last executing test programs: 2m43.127816198s ago: executing program 2 (id=532): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000004700)=""/4097, 0x1001}, {&(0x7f0000003700)=""/4074, 0xfea}, {&(0x7f0000000200)=""/115, 0x73}, {&(0x7f0000000780)=""/190, 0xbe}, {&(0x7f00000005c0)=""/172, 0xac}], 0x5}, 0x0) 2m42.677597005s ago: executing program 2 (id=535): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="11002bbd7000fedbdf251b000000100002800600018008000100080000001800018014000200776c616e30"], 0x3c}}, 0x4000) 2m42.320824798s ago: executing program 2 (id=538): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x36}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x17}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f00000001c0)="0101000871a7832e6b7303c3cd59", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) 2m40.802620201s ago: executing program 0 (id=542): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x44, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x4}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x24004180) 2m40.397355596s ago: executing program 0 (id=544): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000480)=[@mask_cswp={0x58, 0x114, 0x9, {{0x8, 0x400}, 0xfffffffffffffffd, 0x0, 0xe, 0x4d6, 0xb3e, 0x0, 0x8, 0x4}}], 0x58, 0x1}, 0x0) 2m40.231029511s ago: executing program 0 (id=545): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6a3, 0xcd7, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x5, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x2, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7f, 0xb}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x14, &(0x7f0000000000)={0x40, 0x30, 0x3, {0x3, 0xe, "dc"}}, 0x0, 0x0, 0x0}, 0x0) 2m39.954523487s ago: executing program 1 (id=547): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0xfffa, @none, 0x200, 0x3}, 0xe) 2m39.757288717s ago: executing program 1 (id=548): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x48800) 2m39.382947001s ago: executing program 1 (id=549): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x1, &(0x7f0000000340)={0x0}) 2m38.674824588s ago: executing program 1 (id=550): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x419, 0x600, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000080)={0x0, 0x1, 0x7, {0x7, 0x30, '\x00\x00\x00\x00\x00'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2m38.603859828s ago: executing program 4 (id=551): unshare(0x22020600) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 2m38.169637507s ago: executing program 0 (id=552): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x97}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m37.571671905s ago: executing program 0 (id=554): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) 2m36.574198687s ago: executing program 1 (id=556): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x2c, r1, 0x1, 0x70bd26, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x2c}}, 0x0) 2m36.318909555s ago: executing program 1 (id=557): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}, {0x4}}]}]}, 0x50}}, 0x4000010) 2m35.792176388s ago: executing program 4 (id=558): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x1}) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000200)=@multiplanar_mmap={0x9, 0xa, 0x4, 0x2, 0xfc, {0x77359400}, {0x1, 0x8, 0x8, 0x6a, 0x2, 0x4, "00200004"}, 0x8, 0x1, {&(0x7f00000000c0)=[{0x400, 0x6, {0x4}, 0x1000}, {0xffffffff, 0x39, {0x4}, 0x80fff}]}, 0x7}) 2m35.623919728s ago: executing program 2 (id=559): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x646, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x7, 0x1, 0x4}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000140)=@fd={0x3, 0x1, 0x4, 0x800, 0x7, {0x0, 0xea60}, {0x4, 0x1, 0x2, 0x3, 0xb2, 0x6, "c809ecaa"}, 0x1000, 0x4, {}, 0x1ff}) 2m35.160198399s ago: executing program 2 (id=560): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) 2m34.750468966s ago: executing program 2 (id=561): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 2m34.536044813s ago: executing program 3 (id=562): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) pidfd_send_signal(r0, 0x3a, &(0x7f0000000480)={0x13, 0xf, 0x3}, 0x0) 2m34.243108331s ago: executing program 3 (id=563): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) sendto$netrom(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) 2m33.578593585s ago: executing program 3 (id=564): unshare(0x8020000) semget$private(0x0, 0x4000, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)) 2m33.567892273s ago: executing program 4 (id=565): unshare(0x60600) r0 = socket(0x1e, 0x4, 0x0) bind$inet6(r0, &(0x7f0000000040)={0x1e, 0xe22, 0x0, @empty, 0xfffffffd}, 0x1c) 2m32.408182263s ago: executing program 3 (id=566): openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x151200, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) acct(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00') 2m32.407177357s ago: executing program 4 (id=567): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000380)=0x1b) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) 2m31.930252397s ago: executing program 4 (id=568): unshare(0x2040400) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) 2m31.845240303s ago: executing program 3 (id=569): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000340)=""/65, 0x41}], 0x1}, 0x9}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000280)=""/123, 0x7b}], 0x1}, 0xfff}], 0x2, 0x0, 0x0) 2m30.885386041s ago: executing program 4 (id=570): sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040844}, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000000)=""/126, &(0x7f0000000080)=0x7e) 2m17.506364153s ago: executing program 0 (id=571): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) recvmsg$kcm(r0, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/43, 0x2b}, 0x100) 2m9.948541092s ago: executing program 32 (id=557): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}, {0x4}}]}]}, 0x50}}, 0x4000010) 1m57.780056508s ago: executing program 33 (id=561): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 1m32.987710545s ago: executing program 3 (id=574): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x1) 1m5.110346609s ago: executing program 34 (id=571): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) recvmsg$kcm(r0, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/43, 0x2b}, 0x100) 57.179362809s ago: executing program 35 (id=570): sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040844}, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000000)=""/126, &(0x7f0000000080)=0x7e) 27.410131391s ago: executing program 36 (id=574): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x1) 0s ago: executing program 8 (id=576): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff, 0x100000}, 0x10) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000fe000000000a0000", 0x1c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.3' (ED25519) to the list of known hosts. [ 91.864022][ T5822] cgroup: Unknown subsys name 'net' [ 92.087083][ T5822] cgroup: Unknown subsys name 'cpuset' [ 92.104740][ T2161] cfg80211: failed to load regulatory.db [ 92.142073][ T5822] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 94.135165][ T5822] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.157562][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.171040][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.185270][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.187038][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.187891][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.224182][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.244513][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.245512][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.273856][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.278202][ T5153] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.278692][ T5153] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.281111][ T5153] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.298162][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.311349][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.330196][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.360890][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.371535][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.372387][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.377851][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.378717][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.486016][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 97.494243][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 97.497473][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 97.503900][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 97.513595][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 98.496178][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 98.533868][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 98.539892][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 98.571615][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 99.043896][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 99.302822][ T5835] Bluetooth: hci0: command tx timeout [ 99.311523][ T5835] Bluetooth: hci1: command tx timeout [ 99.381401][ T5835] Bluetooth: hci2: command tx timeout [ 99.461390][ T5835] Bluetooth: hci3: command tx timeout [ 99.621764][ T5835] Bluetooth: hci4: command tx timeout [ 99.734324][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.735958][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.736450][ T5839] bridge_slave_0: entered allmulticast mode [ 99.738523][ T5839] bridge_slave_0: entered promiscuous mode [ 99.843998][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.844142][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.844289][ T5843] bridge_slave_0: entered allmulticast mode [ 99.846181][ T5843] bridge_slave_0: entered promiscuous mode [ 99.873254][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.873425][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.873719][ T5833] bridge_slave_0: entered allmulticast mode [ 99.877318][ T5833] bridge_slave_0: entered promiscuous mode [ 99.897158][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.897352][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.897973][ T5839] bridge_slave_1: entered allmulticast mode [ 99.901057][ T5839] bridge_slave_1: entered promiscuous mode [ 99.907527][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.907695][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.908290][ T5836] bridge_slave_0: entered allmulticast mode [ 99.918200][ T5836] bridge_slave_0: entered promiscuous mode [ 99.924654][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.924824][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.925051][ T5843] bridge_slave_1: entered allmulticast mode [ 99.928183][ T5843] bridge_slave_1: entered promiscuous mode [ 99.966265][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.966426][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.967023][ T5833] bridge_slave_1: entered allmulticast mode [ 99.970115][ T5833] bridge_slave_1: entered promiscuous mode [ 100.088874][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.089008][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.089153][ T5836] bridge_slave_1: entered allmulticast mode [ 100.092866][ T5836] bridge_slave_1: entered promiscuous mode [ 100.720012][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.836256][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.836518][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.836665][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.836845][ T5846] bridge_slave_0: entered allmulticast mode [ 100.839072][ T5846] bridge_slave_0: entered promiscuous mode [ 100.848140][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.854927][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.860736][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.874999][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.875470][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.875719][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.876011][ T5846] bridge_slave_1: entered allmulticast mode [ 100.891627][ T5846] bridge_slave_1: entered promiscuous mode [ 100.897820][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.996376][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.381470][ T5841] Bluetooth: hci0: command tx timeout [ 101.381580][ T5835] Bluetooth: hci1: command tx timeout [ 101.461610][ T5835] Bluetooth: hci2: command tx timeout [ 101.529853][ T5839] team0: Port device team_slave_0 added [ 101.541536][ T5835] Bluetooth: hci3: command tx timeout [ 101.611591][ T5843] team0: Port device team_slave_0 added [ 101.616756][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.619097][ T5833] team0: Port device team_slave_0 added [ 101.624087][ T5839] team0: Port device team_slave_1 added [ 101.627642][ T5836] team0: Port device team_slave_0 added [ 101.630913][ T5843] team0: Port device team_slave_1 added [ 101.637600][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.640428][ T5833] team0: Port device team_slave_1 added [ 101.707283][ T5835] Bluetooth: hci4: command tx timeout [ 101.771439][ T5836] team0: Port device team_slave_1 added [ 102.608836][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.608848][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.608867][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.711659][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.711678][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.711704][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.715991][ T5846] team0: Port device team_slave_0 added [ 102.722491][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.722531][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.722562][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.724493][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.724520][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.724550][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.726174][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.726188][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.726219][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.729019][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.729035][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.729067][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.742283][ T5846] team0: Port device team_slave_1 added [ 102.781422][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.781442][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.781475][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.783332][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.783347][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.783377][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.110753][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.110766][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.110784][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.306421][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.306440][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.306470][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.461623][ T5841] Bluetooth: hci0: command tx timeout [ 103.461742][ T5835] Bluetooth: hci1: command tx timeout [ 103.541587][ T5835] Bluetooth: hci2: command tx timeout [ 103.622880][ T5835] Bluetooth: hci3: command tx timeout [ 103.741101][ T5843] hsr_slave_0: entered promiscuous mode [ 103.742894][ T5843] hsr_slave_1: entered promiscuous mode [ 103.781635][ T5835] Bluetooth: hci4: command tx timeout [ 103.833133][ T5839] hsr_slave_0: entered promiscuous mode [ 103.834589][ T5839] hsr_slave_1: entered promiscuous mode [ 103.835705][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 103.835820][ T5839] Cannot create hsr debugfs directory [ 103.936255][ T5833] hsr_slave_0: entered promiscuous mode [ 103.937268][ T5833] hsr_slave_1: entered promiscuous mode [ 103.937943][ T5833] debugfs: 'hsr0' already exists in 'hsr' [ 103.937965][ T5833] Cannot create hsr debugfs directory [ 103.949562][ T5836] hsr_slave_0: entered promiscuous mode [ 103.951138][ T5836] hsr_slave_1: entered promiscuous mode [ 103.953155][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 103.953184][ T5836] Cannot create hsr debugfs directory [ 104.439067][ T5846] hsr_slave_0: entered promiscuous mode [ 104.440080][ T5846] hsr_slave_1: entered promiscuous mode [ 104.440778][ T5846] debugfs: 'hsr0' already exists in 'hsr' [ 104.440800][ T5846] Cannot create hsr debugfs directory [ 105.541551][ T5841] Bluetooth: hci0: command tx timeout [ 105.541600][ T5835] Bluetooth: hci1: command tx timeout [ 105.621602][ T5835] Bluetooth: hci2: command tx timeout [ 105.701462][ T5835] Bluetooth: hci3: command tx timeout [ 105.861492][ T5835] Bluetooth: hci4: command tx timeout [ 106.102824][ T5843] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 106.152997][ T5843] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 106.186464][ T5843] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 106.225015][ T5843] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 106.386021][ T5839] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 106.425125][ T5839] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 106.475976][ T5839] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 106.527892][ T5839] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 106.699842][ T5836] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 106.736092][ T5836] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 106.787039][ T5836] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 106.832398][ T5836] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 106.995971][ T5833] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 107.049408][ T5833] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 107.094379][ T5833] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 107.149852][ T5833] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 107.278009][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.341383][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 107.393563][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 107.447189][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 107.506675][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 107.555091][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.608669][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.609315][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.667368][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.667603][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.711613][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.836067][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.895007][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.897313][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.897467][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.955180][ T3195] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.955342][ T3195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.057047][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.108815][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.126456][ T3603] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.126611][ T3603] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.200833][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.201007][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.315513][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.327951][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.383594][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.383817][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.444379][ T3509] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.444563][ T3509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.508010][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.587909][ T1023] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.588222][ T1023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.625944][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.688489][ T1023] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.688768][ T1023] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.081961][ T5843] veth0_vlan: entered promiscuous mode [ 109.104791][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.193260][ T5843] veth1_vlan: entered promiscuous mode [ 109.449011][ T5843] veth0_macvtap: entered promiscuous mode [ 109.522757][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.523911][ T5839] veth0_vlan: entered promiscuous mode [ 109.525926][ T5843] veth1_macvtap: entered promiscuous mode [ 109.594099][ T5839] veth1_vlan: entered promiscuous mode [ 109.617443][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.678271][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.743467][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.755587][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.806911][ T1023] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.840474][ T1023] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.858984][ T1023] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.868535][ T1023] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.007072][ T5836] veth0_vlan: entered promiscuous mode [ 110.036789][ T5839] veth0_macvtap: entered promiscuous mode [ 110.135766][ T5836] veth1_vlan: entered promiscuous mode [ 110.153141][ T5839] veth1_macvtap: entered promiscuous mode [ 110.371077][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.392937][ T5846] veth0_vlan: entered promiscuous mode [ 110.399533][ T3603] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.399560][ T3603] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.437520][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.530155][ T3603] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.537102][ T5846] veth1_vlan: entered promiscuous mode [ 110.549632][ T3603] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.567584][ T5836] veth0_macvtap: entered promiscuous mode [ 110.569280][ T57] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.581992][ T1023] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.582013][ T1023] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.589286][ T57] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.643579][ T5836] veth1_macvtap: entered promiscuous mode [ 110.658079][ T5833] veth0_vlan: entered promiscuous mode [ 110.813975][ T5833] veth1_vlan: entered promiscuous mode [ 110.954020][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.048782][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.050752][ T5846] veth0_macvtap: entered promiscuous mode [ 111.128206][ T5846] veth1_macvtap: entered promiscuous mode [ 111.144142][ T3603] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.175833][ T3509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.175856][ T3509] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.180656][ T3603] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.236090][ T3603] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.276763][ T3603] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.351809][ T5833] veth0_macvtap: entered promiscuous mode [ 111.442261][ T3603] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.442283][ T3603] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.464740][ T5833] veth1_macvtap: entered promiscuous mode [ 111.470437][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.577571][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.688414][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.711757][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.718767][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.753769][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.756159][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.904064][ T3603] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.904085][ T3603] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.909509][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.005276][ T5958] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 112.059918][ T5960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10'. [ 112.184328][ T1023] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.189670][ T1023] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.210011][ T1023] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.211105][ T3509] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.211310][ T3509] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.286351][ T1023] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.697161][ T5971] netlink: 'syz.3.13': attribute type 66 has an invalid length. [ 112.748242][ T3603] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.748264][ T3603] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.122644][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.122665][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.288240][ T161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.288262][ T161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.503619][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.503641][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.532752][ T5986] capability: warning: `syz.0.19' uses deprecated v2 capabilities in a way that may be insecure [ 113.672759][ T5918] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 113.793571][ T38] audit: type=1326 audit(1756054290.533:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5976 comm="syz.3.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b25baebe9 code=0x7fc00000 [ 113.924420][ T5918] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 113.925386][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.928429][ T5918] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 113.928457][ T5918] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 113.928477][ T5918] usb 2-1: Manufacturer: syz [ 114.102361][ T5918] usb 2-1: config 0 descriptor?? [ 114.551283][ T5918] rc_core: IR keymap rc-hauppauge not found [ 114.551304][ T5918] Registered IR keymap rc-empty [ 114.555390][ T5918] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 114.620055][ T5918] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input5 [ 114.733450][ T6006] rc rc0: two consecutive events of type space [ 114.924837][ T5988] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 114.924866][ T5988] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 115.062705][ T31] usb 2-1: USB disconnect, device number 2 [ 115.269796][ T5988] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 115.269821][ T5988] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 115.650785][ T5988] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 115.650810][ T5988] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 116.068517][ T5988] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 116.068543][ T5988] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 116.324842][ T5988] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 116.324867][ T5988] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 116.404073][ T6040] warning: `syz.4.34' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 116.870634][ T6046] tipc: Enabling of bearer rejected, media not registered [ 117.023103][ T6056] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.40'. [ 118.266003][ T6096] QAT: Invalid ioctl 21531 [ 118.411758][ T5903] kernel write not supported for file /input/mouse0 (pid: 5903 comm: kworker/0:3) [ 119.127206][ T6122] netlink: 'syz.3.66': attribute type 5 has an invalid length. [ 119.363398][ T6132] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 119.612691][ T6139] netlink: 24 bytes leftover after parsing attributes in process `syz.0.71'. [ 120.331309][ T6154] binder_alloc: binder_alloc_mmap_handler: 6153 200000ffc000-200001000000 already mapped failed -16 [ 121.241596][ T6179] ======================================================= [ 121.241596][ T6179] WARNING: The mand mount option has been deprecated and [ 121.241596][ T6179] and is ignored by this kernel. Remove the mand [ 121.241596][ T6179] option from the mount to silence this warning. [ 121.241596][ T6179] ======================================================= [ 121.511223][ T38] audit: type=1326 audit(1756054298.243:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6184 comm="syz.4.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7a2e0ebe9 code=0x7ffc0000 [ 121.517625][ T38] audit: type=1326 audit(1756054298.263:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6184 comm="syz.4.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fa7a2e0ebe9 code=0x7ffc0000 [ 121.517680][ T38] audit: type=1326 audit(1756054298.263:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6184 comm="syz.4.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7a2e0ebe9 code=0x7ffc0000 [ 121.517725][ T38] audit: type=1326 audit(1756054298.263:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6184 comm="syz.4.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7a2e0ebe9 code=0x7ffc0000 [ 121.577183][ T38] audit: type=1326 audit(1756054298.323:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6184 comm="syz.4.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7fa7a2e0ebe9 code=0x7ffc0000 [ 121.736940][ T38] audit: type=1326 audit(1756054298.483:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6184 comm="syz.4.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7a2e0ebe9 code=0x7ffc0000 [ 121.736999][ T38] audit: type=1326 audit(1756054298.483:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6184 comm="syz.4.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7a2e0ebe9 code=0x7ffc0000 [ 122.336262][ T6210] netlink: 8 bytes leftover after parsing attributes in process `syz.3.99'. [ 122.769563][ T6219] x_tables: ip6_tables: LOG.0 target: invalid size 32 (kernel) != (user) 40 [ 122.876431][ T6223] netlink: 'syz.0.104': attribute type 25 has an invalid length. [ 123.156978][ T6232] CUSE: info not properly terminated [ 123.440523][ T6243] IPVS: Error connecting to the multicast addr [ 123.502816][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 123.664283][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.664317][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.664357][ T10] usb 2-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 123.664381][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.734754][ T10] usb 2-1: config 0 descriptor?? [ 124.049435][ T5918] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 124.228274][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.228328][ T5918] usb 3-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00 [ 124.228352][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.270575][ T10] elo 0003:04E7:0030.0001: item fetching failed at offset 5/7 [ 124.281613][ T10] elo 0003:04E7:0030.0001: parse failed [ 124.281730][ T10] elo 0003:04E7:0030.0001: probe with driver elo failed with error -22 [ 124.310406][ T5918] usb 3-1: config 0 descriptor?? [ 124.475635][ T2161] usb 2-1: USB disconnect, device number 3 [ 124.784102][ T5918] wacom 0003:056A:0016.0002: Unknown device_type for 'HID 056a:0016'. Assuming pen. [ 124.823732][ T5918] wacom 0003:056A:0016.0002: hidraw0: USB HID v0.00 Device [HID 056a:0016] on usb-dummy_hcd.2-1/input0 [ 124.829416][ T5918] input: Wacom Graphire4 6x8 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0016.0002/input/input6 [ 125.036594][ T6019] usb 3-1: USB disconnect, device number 2 [ 125.294487][ T6278] nbd: socks must be embedded in a SOCK_ITEM attr [ 125.425645][ T6274] fido_id[6274]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 126.680636][ T6323] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 126.689588][ T6324] netlink: 12 bytes leftover after parsing attributes in process `syz.3.142'. [ 126.913936][ T6329] netlink: 16 bytes leftover after parsing attributes in process `syz.0.145'. [ 127.237631][ T6344] binder: 6341:6344 ioctl c00c620f 200000000500 returned -22 [ 127.411303][ T5919] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 127.583008][ T5919] usb 1-1: Using ep0 maxpacket: 16 [ 127.592267][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.592302][ T5919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.592343][ T5919] usb 1-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.00 [ 127.592367][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.657489][ T5919] usb 1-1: config 0 descriptor?? [ 128.003983][ T6360] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 128.226325][ T5919] kye 0003:0458:5017.0003: control desc unexpectedly large [ 128.226348][ T5919] kye 0003:0458:5017.0003: control desc unexpectedly large [ 128.313941][ T5919] input: HID 0458:5017 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5017.0003/input/input9 [ 128.482577][ T5919] kye 0003:0458:5017.0003: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5017] on usb-dummy_hcd.0-1/input0 [ 128.561659][ T5919] usb 1-1: USB disconnect, device number 2 [ 128.691303][ T2161] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 128.854193][ T2161] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 128.854223][ T2161] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 128.854243][ T2161] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 128.854281][ T2161] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 128.854322][ T2161] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 128.854345][ T2161] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 128.872775][ T2161] usb 3-1: string descriptor 0 read error: -22 [ 128.872963][ T2161] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 128.872990][ T2161] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.922885][ T2161] usb 3-1: config 0 descriptor?? [ 128.974901][ T2161] hub 3-1:0.0: bad descriptor, ignoring hub [ 128.974944][ T2161] hub 3-1:0.0: probe with driver hub failed with error -5 [ 129.150123][ T6386] fido_id[6386]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 129.212015][ T2161] usb 3-1: USB disconnect, device number 3 [ 129.448928][ T6394] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.401248][ T5918] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 130.435190][ T38] audit: type=1326 audit(1756054307.183:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6428 comm="syz.3.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b25baebe9 code=0x7ffc0000 [ 130.445529][ T38] audit: type=1326 audit(1756054307.193:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6428 comm="syz.3.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b25baebe9 code=0x7ffc0000 [ 130.461368][ T5911] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 130.465269][ T38] audit: type=1326 audit(1756054307.213:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6428 comm="syz.3.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6b25bad69f code=0x7ffc0000 [ 130.465330][ T38] audit: type=1326 audit(1756054307.213:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6428 comm="syz.3.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b25baebe9 code=0x7ffc0000 [ 130.465381][ T38] audit: type=1326 audit(1756054307.213:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6428 comm="syz.3.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b25baebe9 code=0x7ffc0000 [ 130.613945][ T5911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 130.613978][ T5911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 130.614005][ T5911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 130.618028][ T5911] usb 3-1: New USB device found, idVendor=1949, idProduct=85a5, bcdDevice=a3.3a [ 130.618057][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.618078][ T5911] usb 3-1: Product: syz [ 130.618093][ T5911] usb 3-1: Manufacturer: syz [ 130.618107][ T5911] usb 3-1: SerialNumber: syz [ 130.631304][ T5918] usb 1-1: Using ep0 maxpacket: 16 [ 130.668047][ T5911] usb 3-1: config 0 descriptor?? [ 130.676745][ T5918] usb 1-1: config 1 has an invalid descriptor of length 171, skipping remainder of the config [ 130.676770][ T5918] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 130.700793][ T5918] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 130.700823][ T5918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.700844][ T5918] usb 1-1: Product: syz [ 130.700858][ T5918] usb 1-1: Manufacturer: syz [ 130.700874][ T5918] usb 1-1: SerialNumber: syz [ 130.939490][ T6437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.190'. [ 130.963446][ T2161] usb 3-1: USB disconnect, device number 4 [ 131.009994][ T5918] usb 1-1: 0:2 : does not exist [ 131.010122][ T5918] usb 1-1: unit 9 not found! [ 131.306589][ T5918] usb 1-1: USB disconnect, device number 3 [ 131.389943][ T6443] geneve2: entered promiscuous mode [ 131.513769][ T5896] udevd[5896]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 131.822728][ T6457] netlink: 44 bytes leftover after parsing attributes in process `syz.2.200'. [ 131.822752][ T6457] tc_dump_action: action bad kind [ 132.708626][ T6484] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 133.443872][ T6509] netlink: 'syz.1.222': attribute type 5 has an invalid length. [ 133.515505][ T6509] ip6erspan0: entered promiscuous mode [ 133.919818][ T6525] libceph: resolve '00' (ret=-3): failed [ 134.351352][ T5918] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 134.531219][ T5918] usb 5-1: Using ep0 maxpacket: 8 [ 134.533846][ T5918] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 134.533872][ T5918] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.533891][ T5918] usb 5-1: config 0 has no interface number 0 [ 134.533937][ T5918] usb 5-1: config 0 interface 52 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 134.533963][ T5918] usb 5-1: config 0 interface 52 has no altsetting 0 [ 134.540877][ T5918] usb 5-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 134.540905][ T5918] usb 5-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 134.540926][ T5918] usb 5-1: Manufacturer: syz [ 134.575477][ T5918] usb 5-1: config 0 descriptor?? [ 134.827928][ T6552] bond0: (slave gretap0): Opening slave failed [ 135.002419][ T2161] usb 5-1: USB disconnect, device number 2 [ 135.022712][ T6554] geneve1: entered allmulticast mode [ 135.432990][ T6566] ip6gre1: entered allmulticast mode [ 135.791262][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 135.944819][ T6584] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 135.952857][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 135.955607][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.955636][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 135.955697][ T10] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 135.955726][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 135.955755][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 135.955803][ T10] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 135.955829][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.989978][ T6571] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 136.045067][ T10] hub 3-1:1.0: bad descriptor, ignoring hub [ 136.045113][ T10] hub 3-1:1.0: probe with driver hub failed with error -5 [ 136.069360][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 136.069387][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 136.154010][ T10] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 136.154047][ T10] cdc_wdm 3-1:1.0: Unknown control protocol [ 136.254169][ T10] usb 3-1: USB disconnect, device number 5 [ 136.482736][ T38] audit: type=1326 audit(1756054313.233:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6595 comm="syz.4.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7a2e0ebe9 code=0x7ffc0000 [ 136.482792][ T38] audit: type=1326 audit(1756054313.233:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6595 comm="syz.4.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7a2e0ebe9 code=0x7ffc0000 [ 136.511539][ T38] audit: type=1326 audit(1756054313.263:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6595 comm="syz.4.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7fa7a2e0ebe9 code=0x7ffc0000 [ 136.632887][ T38] audit: type=1326 audit(1756054313.373:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6595 comm="syz.4.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7a2e0ebe9 code=0x7ffc0000 [ 136.632946][ T38] audit: type=1326 audit(1756054313.373:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6595 comm="syz.4.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7a2e0ebe9 code=0x7ffc0000 [ 136.791598][ T6605] dlm: non-version read from control device 8192 [ 136.999569][ T6611] netlink: 20 bytes leftover after parsing attributes in process `syz.4.270'. [ 137.049615][ T6612] [U] v3f"S/4:XTzWtlW= [ 137.049759][ T6612] [U] J"e:" [ 137.169497][ T6617] cifs: Unknown parameter '[bIT&:"1:ӭ'4,Zz-#F<]%gC [ 137.169497][ T6617] SȘȞZ6' [ 138.188625][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.188729][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.335287][ T6653] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.290'. [ 138.464895][ C0] vkms_vblank_simulate: vblank timer overrun [ 138.503822][ C0] vkms_vblank_simulate: vblank timer overrun [ 138.578298][ C0] vkms_vblank_simulate: vblank timer overrun [ 138.708142][ C0] vkms_vblank_simulate: vblank timer overrun [ 138.773060][ T6661] syz.4.294 (6661) used greatest stack depth: 18808 bytes left [ 138.786750][ C0] vkms_vblank_simulate: vblank timer overrun [ 138.824605][ C0] vkms_vblank_simulate: vblank timer overrun [ 138.874471][ C0] vkms_vblank_simulate: vblank timer overrun [ 138.904718][ C0] vkms_vblank_simulate: vblank timer overrun [ 138.937923][ C0] vkms_vblank_simulate: vblank timer overrun [ 138.987823][ C0] vkms_vblank_simulate: vblank timer overrun [ 139.123229][ C0] vkms_vblank_simulate: vblank timer overrun [ 139.153752][ C0] vkms_vblank_simulate: vblank timer overrun [ 139.221208][ C0] vkms_vblank_simulate: vblank timer overrun [ 139.269348][ C0] vkms_vblank_simulate: vblank timer overrun [ 139.320722][ C0] vkms_vblank_simulate: vblank timer overrun [ 139.392972][ C0] vkms_vblank_simulate: vblank timer overrun [ 139.458799][ C0] vkms_vblank_simulate: vblank timer overrun [ 139.487164][ C0] vkms_vblank_simulate: vblank timer overrun [ 139.511480][ T38] audit: type=1326 audit(1756054316.243:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6669 comm="syz.2.299" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8f07ccebe9 code=0x0 [ 139.540189][ C0] vkms_vblank_simulate: vblank timer overrun [ 139.588871][ C0] vkms_vblank_simulate: vblank timer overrun [ 139.652607][ C0] vkms_vblank_simulate: vblank timer overrun [ 139.689207][ C0] vkms_vblank_simulate: vblank timer overrun [ 139.702580][ T6675] devtmpfs: Too few inodes for current use [ 139.736352][ C0] vkms_vblank_simulate: vblank timer overrun [ 139.803866][ C0] vkms_vblank_simulate: vblank timer overrun [ 139.869270][ C0] vkms_vblank_simulate: vblank timer overrun [ 139.957310][ C0] vkms_vblank_simulate: vblank timer overrun [ 140.002854][ C0] vkms_vblank_simulate: vblank timer overrun [ 140.087107][ C0] vkms_vblank_simulate: vblank timer overrun [ 140.152984][ C0] vkms_vblank_simulate: vblank timer overrun [ 140.285644][ C0] vkms_vblank_simulate: vblank timer overrun [ 140.358721][ C0] vkms_vblank_simulate: vblank timer overrun [ 140.389973][ C0] vkms_vblank_simulate: vblank timer overrun [ 140.436334][ C0] vkms_vblank_simulate: vblank timer overrun [ 140.486478][ C0] vkms_vblank_simulate: vblank timer overrun [ 140.576806][ C0] vkms_vblank_simulate: vblank timer overrun [ 140.686148][ C0] vkms_vblank_simulate: vblank timer overrun [ 140.753027][ C0] vkms_vblank_simulate: vblank timer overrun [ 140.823771][ C0] vkms_vblank_simulate: vblank timer overrun [ 140.852780][ C0] vkms_vblank_simulate: vblank timer overrun [ 140.888753][ C0] vkms_vblank_simulate: vblank timer overrun [ 141.021511][ C0] vkms_vblank_simulate: vblank timer overrun [ 141.093563][ C0] vkms_vblank_simulate: vblank timer overrun [ 141.158956][ C0] vkms_vblank_simulate: vblank timer overrun [ 141.188486][ C0] vkms_vblank_simulate: vblank timer overrun [ 141.218971][ C0] vkms_vblank_simulate: vblank timer overrun [ 141.285922][ C0] vkms_vblank_simulate: vblank timer overrun [ 141.354023][ C0] vkms_vblank_simulate: vblank timer overrun [ 141.403328][ C0] vkms_vblank_simulate: vblank timer overrun [ 141.456461][ C0] vkms_vblank_simulate: vblank timer overrun [ 141.552524][ C0] vkms_vblank_simulate: vblank timer overrun [ 141.606701][ C0] vkms_vblank_simulate: vblank timer overrun [ 141.685406][ C0] vkms_vblank_simulate: vblank timer overrun [ 141.737541][ C0] vkms_vblank_simulate: vblank timer overrun [ 142.152201][ C0] vkms_vblank_simulate: vblank timer overrun [ 142.309127][ C0] vkms_vblank_simulate: vblank timer overrun [ 142.386721][ C0] vkms_vblank_simulate: vblank timer overrun [ 142.494095][ C0] vkms_vblank_simulate: vblank timer overrun [ 142.555885][ C0] vkms_vblank_simulate: vblank timer overrun [ 142.585547][ C0] vkms_vblank_simulate: vblank timer overrun [ 142.637304][ C0] vkms_vblank_simulate: vblank timer overrun [ 142.687261][ C0] vkms_vblank_simulate: vblank timer overrun [ 142.752188][ C0] vkms_vblank_simulate: vblank timer overrun [ 144.301753][ T6686] netlink: 'syz.3.305': attribute type 10 has an invalid length. [ 144.918058][ T6686] veth1_macvtap: left promiscuous mode [ 145.565192][ T5911] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 145.724812][ T5911] usb 5-1: Using ep0 maxpacket: 32 [ 145.727731][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.727764][ T5911] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.727804][ T5911] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 145.727829][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.810032][ T5911] usb 5-1: config 0 descriptor?? [ 145.865833][ T5911] hub 5-1:0.0: USB hub found [ 146.135619][ T5911] hub 5-1:0.0: 1 port detected [ 146.381759][ T5911] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 146.381787][ T5911] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 146.442097][ T5911] usbhid 5-1:0.0: can't add hid device: -71 [ 146.442247][ T5911] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 146.555099][ T5911] usb 5-1: USB disconnect, device number 3 [ 146.751818][ T6705] gretap0: entered promiscuous mode [ 146.752210][ T6705] vlan2: entered promiscuous mode [ 151.053259][ T6737] syz.1.328 (6737) used greatest stack depth: 18552 bytes left [ 155.224892][ T6797] netlink: 79 bytes leftover after parsing attributes in process `syz.0.353'. [ 155.225020][ T6797] netlink: 79 bytes leftover after parsing attributes in process `syz.0.353'. [ 155.225403][ T6796] netlink: 12 bytes leftover after parsing attributes in process `syz.2.355'. [ 156.727233][ T6811] netlink: 'syz.0.362': attribute type 10 has an invalid length. [ 156.791646][ T6812] netlink: 4 bytes leftover after parsing attributes in process `syz.0.362'. [ 157.024232][ T6811] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.025569][ T6811] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.167058][ T6811] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.167262][ T6811] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.169458][ T6811] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.169670][ T6811] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.333573][ T6811] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 157.333803][ T6812] bridge_slave_1: left allmulticast mode [ 157.333831][ T6812] bridge_slave_1: left promiscuous mode [ 157.395343][ T6812] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.460467][ T6817] netlink: 8 bytes leftover after parsing attributes in process `syz.4.364'. [ 157.530827][ T6811] syz.0.362 (6811) used greatest stack depth: 18072 bytes left [ 158.059478][ T6812] bridge_slave_0: left allmulticast mode [ 158.059514][ T6812] bridge_slave_0: left promiscuous mode [ 158.059805][ T6812] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.297873][ T6824] cgroup: noprefix used incorrectly [ 158.485500][ T6826] netlink: 'syz.4.369': attribute type 2 has an invalid length. [ 159.436515][ T6812] bond0: (slave bridge0): Releasing backup interface [ 160.693186][ T6814] netlink: 264 bytes leftover after parsing attributes in process `syz.1.363'. [ 160.732831][ T6828] : renamed from vlan0 (while UP) [ 163.050231][ T6856] netlink: 8 bytes leftover after parsing attributes in process `syz.4.384'. [ 163.161268][ T6860] program syz.2.385 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 165.602250][ T6898] netlink: 'syz.1.405': attribute type 6 has an invalid length. [ 165.602274][ T6898] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.405'. [ 166.756015][ T38] audit: type=1326 audit(1756054343.503:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6915 comm="syz.2.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f07ccebe9 code=0x7ffc0000 [ 166.756074][ T38] audit: type=1326 audit(1756054343.503:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6915 comm="syz.2.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f07ccebe9 code=0x7ffc0000 [ 166.840314][ T38] audit: type=1326 audit(1756054343.583:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6915 comm="syz.2.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8f07ccebe9 code=0x7ffc0000 [ 166.840371][ T38] audit: type=1326 audit(1756054343.583:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6915 comm="syz.2.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f07ccebe9 code=0x7ffc0000 [ 166.906648][ T38] audit: type=1326 audit(1756054343.653:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6915 comm="syz.2.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f8f07ccebe9 code=0x7ffc0000 [ 166.906707][ T38] audit: type=1326 audit(1756054343.653:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6915 comm="syz.2.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f07ccebe9 code=0x7ffc0000 [ 166.906755][ T38] audit: type=1326 audit(1756054343.653:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6915 comm="syz.2.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f07ccebe9 code=0x7ffc0000 [ 168.711330][ T2161] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 168.873949][ T2161] usb 4-1: config 0 interface 0 has no altsetting 0 [ 168.873994][ T2161] usb 4-1: New USB device found, idVendor=1e7d, idProduct=3264, bcdDevice= 0.00 [ 168.874018][ T2161] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.011980][ T2161] usb 4-1: config 0 descriptor?? [ 169.596279][ T2161] isku 0003:1E7D:3264.0004: unknown main item tag 0x0 [ 169.596324][ T2161] isku 0003:1E7D:3264.0004: unknown main item tag 0x0 [ 169.596351][ T2161] isku 0003:1E7D:3264.0004: unknown main item tag 0x0 [ 169.596378][ T2161] isku 0003:1E7D:3264.0004: unknown main item tag 0x0 [ 169.596405][ T2161] isku 0003:1E7D:3264.0004: unknown main item tag 0x0 [ 169.596431][ T2161] isku 0003:1E7D:3264.0004: unknown main item tag 0x0 [ 169.596457][ T2161] isku 0003:1E7D:3264.0004: unknown main item tag 0x0 [ 169.705582][ T2161] isku 0003:1E7D:3264.0004: hidraw0: USB HID vf.fe Device [HID 1e7d:3264] on usb-dummy_hcd.3-1/input0 [ 169.794974][ T2161] usb 4-1: USB disconnect, device number 2 [ 171.112992][ T6977] vlan2: entered promiscuous mode [ 171.113016][ T6977] macvtap0: entered promiscuous mode [ 171.309187][ T6980] netlink: 4 bytes leftover after parsing attributes in process `syz.1.441'. [ 173.418757][ T7000] fido_id[7000]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 175.248540][ T7011] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 175.248540][ T7011] The task syz.3.452 (7011) triggered the difference, watch for misbehavior. [ 175.418579][ T7013] syz.1.453 (7013) used greatest stack depth: 17224 bytes left [ 177.957293][ T7042] Bluetooth: MGMT ver 1.23 [ 180.321281][ T5911] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 180.486197][ T5911] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 180.486226][ T5911] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 180.486246][ T5911] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 180.486266][ T5911] usb 4-1: config 220 has no interface number 2 [ 180.486344][ T5911] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 180.486372][ T5911] usb 4-1: config 220 interface 0 has no altsetting 0 [ 180.486391][ T5911] usb 4-1: config 220 interface 76 has no altsetting 0 [ 180.486410][ T5911] usb 4-1: config 220 interface 1 has no altsetting 0 [ 180.571326][ T5911] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 180.571358][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.571379][ T5911] usb 4-1: Product: syz [ 180.571394][ T5911] usb 4-1: Manufacturer: syz [ 180.571409][ T5911] usb 4-1: SerialNumber: syz [ 181.032115][ T5911] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 181.032160][ T5911] usb 4-1: No valid video chain found. [ 181.032292][ T5911] usb 4-1: selecting invalid altsetting 0 [ 181.148551][ T5911] usb 4-1: selecting invalid altsetting 0 [ 181.148594][ T5911] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 181.228167][ T5911] usb 4-1: USB disconnect, device number 3 [ 184.141810][ T5911] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 184.293997][ T5911] usb 4-1: config 0 has an invalid interface number: 93 but max is 0 [ 184.294027][ T5911] usb 4-1: config 0 has no interface number 0 [ 184.298932][ T5911] usb 4-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 184.298962][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.298983][ T5911] usb 4-1: Product: syz [ 184.298998][ T5911] usb 4-1: Manufacturer: syz [ 184.299013][ T5911] usb 4-1: SerialNumber: syz [ 184.417076][ T5911] usb 4-1: config 0 descriptor?? [ 184.733115][ T5911] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state. [ 184.786349][ T5911] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 184.808357][ T5911] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 184.808518][ T5911] usb 4-1: media controller created [ 184.910492][ T5911] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 185.356983][ T5911] DVB: Unable to find symbol dib7000p_attach() [ 185.357000][ T5911] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 185.357015][ T5911] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 185.357996][ T5911] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 185.358056][ T5911] usb 4-1: media controller created [ 185.423045][ T5911] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 185.474663][ T5911] dib0700: the master dib7090 has to be initialized first [ 185.474680][ T5911] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 185.883423][ T5911] rc_core: IR keymap rc-dib0700-rc5 not found [ 185.883448][ T5911] Registered IR keymap rc-empty [ 185.884161][ T5911] dvb-usb: could not initialize remote control. [ 185.884174][ T5911] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected. [ 186.320037][ T6019] usb 4-1: USB disconnect, device number 4 [ 186.525072][ T6019] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected. [ 186.601864][ T2161] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 186.751980][ T2161] usb 3-1: Using ep0 maxpacket: 8 [ 186.754788][ T2161] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 186.754816][ T2161] usb 3-1: config 179 has no interface number 0 [ 186.754866][ T2161] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 186.754895][ T2161] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 186.754924][ T2161] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 186.754951][ T2161] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 186.754978][ T2161] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 186.755023][ T2161] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 186.755047][ T2161] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.890504][ T7123] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 187.443944][ T7123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.739608][ T7123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.323860][ T5903] usb 3-1: USB disconnect, device number 6 [ 189.323891][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 189.324271][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 190.592920][ T7145] bridge0: entered promiscuous mode [ 190.601737][ T7145] macsec1: entered promiscuous mode [ 191.221377][ T2161] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 191.299231][ T7153] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 191.299631][ T7153] block device autoloading is deprecated and will be removed. [ 191.378665][ T2161] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.378699][ T2161] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.378739][ T2161] usb 5-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 191.378763][ T2161] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.515264][ T2161] usb 5-1: config 0 descriptor?? [ 192.160252][ T2161] ortek 0003:05A4:2000.0005: item fetching failed at offset 3/5 [ 192.184063][ T2161] ortek 0003:05A4:2000.0005: probe with driver ortek failed with error -22 [ 192.344898][ T2161] usb 5-1: USB disconnect, device number 4 [ 192.432443][ T5911] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 192.614629][ T5911] usb 2-1: config 0 has an invalid interface number: 93 but max is 0 [ 192.614658][ T5911] usb 2-1: config 0 has no interface number 0 [ 192.637785][ T5911] usb 2-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 192.637815][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.637837][ T5911] usb 2-1: Product: syz [ 192.637852][ T5911] usb 2-1: Manufacturer: syz [ 192.637867][ T5911] usb 2-1: SerialNumber: syz [ 192.690250][ T5911] usb 2-1: config 0 descriptor?? [ 193.146155][ T5911] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state. [ 193.194684][ T5911] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 193.232351][ T7165] netlink: 4 bytes leftover after parsing attributes in process `syz.0.520'. [ 193.246067][ T5911] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 193.246132][ T5911] usb 2-1: media controller created [ 193.250340][ T5911] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 193.671497][ T5911] DVB: Unable to find symbol dib7000p_attach() [ 193.671515][ T5911] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 193.671530][ T5911] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 193.672597][ T5911] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 193.672657][ T5911] usb 2-1: media controller created [ 193.751418][ T5911] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 193.799737][ T5911] dib0700: the master dib7090 has to be initialized first [ 193.799753][ T5911] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 194.141338][ T5911] rc_core: IR keymap rc-dib0700-rc5 not found [ 194.141361][ T5911] Registered IR keymap rc-empty [ 194.167329][ T5911] dvb-usb: could not initialize remote control. [ 194.167344][ T5911] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected. [ 194.468046][ T2161] usb 2-1: USB disconnect, device number 4 [ 194.668832][ T2161] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected. [ 195.821331][ T2161] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 196.036187][ T2161] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 196.036218][ T2161] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.036238][ T2161] usb 2-1: Product: syz [ 196.036253][ T2161] usb 2-1: Manufacturer: syz [ 196.036268][ T2161] usb 2-1: SerialNumber: syz [ 196.132364][ T2161] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 196.256991][ T31] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 198.182345][ T31] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 198.761232][ T10] usb 2-1: USB disconnect, device number 5 [ 198.769658][ T31] ath9k_htc: Failed to initialize the device [ 199.503439][ T10] usb 2-1: ath9k_htc: USB layer deinitialized [ 199.723226][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.723303][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.541377][ T44] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 200.592721][ T7203] netlink: 'syz.2.535': attribute type 1 has an invalid length. [ 200.733790][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 200.733827][ T44] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 200.733853][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 200.776325][ T44] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 200.776354][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.776374][ T44] usb 5-1: Product: syz [ 200.776388][ T44] usb 5-1: Manufacturer: syz [ 200.776403][ T44] usb 5-1: SerialNumber: syz [ 201.151443][ T44] usb 5-1: config 0 descriptor?? [ 201.152680][ T7198] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 201.152886][ T7198] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 201.191469][ T44] usb 5-1: ucan: probing device on interface #0 [ 201.412089][ T44] usb 5-1: ucan: device protocol version 42020 is not supported [ 201.412117][ T44] usb 5-1: ucan: probe failed; try to update the device firmware [ 201.656155][ T5911] usb 5-1: USB disconnect, device number 5 [ 202.510899][ T7218] netlink: 'syz.4.543': attribute type 5 has an invalid length. [ 203.231355][ T5911] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 203.393376][ T5911] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 203.393429][ T5911] usb 1-1: New USB device found, idVendor=06a3, idProduct=0cd7, bcdDevice= 0.00 [ 203.393454][ T5911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.413438][ T5911] usb 1-1: config 0 descriptor?? [ 203.903407][ T5911] saitek 0003:06A3:0CD7.0006: item fetching failed at offset 0/3 [ 203.924215][ T5911] saitek 0003:06A3:0CD7.0006: parse failed [ 203.924330][ T5911] saitek 0003:06A3:0CD7.0006: probe with driver saitek failed with error -22 [ 204.420961][ T7206] Driver unsupported XDP return value 0 on prog (id 36) dev N/A, expect packet loss! [ 204.649964][ T10] usb 1-1: USB disconnect, device number 4 [ 204.701311][ T5911] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 204.894219][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.894255][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.894295][ T5911] usb 2-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 204.894319][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.965562][ T5911] usb 2-1: config 0 descriptor?? [ 205.484579][ T5911] samsung 0003:0419:0600.0007: unknown main item tag 0x0 [ 205.484618][ T5911] samsung 0003:0419:0600.0007: unknown main item tag 0x0 [ 205.524339][ T5911] samsung 0003:0419:0600.0007: hidraw0: USB HID v0.00 Device [HID 0419:0600] on usb-dummy_hcd.1-1/input0 [ 205.678480][ T31] usb 2-1: USB disconnect, device number 6 [ 205.935233][ T7245] sp0: Synchronizing with TNC [ 206.025413][ T7244] [U] ` [ 206.128312][ T7246] fido_id[7246]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 217.950672][ T7281] syz.3.569 (7281) used greatest stack depth: 16696 bytes left [ 244.112539][ C1] sched: DL replenish lagged too much [ 271.319650][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 271.355184][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 287.514307][ T5153] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 288.369712][ T5153] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 288.404635][ T5153] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 288.525732][ T5153] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 288.526947][ T5153] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 288.528171][ T5153] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 288.597327][ T5153] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 289.980683][ T5841] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 292.027745][ T5841] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 293.883207][ T5841] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 303.680507][ T7312] Bluetooth: hci6: Opcode 0x0c1a failed: -22 [ 305.793040][ T5835] Bluetooth: hci6: command tx timeout [ 306.007373][ T5835] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 306.007843][ T5835] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 306.008290][ T5835] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 306.009431][ T5835] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 306.010086][ T5835] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 315.342861][ T5841] Bluetooth: hci5: command tx timeout [ 317.390206][ T5841] Bluetooth: hci5: command tx timeout [ 320.155493][ T5841] Bluetooth: hci5: command tx timeout [ 322.480979][ T5841] Bluetooth: hci5: command tx timeout [ 325.559269][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 325.568019][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 325.660648][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 326.841121][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 326.842617][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 328.045521][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 328.054209][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 330.890125][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 331.450015][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 332.979660][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 333.011224][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 334.138524][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 334.648467][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 335.107866][ T7334] Bluetooth: hci1: Opcode 0x0c14 failed: -110 [ 336.526644][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 336.530324][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 336.531258][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 344.199170][ T5841] Bluetooth: hci4: command tx timeout [ 346.265390][ T5841] Bluetooth: hci4: command tx timeout [ 348.358275][ T5841] Bluetooth: hci4: command tx timeout [ 350.422784][ T5835] Bluetooth: hci4: command tx timeout [ 362.075499][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 363.808512][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 363.872920][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 367.178489][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 367.183537][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 380.902474][ T5841] Bluetooth: hci1: command tx timeout [ 382.654421][ T59] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 383.920957][ T59] Bluetooth: hci1: command tx timeout [ 384.522580][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.531943][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.140663][ T5841] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 385.161809][ T5153] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 385.163189][ T5153] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 385.164117][ T5153] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 386.155791][ T5835] Bluetooth: hci1: command tx timeout [ 386.173801][ T5153] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 386.704352][ T5153] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 386.775480][ T5153] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 386.776831][ T5153] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 386.777677][ T5153] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 388.192545][ T5153] Bluetooth: hci1: command tx timeout [ 388.487373][ T5841] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 389.308849][ T5841] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 391.769036][ T5841] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 393.981480][ T7348] Bluetooth: hci6: Opcode 0x1009 failed: -110 [ 398.811837][ T59] Bluetooth: hci2: command tx timeout [ 400.846447][ T5841] Bluetooth: hci2: command tx timeout [ 403.072785][ T5841] Bluetooth: hci2: command tx timeout [ 405.317939][ T5841] Bluetooth: hci2: command tx timeout [ 406.990325][ T5153] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 406.999952][ T5153] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 407.001180][ T5153] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 407.002734][ T5153] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 407.003682][ T5153] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 418.834446][ T59] Bluetooth: hci0: command tx timeout [ 421.001150][ T59] Bluetooth: hci0: command tx timeout [ 423.772857][ T59] Bluetooth: hci0: command tx timeout [ 426.256913][ T59] Bluetooth: hci0: command tx timeout [ 431.884192][ T59] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 435.598587][ T7360] Bluetooth: hci3: Opcode 0x0c03 failed: -4 [ 437.388111][ T5153] Bluetooth: hci5: command 0x0406 tx timeout [ 446.382710][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 446.391296][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 447.132643][ T39] INFO: task syz-executor:5846 blocked for more than 144 seconds. [ 447.132683][ T39] Not tainted syzkaller #0 [ 447.132695][ T39] Blocked by coredump. [ 447.132702][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 447.132726][ T39] task:syz-executor state:D stack:21288 pid:5846 tgid:5846 ppid:1 task_flags:0x40054c flags:0x00004006 [ 447.132802][ T39] Call Trace: [ 447.132810][ T39] [ 447.132827][ T39] __schedule+0x16f3/0x4c20 [ 447.132885][ T39] ? sched_clock+0x3f/0x60 [ 447.132911][ T39] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 447.132949][ T39] ? __pfx___schedule+0x10/0x10 [ 447.133002][ T39] rt_mutex_schedule+0x77/0xf0 [ 447.133025][ T39] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 447.133063][ T39] ? rt_mutex_slowlock_block+0x351/0x6d0 [ 447.133089][ T39] rt_mutex_slowlock+0x2b1/0x6e0 [ 447.133115][ T39] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 447.133138][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 447.133179][ T39] ? __pfx___fsnotify_parent+0x10/0x10 [ 447.133218][ T39] ? tun_chr_close+0x41/0x1c0 [ 447.133246][ T39] mutex_lock_nested+0x16a/0x1d0 [ 447.133270][ T39] ? __pfx_tun_chr_close+0x10/0x10 [ 447.133299][ T39] tun_chr_close+0x41/0x1c0 [ 447.133330][ T39] __fput+0x45b/0xa80 [ 447.133366][ T39] task_work_run+0x1d4/0x260 [ 447.133393][ T39] ? __pfx_task_work_run+0x10/0x10 [ 447.133416][ T39] ? do_exit+0x6b0/0x2300 [ 447.133435][ T39] ? kmem_cache_free+0x195/0x510 [ 447.133472][ T39] do_exit+0x6b5/0x2300 [ 447.133492][ T39] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 447.133527][ T39] ? __lock_acquire+0xab9/0xd20 [ 447.133559][ T39] ? __pfx_do_exit+0x10/0x10 [ 447.133576][ T39] ? rt_mutex_slowunlock+0x493/0x8a0 [ 447.133603][ T39] ? rt_spin_lock+0x1bb/0x2c0 [ 447.133636][ T39] do_group_exit+0x21c/0x2d0 [ 447.133664][ T39] get_signal+0x125e/0x1310 [ 447.133724][ T39] arch_do_signal_or_restart+0x9a/0x750 [ 447.133752][ T39] ? __pfx___schedule+0x10/0x10 [ 447.133777][ T39] ? kmem_cache_free+0x402/0x510 [ 447.133809][ T39] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 447.133853][ T39] ? schedule+0x16f/0x360 [ 447.133879][ T39] exit_to_user_mode_loop+0x75/0x110 [ 447.133908][ T39] do_syscall_64+0x2bd/0x3b0 [ 447.133935][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 447.133963][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.133985][ T39] ? clear_bhb_loop+0x60/0xb0 [ 447.134012][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.134039][ T39] RIP: 0033:0x7f8f07ccd5fc [ 447.134062][ T39] RSP: 002b:00007fff1757dfd0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 447.134085][ T39] RAX: fffffffffffffe00 RBX: 0000000000000003 RCX: 00007f8f07ccd5fc [ 447.134100][ T39] RDX: 0000000000000030 RSI: 00007fff1757e090 RDI: 00000000000000f9 [ 447.134114][ T39] RBP: 00007fff1757e03c R08: 0000000000000000 R09: 00007fff1757dd47 [ 447.134128][ T39] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000062 [ 447.134141][ T39] R13: 0000000000000012 R14: 0000000000033022 R15: 00007fff1757e090 [ 447.134175][ T39] [ 447.134263][ T39] [ 447.134263][ T39] Showing all locks held in the system: [ 447.134274][ T39] 6 locks held by kworker/u8:0/12: [ 447.134287][ T39] #0: ffff888058502138 ((wq_completion)wg-kex-wg1#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 447.134352][ T39] #1: ffffc90000117bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 447.134408][ T39] #2: ffff8880587295f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 447.134474][ T39] #3: ffff88805a9183f8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 447.134539][ T39] #4: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 447.134594][ T39] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 447.134660][ T39] 7 locks held by kworker/u8:1/13: [ 447.134672][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 447.134735][ T39] #1: ffffc90000127bc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 447.134793][ T39] #2: ffff88805a970300 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 447.134857][ T39] #3: ffff88805a869920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 447.134915][ T39] #4: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 447.134965][ T39] #5: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 447.135019][ T39] #6: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 447.135077][ T39] 2 locks held by rcuc/1/28: [ 447.135088][ T39] #0: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 447.135143][ T39] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 447.135199][ T39] 2 locks held by ksoftirqd/1/30: [ 447.135210][ T39] #0: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 447.135265][ T39] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 447.135320][ T39] 9 locks held by kworker/1:0/31: [ 447.135333][ T39] 1 lock held by khungtaskd/39: [ 447.135345][ T39] #0: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 447.135399][ T39] 7 locks held by kworker/u8:3/57: [ 447.135411][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 447.135467][ T39] #1: ffffc9000123fbc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 447.135525][ T39] #2: ffff88805a3d5300 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 447.135588][ T39] #3: ffff88805a2c6520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 447.135646][ T39] #4: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 447.135694][ T39] #5: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 447.135756][ T39] #6: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 447.135811][ T39] 6 locks held by kworker/u9:0/59: [ 447.135823][ T39] #0: ffff8880303e5938 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 447.135879][ T39] #1: ffffc9000125fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 447.135935][ T39] #2: ffff888060fd0e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 447.135996][ T39] #3: ffff888060fd00a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 447.136051][ T39] #4: ffffffff8ee39778 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 447.136107][ T39] #5: ffff88805cbecb58 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 447.136170][ T39] 3 locks held by kworker/u8:4/67: [ 447.136182][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 447.136237][ T39] #1: ffffc9000152fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 447.136293][ T39] #2: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 447.136358][ T39] 4 locks held by kworker/u8:5/161: [ 447.136370][ T39] #0: ffff88814d6ad938 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 447.136426][ T39] #1: ffffc90003b4fbc0 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 447.136484][ T39] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 447.136539][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 447.136597][ T39] 4 locks held by kworker/0:2/989: [ 447.136609][ T39] #0: ffff888057e8e538 ((wq_completion)wg-kex-wg0#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 447.136670][ T39] #1: ffffc9000464fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 447.136751][ T39] #2: ffff88801c79d5f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x150/0x900 [ 447.136804][ T39] #3: ffff8880370a38f0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x4de/0x900 [ 447.136859][ T39] 2 locks held by aoe_tx0/1321: [ 447.136872][ T39] 7 locks held by kworker/u8:8/1385: [ 447.136883][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 447.136939][ T39] #1: ffffc90005117bc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 447.136997][ T39] #2: ffff88805a600300 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 447.137060][ T39] #3: ffff88805a530120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 447.137119][ T39] #4: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 447.137168][ T39] #5: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 447.137223][ T39] #6: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 447.137290][ T39] 3 locks held by kworker/u8:9/3195: [ 447.137302][ T39] #0: ffff88802f707938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 447.137359][ T39] #1: ffffc9000ce6fbc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 447.137416][ T39] #2: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 447.137470][ T39] 4 locks held by kworker/u9:1/5153: [ 447.137482][ T39] #0: ffff8880300c5938 ((wq_completion)krxrpcd){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 447.137537][ T39] #1: ffffc9000f67fbc0 ((work_completion)(&rxnet->peer_keepalive_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 447.137594][ T39] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 447.137648][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 447.137705][ T39] 3 locks held by udevd/5204: [ 447.137724][ T39] #0: ffff88802974c350 (sk_lock-AF_NETLINK){+.+.}-{0:0}, at: netlink_insert+0xd3/0x1370 [ 447.137776][ T39] #1: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 447.137831][ T39] #2: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 447.137888][ T39] 2 locks held by getty/5595: [ 447.137899][ T39] #0: ffff88823bf760a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 447.137958][ T39] #1: ffffc90003e832e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 447.138012][ T39] 1 lock held by syz-executor/5833: [ 447.138024][ T39] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 447.138081][ T39] 1 lock held by syz-executor/5839: [ 447.138092][ T39] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 447.138148][ T39] 1 lock held by syz-executor/5843: [ 447.138160][ T39] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 447.138216][ T39] 1 lock held by syz-executor/5846: [ 447.138228][ T39] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 447.138289][ T39] 2 locks held by napi/wg2-0/5902: [ 447.138301][ T39] #0: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 447.138355][ T39] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 447.138412][ T39] 2 locks held by kworker/0:4/5906: [ 447.138424][ T39] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 447.138480][ T39] #1: ffffc90004fc7bc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 447.138537][ T39] 4 locks held by kworker/0:5/5918: [ 447.138549][ T39] #0: ffff888058674d38 ((wq_completion)wg-kex-wg2#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 447.138610][ T39] #1: ffffc90005087bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 447.138684][ T39] #2: ffff8880586555f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x150/0x900 [ 447.138745][ T39] #3: ffff88805a558e90 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x4de/0x900 [ 447.138797][ T39] 1 lock held by syz.1.557/7253: [ 447.138809][ T39] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 447.138866][ T39] 4 locks held by kworker/1:9/7285: [ 447.138878][ T39] #0: ffff888057e8f538 ((wq_completion)wg-kex-wg0#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 447.138939][ T39] #1: ffffc9000d00fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 447.139014][ T39] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 447.139068][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 447.139124][ T39] 7 locks held by kworker/u8:12/7291: [ 447.139136][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 447.139192][ T39] #1: ffffc9000ce0fbc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 447.139250][ T39] #2: ffff888037065300 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 447.139313][ T39] #3: ffff88805a547d20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 447.139371][ T39] #4: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 447.139420][ T39] #5: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 447.139475][ T39] #6: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 447.139531][ T39] 4 locks held by kworker/1:10/7296: [ 447.139544][ T39] #0: ffff888057e8e938 ((wq_completion)wg-crypt-wg0#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 447.139604][ T39] #1: ffffc90006077bc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 447.139662][ T39] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 447.139723][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 447.139779][ T39] 4 locks held by kworker/1:11/7297: [ 447.139791][ T39] #0: ffff888019899938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 447.139848][ T39] #1: ffffc90004af7bc0 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 447.139905][ T39] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 447.139960][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 447.140016][ T39] 7 locks held by kworker/u8:15/7298: [ 447.140028][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 447.140084][ T39] #1: ffffc9000cdefbc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 447.140141][ T39] #2: ffff88805a33b300 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 447.140199][ T39] #3: ffff888059fb2d20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 447.140257][ T39] #4: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 447.140306][ T39] #5: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 447.140361][ T39] #6: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 447.140417][ T39] 3 locks held by kworker/1:12/7300: [ 447.140429][ T39] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 447.140485][ T39] #1: ffffc9000cdcfbc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 447.140541][ T39] #2: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 447.140602][ T39] 6 locks held by kworker/u8:16/7301: [ 447.140615][ T39] #0: ffff888058500938 ((wq_completion)wg-kex-wg1){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 447.140671][ T39] #1: ffffc9000cdbfbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 447.140738][ T39] #2: ffff8880584d55f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 447.140804][ T39] #3: ffff8880370a1928 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 447.140868][ T39] #4: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 447.140923][ T39] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 448.111047][ T39] 4 locks held by kworker/1:13/7303: [ 448.111068][ T39] #0: ffff888058931938 ((wq_completion)wg-kex-wg0#8){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 448.111141][ T39] #1: ffffc9000f5afbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 448.111217][ T39] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 448.111274][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 448.111331][ T39] 1 lock held by syz-executor/7308: [ 448.111344][ T39] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 448.111407][ T39] 5 locks held by kworker/1:14/7311: [ 448.111420][ T39] #0: ffff888057e8e538 ((wq_completion)wg-kex-wg0#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 448.111482][ T39] #1: ffffc9000cd6fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 448.111557][ T39] #2: ffff8880370a38f0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x38/0xbe0 [ 448.111622][ T39] #3: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 448.111677][ T39] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 448.111735][ T39] 2 locks held by kworker/1:15/7317: [ 448.111748][ T39] 4 locks held by kworker/u8:18/7325: [ 448.111760][ T39] #0: ffff888058ad5938 ((wq_completion)wg-kex-wg1#7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 448.111821][ T39] #1: ffffc90005997bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 448.111879][ T39] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 448.111935][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 448.111992][ T39] 1 lock held by dhcpcd/7326: [ 448.112004][ T39] #0: ffff88802205a438 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 448.112061][ T39] 1 lock held by dhcpcd/7330: [ 448.112072][ T39] #0: ffff88803d572438 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 448.112128][ T39] 1 lock held by dhcpcd/7333: [ 448.112140][ T39] #0: ffff88803d5745f8 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 448.112213][ T39] 1 lock held by syz-executor/7338: [ 448.112225][ T39] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 448.112287][ T39] 1 lock held by syz-executor/7343: [ 448.112299][ T39] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 448.112361][ T39] 1 lock held by syz-executor/7351: [ 448.112373][ T39] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 448.112435][ T39] 1 lock held by syz-executor/7356: [ 448.112447][ T39] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 448.112508][ T39] 1 lock held by syz-executor/7359: [ 448.112520][ T39] 2 locks held by syz-executor/7361: [ 448.112533][ T39] 4 locks held by kworker/1:18/7362: [ 448.112544][ T39] #0: ffff888019899938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 448.112610][ T39] #1: ffffc90005ec7bc0 ((work_completion)(&(&tbl->managed_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 448.112667][ T39] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 448.112723][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 448.112779][ T39] 3 locks held by syz-executor/7363: [ 448.112791][ T39] 4 locks held by kworker/1:19/7365: [ 448.112803][ T39] #0: ffff888058675138 ((wq_completion)wg-crypt-wg2#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 448.112865][ T39] #1: ffffc90003f3fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 448.112940][ T39] #2: ffffffff8d84a760 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 448.112995][ T39] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 448.113052][ T39] 2 locks held by syz-executor/7366: [ 448.113064][ T39] 1 lock held by udevd/7367: [ 448.113078][ T39] [ 448.113083][ T39] ============================================= [ 448.113083][ T39] [ 448.113109][ T39] NMI backtrace for cpu 0 [ 448.113137][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 448.113161][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 448.113173][ T39] Call Trace: [ 448.113182][ T39] [ 448.113191][ T39] dump_stack_lvl+0x189/0x250 [ 448.113228][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 448.113261][ T39] ? __pfx__printk+0x10/0x10 [ 448.113298][ T39] nmi_cpu_backtrace+0x39e/0x3d0 [ 448.113325][ T39] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 448.113351][ T39] ? __pfx__printk+0x10/0x10 [ 448.113379][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 448.113409][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 448.113435][ T39] watchdog+0xf93/0xfe0 [ 448.113470][ T39] ? watchdog+0x1de/0xfe0 [ 448.113503][ T39] kthread+0x711/0x8a0 [ 448.113540][ T39] ? __pfx_watchdog+0x10/0x10 [ 448.113566][ T39] ? __pfx_kthread+0x10/0x10 [ 448.113611][ T39] ? __pfx_kthread+0x10/0x10 [ 448.113644][ T39] ret_from_fork+0x3fc/0x770 [ 448.113675][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 448.113710][ T39] ? __switch_to_asm+0x39/0x70 [ 448.113729][ T39] ? __switch_to_asm+0x33/0x70 [ 448.113748][ T39] ? __pfx_kthread+0x10/0x10 [ 448.113782][ T39] ret_from_fork_asm+0x1a/0x30 [ 448.113820][ T39] [ 448.113828][ T39] Sending NMI from CPU 0 to CPUs 1: [ 448.113855][ C1] NMI backtrace for cpu 1 [ 448.113870][ C1] CPU: 1 UID: 0 PID: 1185 Comm: irq/33-virtio1- Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 448.113891][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 448.113902][ C1] RIP: 0010:unwind_next_frame+0x10e/0x2390 [ 448.113931][ C1] Code: 7a 94 0d 00 75 1f c6 05 d7 7a 94 0d 01 48 c7 c7 20 45 08 8b be 4b 03 00 00 48 c7 c2 60 45 08 8b e8 47 69 29 00 4c 89 6c 24 70 <48> 89 5c 24 68 4d 8d 6e 50 4c 89 e8 48 c1 e8 03 48 89 44 24 38 80 [ 448.113947][ C1] RSP: 0018:ffffc90004bd6978 EFLAGS: 00000202 [ 448.113962][ C1] RAX: 0000000000000001 RBX: ffffffff88e254c6 RCX: 18ccd4300b738200 [ 448.113975][ C1] RDX: 0000000000000000 RSI: ffffffff8b620c60 RDI: ffffffff8b620c20 [ 448.113988][ C1] RBP: dffffc0000000000 R08: 0000000000000000 R09: ffffffff8172b165 [ 448.114001][ C1] R10: ffffc90004bd6a98 R11: ffffffff81aae030 R12: 1ffff9200097ad49 [ 448.114014][ C1] R13: ffffc90004bd6a80 R14: ffffc90004bd6a48 R15: ffffffff8172b165 [ 448.114028][ C1] FS: 0000000000000000(0000) GS:ffff8881269c2000(0000) knlGS:0000000000000000 [ 448.114043][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 448.114055][ C1] CR2: 00007f80f0ff368c CR3: 000000000d7a6000 CR4: 00000000003526f0 [ 448.114071][ C1] Call Trace: [ 448.114077][ C1] [ 448.114087][ C1] ? unwind_next_frame+0xa5/0x2390 [ 448.114113][ C1] ? process_backlog+0x31e/0x900 [ 448.114136][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 448.114156][ C1] arch_stack_walk+0x11c/0x150 [ 448.114186][ C1] ? __napi_poll+0xb6/0x540 [ 448.114205][ C1] stack_trace_save+0x9c/0xe0 [ 448.114223][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 448.114240][ C1] ? kasan_save_free_info+0x46/0x50 [ 448.114265][ C1] ? consume_skb+0x9e/0xf0 [ 448.114287][ C1] ? nft_synproxy_eval_v6+0x376/0x560 [ 448.114313][ C1] ? nft_synproxy_do_eval+0x3d7/0x570 [ 448.114348][ C1] ? __lock_acquire+0xab9/0xd20 [ 448.114376][ C1] kasan_save_track+0x3e/0x80 [ 448.114395][ C1] ? kasan_save_track+0x3e/0x80 [ 448.114414][ C1] ? kasan_save_free_info+0x46/0x50 [ 448.114429][ C1] ? __kasan_slab_free+0x5b/0x80 [ 448.114449][ C1] ? kmem_cache_free+0x195/0x510 [ 448.114472][ C1] ? nft_synproxy_eval_v6+0x376/0x560 [ 448.114498][ C1] ? nft_synproxy_do_eval+0x3d7/0x570 [ 448.114524][ C1] ? nft_do_chain+0x40c/0x1920 [ 448.114549][ C1] ? nft_do_chain_inet+0x25d/0x340 [ 448.114575][ C1] ? nf_hook_slow+0xc5/0x220 [ 448.114596][ C1] ? NF_HOOK+0x206/0x3a0 [ 448.114615][ C1] ? ip6_input+0x16a/0x270 [ 448.114634][ C1] ? NF_HOOK+0x309/0x3a0 [ 448.114651][ C1] ? __netif_receive_skb+0xd3/0x380 [ 448.114668][ C1] ? process_backlog+0x31e/0x900 [ 448.114686][ C1] ? __napi_poll+0xb6/0x540 [ 448.114726][ C1] kasan_save_free_info+0x46/0x50 [ 448.114742][ C1] __kasan_slab_free+0x5b/0x80 [ 448.114763][ C1] ? nft_synproxy_eval_v6+0x376/0x560 [ 448.114788][ C1] kmem_cache_free+0x195/0x510 [ 448.114816][ C1] nft_synproxy_eval_v6+0x376/0x560 [ 448.114846][ C1] ? __pfx_nft_synproxy_eval_v6+0x10/0x10 [ 448.114875][ C1] ? nf_ip_checksum+0x13c/0x510 [ 448.114904][ C1] nft_synproxy_do_eval+0x3d7/0x570 [ 448.114934][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 448.114970][ C1] nft_do_chain+0x40c/0x1920 [ 448.114995][ C1] ? virtnet_poll+0x1fc6/0x2d80 [ 448.115020][ C1] ? __pfx_ip_list_rcv+0x10/0x10 [ 448.115044][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 448.115068][ C1] ? ipv6_find_hdr+0xc78/0x1050 [ 448.115106][ C1] ? netif_receive_skb_list_internal+0x4fd/0xcc0 [ 448.115124][ C1] ? netif_receive_skb_list_internal+0xa4f/0xcc0 [ 448.115144][ C1] nft_do_chain_inet+0x25d/0x340 [ 448.115170][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 448.115196][ C1] ? __lock_acquire+0xab9/0xd20 [ 448.115224][ C1] ? NF_HOOK+0x9a/0x3a0 [ 448.115243][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 448.115270][ C1] nf_hook_slow+0xc5/0x220 [ 448.115295][ C1] NF_HOOK+0x206/0x3a0 [ 448.115315][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 448.115342][ C1] ? NF_HOOK+0x9a/0x3a0 [ 448.115360][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 448.115381][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 448.115408][ C1] ip6_input+0x16a/0x270 [ 448.115427][ C1] ? ip6_input+0x23/0x270 [ 448.115448][ C1] NF_HOOK+0x309/0x3a0 [ 448.115467][ C1] ? skb_orphan+0xaf/0xd0 [ 448.115486][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 448.115505][ C1] ? NF_HOOK+0x9a/0x3a0 [ 448.115524][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 448.115544][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 448.115570][ C1] __netif_receive_skb+0xd3/0x380 [ 448.115588][ C1] ? rt_spin_unlock+0x65/0x80 [ 448.115609][ C1] ? process_backlog+0x27b/0x900 [ 448.115628][ C1] process_backlog+0x31e/0x900 [ 448.115654][ C1] __napi_poll+0xb6/0x540 [ 448.115675][ C1] net_rx_action+0x707/0xe00 [ 448.115705][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 448.115727][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 448.115754][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 448.115791][ C1] handle_softirqs+0x22c/0x710 [ 448.115818][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 448.115846][ C1] __local_bh_enable_ip+0x179/0x270 [ 448.115868][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 448.115892][ C1] ? virtqueue_disable_cb+0xd9/0x370 [ 448.115917][ C1] ? irq_finalize_oneshot+0x54/0x3d0 [ 448.115942][ C1] ? __pfx_skb_recv_done+0x10/0x10 [ 448.115964][ C1] ? vring_interrupt+0x221/0x380 [ 448.115986][ C1] ? __pfx_vring_interrupt+0x10/0x10 [ 448.116009][ C1] irq_forced_thread_fn+0xe9/0x120 [ 448.116034][ C1] ? irq_forced_thread_fn+0x2b/0x120 [ 448.116060][ C1] irq_thread+0x427/0x690 [ 448.116083][ C1] ? irq_thread+0x17b/0x690 [ 448.116111][ C1] ? __pfx_irq_forced_thread_fn+0x10/0x10 [ 448.116137][ C1] ? __pfx_irq_thread+0x10/0x10 [ 448.116161][ C1] ? __kthread_parkme+0x7b/0x200 [ 448.116184][ C1] ? __pfx_irq_thread_dtor+0x10/0x10 [ 448.116208][ C1] ? __kthread_parkme+0x1a1/0x200 [ 448.116235][ C1] kthread+0x711/0x8a0 [ 448.116263][ C1] ? __pfx_irq_thread+0x10/0x10 [ 448.116286][ C1] ? __pfx_kthread+0x10/0x10 [ 448.116315][ C1] ? __pfx_kthread+0x10/0x10 [ 448.116350][ C1] ret_from_fork+0x3fc/0x770 [ 448.116374][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 448.116400][ C1] ? __switch_to_asm+0x39/0x70 [ 448.116416][ C1] ? __switch_to_asm+0x33/0x70 [ 448.116432][ C1] ? __pfx_kthread+0x10/0x10 [ 448.116458][ C1] ret_from_fork_asm+0x1a/0x30 [ 448.116484][ C1] [ 448.116859][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 448.116875][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 448.116899][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 448.116911][ T39] Call Trace: [ 448.116920][ T39] [ 448.116936][ T39] dump_stack_lvl+0x99/0x250 [ 448.116969][ T39] ? __asan_memcpy+0x40/0x70 [ 448.116992][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 448.117025][ T39] ? __pfx__printk+0x10/0x10 [ 448.117062][ T39] vpanic+0x281/0x750 [ 448.117098][ T39] ? __pfx_vpanic+0x10/0x10 [ 448.117127][ T39] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 448.117150][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 448.117188][ T39] panic+0xb9/0xc0 [ 448.117219][ T39] ? __pfx_panic+0x10/0x10 [ 448.117253][ T39] ? irq_work_queue+0xc3/0x140 [ 448.117285][ T39] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 448.117311][ T39] watchdog+0xfd2/0xfe0 [ 448.117344][ T39] ? watchdog+0x1de/0xfe0 [ 448.117379][ T39] kthread+0x711/0x8a0 [ 448.117415][ T39] ? __pfx_watchdog+0x10/0x10 [ 448.117442][ T39] ? __pfx_kthread+0x10/0x10 [ 448.117479][ T39] ? __pfx_kthread+0x10/0x10 [ 448.117513][ T39] ret_from_fork+0x3fc/0x770 [ 448.117545][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 448.117580][ T39] ? __switch_to_asm+0x39/0x70 [ 448.117607][ T39] ? __switch_to_asm+0x33/0x70 [ 448.117626][ T39] ? __pfx_kthread+0x10/0x10 [ 448.117660][ T39] ret_from_fork_asm+0x1a/0x30 [ 448.117698][ T39] [ 448.117989][ T39] Kernel Offset: disabled