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.329800][ T44] usb 5-1: config 0 has no interface number 0 [ 177.329850][ T44] usb 5-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 177.329875][ T44] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 177.329902][ T44] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 177.329927][ T44] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid maxpacket 2053, setting to 1024 [ 177.329951][ T44] usb 5-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 177.329973][ T44] usb 5-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 177.330014][ T44] usb 5-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 177.330034][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.468046][ T44] usb 5-1: config 0 descriptor?? [ 177.469100][ T8193] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 177.469546][ T8193] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 177.475637][ T44] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 177.686097][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 177.707377][ T5930] usb 5-1: USB disconnect, device number 6 [ 177.776055][ T977] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 177.784044][ T8219] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 177.847245][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 177.852845][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.852869][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 177.852919][ T9] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 177.852944][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 100, changing to 10 [ 177.852969][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 24936, setting to 1024 [ 177.853010][ T9] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 177.853031][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.931860][ T977] usb 4-1: too many endpoints for config 0 interface 0 altsetting 255: 255, using maximum allowed: 30 [ 177.931902][ T977] usb 4-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 177.931928][ T977] usb 4-1: config 0 interface 0 has no altsetting 0 [ 177.936119][ T977] usb 4-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=da.8e [ 177.936146][ T977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.936165][ T977] usb 4-1: Product: syz [ 177.936178][ T977] usb 4-1: Manufacturer: syz [ 177.936191][ T977] usb 4-1: SerialNumber: syz [ 178.016361][ T5942] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 178.070890][ T977] usb 4-1: config 0 descriptor?? [ 178.080340][ T977] hub 4-1:0.0: bad descriptor, ignoring hub [ 178.080377][ T977] hub 4-1:0.0: probe with driver hub failed with error -5 [ 178.133874][ T977] usbsevseg 4-1:0.0: USB 7 Segment device now attached [ 178.153925][ T9] hub 3-1:1.0: bad descriptor, ignoring hub [ 178.153965][ T9] hub 3-1:1.0: probe with driver hub failed with error -5 [ 178.159179][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 178.159198][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 178.159295][ T9] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 178.199165][ T5942] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 178.199224][ T5942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24933, setting to 1024 [ 178.199249][ T5942] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 178.204061][ T5942] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 178.204089][ T5942] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 178.204108][ T5942] usb 2-1: Manufacturer: syz [ 178.308395][ T977] usb 4-1: USB disconnect, device number 8 [ 178.317220][ T9] usb 3-1: USB disconnect, device number 7 [ 178.356495][ T5942] usb 2-1: config 0 descriptor?? [ 178.357605][ T8215] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 178.370318][ T977] usbsevseg 4-1:0.0: USB 7 Segment now disconnected [ 178.418705][ T5942] igorplugusb 2-1:0.0: endpoint incorrect [ 178.582359][ T44] usb 2-1: USB disconnect, device number 9 [ 178.683232][ T8232] ÿ: renamed from bond_slave_0 (while UP) [ 178.780210][ T8236] misc userio: The device must be registered before sending interrupts [ 180.158962][ T8281] dlm: no locking on control device [ 180.246757][ T31] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 180.400206][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 180.404216][ T31] usb 4-1: config 2 has an invalid interface number: 31 but max is 0 [ 180.404242][ T31] usb 4-1: config 2 has no interface number 0 [ 180.404289][ T31] usb 4-1: config 2 interface 31 has no altsetting 0 [ 180.435310][ T31] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 180.435338][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.435357][ T31] usb 4-1: Product: syz [ 180.435370][ T31] usb 4-1: Manufacturer: syz [ 180.435383][ T31] usb 4-1: SerialNumber: syz [ 180.716104][ T8302] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1121'. [ 180.965851][ T31] ch9200 4-1:2.31: probe with driver ch9200 failed with error -22 [ 180.995692][ T31] usb 4-1: USB disconnect, device number 9 [ 181.621629][ T8326] deleting an unspecified loop device is not supported. [ 182.196093][ T977] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 182.317912][ T8350] binder: binder_mmap: 8348 200000000000-200000b36000 bad vm_flags failed -1 [ 182.348956][ T8355] 8021q: VLANs not supported on ip6tnl0 [ 182.359793][ T977] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 182.359820][ T977] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 182.359842][ T977] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 182.359862][ T977] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 182.359898][ T977] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 182.359918][ T977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.376663][ T977] usb 1-1: config 0 descriptor?? [ 182.607057][ T977] hdpvr 1-1:0.0: firmware version 0x8 dated [ 182.808673][ T977] hdpvr 1-1:0.0: device init failed [ 182.808765][ T977] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -12 [ 182.847214][ T977] usb 1-1: USB disconnect, device number 12 [ 183.038496][ T5852] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 183.212750][ T5852] usb 4-1: Using ep0 maxpacket: 32 [ 183.226833][ T5852] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 183.226859][ T5852] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.268052][ T5852] usb 4-1: config 0 descriptor?? [ 183.289109][ T5852] as10x_usb: device has been detected [ 183.290364][ T5852] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 183.409844][ T5852] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 183.503660][ T5852] as10x_usb: error during firmware upload part1 [ 183.524956][ T5852] Registered device nBox DVB-T Dongle [ 183.578323][ T5852] usb 4-1: USB disconnect, device number 10 [ 183.667299][ T5852] Unregistered device nBox DVB-T Dongle [ 183.675820][ T5852] as10x_usb: device has been disconnected [ 183.916111][ T977] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 184.101009][ T977] usb 3-1: Using ep0 maxpacket: 32 [ 184.111210][ T977] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 184.111235][ T977] usb 3-1: config 0 has no interface number 0 [ 184.111281][ T977] usb 3-1: config 0 interface 12 has no altsetting 0 [ 184.117784][ T977] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 184.117812][ T977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.117831][ T977] usb 3-1: Product: syz [ 184.117843][ T977] usb 3-1: Manufacturer: syz [ 184.117856][ T977] usb 3-1: SerialNumber: syz [ 184.123016][ T977] usb 3-1: config 0 descriptor?? [ 184.606283][ T6011] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 184.622641][ T977] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 184.622749][ T977] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 184.622765][ T977] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 184.624026][ T977] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 184.746358][ T977] usb 3-1: USB disconnect, device number 8 [ 184.922312][ T8412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1173'. [ 184.927943][ T6011] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 184.927973][ T6011] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 184.963001][ T6011] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 184.963038][ T6011] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.963057][ T6011] usb 2-1: Product: syz [ 184.963070][ T6011] usb 2-1: Manufacturer: syz [ 184.963084][ T6011] usb 2-1: SerialNumber: syz [ 185.017054][ T6011] usb 2-1: config 0 descriptor?? [ 185.025360][ T8398] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 185.025485][ T8398] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 185.329168][ T8398] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 185.331293][ T8398] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 185.622301][ T6011] Error reading MAC address [ 185.667554][ T6011] usb 2-1: USB disconnect, device number 10 [ 186.049138][ T8434] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1183'. [ 187.192623][ T8472] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1202'. [ 187.316372][ T8475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1201'. [ 188.057730][ T8495] netlink: 'syz.2.1213': attribute type 12 has an invalid length. [ 188.057752][ T8495] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1213'. [ 188.591010][ T8512] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1220'. [ 188.591346][ T8512] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1220'. [ 189.556032][ T31] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 189.708715][ T31] usb 1-1: config 6 has an invalid interface number: 57 but max is 0 [ 189.708741][ T31] usb 1-1: config 6 has no interface number 0 [ 189.708776][ T31] usb 1-1: config 6 interface 57 has no altsetting 0 [ 189.736074][ T31] usb 1-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 0.00 [ 189.736102][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.736119][ T31] usb 1-1: Product: syz [ 189.736132][ T31] usb 1-1: Manufacturer: syz [ 189.736146][ T31] usb 1-1: SerialNumber: syz [ 189.847818][ T8540] IPv6: Can't replace route, no match found [ 190.008945][ T31] usb-storage 1-1:6.57: USB Mass Storage device detected [ 190.214804][ T31] usb 1-1: USB disconnect, device number 13 [ 190.430283][ T44] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 190.588392][ T44] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.588417][ T44] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 190.591465][ T44] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 190.591491][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.591510][ T44] usb 5-1: Product: syz [ 190.591523][ T44] usb 5-1: Manufacturer: syz [ 190.591536][ T44] usb 5-1: SerialNumber: syz [ 190.851270][ T44] usb 5-1: 0:2 : does not exist [ 190.862226][ T44] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 190.915503][ T44] usb 5-1: USB disconnect, device number 7 [ 190.949443][ T8570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1249'. [ 190.949466][ T8570] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 191.017020][ T5897] udevd[5897]: setting mode of /dev/bus/usb/005/007 to 020664 failed: No such file or directory [ 191.017317][ T5897] udevd[5897]: setting owner of /dev/bus/usb/005/007 to uid=0, gid=0 failed: No such file or directory [ 191.083545][ T5897] udevd[5897]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 191.313882][ T8576] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1252'. [ 191.313909][ T8576] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1252'. [ 191.463623][ T8584] binder: 8583:8584 ioctl c018620c 200000000380 returned -22 [ 191.643007][ T8590] cifs: Unknown parameter 'no'‘a£Nð[G¶zob,erèèµ;%j¸¼ [ 191.643007][ T8590] ‡üzæ,€@q¬Ú÷ôÐåéJ#³"ŽÚh/.W1ȱ¨nNCº"†CÙ×ðÚ<“™+`# ÷Ž¢k²–' [ 192.249931][ T8608] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1268'. [ 192.716065][ T44] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 192.892347][ T44] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 192.892375][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.892394][ T44] usb 5-1: Product: syz [ 192.892407][ T44] usb 5-1: Manufacturer: syz [ 192.892421][ T44] usb 5-1: SerialNumber: syz [ 192.955276][ T44] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 193.027002][ T5852] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 193.456159][ T8650] program syz.1.1286 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 194.328436][ T8664] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1295'. [ 194.328466][ T8664] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1295'. [ 194.354359][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.354434][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.454418][ T5852] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 194.454999][ T5852] ath9k_htc: Failed to initialize the device [ 194.726550][ T8670] nfs4: Deprecated parameter 'intr' [ 195.129475][ T37] audit: type=1326 audit(1759086143.439:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8677 comm="syz.4.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a9114eec9 code=0x7ffc0000 [ 195.132722][ T37] audit: type=1326 audit(1759086143.439:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8677 comm="syz.4.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a9114eec9 code=0x7ffc0000 [ 195.212510][ T37] audit: type=1326 audit(1759086143.519:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8677 comm="syz.4.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7a9114d710 code=0x7ffc0000 [ 195.213488][ T37] audit: type=1326 audit(1759086143.519:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8677 comm="syz.4.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7a9114eacb code=0x7ffc0000 [ 195.215709][ T37] audit: type=1326 audit(1759086143.519:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8677 comm="syz.4.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7a9114eacb code=0x7ffc0000 [ 195.321905][ T37] audit: type=1326 audit(1759086143.629:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8677 comm="syz.4.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7a9114eacb code=0x7ffc0000 [ 195.323554][ T37] audit: type=1326 audit(1759086143.629:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8677 comm="syz.4.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7a9114eacb code=0x7ffc0000 [ 195.474119][ T31] usb 5-1: USB disconnect, device number 8 [ 195.505988][ T31] usb 5-1: ath9k_htc: USB layer deinitialized [ 195.678416][ T37] audit: type=1326 audit(1759086143.989:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8677 comm="syz.4.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7a9114eacb code=0x7ffc0000 [ 195.719907][ T8672] IPv6: sit2: Disabled Multicast RS [ 195.747654][ T37] audit: type=1326 audit(1759086144.059:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8677 comm="syz.4.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7a9114eacb code=0x7ffc0000 [ 195.806125][ T31] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 195.810811][ T37] audit: type=1326 audit(1759086144.119:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8677 comm="syz.4.1301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7a9114eacb code=0x7ffc0000 [ 195.986007][ T44] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 196.000667][ T31] usb 5-1: config 0 has an invalid interface number: 241 but max is 0 [ 196.000694][ T31] usb 5-1: config 0 has no interface number 0 [ 196.063676][ T31] usb 5-1: New USB device found, idVendor=ea6a, idProduct=daa1, bcdDevice=f1.60 [ 196.063705][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.063723][ T31] usb 5-1: Product: syz [ 196.063735][ T31] usb 5-1: Manufacturer: syz [ 196.063746][ T31] usb 5-1: SerialNumber: syz [ 196.104599][ T31] usb 5-1: config 0 descriptor?? [ 196.149359][ T44] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 196.149386][ T44] usb 2-1: config 0 has no interface number 0 [ 196.153835][ T31] usb 5-1: bad CDC descriptors [ 196.158538][ T44] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 196.158565][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.158584][ T44] usb 2-1: Product: syz [ 196.158597][ T44] usb 2-1: Manufacturer: syz [ 196.158610][ T44] usb 2-1: SerialNumber: syz [ 196.224624][ T44] usb 2-1: config 0 descriptor?? [ 196.477172][ T44] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected [ 196.507851][ T6011] usb 5-1: USB disconnect, device number 9 [ 196.567490][ T44] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81 [ 196.578351][ T44] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1 [ 196.581837][ T44] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2 [ 196.673348][ T44] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 196.743333][ T44] usb 2-1: USB disconnect, device number 11 [ 196.811475][ T44] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 196.825656][ T44] keyspan 2-1:0.133: device disconnected [ 196.942948][ T8705] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1314'. [ 196.943460][ T8705] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 198.370640][ T8736] mmap: syz.0.1328 (8736): VmData 37470208 exceed data ulimit 6. Update limits or use boot option ignore_rlimit_data. [ 198.489729][ T8743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1333'. [ 198.489750][ T8743] tc_dump_action: action bad kind [ 198.759721][ T8748] tmpfs: Bad value for 'mpol' [ 199.863826][ T8793] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1356'. [ 200.118927][ T8806] dummy0: entered allmulticast mode [ 200.119723][ T8803] dummy0: left allmulticast mode [ 200.532171][ T8823] vlan0: entered allmulticast mode [ 200.532194][ T8823] veth0_vlan: entered allmulticast mode [ 200.844890][ T8833] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1375'. [ 200.844967][ T8833] netlink: zone id is out of range [ 200.844976][ T8833] netlink: zone id is out of range [ 200.844983][ T8833] netlink: zone id is out of range [ 200.844991][ T8833] netlink: zone id is out of range [ 200.844999][ T8833] netlink: zone id is out of range [ 200.845006][ T8833] netlink: zone id is out of range [ 200.845013][ T8833] netlink: zone id is out of range [ 200.845019][ T8833] netlink: zone id is out of range [ 200.845025][ T8833] netlink: zone id is out of range [ 200.845032][ T8833] netlink: zone id is out of range [ 201.454959][ T8857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1387'. [ 201.593698][ T8854] Process accounting resumed [ 201.926185][ T5852] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 202.079621][ T5852] usb 1-1: Using ep0 maxpacket: 16 [ 202.082081][ T5852] usb 1-1: config 4 has an invalid interface number: 15 but max is 0 [ 202.082113][ T5852] usb 1-1: config 4 has no interface number 0 [ 202.082159][ T5852] usb 1-1: config 4 interface 15 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 202.082183][ T5852] usb 1-1: config 4 interface 15 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 202.082206][ T5852] usb 1-1: config 4 interface 15 has no altsetting 0 [ 202.092981][ T5852] usb 1-1: New USB device found, idVendor=0930, idProduct=0a13, bcdDevice=76.44 [ 202.093023][ T5852] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.093041][ T5852] usb 1-1: Product: syz [ 202.093053][ T5852] usb 1-1: Manufacturer: syz [ 202.093066][ T5852] usb 1-1: SerialNumber: syz [ 202.123313][ T8864] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 202.123498][ T8864] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 202.236044][ T44] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 202.345480][ T5852] ax88179_178a 1-1:4.15: probe with driver ax88179_178a failed with error -71 [ 202.387518][ T44] usb 2-1: not running at top speed; connect to a high speed hub [ 202.389642][ T44] usb 2-1: config 95 has an invalid interface number: 1 but max is 0 [ 202.389667][ T44] usb 2-1: config 95 has no interface number 0 [ 202.389699][ T44] usb 2-1: config 95 interface 1 has no altsetting 0 [ 202.404900][ T5852] usb 1-1: USB disconnect, device number 14 [ 202.407865][ T44] usb 2-1: string descriptor 0 read error: -22 [ 202.408006][ T44] usb 2-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 202.408028][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.933711][ T44] usb 2-1: USB disconnect, device number 12 [ 203.085050][ T8905] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1411'. [ 203.517751][ T37] kauditd_printk_skb: 29 callbacks suppressed [ 203.517767][ T37] audit: type=1326 audit(1759086151.829:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8915 comm="syz.0.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cb44aeec9 code=0x7ffc0000 [ 203.530579][ T37] audit: type=1326 audit(1759086151.829:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8915 comm="syz.0.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cb44aeec9 code=0x7ffc0000 [ 203.530625][ T37] audit: type=1326 audit(1759086151.829:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8915 comm="syz.0.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cb44aeec9 code=0x7ffc0000 [ 203.531141][ T37] audit: type=1326 audit(1759086151.839:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8915 comm="syz.0.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f1cb44aeec9 code=0x7ffc0000 [ 203.531180][ T37] audit: type=1326 audit(1759086151.839:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8915 comm="syz.0.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cb44aeec9 code=0x7ffc0000 [ 203.531216][ T37] audit: type=1326 audit(1759086151.839:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8915 comm="syz.0.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cb44aeec9 code=0x7ffc0000 [ 203.531456][ T37] audit: type=1326 audit(1759086151.839:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8915 comm="syz.0.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cb44aeec9 code=0x7ffc0000 [ 203.531709][ T37] audit: type=1326 audit(1759086151.839:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8915 comm="syz.0.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cb44aeec9 code=0x7ffc0000 [ 203.535335][ T37] audit: type=1326 audit(1759086151.839:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8915 comm="syz.0.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f1cb44aeec9 code=0x7ffc0000 [ 203.535573][ T37] audit: type=1326 audit(1759086151.839:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8915 comm="syz.0.1417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f1cb44aeec9 code=0x7ffc0000 [ 204.251020][ T8935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1426'. [ 204.261739][ T8935] veth1: entered promiscuous mode [ 204.554449][ T8945] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1431'. [ 204.606002][ T5942] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 204.791925][ T5942] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 204.791957][ T5942] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.798570][ T5942] usb 1-1: config 0 descriptor?? [ 204.837589][ T5942] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 205.215475][ T5942] gp8psk: usb out operation failed. [ 205.215512][ T5942] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 205.215554][ T5942] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 205.272311][ T5942] usb 1-1: USB disconnect, device number 15 [ 205.857156][ T8985] bridge0: port 3(veth0_to_bridge) entered blocking state [ 205.857345][ T8985] bridge0: port 3(veth0_to_bridge) entered disabled state [ 205.857561][ T8985] veth0_to_bridge: entered allmulticast mode [ 205.889077][ T8985] veth0_to_bridge: entered promiscuous mode [ 205.889352][ T8985] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 205.890566][ T8985] bridge0: port 3(veth0_to_bridge) entered blocking state [ 205.890698][ T8985] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 206.024696][ T8989] overlay: Bad value for 'workdir' [ 206.271643][ T8999] netlink: 'syz.0.1457': attribute type 11 has an invalid length. [ 206.271665][ T8999] netlink: 'syz.0.1457': attribute type 5 has an invalid length. [ 206.526289][ T9009] syz.1.1463 uses obsolete (PF_INET,SOCK_PACKET) [ 206.716059][ T5942] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 206.874283][ T5942] usb 1-1: Using ep0 maxpacket: 8 [ 206.877269][ T5942] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.880283][ T5942] usb 1-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 206.880309][ T5942] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.880327][ T5942] usb 1-1: Product: syz [ 206.880339][ T5942] usb 1-1: Manufacturer: syz [ 206.880352][ T5942] usb 1-1: SerialNumber: syz [ 206.893719][ T5942] usb 1-1: config 0 descriptor?? [ 206.916351][ T5942] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 206.916446][ T5942] usb 1-1: selecting invalid altsetting 1 [ 207.109213][ T5942] gspca_stk014: init reg: 0x00 [ 207.109314][ T5942] stk014 1-1:0.0: probe with driver stk014 failed with error -5 [ 207.349850][ T1239] usb 1-1: USB disconnect, device number 16 [ 208.186397][ T9062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1489'. [ 208.816965][ T9084] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1500'. [ 208.856013][ T5852] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 209.008589][ T5852] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 209.008618][ T5852] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.047153][ T5852] usb 5-1: config 0 descriptor?? [ 209.054766][ T5852] gspca_main: spca508-2.14.0 probing 8086:0110 [ 209.334688][ T9097] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 209.334919][ T9097] overlayfs: overlapping lowerdir path [ 209.494639][ T5852] gspca_spca508: reg_read err -71 [ 209.495057][ T5852] gspca_spca508: reg_read err -71 [ 209.495448][ T5852] gspca_spca508: reg_read err -71 [ 209.511306][ T5852] gspca_spca508: reg_read err -71 [ 209.511782][ T5852] gspca_spca508: reg write: error -71 [ 209.511871][ T5852] spca508 5-1:0.0: probe with driver spca508 failed with error -71 [ 209.539128][ T5852] usb 5-1: USB disconnect, device number 10 [ 210.166565][ T9125] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1518'. [ 210.689296][ T9149] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 212.084652][ T9201] netlink: 'syz.0.1557': attribute type 1 has an invalid length. [ 212.199542][ T9205] netlink: 'syz.0.1562': attribute type 32 has an invalid length. [ 212.474963][ T9217] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1565'. [ 212.474985][ T9217] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1565'. [ 212.651077][ T9224] netlink: 'syz.0.1569': attribute type 1 has an invalid length. [ 212.676051][ T1239] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 212.812538][ T9229] overlayfs: conflicting options: nfs_export=on,index=off [ 212.836029][ T1239] usb 5-1: Using ep0 maxpacket: 16 [ 212.838539][ T1239] usb 5-1: config 0 has an invalid interface number: 48 but max is 0 [ 212.838564][ T1239] usb 5-1: config 0 has no interface number 0 [ 212.838599][ T1239] usb 5-1: config 0 interface 48 has no altsetting 0 [ 212.841747][ T1239] usb 5-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98 [ 212.841772][ T1239] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.841791][ T1239] usb 5-1: Product: syz [ 212.841802][ T1239] usb 5-1: Manufacturer: syz [ 212.841815][ T1239] usb 5-1: SerialNumber: syz [ 212.919376][ T1239] usb 5-1: config 0 descriptor?? [ 213.142742][ T5847] Bluetooth: hci4: Unknown advertising packet type: 0x35 [ 213.142769][ T5847] Bluetooth: hci4: Malformed LE Event: 0x0d [ 213.144194][ T977] usb 5-1: USB disconnect, device number 11 [ 214.533631][ T9276] vlan0: entered promiscuous mode [ 214.533865][ T9276] vlan0: left allmulticast mode [ 214.533878][ T9276] veth0_vlan: left allmulticast mode [ 214.626079][ T1239] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 214.781841][ T1239] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 214.781868][ T1239] usb 4-1: config 0 has no interface number 0 [ 214.781915][ T1239] usb 4-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 214.787677][ T1239] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.04 [ 214.787706][ T1239] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 214.787725][ T1239] usb 4-1: Product: syz [ 214.787738][ T1239] usb 4-1: SerialNumber: syz [ 214.851610][ T1239] usb 4-1: config 0 descriptor?? [ 214.866275][ T1239] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input12 [ 214.926840][ T9280] netlink: 'syz.2.1595': attribute type 3 has an invalid length. [ 214.926860][ T9280] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1595'. [ 214.956604][ T9284] netlink: 'syz.1.1596': attribute type 2 has an invalid length. [ 214.956625][ T9284] netlink: 'syz.1.1596': attribute type 1 has an invalid length. [ 215.092020][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 215.094749][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 215.094992][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 215.095374][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 215.095611][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 215.095919][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 215.096148][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 215.096393][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 215.096975][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 215.097221][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 215.169615][ T1239] usb 4-1: USB disconnect, device number 11 [ 215.171664][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 215.243472][ T1239] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 215.264785][ T9286] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1598'. [ 216.501087][ T9336] !: renamed from dummy0 (while UP) [ 216.596179][ T5929] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 216.746048][ T5929] usb 2-1: Using ep0 maxpacket: 32 [ 216.769275][ T5929] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 216.769305][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.769324][ T5929] usb 2-1: Product: syz [ 216.769338][ T5929] usb 2-1: Manufacturer: syz [ 216.769352][ T5929] usb 2-1: SerialNumber: syz [ 216.864925][ T5929] usb 2-1: config 0 descriptor?? [ 217.083663][ T5929] snd-usb-6fire 2-1:0.0: unknown device firmware state received from device: [ 217.083683][ T5929] 00 00 00 00 00 00 00 00 [ 217.083772][ T5929] snd-usb-6fire 2-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 217.292691][ T1239] usb 2-1: USB disconnect, device number 13 [ 217.676299][ T9370] netlink: 'syz.0.1640': attribute type 2 has an invalid length. [ 217.676428][ T9370] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1640'. [ 217.746099][ T1239] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 217.784064][ T9373] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1641'. [ 217.898341][ T1239] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 217.898367][ T1239] usb 3-1: config 1 has an invalid descriptor of length 92, skipping remainder of the config [ 217.898386][ T1239] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 217.898405][ T1239] usb 3-1: config 1 has no interface number 0 [ 217.898437][ T1239] usb 3-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 217.898482][ T1239] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 217.903461][ T1239] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 217.903490][ T1239] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.903509][ T1239] usb 3-1: Product: syz [ 217.903522][ T1239] usb 3-1: Manufacturer: syz [ 217.903533][ T1239] usb 3-1: SerialNumber: syz [ 218.033167][ T1239] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 218.033213][ T1239] cdc_ncm 3-1:1.1: bind() failure [ 218.281357][ T5942] usb 3-1: USB disconnect, device number 9 [ 218.557790][ T9397] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1652'. [ 219.472879][ T9434] netlink: 'syz.0.1672': attribute type 2 has an invalid length. [ 219.497224][ T9435] netlink: 'syz.1.1671': attribute type 1 has an invalid length. [ 219.497246][ T9435] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1671'. [ 219.650753][ T9434] : entered promiscuous mode [ 220.787222][ T9473] netlink: 'syz.4.1692': attribute type 4 has an invalid length. [ 221.562081][ T9493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1698'. [ 221.562112][ T9493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1698'. [ 222.469935][ T9511] vivid-007: ================= START STATUS ================= [ 222.469955][ T9511] vivid-007: Enable Output Cropping: true [ 222.469989][ T9511] vivid-007: Enable Output Composing: true [ 222.470007][ T9511] vivid-007: Enable Output Scaler: true [ 222.470024][ T9511] vivid-007: Tx RGB Quantization Range: Automatic [ 222.470043][ T9511] vivid-007: Transmit Mode: HDMI [ 222.470059][ T9511] vivid-007: Hotplug Present: 0x00000000 [ 222.470077][ T9511] vivid-007: RxSense Present: 0x00000000 [ 222.470095][ T9511] vivid-007: EDID Present: 0x00000000 [ 222.470117][ T9511] vivid-007: ================== END STATUS ================== [ 222.959165][ T37] audit: type=1326 audit(1759086171.259:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9519 comm="syz.2.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5bd1ceec9 code=0x7ffc0000 [ 222.959224][ T37] audit: type=1326 audit(1759086171.269:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9519 comm="syz.2.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5bd1ceec9 code=0x7ffc0000 [ 223.030308][ T37] audit: type=1326 audit(1759086171.339:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9519 comm="syz.2.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7fb5bd1ceec9 code=0x7ffc0000 [ 223.030358][ T37] audit: type=1326 audit(1759086171.339:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9519 comm="syz.2.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5bd1ceec9 code=0x7ffc0000 [ 223.030398][ T37] audit: type=1326 audit(1759086171.339:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9519 comm="syz.2.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5bd1ceec9 code=0x7ffc0000 [ 223.529036][ T37] audit: type=1326 audit(1759086171.839:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9530 comm="syz.1.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42a155eec9 code=0x7ffc0000 [ 223.535365][ T37] audit: type=1326 audit(1759086171.839:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9530 comm="syz.1.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42a155eec9 code=0x7ffc0000 [ 223.596458][ T37] audit: type=1326 audit(1759086171.909:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9530 comm="syz.1.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f42a155eec9 code=0x7ffc0000 [ 223.630956][ T37] audit: type=1326 audit(1759086171.909:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9530 comm="syz.1.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42a155eec9 code=0x7ffc0000 [ 224.032968][ T9535] net_ratelimit: 76 callbacks suppressed [ 224.032987][ T9535] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 225.060201][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 225.061445][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 225.062769][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 225.063816][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.064018][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 225.064207][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.064546][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.064996][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.065326][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 225.875329][ C1] sched: DL replenish lagged too much [ 229.035895][ C0] net_ratelimit: 11788 callbacks suppressed [ 229.035914][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.036410][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.036780][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.037222][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.037308][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 229.037579][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.038653][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 229.039785][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 229.040633][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.040986][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.046033][ C0] net_ratelimit: 14887 callbacks suppressed [ 234.046054][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.046381][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.046864][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.046894][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 234.047198][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.047646][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.047980][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.048379][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 234.048451][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.048789][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.055997][ C1] net_ratelimit: 15200 callbacks suppressed [ 239.056017][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 239.056057][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.056419][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.056867][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:8f:0b:a2:9c:51, vlan:0) [ 239.057284][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.057453][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 239.057615][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.058066][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:8f:0b:a2:9c:51, vlan:0) [ 239.058451][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.058808][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.066123][ C0] net_ratelimit: 14757 callbacks suppressed [ 244.066144][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.066517][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.067019][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:8f:0b:a2:9c:51, vlan:0) [ 244.067197][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 244.067453][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.067810][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.068307][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:8f:0b:a2:9c:51, vlan:0) [ 244.068683][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 244.068795][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.069180][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.075903][ C0] net_ratelimit: 14821 callbacks suppressed [ 249.075923][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:8f:0b:a2:9c:51, vlan:0) [ 249.076312][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.076646][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.077127][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:8f:0b:a2:9c:51, vlan:0) [ 249.077233][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 249.077514][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.077878][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.078326][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:8f:0b:a2:9c:51, vlan:0) [ 249.078574][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 249.078717][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.086045][ C1] net_ratelimit: 14677 callbacks suppressed [ 254.086066][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 254.086130][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.086603][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:8f:0b:a2:9c:51, vlan:0) [ 254.086996][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.087327][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.087389][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 254.087780][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:8f:0b:a2:9c:51, vlan:0) [ 254.088165][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.088535][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.088771][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 259.010263][ T5861] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 259.096320][ C0] net_ratelimit: 14899 callbacks suppressed [ 259.096342][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:8f:0b:a2:9c:51, vlan:0) [ 259.096752][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.097137][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.097148][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 259.097634][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:8f:0b:a2:9c:51, vlan:0) [ 259.098050][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.098403][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.098495][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 259.098875][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:8f:0b:a2:9c:51, vlan:0) [ 259.099299][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 261.590553][ T5847] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 261.909613][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.922486][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 264.105922][ C0] net_ratelimit: 15394 callbacks suppressed [ 264.105944][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.106259][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 264.106308][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.106765][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:8f:0b:a2:9c:51, vlan:0) [ 264.107156][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.107507][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.107630][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 264.107995][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:8f:0b:a2:9c:51, vlan:0) [ 264.108386][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.108755][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.472562][ T5856] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 265.762387][ T9577] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 267.552857][ T5847] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 267.586697][ T5847] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 267.588030][ T5847] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 267.589247][ T5847] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 267.590047][ T5847] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 269.116330][ C0] net_ratelimit: 14611 callbacks suppressed [ 269.116350][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:8f:0b:a2:9c:51, vlan:0) [ 269.116739][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.116936][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 269.117076][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.117520][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:8f:0b:a2:9c:51, vlan:0) [ 269.117905][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.118284][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 269.118292][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.118738][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:8f:0b:a2:9c:51, vlan:0) [ 269.119128][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.125983][ C0] net_ratelimit: 15067 callbacks suppressed [ 274.126004][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:8f:0b:a2:9c:51, vlan:0) [ 274.126456][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.126818][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.127101][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 274.127287][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:8f:0b:a2:9c:51, vlan:0) [ 274.127700][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.128078][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.128473][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 274.128548][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:8f:0b:a2:9c:51, vlan:0) [ 274.128986][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.135950][ C0] net_ratelimit: 14826 callbacks suppressed [ 279.135971][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.136449][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:8f:0b:a2:9c:51, vlan:0) [ 279.136882][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.137222][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.137275][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 279.137906][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:8f:0b:a2:9c:51, vlan:0) [ 279.138546][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.138889][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.139218][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 279.139373][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:8f:0b:a2:9c:51, vlan:0) [ 282.248531][ T5856] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 282.255673][ T5856] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 282.262036][ T5856] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 283.625749][ T5856] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 284.146475][ C1] net_ratelimit: 14876 callbacks suppressed [ 284.146493][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 284.147597][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 284.147674][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.148041][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.148565][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:8f:0b:a2:9c:51, vlan:0) [ 284.148990][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.149026][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 284.149341][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.149810][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:8f:0b:a2:9c:51, vlan:0) [ 284.150221][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.257029][ T5856] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 289.156077][ C0] net_ratelimit: 14733 callbacks suppressed [ 289.156098][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:8f:0b:a2:9c:51, vlan:0) [ 289.156493][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.156859][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.157006][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 289.157317][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:8f:0b:a2:9c:51, vlan:0) [ 289.157753][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.158089][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.158467][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 289.158543][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:8f:0b:a2:9c:51, vlan:0) [ 289.158981][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.052671][ T5861] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 293.068849][ T5861] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 293.070014][ T5861] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 293.071203][ T5861] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 293.071980][ T5861] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 294.165944][ C0] net_ratelimit: 15309 callbacks suppressed [ 294.165964][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.166439][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:8f:0b:a2:9c:51, vlan:0) [ 294.166864][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.167245][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.167315][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 294.167731][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:8f:0b:a2:9c:51, vlan:0) [ 294.168173][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.168530][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.168795][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 294.169012][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:8f:0b:a2:9c:51, vlan:0) [ 295.071961][ T5847] Bluetooth: hci6: command tx timeout [ 297.739816][ T5847] Bluetooth: hci6: command tx timeout [ 299.176200][ C0] net_ratelimit: 15249 callbacks suppressed [ 299.176229][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.176707][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:8f:0b:a2:9c:51, vlan:0) [ 299.177115][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.177234][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 299.179172][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.179654][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:8f:0b:a2:9c:51, vlan:0) [ 299.180060][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.180291][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 299.180418][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.180893][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:8f:0b:a2:9c:51, vlan:0) [ 301.960942][ T5847] Bluetooth: hci6: command tx timeout [ 303.170423][ T5847] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 304.186119][ C0] net_ratelimit: 14999 callbacks suppressed [ 304.186140][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.186726][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:8f:0b:a2:9c:51, vlan:0) [ 304.187167][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.187405][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 304.187529][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.188019][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:8f:0b:a2:9c:51, vlan:0) [ 304.188432][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.188831][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.188872][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 304.189344][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:8f:0b:a2:9c:51, vlan:0) [ 305.246096][ T5861] Bluetooth: hci6: command tx timeout [ 305.380595][ T5847] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 307.476234][ T5856] Bluetooth: hci7: command 0x1001 tx timeout [ 307.477005][ T9590] Bluetooth: hci7: Opcode 0x1001 failed: -110 [ 309.195959][ C0] net_ratelimit: 14668 callbacks suppressed [ 309.195980][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.196418][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.196931][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:8f:0b:a2:9c:51, vlan:0) [ 309.197087][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 309.197408][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.197760][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.198249][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:8f:0b:a2:9c:51, vlan:0) [ 309.198457][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 309.198647][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.198984][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.206156][ C0] net_ratelimit: 14805 callbacks suppressed [ 314.206178][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.206504][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.206935][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:8f:0b:a2:9c:51, vlan:0) [ 314.207349][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.207675][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.208138][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:8f:0b:a2:9c:51, vlan:0) [ 314.208521][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.208851][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.209297][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:8f:0b:a2:9c:51, vlan:0) [ 314.209754][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.216129][ C0] net_ratelimit: 14928 callbacks suppressed [ 319.216150][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:8f:0b:a2:9c:51, vlan:0) [ 319.216972][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 319.217351][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.217722][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.218194][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:8f:0b:a2:9c:51, vlan:0) [ 319.218299][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 319.218580][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.218926][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.219373][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:8f:0b:a2:9c:51, vlan:0) [ 319.219648][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 324.227144][ C1] net_ratelimit: 14896 callbacks suppressed [ 324.227166][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 324.228495][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 324.229847][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 324.231157][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 324.232757][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 324.234116][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 324.235417][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 324.236016][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.236368][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.236810][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 328.323855][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 328.338567][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 329.236090][ C0] net_ratelimit: 15173 callbacks suppressed [ 329.236111][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:8f:0b:a2:9c:51, vlan:0) [ 329.236121][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 329.236497][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.236862][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.237337][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:8f:0b:a2:9c:51, vlan:0) [ 329.237550][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 329.237741][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.238075][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.238672][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:8f:0b:a2:9c:51, vlan:0) [ 329.238986][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 334.245921][ C0] net_ratelimit: 14165 callbacks suppressed [ 334.245943][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:8f:0b:a2:9c:51, vlan:0) [ 334.246337][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.246674][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.247118][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:8f:0b:a2:9c:51, vlan:0) [ 334.247511][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.247783][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 334.247872][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.248353][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:8f:0b:a2:9c:51, vlan:0) [ 334.248739][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.249072][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.255991][ C0] net_ratelimit: 13584 callbacks suppressed [ 339.256012][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.256022][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 339.256465][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.256855][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.257215][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.257662][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:8f:0b:a2:9c:51, vlan:0) [ 339.258017][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.258126][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 339.258464][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.258851][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 342.202286][ T5847] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 342.220431][ T5861] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 344.266132][ C0] net_ratelimit: 14109 callbacks suppressed [ 344.266153][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.266621][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 344.266690][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:8f:0b:a2:9c:51, vlan:0) [ 344.267051][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.267551][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.267911][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 344.268010][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.268400][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.268924][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:8f:0b:a2:9c:51, vlan:0) [ 344.269243][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 349.276193][ C0] net_ratelimit: 15746 callbacks suppressed [ 349.276215][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.276698][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:8f:0b:a2:9c:51, vlan:0) [ 349.276708][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 349.277084][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.277597][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.277973][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 349.278010][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.278361][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.278835][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:8f:0b:a2:9c:51, vlan:0) [ 349.279215][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 354.285913][ C1] net_ratelimit: 14953 callbacks suppressed [ 354.285935][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 354.286252][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 354.286819][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 354.287299][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 354.287429][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 354.287700][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 354.288221][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:8f:0b:a2:9c:51, vlan:0) [ 354.288611][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 354.288812][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 354.289162][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.648121][ T9604] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 359.296331][ C0] net_ratelimit: 15508 callbacks suppressed [ 359.296351][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:8f:0b:a2:9c:51, vlan:0) [ 359.296589][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 359.296676][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 359.297132][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 359.297516][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 359.297850][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 359.298098][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 359.298368][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:8f:0b:a2:9c:51, vlan:0) [ 359.298770][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 359.299236][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 364.305912][ C0] net_ratelimit: 15305 callbacks suppressed [ 364.305934][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 364.306356][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 364.306726][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 364.306771][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 364.307208][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:8f:0b:a2:9c:51, vlan:0) [ 364.307548][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 364.308022][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 364.308050][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 364.308464][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 364.308815][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 369.316196][ C1] net_ratelimit: 15528 callbacks suppressed [ 369.316204][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:8f:0b:a2:9c:51, vlan:0) [ 369.316217][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 369.316528][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 369.316997][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 369.317381][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 369.317585][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 369.317735][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 369.318207][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:8f:0b:a2:9c:51, vlan:0) [ 369.318684][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:8f:0b:a2:9c:51, vlan:0) [ 369.318832][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 373.955435][ T38] INFO: task syz.1.1718:9531 blocked for more than 144 seconds. [ 373.955470][ T38] Not tainted syzkaller #0 [ 373.955481][ T38] Blocked by coredump. [ 373.955487][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 373.955496][ T38] task:syz.1.1718 state:D stack:28168 pid:9531 tgid:9530 ppid:5844 task_flags:0x40054c flags:0x00004000 [ 373.955662][ T38] Call Trace: [ 373.955669][ T38] [ 373.955683][ T38] __schedule+0x16f3/0x4c20 [ 373.955737][ T38] ? __lock_acquire+0xab9/0xd20 [ 373.955760][ T38] ? __pfx___schedule+0x10/0x10 [ 373.955801][ T38] ? schedule+0x91/0x360 [ 373.955828][ T38] schedule+0x165/0x360 [ 373.955853][ T38] schedule_timeout+0x9a/0x270 [ 373.955968][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 373.956005][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 373.956029][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 373.956051][ T38] ? wait_for_completion+0x267/0x5d0 [ 373.956077][ T38] wait_for_completion+0x2bf/0x5d0 [ 373.956114][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 373.956153][ T38] exit_aio+0x2f1/0x3b0 [ 373.956181][ T38] ? __pfx_exit_aio+0x10/0x10 [ 373.956216][ T38] ? uprobe_clear_state+0x280/0x2a0 [ 373.956234][ T38] ? mm_update_next_owner+0xa7/0x870 [ 373.956266][ T38] __mmput+0x68/0x3d0 [ 373.956290][ T38] exit_mm+0x1da/0x2c0 [ 373.956311][ T38] ? __pfx_exit_mm+0x10/0x10 [ 373.956331][ T38] ? rcu_is_watching+0x15/0xb0 [ 373.956361][ T38] do_exit+0x648/0x2300 [ 373.956378][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 373.956408][ T38] ? __lock_acquire+0xab9/0xd20 [ 373.956434][ T38] ? __pfx_do_exit+0x10/0x10 [ 373.956448][ T38] ? rt_mutex_slowunlock+0x493/0x8a0 [ 373.956473][ T38] ? rt_spin_lock+0x1bb/0x2c0 [ 373.956503][ T38] do_group_exit+0x21c/0x2d0 [ 373.956527][ T38] get_signal+0x125e/0x1310 [ 373.956581][ T38] arch_do_signal_or_restart+0x9a/0x750 [ 373.956610][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 373.956647][ T38] ? exit_to_user_mode_loop+0x40/0x110 [ 373.956673][ T38] exit_to_user_mode_loop+0x75/0x110 [ 373.956696][ T38] do_syscall_64+0x2bd/0x3b0 [ 373.956713][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 373.956737][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.956755][ T38] ? clear_bhb_loop+0x60/0xb0 [ 373.956777][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.956800][ T38] RIP: 0033:0x7f42a155eec9 [ 373.956821][ T38] RSP: 002b:00007f429f7c60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 373.956842][ T38] RAX: 0000000000000000 RBX: 00007f42a17b5fa8 RCX: 00007f42a155eec9 [ 373.956855][ T38] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f42a17b5fac [ 373.956867][ T38] RBP: 00007f42a17b5fa0 R08: 7fffffffffffffff R09: 0000000000000000 [ 373.956880][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 373.956891][ T38] R13: 00007f42a17b6038 R14: 00007ffe26aea180 R15: 00007ffe26aea268 [ 373.956923][ T38] [ 373.956955][ T38] [ 373.956955][ T38] Showing all locks held in the system: [ 373.956964][ T38] 4 locks held by kworker/0:0/9: [ 373.956974][ T38] #0: ffff88805983a938 ((wq_completion)wg-kex-wg1#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 373.957027][ T38] #1: ffffc900000e7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 373.957114][ T38] #2: ffffffff8d84a9a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 373.957158][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 373.957203][ T38] 5 locks held by kworker/u8:0/12: [ 373.957213][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 373.957264][ T38] #1: ffffc90000117bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 373.957309][ T38] #2: ffff88805ccf0898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 373.957356][ T38] #3: ffffffff8d84a9a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 373.957400][ T38] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 373.957445][ T38] 2 locks held by ksoftirqd/0/15: [ 373.957455][ T38] #0: ffffffff8d84a9a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 373.957498][ T38] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 373.957543][ T38] 6 locks held by ktimers/0/16: [ 373.957556][ T38] 2 locks held by rcuc/1/28: [ 373.957565][ T38] #0: ffffffff8d84a9a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 373.957610][ T38] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 373.957654][ T38] 2 locks held by ksoftirqd/1/30: [ 373.957664][ T38] #0: ffffffff8d84a9a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 373.957708][ T38] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 373.957752][ T38] 1 lock held by khungtaskd/38: [ 373.957762][ T38] #0: ffffffff8d9a8dc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 373.957805][ T38] 6 locks held by kworker/u8:2/43: [ 373.957816][ T38] #0: ffff888035c9f938 ((wq_completion)wg-kex-wg1#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 373.957865][ T38] #1: ffffc90000b47bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 373.957910][ T38] #2: ffff8880599c95f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 373.957956][ T38] #3: ffff88805b691928 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 373.958001][ T38] #4: ffffffff8d84a9a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 373.958044][ T38] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 373.958090][ T38] 3 locks held by kworker/u8:4/69: [ 373.958109][ T38] 4 locks held by kworker/1:2/1214: [ 373.958121][ T38] 5 locks held by kworker/u8:10/1417: [ 373.958131][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 373.958175][ T38] #1: ffffc900057c7bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 373.958220][ T38] #2: ffff88805df20898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 373.958272][ T38] #3: ffffffff8d84a9a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 373.958316][ T38] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 373.958361][ T38] 5 locks held by kworker/u8:11/1461: [ 373.958371][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 373.958415][ T38] #1: ffffc90005a47bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 373.958460][ T38] #2: ffff88805d150898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 373.958505][ T38] #3: ffffffff8d84a9a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 373.958549][ T38] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 373.958594][ T38] 7 locks held by kworker/u8:12/1497: [ 373.958604][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 373.958650][ T38] #1: ffffc900059a7bc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 373.958696][ T38] #2: ffff88801cf90300 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 373.958749][ T38] #3: ffff88805b48bd20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 373.958798][ T38] #4: ffffffff8d9a8dc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 373.958842][ T38] #5: ffffffff8d84a9a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 373.958885][ T38] #6: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 373.958941][ T38] 7 locks held by kworker/u8:13/3505: [ 373.958952][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 373.958997][ T38] #1: ffffc9000ddd7bc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 373.959043][ T38] #2: ffff88805b3b6300 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 373.959091][ T38] #3: ffff88805b196120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 373.959138][ T38] #4: ffffffff8d9a8dc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 373.959182][ T38] #5: ffffffff8d84a9a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 373.959226][ T38] #6: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 373.959279][ T38] 2 locks held by klogd/5197: [ 373.959290][ T38] 2 locks held by getty/5597: [ 373.959301][ T38] #0: ffff88823bf3e8a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 373.959342][ T38] #1: ffffc90003e832e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 373.959386][ T38] 2 locks held by dhcpcd/5641: [ 373.959397][ T38] #0: ffffffff8d84a9a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 373.959441][ T38] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 373.959485][ T38] 3 locks held by syz-executor/5825: [ 373.959496][ T38] #0: ffff888027c13110 (sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_sendmsg+0x21/0x50 [ 373.959539][ T38] #1: ffffffff8d84a9a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 373.959583][ T38] #2: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 373.959631][ T38] 4 locks held by kworker/0:3/5895: [ 373.959641][ T38] #0: ffff8880595eb138 ((wq_completion)wg-kex-wg0#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 373.959691][ T38] #1: ffffc90004bf7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 373.959749][ T38] #2: ffffffff8d84a9a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 373.959793][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 373.959841][ T38] 5 locks held by kworker/1:5/5929: [ 373.959851][ T38] #0: ffff888033916d38 ((wq_completion)wg-kex-wg1#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 373.959901][ T38] #1: ffffc90005097bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 373.959959][ T38] #2: ffff8880361d55f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x150/0x900 [ 373.960005][ T38] #3: ffffffff8d84a9a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 373.960048][ T38] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 373.960092][ T38] 4 locks held by kworker/0:4/5930: [ 373.960102][ T38] #0: ffff888019899938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 373.960148][ T38] #1: ffffc900050a7bc0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 373.960193][ T38] #2: ffffffff8ecd38b8 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x95/0xf30 [ 373.960234][ T38] #3: ffff88805df20898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_check_chans_work+0x164/0xf30 [ 373.960281][ T38] 4 locks held by kworker/0:5/5942: [ 373.960291][ T38] #0: ffff888059bb2538 ((wq_completion)wg-kex-wg1#10){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 373.960339][ T38] #1: ffffc900051e7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 373.960398][ T38] #2: ffffffff8d84a9a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 373.960441][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 373.960485][ T38] 3 locks held by kworker/0:6/6011: [ 373.960497][ T38] 3 locks held by kworker/u8:14/7757: [ 373.960507][ T38] #0: ffff88814d183938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 373.960553][ T38] #1: ffffc9001ce2fbc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 373.960599][ T38] #2: ffffffff8ecd38b8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 373.960645][ T38] 5 locks held by kworker/u8:15/7762: [ 373.960655][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 373.960699][ T38] #1: ffffc9001ce5fbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 373.960745][ T38] #2: ffff88805dba0898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 373.960791][ T38] #3: ffffffff8d84a9a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 373.960834][ T38] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 373.960879][ T38] 5 locks held by kworker/u8:16/7764: [ 373.960889][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 373.960934][ T38] #1: ffffc9001ce7fbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 373.960979][ T38] #2: ffff88805cfb0898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 373.961026][ T38] #3: ffffffff8d84a9a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 373.961069][ T38] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 373.961115][ T38] 4 locks held by kworker/u8:17/7766: [ 373.961125][ T38] #0: ffff888030a8f938 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 373.961169][ T38] #1: ffffc9001ce8fbc0 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 373.961215][ T38] #2: ffffffff8d84a9a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 373.961265][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 373.961310][ T38] 5 locks held by kworker/0:7/8222: [ 373.961323][ T38] 4 locks held by kworker/1:13/9558: [ 373.961333][ T38] #0: ffff888019899138 ((wq_completion)events_long){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 373.961377][ T38] #1: ffffc9000d2b7bc0 ((work_completion)(&(&ipvs->defense_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 373.961423][ T38] #2: ffffffff8d84a9a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 373.961467][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 373.961511][ T38] 3 locks held by kworker/1:14/9559: [ 373.961522][ T38] 4 locks held by kworker/0:8/9561: [ 373.961532][ T38] #0: ffff888019899138 ((wq_completion)events_long){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 373.961576][ T38] #1: ffffc9000493fbc0 ((work_completion)(&br->mcast_gc_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 373.961620][ T38] #2: ffffffff8d84a9a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 373.961664][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 373.961709][ T38] 4 locks held by kworker/0:9/9562: [ 373.961720][ T38] 7 locks held by kworker/u8:21/9565: [ 373.961730][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 373.961775][ T38] #1: ffffc90005317bc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 373.961819][ T38] #2: ffff88805b70f300 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 373.961863][ T38] #3: ffff888028cfcd20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 373.961909][ T38] #4: ffffffff8d9a8dc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 373.961952][ T38] #5: ffffffff8d84a9a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 373.961995][ T38] #6: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 373.962039][ T38] 6 locks held by kworker/u8:23/9570: [ 373.962050][ T38] #0: ffff888010e50138 ((wq_completion)wg-kex-wg0#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 373.962111][ T38] #1: ffffc900068ffbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 373.962156][ T38] #2: ffff8880355955f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 373.962201][ T38] #3: ffff88805b72d8b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 373.962251][ T38] #4: ffffffff8d84a9a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 373.962295][ T38] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 373.962340][ T38] 7 locks held by kworker/u8:24/9571: [ 373.962350][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 373.962395][ T38] #1: ffffc900068dfbc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 373.962442][ T38] #2: ffff88805bf26300 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 373.962492][ T38] #3: ffff88805bc2b920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 373.962539][ T38] #4: ffffffff8d9a8dc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 373.962582][ T38] #5: ffffffff8d84a9a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 373.962626][ T38] #6: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 373.962671][ T38] 4 locks held by kworker/1:17/9575: [ 373.962681][ T38] #0: ffff888059bb3d38 ((wq_completion)wg-kex-wg1#8){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 373.962730][ T38] #1: ffffc900061f7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 373.962788][ T38] #2: ffffffff8d84a9a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 373.962832][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 373.962877][ T38] 1 lock held by dhcpcd/9579: [ 373.962887][ T38] #0: ffff88803e013f38 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 373.962936][ T38] 1 lock held by syz-executor/9580: [ 373.962946][ T38] #0: ffffffff8ecd38b8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 373.962988][ T38] 1 lock held by dhcpcd/9584: [ 373.962998][ T38] #0: ffff888026846350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 373.963045][ T38] 2 locks held by kworker/0:10/9587: [ 373.963056][ T38] 1 lock held by dhcpcd/9588: [ 373.963065][ T38] #0: ffff888023a12350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 373.963110][ T38] 4 locks held by kworker/0:11/9589: [ 373.963120][ T38] #0: ffff888033916d38 ((wq_completion)wg-kex-wg1#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 373.963169][ T38] #1: ffffc90006147bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 373.963228][ T38] #2: ffffffff8d84a9a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 373.963277][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 373.963322][ T38] 1 lock held by dhcpcd/9596: [ 373.963332][ T38] #0: ffff888029c90350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 373.963376][ T38] 6 locks held by kworker/0:12/9600: [ 373.963386][ T38] #0: ffff888059bb0d38 ((wq_completion)wg-kex-wg0#9){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 373.963435][ T38] #1: ffffc90006117bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 373.963494][ T38] #2: ffff888059f795f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x115/0x970 [ 373.963538][ T38] #3: ffff88805b72ede8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x126/0x970 [ 373.963583][ T38] #4: ffffffff8d84a9a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 373.963627][ T38] #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 373.963672][ T38] 1 lock held by dhcpcd/9603: [ 373.963682][ T38] #0: ffff888038e60350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 373.963727][ T38] 1 lock held by dhcpcd/9609: [ 373.963737][ T38] #0: ffff8880265ae350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 373.963782][ T38] 3 locks held by syz-executor/9610: [ 373.963793][ T38] [ 373.963798][ T38] ============================================= [ 373.963798][ T38] [ 373.963817][ T38] NMI backtrace for cpu 1 [ 373.963837][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 373.963858][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 373.963868][ T38] Call Trace: [ 373.963876][ T38] [ 373.963884][ T38] dump_stack_lvl+0x189/0x250 [ 373.963911][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 373.963934][ T38] ? __pfx__printk+0x10/0x10 [ 373.963965][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 373.963990][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 373.964014][ T38] ? __pfx__printk+0x10/0x10 [ 373.964037][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 373.964060][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 373.964085][ T38] watchdog+0xf93/0xfe0 [ 373.964111][ T38] ? watchdog+0x1de/0xfe0 [ 373.964137][ T38] kthread+0x711/0x8a0 [ 373.964160][ T38] ? __pfx_watchdog+0x10/0x10 [ 373.964178][ T38] ? __pfx_kthread+0x10/0x10 [ 373.964205][ T38] ? __pfx_kthread+0x10/0x10 [ 373.964229][ T38] ret_from_fork+0x436/0x7d0 [ 373.964261][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 373.964287][ T38] ? __switch_to_asm+0x39/0x70 [ 373.964303][ T38] ? __switch_to_asm+0x33/0x70 [ 373.964317][ T38] ? __pfx_kthread+0x10/0x10 [ 373.964341][ T38] ret_from_fork_asm+0x1a/0x30 [ 373.964371][ T38] [ 373.964396][ T38] Sending NMI from CPU 1 to CPUs 0: [ 373.964420][ C0] NMI backtrace for cpu 0 [ 373.964433][ C0] CPU: 0 UID: 0 PID: 9562 Comm: kworker/0:9 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 373.964452][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 373.964462][ C0] Workqueue: wg-kex-wg1 wg_packet_handshake_receive_worker [ 373.964484][ C0] RIP: 0010:lock_acquire+0x154/0x360 [ 373.964510][ C0] Code: 8d e8 10 4b 5b 09 b8 ff ff ff ff 65 0f c1 05 73 7f 5a 10 83 f8 01 0f 85 c9 00 00 00 48 c7 44 24 30 00 00 00 00 9c 8f 44 24 30 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 [ 373.964523][ C0] RSP: 0018:ffffc90005595518 EFLAGS: 00000046 [ 373.964536][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 93415a973a953200 [ 373.964547][ C0] RDX: 0000000000000000 RSI: ffffffff8d21b1b6 RDI: ffffffff8b621680 [ 373.964558][ C0] RBP: ffffffff8172c165 R08: 0000000000000000 R09: ffffffff8172c165 [ 373.964569][ C0] R10: ffffc900055956d8 R11: ffffffff81aaf080 R12: 0000000000000002 [ 373.964580][ C0] R13: ffffffff8d9a8dc0 R14: 0000000000000000 R15: 0000000000000246 [ 373.964590][ C0] FS: 0000000000000000(0000) GS:ffff8881268bc000(0000) knlGS:0000000000000000 [ 373.964603][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 373.964614][ C0] CR2: 000055b18b851050 CR3: 0000000035694000 CR4: 00000000003526f0 [ 373.964628][ C0] Call Trace: [ 373.964635][ C0] [ 373.964645][ C0] ? unwind_next_frame+0xa5/0x2390 [ 373.964664][ C0] ? process_scheduled_works+0xae1/0x17b0 [ 373.964682][ C0] ? unwind_next_frame+0xa5/0x2390 [ 373.964699][ C0] unwind_next_frame+0xc2/0x2390 [ 373.964716][ C0] ? unwind_next_frame+0xa5/0x2390 [ 373.964750][ C0] ? unwind_next_frame+0xa5/0x2390 [ 373.964768][ C0] ? wg_packet_handshake_receive_worker+0x6bb/0xfa0 [ 373.964790][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 373.964806][ C0] arch_stack_walk+0x11c/0x150 [ 373.964828][ C0] ? process_scheduled_works+0xae1/0x17b0 [ 373.964846][ C0] stack_trace_save+0x9c/0xe0 [ 373.964861][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 373.964880][ C0] ? __lock_acquire+0xab9/0xd20 [ 373.964898][ C0] kasan_save_track+0x3e/0x80 [ 373.964914][ C0] ? kasan_save_track+0x3e/0x80 [ 373.964929][ C0] ? kasan_save_free_info+0x46/0x50 [ 373.964943][ C0] ? __kasan_slab_free+0x5b/0x80 [ 373.964958][ C0] ? kmem_cache_free+0x195/0x510 [ 373.964976][ C0] ? br_nf_dev_queue_xmit+0x52d/0x2090 [ 373.964990][ C0] ? NF_HOOK+0x61b/0x6b0 [ 373.965002][ C0] ? br_nf_post_routing+0xb66/0xfe0 [ 373.965015][ C0] ? nf_hook_slow+0xc2/0x220 [ 373.965032][ C0] ? NF_HOOK+0x215/0x3c0 [ 373.965050][ C0] ? br_forward_finish+0xd3/0x130 [ 373.965067][ C0] ? br_nf_forward_finish+0xa40/0xe60 [ 373.965080][ C0] ? NF_HOOK+0x61b/0x6b0 [ 373.965092][ C0] ? br_nf_forward_ip+0x647/0x7e0 [ 373.965105][ C0] ? nf_hook_slow+0xc2/0x220 [ 373.965122][ C0] ? NF_HOOK+0x215/0x3c0 [ 373.965139][ C0] ? __br_forward+0x41e/0x600 [ 373.965155][ C0] ? maybe_deliver+0xb5/0x160 [ 373.965172][ C0] ? br_flood+0x31a/0x6a0 [ 373.965188][ C0] ? br_handle_frame_finish+0x14b4/0x19b0 [ 373.965202][ C0] ? br_nf_hook_thresh+0x3c6/0x4a0 [ 373.965220][ C0] ? br_nf_pre_routing_finish_ipv6+0x948/0xd00 [ 373.965235][ C0] ? br_nf_pre_routing_ipv6+0x37e/0x6b0 [ 373.965249][ C0] ? br_handle_frame+0x985/0x14d0 [ 373.965262][ C0] ? __netif_receive_skb_core+0x10b9/0x4020 [ 373.965279][ C0] ? __netif_receive_skb+0x72/0x380 [ 373.965295][ C0] ? process_backlog+0x31e/0x900 [ 373.965311][ C0] ? __napi_poll+0xb3/0x540 [ 373.965326][ C0] ? net_rx_action+0x707/0xe00 [ 373.965342][ C0] ? handle_softirqs+0x22c/0x710 [ 373.965357][ C0] ? __local_bh_enable_ip+0x179/0x270 [ 373.965373][ C0] ? wg_index_hashtable_insert+0x857/0x8c0 [ 373.965392][ C0] ? wg_noise_handshake_create_response+0x715/0x970 [ 373.965407][ C0] ? wg_packet_send_handshake_response+0xf6/0x2d0 [ 373.965426][ C0] ? wg_packet_handshake_receive_worker+0x6bb/0xfa0 [ 373.965444][ C0] ? process_scheduled_works+0xae1/0x17b0 [ 373.965473][ C0] kasan_save_free_info+0x46/0x50 [ 373.965487][ C0] __kasan_slab_free+0x5b/0x80 [ 373.965509][ C0] ? br_nf_dev_queue_xmit+0x52d/0x2090 [ 373.965523][ C0] kmem_cache_free+0x195/0x510 [ 373.965539][ C0] ? __skb_ext_put+0x218/0x2e0 [ 373.965555][ C0] br_nf_dev_queue_xmit+0x52d/0x2090 [ 373.965575][ C0] ? NF_HOOK+0x9e/0x6b0 [ 373.965588][ C0] NF_HOOK+0x61b/0x6b0 [ 373.965604][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 373.965620][ C0] ? net_generic+0x1e/0x240 [ 373.965638][ C0] ? net_generic+0x1e/0x240 [ 373.965655][ C0] ? net_generic+0x1e/0x240 [ 373.965673][ C0] ? skb_pull+0xc1/0x1d0 [ 373.965689][ C0] br_nf_post_routing+0xb66/0xfe0 [ 373.965703][ C0] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 373.965720][ C0] ? __pfx_br_nf_post_routing+0x10/0x10 [ 373.965735][ C0] nf_hook_slow+0xc2/0x220 [ 373.965754][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 373.965772][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 373.965790][ C0] NF_HOOK+0x215/0x3c0 [ 373.965809][ C0] ? NF_HOOK+0x9e/0x3c0 [ 373.965826][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 373.965845][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 373.965871][ C0] br_forward_finish+0xd3/0x130 [ 373.965887][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 373.965905][ C0] br_nf_forward_finish+0xa40/0xe60 [ 373.965925][ C0] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 373.965941][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 373.965962][ C0] ? NF_HOOK+0x9e/0x6b0 [ 373.965975][ C0] ? NF_HOOK+0x9e/0x6b0 [ 373.965987][ C0] NF_HOOK+0x61b/0x6b0 [ 373.966003][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 373.966023][ C0] br_nf_forward_ip+0x647/0x7e0 [ 373.966037][ C0] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 373.966053][ C0] ? __pfx_br_nf_forward+0x10/0x10 [ 373.966068][ C0] nf_hook_slow+0xc2/0x220 [ 373.966087][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 373.966105][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 373.966122][ C0] NF_HOOK+0x215/0x3c0 [ 373.966141][ C0] ? NF_HOOK+0x9e/0x3c0 [ 373.966157][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 373.966176][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 373.966199][ C0] __br_forward+0x41e/0x600 [ 373.966216][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 373.966237][ C0] ? __pfx___br_forward+0x10/0x10 [ 373.966257][ C0] ? skb_clone+0x246/0x3a0 [ 373.966273][ C0] maybe_deliver+0xb5/0x160 [ 373.966293][ C0] br_flood+0x31a/0x6a0 [ 373.966315][ C0] br_handle_frame_finish+0x14b4/0x19b0 [ 373.966329][ C0] ? stack_depot_save_flags+0x40/0x860 [ 373.966354][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 373.966367][ C0] ? br_handle_frame+0x985/0x14d0 [ 373.966380][ C0] ? __netif_receive_skb+0x72/0x380 [ 373.966396][ C0] ? process_backlog+0x31e/0x900 [ 373.966413][ C0] ? __napi_poll+0xb3/0x540 [ 373.966428][ C0] ? handle_softirqs+0x22c/0x710 [ 373.966443][ C0] ? __local_bh_enable_ip+0x179/0x270 [ 373.966459][ C0] ? wg_index_hashtable_insert+0x857/0x8c0 [ 373.966478][ C0] ? wg_packet_send_handshake_response+0xf6/0x2d0 [ 373.966500][ C0] ? wg_packet_handshake_receive_worker+0x6bb/0xfa0 [ 373.966519][ C0] ? process_scheduled_works+0xae1/0x17b0 [ 373.966535][ C0] ? workqueue_offline_cpu+0x1a0/0x620 [ 373.966549][ C0] ? kthread+0x711/0x8a0 [ 373.966566][ C0] ? ret_from_fork+0x383/0x7d0 [ 373.966582][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 373.966599][ C0] ? nf_hook_slow+0x176/0x220 [ 373.966618][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 373.966633][ C0] br_nf_hook_thresh+0x3c6/0x4a0 [ 373.966656][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 373.966677][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 373.966697][ C0] br_nf_pre_routing_finish_ipv6+0x948/0xd00 [ 373.966713][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 373.966730][ C0] ? br_nf_pre_routing_ipv6+0x42f/0x6b0 [ 373.966746][ C0] br_nf_pre_routing_ipv6+0x37e/0x6b0 [ 373.966762][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 373.966779][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 373.966794][ C0] ? br_nf_pre_routing+0x720/0x1470 [ 373.966817][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 373.966836][ C0] br_handle_frame+0x985/0x14d0 [ 373.966854][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 373.966867][ C0] ? try_to_take_rt_mutex+0x840/0xb00 [ 373.966887][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 373.966905][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 373.966919][ C0] __netif_receive_skb_core+0x10b9/0x4020 [ 373.966936][ C0] ? __lock_acquire+0xab9/0xd20 [ 373.966957][ C0] ? do_raw_spin_lock+0x121/0x290 [ 373.966978][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 373.966997][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 373.967015][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 373.967034][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 373.967057][ C0] ? __lock_acquire+0xab9/0xd20 [ 373.967079][ C0] ? process_backlog+0x27b/0x900 [ 373.967097][ C0] ? process_backlog+0x27b/0x900 [ 373.967114][ C0] __netif_receive_skb+0x72/0x380 [ 373.967130][ C0] ? rt_spin_unlock+0x65/0x80 [ 373.967149][ C0] ? process_backlog+0x27b/0x900 [ 373.967165][ C0] process_backlog+0x31e/0x900 [ 373.967188][ C0] __napi_poll+0xb3/0x540 [ 373.967207][ C0] net_rx_action+0x707/0xe00 [ 373.967233][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 373.967252][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 373.967275][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 373.967296][ C0] handle_softirqs+0x22c/0x710 [ 373.967317][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 373.967339][ C0] __local_bh_enable_ip+0x179/0x270 [ 373.967355][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 373.967377][ C0] ? wg_index_hashtable_insert+0x35/0x8c0 [ 373.967398][ C0] ? wg_index_hashtable_insert+0x35/0x8c0 [ 373.967416][ C0] wg_index_hashtable_insert+0x857/0x8c0 [ 373.967435][ C0] ? wg_index_hashtable_insert+0x35/0x8c0 [ 373.967457][ C0] wg_noise_handshake_create_response+0x715/0x970 [ 373.967478][ C0] ? __pfx_wg_noise_handshake_create_response+0x10/0x10 [ 373.967502][ C0] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 373.967523][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 373.967554][ C0] ? __pfx_preempt_schedule_notrace+0x10/0x10 [ 373.967582][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 373.967602][ C0] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 373.967618][ C0] ? __local_bh_enable_ip+0x1b2/0x270 [ 373.967641][ C0] ? ktime_get_coarse_with_offset+0xfb/0x140 [ 373.967658][ C0] wg_packet_send_handshake_response+0xf6/0x2d0 [ 373.967679][ C0] ? __pfx_wg_packet_send_handshake_response+0x10/0x10 [ 373.967697][ C0] ? wg_socket_set_peer_endpoint_from_skb+0xc8/0x120 [ 373.967726][ C0] wg_packet_handshake_receive_worker+0x6bb/0xfa0 [ 373.967748][ C0] ? wg_packet_handshake_receive_worker+0x14c/0xfa0 [ 373.967770][ C0] ? __pfx_wg_packet_handshake_receive_worker+0x10/0x10 [ 373.967790][ C0] ? register_lock_class+0x51/0x320 [ 373.967810][ C0] ? __lock_acquire+0xab9/0xd20 [ 373.967843][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 373.967862][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 373.967881][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 373.967897][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 373.967915][ C0] process_scheduled_works+0xae1/0x17b0 [ 373.967945][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 373.967969][ C0] worker_thread+0x8a0/0xda0 [ 373.967988][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 373.968011][ C0] ? __kthread_parkme+0x7b/0x200 [ 373.968033][ C0] kthread+0x711/0x8a0 [ 373.968052][ C0] ? __pfx_worker_thread+0x10/0x10 [ 373.968069][ C0] ? __pfx_kthread+0x10/0x10 [ 373.968089][ C0] ? __pfx_kthread+0x10/0x10 [ 373.968108][ C0] ret_from_fork+0x436/0x7d0 [ 373.968127][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 373.968146][ C0] ? __switch_to_asm+0x39/0x70 [ 373.968160][ C0] ? __switch_to_asm+0x33/0x70 [ 373.968173][ C0] ? __pfx_kthread+0x10/0x10 [ 373.968191][ C0] ret_from_fork_asm+0x1a/0x30 [ 373.968213][ C0] [ 373.982016][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 373.982037][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 373.982059][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 373.982070][ T38] Call Trace: [ 373.982078][ T38] [ 373.982087][ T38] dump_stack_lvl+0x99/0x250 [ 373.982116][ T38] ? __asan_memcpy+0x40/0x70 [ 373.982136][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 373.982159][ T38] ? __pfx__printk+0x10/0x10 [ 373.982191][ T38] vpanic+0x281/0x750 [ 373.982216][ T38] ? __pfx_vpanic+0x10/0x10 [ 373.982238][ T38] ? preempt_schedule+0xae/0xc0 [ 373.982270][ T38] ? preempt_schedule_common+0x83/0xd0 [ 373.982300][ T38] panic+0xb9/0xc0 [ 373.982321][ T38] ? __pfx_panic+0x10/0x10 [ 373.982345][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 373.982371][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 373.982395][ T38] watchdog+0xfd2/0xfe0 [ 373.982422][ T38] ? watchdog+0x1de/0xfe0 [ 373.982446][ T38] kthread+0x711/0x8a0 [ 373.982472][ T38] ? __pfx_watchdog+0x10/0x10 [ 373.982491][ T38] ? __pfx_kthread+0x10/0x10 [ 373.982518][ T38] ? __pfx_kthread+0x10/0x10 [ 373.982541][ T38] ret_from_fork+0x436/0x7d0 [ 373.982564][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 373.982590][ T38] ? __switch_to_asm+0x39/0x70 [ 373.982606][ T38] ? __switch_to_asm+0x33/0x70 [ 373.982621][ T38] ? __pfx_kthread+0x10/0x10 [ 373.982643][ T38] ret_from_fork_asm+0x1a/0x30 [ 373.982674][ T38] [ 373.982947][ T38] Kernel Offset: disabled