last executing test programs: 45.022461831s ago: executing program 2 (id=688): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6, 0xfe}]}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) 44.459240382s ago: executing program 2 (id=693): r0 = memfd_create(&(0x7f00000005c0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\x00\x00\x00\x00\x00\x00\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\x89\xa6D\xce\xac\x03\xc1\x83\xd1\xe6 |\xa75\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0VFw\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x88\xaa\x81\xc8\xa2\xdeI\xa2\xbel\x0e\xec\x17fNI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%Uh;H\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\xa2?\xcb\\Y\x1e\xfe\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5T\x8eM4\x1c\xc6\x7f\xd4\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xd0\x92\xd1\xbc\xb8\tJ\xa1\aN\x87\x95\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9gxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!d\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\x8d/o\xcd\xc8x\xdb\xe6\xd0W\xca\xc5kz\x8e9\xfa\x86\x0f\x96p', 0x3) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000000}) fcntl$addseals(r0, 0x409, 0xb) 42.824702093s ago: executing program 2 (id=707): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x2000bb22, 0x2, {0x1, @raw_data="3d924b827139e8a4ec01eb92492ff84715d1a004d08b012a7cafe27a5f313d31bbdae5b411ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed32147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc331c96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a700"}}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@userptr={0x7, 0x1, 0x4, 0xd08b012a, 0x0, {0x0, 0xea60}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x4, "f1439fae"}, 0x0, 0x2, {0x0}, 0x20000, 0x0, r0}) 42.60568174s ago: executing program 2 (id=710): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = mq_open(&(0x7f0000000080)='$@\x00', 0x40, 0xb4, 0x0) poll(&(0x7f0000000480)=[{r0, 0x2400}], 0x1, 0x7) 42.275513652s ago: executing program 2 (id=716): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 42.034340183s ago: executing program 2 (id=719): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x1000000000000002) 39.68700251s ago: executing program 0 (id=727): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xc, 0x4, 0x4, 0x7ffd, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) 38.739328359s ago: executing program 0 (id=730): r0 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r0, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) sendmmsg$inet(r0, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="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", 0xba7}], 0x5}}], 0x300, 0x0) 38.739086741s ago: executing program 3 (id=731): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xe8f, 0x12, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x9, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x2, "68ef1221"}]}}, 0x0}, 0x0) 35.913058865s ago: executing program 0 (id=732): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) fcntl$setlease(r0, 0x400, 0x2) 35.355451536s ago: executing program 0 (id=733): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='mpol=prefer']) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x535002, 0x0) 34.710345612s ago: executing program 0 (id=734): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @empty, 0xfffffffe}, 0x1c) ioctl$sock_qrtr_TIOCINQ(r0, 0x894b, 0x0) 34.50878182s ago: executing program 3 (id=735): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_register(0xffffffffffffffff, &(0x7f00000001c0)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x4000000000000c2, 0x3a, '', 0x3a, '', 0x3a, './file0'}, 0x27) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 26.892277925s ago: executing program 32 (id=719): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x1000000000000002) 26.262992033s ago: executing program 3 (id=745): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f00000018c0)=""/98, 0x62}], 0x1, 0x0, 0x0) close(r0) 24.59098145s ago: executing program 0 (id=747): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r1, 0x4068aea3, &(0x7f0000000080)={0xc4, 0x0, 0x200000000000005}) 24.590450232s ago: executing program 4 (id=748): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1e71, 0x200e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x5, 0x82, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xee, 0x5, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d40)={0x2c, &(0x7f0000000b00)={0x20, 0x31, 0x3, {0x3, 0x21, "96"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 24.590088085s ago: executing program 3 (id=749): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sys_enter\x00', r0}, 0x65) lsm_get_self_attr(0x67, 0x0, &(0x7f0000000440), 0x0) 23.748997325s ago: executing program 4 (id=753): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x34, r1, 0x1, 0x100, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x474}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x240080e0) 22.442670314s ago: executing program 4 (id=755): r0 = syz_io_uring_setup(0x31c7, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, 0xfffffffc}, &(0x7f00000001c0), &(0x7f00000005c0)) syz_io_uring_setup(0x263f, &(0x7f0000000840)={0x0, 0xb8da, 0x186a, 0x0, 0x0, 0x0, r0}, 0x0, 0x0) syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x0, 0x27, 0x2, 0x0, 0x0, r0}, &(0x7f00000002c0), &(0x7f0000000300)) 21.947147809s ago: executing program 4 (id=758): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, r1, 0x1, 0xffffffff, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) 21.766673992s ago: executing program 4 (id=759): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000440)={0x2020}, 0x2020) 20.520763281s ago: executing program 4 (id=761): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) 19.062536627s ago: executing program 1 (id=765): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000006680)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_pidfd_open(r1, 0x0) 18.908037302s ago: executing program 1 (id=766): sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0208010100000000000000000200000005000300110000000d0004800800027a000000070500030006"], 0x48}, 0x1, 0x0, 0x0, 0x890}, 0x20000004) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000078000000090a010400000000000000000100fffd08000a40000000000900020073797a31000000000900010073797a300000000008000540000000253c0011800a0001006c696d69740000002c0002800c000240000000000000000308000440000000010c000140fffffffffffff7ff08"], 0xc0}, 0x1, 0x0, 0x0, 0x40c0}, 0xc4) 18.132612725s ago: executing program 3 (id=767): r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) 16.317445954s ago: executing program 3 (id=768): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x58, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x240040c0}, 0x20000000) 16.317093256s ago: executing program 1 (id=769): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') lseek(r0, 0x1, 0x0) getdents(r0, 0x0, 0x48) 16.206402076s ago: executing program 1 (id=770): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="54000000000101040000000000000000020000001c00188008000140000100010800024000000006087f46f009000002240001801400018008000100e000000108000200e00000010c000280050001"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) 16.064015029s ago: executing program 1 (id=771): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 15.036196475s ago: executing program 1 (id=772): timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51}}) 10.463671499s ago: executing program 33 (id=747): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r1, 0x4068aea3, &(0x7f0000000080)={0xc4, 0x0, 0x200000000000005}) 5.508203371s ago: executing program 34 (id=761): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) 2.91797046s ago: executing program 35 (id=768): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x58, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x240040c0}, 0x20000000) 0s ago: executing program 36 (id=772): timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.205' (ED25519) to the list of known hosts. [ 81.284445][ T5825] cgroup: Unknown subsys name 'net' [ 81.517306][ T5825] cgroup: Unknown subsys name 'cpuset' [ 81.572520][ T5825] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.261014][ T5825] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.816898][ T9] cfg80211: failed to load regulatory.db [ 87.146501][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.150737][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.151553][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.153107][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.153963][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.156993][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.159742][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.162605][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.173880][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.174635][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.232621][ T5155] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.235954][ T5155] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.236760][ T5155] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.237883][ T5155] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.238651][ T5155] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.370259][ T5850] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.371807][ T5850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.389546][ T5850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.390774][ T5850] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.391541][ T5850] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.467848][ T5155] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.470141][ T5155] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.470915][ T5155] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.491156][ T5155] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.495851][ T5155] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.161098][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 88.189228][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 88.383788][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 88.514505][ T5855] chnl_net:caif_netlink_parms(): no params data found [ 89.149555][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.150592][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.150915][ T5843] bridge_slave_0: entered allmulticast mode [ 89.163056][ T5843] bridge_slave_0: entered promiscuous mode [ 89.168513][ T5857] chnl_net:caif_netlink_parms(): no params data found [ 89.191543][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.191650][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.201459][ T5851] bridge_slave_0: entered allmulticast mode [ 89.204201][ T5851] bridge_slave_0: entered promiscuous mode [ 89.222143][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.222275][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.222754][ T5843] bridge_slave_1: entered allmulticast mode [ 89.225598][ T5843] bridge_slave_1: entered promiscuous mode [ 89.232037][ T5850] Bluetooth: hci0: command tx timeout [ 89.314590][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.314732][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.314898][ T5851] bridge_slave_1: entered allmulticast mode [ 89.317248][ T5851] bridge_slave_1: entered promiscuous mode [ 89.372036][ T5850] Bluetooth: hci2: command tx timeout [ 89.372050][ T5155] Bluetooth: hci1: command tx timeout [ 89.452125][ T5155] Bluetooth: hci3: command tx timeout [ 89.534212][ T5155] Bluetooth: hci4: command tx timeout [ 89.793133][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.793275][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.793470][ T5844] bridge_slave_0: entered allmulticast mode [ 89.797759][ T5844] bridge_slave_0: entered promiscuous mode [ 89.926167][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.943868][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.944072][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.944253][ T5844] bridge_slave_1: entered allmulticast mode [ 89.946815][ T5844] bridge_slave_1: entered promiscuous mode [ 89.950724][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.950940][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.951064][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.951214][ T5855] bridge_slave_0: entered allmulticast mode [ 89.955092][ T5855] bridge_slave_0: entered promiscuous mode [ 89.974456][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.097686][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.097921][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.098055][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.098160][ T5855] bridge_slave_1: entered allmulticast mode [ 90.099570][ T5855] bridge_slave_1: entered promiscuous mode [ 90.765243][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.927266][ T5843] team0: Port device team_slave_0 added [ 91.008059][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.010339][ T5851] team0: Port device team_slave_0 added [ 91.015413][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.018449][ T5843] team0: Port device team_slave_1 added [ 91.020076][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.020333][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.020507][ T5857] bridge_slave_0: entered allmulticast mode [ 91.024359][ T5857] bridge_slave_0: entered promiscuous mode [ 91.028598][ T5851] team0: Port device team_slave_1 added [ 91.033951][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.143594][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.143755][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.143927][ T5857] bridge_slave_1: entered allmulticast mode [ 91.145681][ T5857] bridge_slave_1: entered promiscuous mode [ 91.293732][ T5155] Bluetooth: hci0: command tx timeout [ 91.452232][ T5155] Bluetooth: hci2: command tx timeout [ 91.452264][ T5155] Bluetooth: hci1: command tx timeout [ 91.532248][ T5850] Bluetooth: hci3: command tx timeout [ 91.612210][ T5850] Bluetooth: hci4: command tx timeout [ 91.865280][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.865291][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.865305][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.965085][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.965101][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.965123][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.969753][ T5855] team0: Port device team_slave_0 added [ 91.971689][ T5844] team0: Port device team_slave_0 added [ 91.980235][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.980249][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.980272][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.986842][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.987929][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.987940][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.987963][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.991852][ T5855] team0: Port device team_slave_1 added [ 92.005584][ T5844] team0: Port device team_slave_1 added [ 92.034004][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.503584][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.503600][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.503622][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.504931][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.504944][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.504965][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.720566][ T5857] team0: Port device team_slave_0 added [ 92.721610][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.721622][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.721645][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.724045][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.724056][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.724078][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.897111][ T5857] team0: Port device team_slave_1 added [ 92.925728][ T5843] hsr_slave_0: entered promiscuous mode [ 92.926614][ T5843] hsr_slave_1: entered promiscuous mode [ 93.023216][ T5851] hsr_slave_0: entered promiscuous mode [ 93.024620][ T5851] hsr_slave_1: entered promiscuous mode [ 93.025379][ T5851] debugfs: 'hsr0' already exists in 'hsr' [ 93.025456][ T5851] Cannot create hsr debugfs directory [ 93.214579][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.214590][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.214604][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.372100][ T5850] Bluetooth: hci0: command tx timeout [ 93.494899][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.494914][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.494927][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.532116][ T5850] Bluetooth: hci2: command tx timeout [ 93.542352][ T5850] Bluetooth: hci1: command tx timeout [ 93.613197][ T5850] Bluetooth: hci3: command tx timeout [ 93.673857][ T5844] hsr_slave_0: entered promiscuous mode [ 93.675166][ T5844] hsr_slave_1: entered promiscuous mode [ 93.676104][ T5844] debugfs: 'hsr0' already exists in 'hsr' [ 93.676126][ T5844] Cannot create hsr debugfs directory [ 93.686652][ T5855] hsr_slave_0: entered promiscuous mode [ 93.688003][ T5855] hsr_slave_1: entered promiscuous mode [ 93.688825][ T5855] debugfs: 'hsr0' already exists in 'hsr' [ 93.688846][ T5855] Cannot create hsr debugfs directory [ 93.692096][ T5850] Bluetooth: hci4: command tx timeout [ 94.477628][ T5857] hsr_slave_0: entered promiscuous mode [ 94.478389][ T5857] hsr_slave_1: entered promiscuous mode [ 94.478877][ T5857] debugfs: 'hsr0' already exists in 'hsr' [ 94.478895][ T5857] Cannot create hsr debugfs directory [ 95.452210][ T5850] Bluetooth: hci0: command tx timeout [ 95.550457][ T5843] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.578435][ T5843] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.612097][ T5850] Bluetooth: hci1: command tx timeout [ 95.612128][ T5850] Bluetooth: hci2: command tx timeout [ 95.637234][ T5843] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.677400][ T5843] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.692111][ T5155] Bluetooth: hci3: command tx timeout [ 95.772087][ T5155] Bluetooth: hci4: command tx timeout [ 95.826385][ T5851] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.882770][ T5851] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.927325][ T5851] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.995792][ T5851] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.150839][ T5855] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 96.190683][ T5855] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 96.229187][ T5855] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 96.281298][ T5855] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 96.439923][ T5844] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.494531][ T5844] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.541760][ T5844] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.577658][ T5844] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.729213][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.748132][ T5857] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.797302][ T5857] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.846847][ T5857] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.887678][ T5857] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.987460][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.021217][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.047344][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.048090][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.109540][ T3189] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.109668][ T3189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.178862][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.229852][ T3189] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.230089][ T3189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.270761][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.296194][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.296341][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.390087][ T5855] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.419890][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.446938][ T3189] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.447223][ T3189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.507072][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.507253][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.577114][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.691208][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.691390][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.716489][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.784870][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.792129][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.876528][ T5857] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.946354][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.946470][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.996651][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.046574][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.047347][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.301343][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.489917][ T5843] veth0_vlan: entered promiscuous mode [ 98.531321][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.592910][ T5843] veth1_vlan: entered promiscuous mode [ 98.739527][ T5851] veth0_vlan: entered promiscuous mode [ 98.761238][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.823032][ T5851] veth1_vlan: entered promiscuous mode [ 98.885507][ T5843] veth0_macvtap: entered promiscuous mode [ 98.920441][ T5843] veth1_macvtap: entered promiscuous mode [ 99.036797][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.057524][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.075446][ T5851] veth0_macvtap: entered promiscuous mode [ 99.114355][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.134282][ T5851] veth1_macvtap: entered promiscuous mode [ 99.138389][ T5844] veth0_vlan: entered promiscuous mode [ 99.181580][ T3189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.196765][ T3189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.210935][ T3189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.230440][ T3189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.231083][ T5844] veth1_vlan: entered promiscuous mode [ 99.331819][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.367223][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.497693][ T43] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.545127][ T43] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.561274][ T43] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.589810][ T43] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.590014][ T5857] veth0_vlan: entered promiscuous mode [ 99.686015][ T5855] veth0_vlan: entered promiscuous mode [ 99.719917][ T5844] veth0_macvtap: entered promiscuous mode [ 99.729153][ T3189] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.729175][ T3189] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.780541][ T5857] veth1_vlan: entered promiscuous mode [ 99.823269][ T5844] veth1_macvtap: entered promiscuous mode [ 99.826119][ T5855] veth1_vlan: entered promiscuous mode [ 99.956520][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.956540][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.050086][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.067728][ T3189] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.067747][ T3189] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.119795][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.234405][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.238512][ T5857] veth0_macvtap: entered promiscuous mode [ 100.243717][ T64] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.275897][ T64] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.281710][ T64] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.296656][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.296674][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.299511][ T5855] veth0_macvtap: entered promiscuous mode [ 100.312703][ T5857] veth1_macvtap: entered promiscuous mode [ 100.357205][ T5855] veth1_macvtap: entered promiscuous mode [ 100.575493][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.696208][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.726642][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.758390][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.864236][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.897336][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.912709][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.926599][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.929196][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.929213][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.958752][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.987713][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.016560][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.074232][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.337692][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.337712][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.912084][ T3189] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.912120][ T3189] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.031674][ T3567] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.031694][ T3567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.042548][ T5986] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.109858][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.109877][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.357079][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.357099][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.870897][ T6020] netlink: 'syz.2.36': attribute type 1 has an invalid length. [ 103.870917][ T6020] netlink: 'syz.2.36': attribute type 1 has an invalid length. [ 103.870995][ T6020] netlink: 224 bytes leftover after parsing attributes in process `syz.2.36'. [ 103.990975][ T6022] netlink: 4 bytes leftover after parsing attributes in process `syz.2.37'. [ 104.704007][ T6032] netlink: 'syz.2.42': attribute type 5 has an invalid length. [ 105.661813][ T6004] wg1 speed is unknown, defaulting to 1000 [ 105.671368][ T6034] warning: `syz.2.43' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 105.702038][ T6004] wg1 speed is unknown, defaulting to 1000 [ 105.720543][ T6004] wg1 speed is unknown, defaulting to 1000 [ 105.832229][ T6004] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 105.906619][ T6004] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 106.133012][ T6036] bridge1: entered promiscuous mode [ 106.145183][ T6004] wg1 speed is unknown, defaulting to 1000 [ 106.202045][ T6004] wg1 speed is unknown, defaulting to 1000 [ 106.215697][ T6004] wg1 speed is unknown, defaulting to 1000 [ 106.236232][ T6004] wg1 speed is unknown, defaulting to 1000 [ 106.283361][ T6004] wg1 speed is unknown, defaulting to 1000 [ 106.405678][ T6047] __vm_enough_memory: pid: 6047, comm: syz.1.47, bytes: 4503599627366400 not enough memory for the allocation [ 106.862113][ T6064] netlink: 12 bytes leftover after parsing attributes in process `syz.2.55'. [ 107.506438][ T6081] netlink: 24 bytes leftover after parsing attributes in process `syz.1.65'. [ 107.506519][ T6081] netlink: 24 bytes leftover after parsing attributes in process `syz.1.65'. [ 107.506558][ T6081] netlink: 28 bytes leftover after parsing attributes in process `syz.1.65'. [ 107.825760][ T49] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 107.992218][ T5904] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 108.009598][ T49] usb 4-1: Using ep0 maxpacket: 16 [ 108.059551][ T49] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 108.059578][ T49] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.059597][ T49] usb 4-1: Product: syz [ 108.059610][ T49] usb 4-1: Manufacturer: syz [ 108.059622][ T49] usb 4-1: SerialNumber: syz [ 108.164676][ T49] usb 4-1: config 0 descriptor?? [ 108.177110][ T5904] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 108.177138][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.230448][ T49] ums-onetouch 4-1:0.0: USB Mass Storage device detected [ 108.267816][ T5904] usb 2-1: config 0 descriptor?? [ 108.286046][ T5904] cp210x 2-1:0.0: cp210x converter detected [ 108.514249][ T49] usb 4-1: USB disconnect, device number 2 [ 108.578055][ T5904] usb 2-1: cp210x converter now attached to ttyUSB0 [ 108.680236][ T6106] ip6gre1: entered allmulticast mode [ 108.743878][ T5907] usb 2-1: USB disconnect, device number 2 [ 108.771527][ T5907] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 108.780552][ T5907] cp210x 2-1:0.0: device disconnected [ 109.229222][ T6112] netlink: 'syz.3.78': attribute type 1 has an invalid length. [ 109.229438][ T6112] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 109.241993][ T1821] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 109.334879][ T156] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 109.398496][ T1821] usb 5-1: Using ep0 maxpacket: 8 [ 109.412121][ T1821] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 109.412150][ T1821] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.412167][ T1821] usb 5-1: Product: syz [ 109.412180][ T1821] usb 5-1: Manufacturer: syz [ 109.412194][ T1821] usb 5-1: SerialNumber: syz [ 109.485735][ T1821] usb 5-1: config 0 descriptor?? [ 109.534350][ T1821] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 109.628483][ T6120] netlink: 'syz.0.81': attribute type 10 has an invalid length. [ 109.948481][ T1821] gspca_sonixj: reg_r err -71 [ 109.948577][ T1821] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 109.985891][ T1821] usb 5-1: USB disconnect, device number 2 [ 110.202069][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 110.367033][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 110.369373][ T10] usb 2-1: config 0 has no interfaces? [ 110.378424][ T10] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 110.378451][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.378470][ T10] usb 2-1: Product: syz [ 110.378483][ T10] usb 2-1: Manufacturer: syz [ 110.378496][ T10] usb 2-1: SerialNumber: syz [ 110.403726][ T10] usb 2-1: config 0 descriptor?? [ 110.664203][ T10] usb 2-1: USB disconnect, device number 3 [ 112.014935][ T6194] netlink: 'syz.4.117': attribute type 2 has an invalid length. [ 112.014956][ T6194] netlink: 723 bytes leftover after parsing attributes in process `syz.4.117'. [ 112.232238][ T5904] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 112.382159][ T5904] usb 4-1: Using ep0 maxpacket: 16 [ 112.387991][ T5904] usb 4-1: config 1 has an invalid interface number: 230 but max is 0 [ 112.388017][ T5904] usb 4-1: config 1 has no interface number 0 [ 112.388052][ T5904] usb 4-1: config 1 interface 230 has no altsetting 0 [ 112.427880][ T5904] usb 4-1: New USB device found, idVendor=093a, idProduct=2628, bcdDevice=55.d0 [ 112.427908][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.427926][ T5904] usb 4-1: Product: syz [ 112.427940][ T5904] usb 4-1: Manufacturer: syz [ 112.427953][ T5904] usb 4-1: SerialNumber: syz [ 112.509046][ T5904] gspca_main: gspca_pac7302-2.14.0 probing 093a:2628 [ 112.672112][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 112.757781][ T6214] netlink: 104 bytes leftover after parsing attributes in process `syz.0.126'. [ 112.822027][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 112.831305][ T9] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 112.831330][ T9] usb 3-1: config 0 has no interface number 0 [ 112.835623][ T9] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 112.835648][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.835719][ T9] usb 3-1: Product: syz [ 112.835733][ T9] usb 3-1: Manufacturer: syz [ 112.835746][ T9] usb 3-1: SerialNumber: syz [ 112.855180][ T9] usb 3-1: config 0 descriptor?? [ 112.878663][ T9] radio-si470x 3-1:0.35: could not find interrupt in endpoint [ 112.878749][ T9] radio-si470x 3-1:0.35: probe with driver radio-si470x failed with error -5 [ 112.893241][ T5904] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 112.893338][ T5904] gspca_pac7302 4-1:1.230: probe with driver gspca_pac7302 failed with error -71 [ 112.934988][ T5904] usb 4-1: USB disconnect, device number 3 [ 113.092239][ T9] radio-raremono 3-1:0.35: this is not Thanko's Raremono. [ 113.092882][ T9] usbhid 3-1:0.35: couldn't find an input interrupt endpoint [ 113.316001][ T5918] usb 3-1: USB disconnect, device number 2 [ 113.371202][ T6227] unsupported nlmsg_type 40 [ 113.372156][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 113.520161][ T6231] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 113.586482][ T6233] netlink: 'syz.4.135': attribute type 1 has an invalid length. [ 113.586501][ T6233] netlink: 224 bytes leftover after parsing attributes in process `syz.4.135'. [ 113.830793][ T6243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.140'. [ 113.830820][ T6243] netlink: 32 bytes leftover after parsing attributes in process `syz.0.140'. [ 114.078628][ T6249] netlink: 16 bytes leftover after parsing attributes in process `syz.1.144'. [ 114.078652][ T6249] netlink: 16 bytes leftover after parsing attributes in process `syz.1.144'. [ 114.078673][ T6249] netlink: 5 bytes leftover after parsing attributes in process `syz.1.144'. [ 114.782281][ T6278] netlink: 'syz.3.158': attribute type 5 has an invalid length. [ 115.012764][ T6286] netlink: 32 bytes leftover after parsing attributes in process `syz.0.161'. [ 115.019347][ T6287] netlink: 24 bytes leftover after parsing attributes in process `syz.3.162'. [ 115.652070][ T5918] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 115.741518][ T5904] wg1 speed is unknown, defaulting to 1000 [ 115.805154][ T5918] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 115.805180][ T5918] usb 2-1: config 0 has no interface number 0 [ 115.805228][ T5918] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 115.805252][ T5918] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 115.810153][ T5918] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 115.810179][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.810198][ T5918] usb 2-1: Product: syz [ 115.810212][ T5918] usb 2-1: Manufacturer: syz [ 115.810225][ T5918] usb 2-1: SerialNumber: syz [ 115.888733][ T5918] usb 2-1: config 0 descriptor?? [ 115.891158][ T6305] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 115.960796][ T5918] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 116.029923][ T5918] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 116.343870][ T1821] usb 2-1: USB disconnect, device number 4 [ 116.413502][ T1821] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 116.414350][ T1821] cyberjack 2-1:0.69: device disconnected [ 116.755564][ T6342] netlink: 'syz.2.189': attribute type 7 has an invalid length. [ 116.755584][ T6342] netlink: 'syz.2.189': attribute type 3 has an invalid length. [ 117.747678][ T6382] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (4) [ 118.022063][ T5918] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 118.175536][ T5918] usb 5-1: Using ep0 maxpacket: 32 [ 118.181735][ T5918] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.181765][ T5918] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.181786][ T5918] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 118.186571][ T5918] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 118.186599][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 118.186618][ T5918] usb 5-1: Product: syz [ 118.186631][ T5918] usb 5-1: Manufacturer: syz [ 118.186644][ T5918] usb 5-1: SerialNumber: syz [ 118.272289][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 118.277529][ T5918] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input5 [ 118.427536][ T10] usb 1-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 118.427566][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.512505][ T10] usb 1-1: config 0 descriptor?? [ 118.576890][ T5918] usb 5-1: USB disconnect, device number 3 [ 118.930094][ T5918] appletouch 5-1:1.0: input: appletouch disconnected [ 118.933363][ T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 118.933919][ T10] asix 1-1:0.0: probe with driver asix failed with error -71 [ 118.969203][ T10] usb 1-1: USB disconnect, device number 2 [ 119.609297][ T6434] binder: 6431:6434 ioctl 400c620e 200000000000 returned -22 [ 120.162076][ T5904] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 120.314637][ T5904] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 120.314690][ T5904] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 120.314714][ T5904] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 120.314735][ T5904] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 120.314772][ T5904] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 120.314793][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.422338][ T5904] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 120.423497][ T5904] usb 2-1: invalid MIDI out EP 0 [ 120.910077][ T6043] udevd[6043]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 120.979902][ T5904] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 121.079016][ T5904] usb 2-1: USB disconnect, device number 5 [ 121.403687][ T6495] netlink: 'syz.0.249': attribute type 1 has an invalid length. [ 121.403708][ T6495] __nla_validate_parse: 2 callbacks suppressed [ 121.403719][ T6495] netlink: 224 bytes leftover after parsing attributes in process `syz.0.249'. [ 122.015242][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 122.473479][ T6533] block nbd0: Attempted send on invalid socket [ 122.473554][ T6533] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 122.473722][ T6533] MINIX-fs: unable to read superblock [ 123.550543][ T6573] openvswitch: netlink: nsh attribute has 65533 unknown bytes. [ 123.550580][ T6573] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 123.797643][ T6583] capability: warning: `syz.0.286' uses deprecated v2 capabilities in a way that may be insecure [ 124.063967][ T6589] vxcan1 speed is unknown, defaulting to 1000 [ 124.065540][ T6589] vxcan1 speed is unknown, defaulting to 1000 [ 124.088503][ T6589] vxcan1 speed is unknown, defaulting to 1000 [ 124.199470][ T6566] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 124.199493][ T6566] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 124.518117][ T6566] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 124.518139][ T6566] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 124.563983][ T6607] netlink: 16 bytes leftover after parsing attributes in process `syz.2.296'. [ 124.564004][ T6607] tipc: Invalid UDP bearer configuration [ 124.564047][ T6607] tipc: Enabling of bearer rejected, failed to enable media [ 124.837040][ T6566] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 124.837062][ T6566] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 125.206014][ T6566] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 125.206038][ T6566] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 125.551787][ T6566] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 125.551810][ T6566] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 125.626867][ T6589] infiniband syz2: set active [ 125.629400][ T49] vxcan1 speed is unknown, defaulting to 1000 [ 125.642114][ T6589] infiniband syz2: added vxcan1 [ 125.644509][ T6589] syz2: rxe_create_cq: returned err = -12 [ 125.644578][ T6589] infiniband syz2: Couldn't create ib_mad CQ [ 125.644777][ T6589] infiniband syz2: Couldn't open port 1 [ 125.729428][ T6589] RDS/IB: syz2: added [ 125.730287][ T6589] smc: adding ib device syz2 with port count 1 [ 125.730536][ T6589] smc: ib device syz2 port 1 has pnetid [ 125.733989][ T5918] vxcan1 speed is unknown, defaulting to 1000 [ 125.754843][ T6589] vxcan1 speed is unknown, defaulting to 1000 [ 127.380660][ T6681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.322'. [ 127.380684][ T6681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.322'. [ 127.380751][ T6681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.322'. [ 127.862054][ T6589] vxcan1 speed is unknown, defaulting to 1000 [ 129.150092][ T6589] vxcan1 speed is unknown, defaulting to 1000 [ 129.497449][ T6738] mkiss: ax0: crc mode is auto. [ 130.232721][ T6765] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 130.232777][ T6765] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 130.775240][ T6589] vxcan1 speed is unknown, defaulting to 1000 [ 130.996316][ T6791] netlink: 'syz.1.361': attribute type 3 has an invalid length. [ 130.996338][ T6791] netlink: 666 bytes leftover after parsing attributes in process `syz.1.361'. [ 131.545072][ T49] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 131.709062][ T49] usb 2-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 131.709091][ T49] usb 2-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3 [ 131.709129][ T49] usb 2-1: Product: syz [ 131.709143][ T49] usb 2-1: Manufacturer: syz [ 131.709157][ T49] usb 2-1: SerialNumber: syz [ 131.754790][ T49] usb 2-1: config 0 descriptor?? [ 132.415769][ T49] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 132.416059][ T49] asix 2-1:0.0: probe with driver asix failed with error -71 [ 132.442911][ T49] usb 2-1: USB disconnect, device number 6 [ 132.590624][ T6589] vxcan1 speed is unknown, defaulting to 1000 [ 132.901596][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.901685][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.099349][ T6854] netlink: 8 bytes leftover after parsing attributes in process `syz.4.382'. [ 133.099383][ T6854] netlink: 8 bytes leftover after parsing attributes in process `syz.4.382'. [ 133.729371][ T6880] Bluetooth: MGMT ver 1.23 [ 134.512409][ T5907] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 134.562931][ T6903] netlink: 209840 bytes leftover after parsing attributes in process `syz.3.396'. [ 134.662092][ T5907] usb 3-1: Using ep0 maxpacket: 16 [ 134.664710][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.664737][ T5907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.664758][ T5907] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 134.664795][ T5907] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 134.664825][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.670418][ T6905] netlink: 8 bytes leftover after parsing attributes in process `syz.0.397'. [ 134.670582][ T6905] openvswitch: netlink: nsh attr 9927 is out of range max 3 [ 134.670614][ T6905] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 134.755253][ T5907] usb 3-1: config 0 descriptor?? [ 134.923306][ T6914] capability: warning: `syz.3.399' uses 32-bit capabilities (legacy support in use) [ 135.267791][ T5907] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0001/input/input6 [ 135.334178][ T5907] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 135.422733][ T5827] usb 3-1: USB disconnect, device number 3 [ 135.592742][ T6931] bad cache= option: no%e [ 135.592742][ T6931] [ 135.592933][ T6931] CIFS: VFS: bad cache= option: no%e [ 135.832902][ T6928] fido_id[6928]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 136.383374][ T6955] tipc: Started in network mode [ 136.383403][ T6955] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 136.383456][ T6955] tipc: Enabling of bearer rejected, failed to enable media [ 136.439562][ T6959] tipc: Enabling of bearer rejected, failed to enable media [ 136.559640][ T6965] process 'syz.3.420' launched '/dev/fd/3' with NULL argv: empty string added [ 136.831657][ T6971] netlink: 'syz.0.422': attribute type 1 has an invalid length. [ 136.831678][ T6971] netlink: 28 bytes leftover after parsing attributes in process `syz.0.422'. [ 136.831693][ T6971] nbd: illegal input index 65544 [ 136.960391][ T6976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.424'. [ 137.008106][ T6979] netlink: 4 bytes leftover after parsing attributes in process `syz.0.426'. [ 137.382336][ T6993] netlink: 28 bytes leftover after parsing attributes in process `syz.2.430'. [ 137.382360][ T6993] netlink: 28 bytes leftover after parsing attributes in process `syz.2.430'. [ 137.545329][ T5907] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 137.722049][ T5907] usb 5-1: Using ep0 maxpacket: 16 [ 137.739293][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.739324][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.739344][ T5907] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 137.739383][ T5907] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 137.739403][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.745551][ T5907] usb 5-1: config 0 descriptor?? [ 138.263920][ T5907] microsoft 0003:045E:07DA.0002: reserved main item tag 0xd [ 138.296065][ T5907] microsoft 0003:045E:07DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 138.296097][ T5907] microsoft 0003:045E:07DA.0002: no inputs found [ 138.296111][ T5907] microsoft 0003:045E:07DA.0002: could not initialize ff, continuing anyway [ 138.427010][ T5827] usb 5-1: USB disconnect, device number 4 [ 138.653691][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 138.671625][ T7026] fido_id[7026]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 139.508229][ T7059] netlink: 100 bytes leftover after parsing attributes in process `syz.1.459'. [ 139.847959][ T7072] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 139.848015][ T7072] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 139.848105][ T7072] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 139.972233][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 140.085444][ T7075] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 140.155142][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 140.157872][ T10] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 140.157896][ T10] usb 1-1: config 0 has no interface number 0 [ 140.175220][ T10] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 140.175248][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.175267][ T10] usb 1-1: Product: syz [ 140.175279][ T10] usb 1-1: Manufacturer: syz [ 140.175292][ T10] usb 1-1: SerialNumber: syz [ 140.186620][ T10] usb 1-1: config 0 descriptor?? [ 140.251760][ T10] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 140.251793][ T10] usb 1-1: selecting invalid altsetting 1 [ 140.251811][ T10] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 140.350451][ T10] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 140.351092][ T10] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 140.351178][ T10] usb 1-1: media controller created [ 140.594724][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 140.635386][ T37] audit: type=1326 audit(1755969181.970:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7084 comm="syz.4.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ca82ebe9 code=0x7ffc0000 [ 140.637511][ T37] audit: type=1326 audit(1755969181.970:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7084 comm="syz.4.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ca82ebe9 code=0x7ffc0000 [ 140.639504][ T37] audit: type=1326 audit(1755969181.970:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7084 comm="syz.4.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f21ca82ebe9 code=0x7ffc0000 [ 140.639542][ T37] audit: type=1326 audit(1755969181.970:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7084 comm="syz.4.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ca82ebe9 code=0x7ffc0000 [ 140.639574][ T37] audit: type=1326 audit(1755969181.970:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7084 comm="syz.4.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ca82ebe9 code=0x7ffc0000 [ 140.757167][ T37] audit: type=1326 audit(1755969181.970:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7084 comm="syz.4.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f21ca82ebe9 code=0x7ffc0000 [ 140.757218][ T37] audit: type=1326 audit(1755969182.090:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7084 comm="syz.4.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ca82ebe9 code=0x7ffc0000 [ 140.757258][ T37] audit: type=1326 audit(1755969182.090:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7084 comm="syz.4.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ca82ebe9 code=0x7ffc0000 [ 141.392224][ T49] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 141.453708][ T7067] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 141.512267][ T10] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 141.512432][ T10] zl10353_read_register: readreg error (reg=127, ret==-71) [ 141.545980][ T10] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 141.559286][ T49] usb 3-1: Using ep0 maxpacket: 8 [ 141.561665][ T49] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 141.596276][ T49] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 141.596303][ T49] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.596320][ T49] usb 3-1: Product: syz [ 141.596334][ T49] usb 3-1: Manufacturer: syz [ 141.596347][ T49] usb 3-1: SerialNumber: syz [ 141.647995][ T49] usb 3-1: config 0 descriptor?? [ 141.660241][ T49] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 141.660302][ T49] usb 3-1: setting power ON [ 141.660827][ T49] dvb-usb: bulk message failed: -22 (2/0) [ 141.735414][ T49] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 141.738481][ T49] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 141.738538][ T49] usb 3-1: media controller created [ 141.805562][ T49] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 141.847012][ T49] usb 3-1: selecting invalid altsetting 6 [ 141.847034][ T49] usb 3-1: digital interface selection failed (-22) [ 141.847048][ T49] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 141.867356][ T10] usb 1-1: USB disconnect, device number 3 [ 141.881741][ T49] usb 3-1: setting power OFF [ 141.881863][ T49] dvb-usb: bulk message failed: -22 (2/0) [ 141.894060][ T49] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 141.894077][ T49] (NULL device *): no alternate interface [ 141.996574][ T49] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 142.021124][ T49] usb 3-1: USB disconnect, device number 4 [ 142.932030][ T5907] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 143.082018][ T5907] usb 2-1: Using ep0 maxpacket: 16 [ 143.084550][ T5907] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.084580][ T5907] usb 2-1: config 0 interface 0 has no altsetting 0 [ 143.084612][ T5907] usb 2-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 143.084635][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.138832][ T5907] usb 2-1: config 0 descriptor?? [ 143.439460][ T7150] netlink: 36 bytes leftover after parsing attributes in process `syz.4.501'. [ 143.832678][ T5907] usb 2-1: USB disconnect, device number 7 [ 143.932068][ T5827] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 144.018343][ T7162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.507'. [ 144.018365][ T7162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.507'. [ 144.082065][ T5827] usb 5-1: Using ep0 maxpacket: 8 [ 144.090505][ T5827] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 144.090537][ T5827] usb 5-1: config 0 interface 0 has no altsetting 0 [ 144.090570][ T5827] usb 5-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00 [ 144.090591][ T5827] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.187408][ T5827] usb 5-1: config 0 descriptor?? [ 144.680293][ T5827] hid-u2fzero 0003:20A0:4287.0004: hidraw0: USB HID v0.03 Device [HID 20a0:4287] on usb-dummy_hcd.4-1/input0 [ 144.696129][ T5827] hid-u2fzero 0003:20A0:4287.0004: NitroKey U2F LED initialised [ 144.696521][ T5827] hid-u2fzero 0003:20A0:4287.0004: NitroKey U2F RNG initialised [ 144.846830][ T5907] usb 5-1: USB disconnect, device number 5 [ 145.016292][ T7178] fido_id[7178]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 145.375623][ T7198] netlink: 268 bytes leftover after parsing attributes in process `syz.0.522'. [ 145.375652][ T7198] netlink: 12 bytes leftover after parsing attributes in process `syz.0.522'. [ 145.598123][ T7202] netlink: 'syz.4.528': attribute type 13 has an invalid length. [ 145.758137][ T10] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 145.856363][ T7202] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 145.892102][ T5907] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 145.914943][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 145.914975][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 145.914998][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 145.915037][ T10] usb 4-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 145.915058][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.985073][ T10] usb 4-1: config 0 descriptor?? [ 145.992529][ T7200] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 146.001998][ T1821] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 146.042134][ T5907] usb 2-1: Using ep0 maxpacket: 32 [ 146.044733][ T5907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.044775][ T5907] usb 2-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 146.044798][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.059439][ T5907] usb 2-1: config 0 descriptor?? [ 146.153604][ T1821] usb 3-1: Using ep0 maxpacket: 16 [ 146.157780][ T1821] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.157809][ T1821] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.157901][ T1821] usb 3-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 146.157923][ T1821] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.303884][ T1821] usb 3-1: config 0 descriptor?? [ 146.531307][ T10] aureal 0003:0755:2626.0005: fixing Aureal Cy se W-01RN USB_V3.1 report descriptor. [ 146.544905][ T10] aureal 0003:0755:2626.0005: unknown main item tag 0x6 [ 146.544947][ T10] aureal 0003:0755:2626.0005: report_id 29495 is invalid [ 146.544962][ T10] aureal 0003:0755:2626.0005: item 0 2 1 8 parsing failed [ 146.545801][ T10] aureal 0003:0755:2626.0005: probe with driver aureal failed with error -22 [ 146.734268][ T7224] netlink: 'syz.4.537': attribute type 1 has an invalid length. [ 146.746222][ T5907] magicmouse 0003:05AC:0265.0006: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.1-1/input0 [ 146.804678][ T49] usb 4-1: USB disconnect, device number 4 [ 146.812476][ T5907] usb 2-1: USB disconnect, device number 8 [ 146.833473][ T1821] gt683r_led 0003:1770:FF00.0007: hidraw1: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.2-1/input0 [ 147.046297][ T1821] usb 3-1: USB disconnect, device number 5 [ 147.097234][ T7227] fido_id[7227]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 147.177534][ T5904] gt683r_led 0003:1770:FF00.0007: failed to send set report request: -19 [ 147.240123][ T7228] fido_id[7228]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 147.702090][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 147.870184][ T10] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 147.870211][ T10] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 147.870228][ T10] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 147.870246][ T10] usb 5-1: config 220 has no interface number 2 [ 147.870322][ T10] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 147.870348][ T10] usb 5-1: config 220 interface 0 has no altsetting 0 [ 147.870365][ T10] usb 5-1: config 220 interface 76 has no altsetting 0 [ 147.870382][ T10] usb 5-1: config 220 interface 1 has no altsetting 0 [ 147.935657][ T10] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 147.935685][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.935704][ T10] usb 5-1: Product: syz [ 147.935718][ T10] usb 5-1: Manufacturer: syz [ 147.935732][ T10] usb 5-1: SerialNumber: syz [ 148.255325][ T10] usb 5-1: selecting invalid altsetting 0 [ 148.255811][ T10] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 148.255845][ T10] usb 5-1: No valid video chain found. [ 148.326447][ T10] usb 5-1: selecting invalid altsetting 0 [ 148.326484][ T10] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 148.366616][ T10] usb 5-1: USB disconnect, device number 6 [ 148.532101][ T6087] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 148.682046][ T6087] usb 3-1: Using ep0 maxpacket: 32 [ 148.685218][ T6087] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.685261][ T6087] usb 3-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 148.685284][ T6087] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.726235][ T6087] usb 3-1: config 0 descriptor?? [ 149.185825][ T6087] magicmouse 0003:05AC:0265.0008: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.2-1/input0 [ 149.362836][ T5907] usb 3-1: USB disconnect, device number 6 [ 149.511343][ T7288] fido_id[7288]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 150.422177][ T7316] netlink: 4 bytes leftover after parsing attributes in process `syz.3.579'. [ 151.077789][ T7346] program syz.3.595 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 151.284710][ T7354] netlink: 'syz.0.598': attribute type 13 has an invalid length. [ 151.891620][ T7354] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.893688][ T7354] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.019349][ T7371] netlink: 28 bytes leftover after parsing attributes in process `syz.1.606'. [ 152.357968][ T7377] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 152.357968][ T7377] program syz.1.610 not setting count and/or reply_len properly [ 153.081434][ T7354] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.120083][ T7354] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.376127][ T7384] Falling back ldisc for ttyprintk. [ 153.454700][ T37] audit: type=1326 audit(1755969194.790:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7398 comm="syz.1.619" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb56fbdebe9 code=0x0 [ 153.609926][ T7403] netlink: 4 bytes leftover after parsing attributes in process `syz.2.620'. [ 154.062128][ T6087] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 154.088932][ T1821] wg1 speed is unknown, defaulting to 1000 [ 154.088975][ T1821] syz0: Port: 1 Link DOWN [ 154.120675][ T43] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.122176][ T43] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.124558][ T43] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.124593][ T43] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.245217][ T6087] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 154.245274][ T6087] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 154.245300][ T6087] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 154.245324][ T6087] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 154.245348][ T6087] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 154.246943][ T6087] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 154.246994][ T6087] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 154.247019][ T6087] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 154.247043][ T6087] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 154.247068][ T6087] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 154.248726][ T6087] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 154.248776][ T6087] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 154.248801][ T6087] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 154.248825][ T6087] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 154.248850][ T6087] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 154.356640][ T6087] usb 4-1: string descriptor 0 read error: -22 [ 154.356792][ T6087] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 154.356814][ T6087] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.480507][ T6087] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 154.704693][ T1821] usb 4-1: USB disconnect, device number 5 [ 155.487869][ T7443] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 155.500745][ T7443] [U] J"—E:ÀÆ" [ 155.692109][ T5827] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 155.692313][ T6087] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 155.842107][ T5827] usb 5-1: Using ep0 maxpacket: 16 [ 155.842297][ T6087] usb 2-1: Using ep0 maxpacket: 16 [ 155.849451][ T5827] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.849481][ T5827] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.849518][ T5827] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 155.849541][ T5827] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.905317][ T6087] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 155.905343][ T6087] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 155.905361][ T6087] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 155.945318][ T6087] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 155.945346][ T6087] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.945366][ T6087] usb 2-1: Product: syz [ 155.945379][ T6087] usb 2-1: Manufacturer: syz [ 155.945392][ T6087] usb 2-1: SerialNumber: syz [ 155.993868][ T5827] usb 5-1: config 0 descriptor?? [ 156.140871][ T7461] netlink: 'syz.0.648': attribute type 1 has an invalid length. [ 156.232046][ T1821] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 156.259096][ T6087] usb 2-1: 0:2 : does not exist [ 156.350749][ T6087] usb 2-1: USB disconnect, device number 9 [ 156.383304][ T1821] usb 4-1: Using ep0 maxpacket: 16 [ 156.389589][ T1821] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.389619][ T1821] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.389658][ T1821] usb 4-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 156.389680][ T1821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.416977][ T1821] usb 4-1: config 0 descriptor?? [ 156.475654][ T5827] hid-picolcd 0003:04D8:F002.0009: unknown main item tag 0x0 [ 156.475692][ T5827] hid-picolcd 0003:04D8:F002.0009: unknown main item tag 0x0 [ 156.475717][ T5827] hid-picolcd 0003:04D8:F002.0009: unknown main item tag 0x0 [ 156.475742][ T5827] hid-picolcd 0003:04D8:F002.0009: unknown main item tag 0x0 [ 156.475767][ T5827] hid-picolcd 0003:04D8:F002.0009: unknown main item tag 0x0 [ 156.475793][ T5827] hid-picolcd 0003:04D8:F002.0009: unknown main item tag 0x0 [ 156.475820][ T5827] hid-picolcd 0003:04D8:F002.0009: unknown main item tag 0x0 [ 156.475844][ T5827] hid-picolcd 0003:04D8:F002.0009: unknown main item tag 0x0 [ 156.475870][ T5827] hid-picolcd 0003:04D8:F002.0009: unknown main item tag 0x0 [ 156.475896][ T5827] hid-picolcd 0003:04D8:F002.0009: unknown main item tag 0x0 [ 156.608268][ T5827] hid-picolcd 0003:04D8:F002.0009: No report with id 0xf3 found [ 156.608293][ T5827] hid-picolcd 0003:04D8:F002.0009: No report with id 0xf4 found [ 156.625095][ T5827] usb 5-1: USB disconnect, device number 7 [ 156.730075][ T6427] udevd[6427]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 156.902387][ T7472] netlink: 'syz.0.653': attribute type 13 has an invalid length. [ 156.937274][ T1821] gt683r_led 0003:1770:FF00.000A: hidraw0: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.3-1/input0 [ 156.978547][ T7474] syz.1.654 (7474): /proc/7473/oom_adj is deprecated, please use /proc/7473/oom_score_adj instead. [ 157.120838][ T10] usb 4-1: USB disconnect, device number 6 [ 157.184962][ T5827] gt683r_led 0003:1770:FF00.000A: failed to send set report request: -19 [ 157.535493][ T7472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.549968][ T7472] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.613567][ T7472] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 157.817531][ T7493] autofs: Bad value for 'fd' [ 157.892436][ T7495] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 157.892552][ T7495] [U] J"—e:ÀÆ" [ 158.462069][ T5827] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 158.469115][ T7517] netlink: 20 bytes leftover after parsing attributes in process `syz.2.674'. [ 158.530140][ T7519] netlink: 'syz.1.675': attribute type 13 has an invalid length. [ 158.622025][ T5827] usb 1-1: Using ep0 maxpacket: 16 [ 158.626025][ T5827] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.626055][ T5827] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.626089][ T5827] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 158.626109][ T5827] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.681093][ T5827] usb 1-1: config 0 descriptor?? [ 159.002260][ T7519] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 159.235009][ T5827] hid-multitouch 0003:1FD2:6007.000B: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.0-1/input0 [ 159.374357][ T5904] usb 1-1: USB disconnect, device number 4 [ 159.691859][ T7547] fido_id[7547]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 160.322005][ T5827] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 160.474978][ T5827] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.475004][ T5827] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 160.475055][ T5827] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 160.475078][ T5827] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.525412][ T5827] usb 5-1: config 0 descriptor?? [ 160.563776][ T5827] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 160.563995][ T5827] dvb-usb: bulk message failed: -22 (3/0) [ 160.570790][ T5827] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 160.596183][ T5827] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 160.596240][ T5827] usb 5-1: media controller created [ 160.599521][ T5827] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 160.646683][ T5827] dvb-usb: bulk message failed: -22 (6/0) [ 160.646806][ T5827] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 160.662047][ T5904] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 160.715338][ T5827] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input8 [ 160.737967][ T7555] dibusb: i2c wr: len=61 is too big! [ 160.737967][ T7555] [ 160.779549][ T5827] dvb-usb: schedule remote query interval to 150 msecs. [ 160.779571][ T5827] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 160.799665][ T5827] usb 5-1: USB disconnect, device number 8 [ 160.816340][ T5904] usb 1-1: Using ep0 maxpacket: 32 [ 160.820243][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.820275][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.820312][ T5904] usb 1-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 160.820333][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.916116][ T5904] usb 1-1: config 0 descriptor?? [ 161.081444][ T7576] syz.3.701 (7576) used greatest stack depth: 18040 bytes left [ 161.135809][ T5827] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 161.358695][ T5904] greenasia 0003:0E8F:0012.000C: item fetching failed at offset 0/3 [ 161.359484][ T5904] greenasia 0003:0E8F:0012.000C: parse failed [ 161.359562][ T5904] greenasia 0003:0E8F:0012.000C: probe with driver greenasia failed with error -22 [ 161.568875][ T5904] usb 1-1: USB disconnect, device number 5 [ 161.682796][ T7590] bad cache= option: no%e [ 161.682796][ T7590] [ 161.682817][ T7590] CIFS: VFS: bad cache= option: no%e [ 162.522059][ T5827] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 162.696447][ T5827] usb 2-1: Using ep0 maxpacket: 16 [ 162.709874][ T5827] usb 2-1: config index 0 descriptor too short (expected 65, got 36) [ 162.709936][ T5827] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.709962][ T5827] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 162.710001][ T5827] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 162.710031][ T5827] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.838990][ T5827] usb 2-1: config 0 descriptor?? [ 162.872129][ T37] audit: type=1326 audit(1755969204.190:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7620 comm="syz.3.721" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f434391ebe9 code=0x0 [ 162.926484][ T5827] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input9 [ 163.783220][ T7626] bad cache= option: no%e [ 163.783220][ T7626] [ 163.783464][ T7626] CIFS: VFS: bad cache= option: no%e [ 166.186940][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 166.361665][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.362157][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.362198][ T10] usb 4-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 166.362219][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.448366][ T10] usb 4-1: config 0 descriptor?? [ 168.617178][ T10] greenasia 0003:0E8F:0012.000D: ignoring exceeding usage max [ 168.699297][ T10] greenasia 0003:0E8F:0012.000D: hidraw0: USB HID v0.00 Device [HID 0e8f:0012] on usb-dummy_hcd.3-1/input0 [ 168.699330][ T10] greenasia 0003:0E8F:0012.000D: no inputs found [ 168.972878][ T10] usb 4-1: USB disconnect, device number 7 [ 169.502130][ T7646] fido_id[7646]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0E8F:0012.000D/report_descriptor': No such file or directory [ 170.237423][ T7650] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 172.573183][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 176.447788][ T6087] usb 2-1: USB disconnect, device number 10 [ 176.447876][ C0] pxrc 2-1:0.0: pxrc_usb_irq - usb_submit_urb failed with result: -19 [ 178.952247][ T5827] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 179.093718][ T5850] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 179.112264][ T5827] usb 5-1: Using ep0 maxpacket: 16 [ 179.117663][ T5827] usb 5-1: too many endpoints for config 0 interface 0 altsetting 5: 130, using maximum allowed: 30 [ 179.117707][ T5827] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 179.117732][ T5827] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.117753][ T5827] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 179.117777][ T5827] usb 5-1: config 0 interface 0 has no altsetting 0 [ 179.117808][ T5827] usb 5-1: New USB device found, idVendor=1e71, idProduct=200e, bcdDevice= 0.00 [ 179.117830][ T5827] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.204462][ T5850] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 179.221706][ T5850] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 179.235011][ T5850] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 179.235892][ T5850] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 179.272042][ T5827] usb 5-1: config 0 descriptor?? [ 179.300055][ T5155] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 179.321507][ T5155] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 179.334841][ T5155] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 179.357359][ T5155] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 179.397633][ T5155] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 179.905215][ T5827] nzxt-smart2 0003:1E71:200E.000E: item fetching failed at offset 0/3 [ 179.906175][ T5827] nzxt-smart2 0003:1E71:200E.000E: probe with driver nzxt-smart2 failed with error -22 [ 180.110531][ T7685] wg1 speed is unknown, defaulting to 1000 [ 180.115245][ T5827] usb 5-1: USB disconnect, device number 9 [ 180.164323][ T7685] vxcan1 speed is unknown, defaulting to 1000 [ 180.454724][ T7692] netlink: 830 bytes leftover after parsing attributes in process `syz.1.751'. [ 181.503166][ T7694] sctp: failed to load transform for md5: -2 [ 181.543199][ T5155] Bluetooth: hci5: command tx timeout [ 181.870261][ T7696] syz.1.752 (7696) used greatest stack depth: 17048 bytes left [ 181.944667][ T7698] tipc: Enabling of bearer rejected, failed to enable media [ 183.612245][ T5155] Bluetooth: hci5: command tx timeout [ 185.693593][ T5155] Bluetooth: hci5: command tx timeout [ 187.772198][ T5155] Bluetooth: hci5: command tx timeout [ 188.363920][ T7746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.770'. [ 189.556096][ T7750] syz.1.772 uses obsolete (PF_INET,SOCK_PACKET) [ 194.351326][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.351415][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.725403][ T5850] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 194.727859][ T5850] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 194.728978][ T5850] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 194.730529][ T5850] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 194.766968][ T5850] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 196.812189][ T5850] Bluetooth: hci6: command tx timeout [ 198.899472][ T5850] Bluetooth: hci6: command tx timeout [ 199.734047][ T5155] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 199.750524][ T5155] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 199.759546][ T5155] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 199.769783][ T5155] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 199.780178][ T5155] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 200.972136][ T5155] Bluetooth: hci6: command tx timeout [ 201.852157][ T5155] Bluetooth: hci7: command tx timeout [ 202.331198][ T5850] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 202.353971][ T5850] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 202.355739][ T5850] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 202.357215][ T5850] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 202.358060][ T5850] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 203.052135][ T5850] Bluetooth: hci6: command tx timeout [ 203.932695][ T5850] Bluetooth: hci7: command tx timeout [ 204.422091][ T5850] Bluetooth: hci8: command tx timeout [ 206.012146][ T5850] Bluetooth: hci7: command tx timeout [ 206.300946][ T5155] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 206.318954][ T5155] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 206.321609][ T5155] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 206.338918][ T5155] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 206.354936][ T5155] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 206.492204][ T5850] Bluetooth: hci8: command tx timeout [ 208.092057][ T5850] Bluetooth: hci7: command tx timeout [ 208.412197][ T5850] Bluetooth: hci9: command tx timeout [ 208.572262][ T5850] Bluetooth: hci8: command tx timeout [ 210.492052][ T5850] Bluetooth: hci9: command tx timeout [ 210.652192][ T5850] Bluetooth: hci8: command tx timeout [ 212.572114][ T5850] Bluetooth: hci9: command tx timeout [ 213.675536][ T7755] wg1 speed is unknown, defaulting to 1000 [ 213.764959][ T7760] wg1 speed is unknown, defaulting to 1000 [ 213.770272][ T7755] vxcan1 speed is unknown, defaulting to 1000 [ 213.887513][ T7752] wg1 speed is unknown, defaulting to 1000 [ 213.935215][ T7763] wg1 speed is unknown, defaulting to 1000 [ 214.132308][ T7685] chnl_net:caif_netlink_parms(): no params data found [ 214.653893][ T5850] Bluetooth: hci9: command tx timeout [ 222.193411][ T7760] vxcan1 speed is unknown, defaulting to 1000 [ 222.721896][ C1] sched: DL replenish lagged too much [ 238.666609][ T5155] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 238.684120][ T5155] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 238.685296][ T5155] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 238.686519][ T5155] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 238.716404][ T5155] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 240.812176][ T5850] Bluetooth: hci2: command tx timeout [ 242.892103][ T5850] Bluetooth: hci2: command tx timeout [ 244.972241][ T5850] Bluetooth: hci2: command tx timeout [ 245.540778][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 247.061548][ T5850] Bluetooth: hci2: command tx timeout [ 255.352851][ T5155] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 255.388909][ T5155] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 255.390765][ T5155] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 255.392304][ T5155] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 255.404572][ T5155] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 255.792889][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.792964][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.532155][ T5155] Bluetooth: hci4: command tx timeout [ 259.615493][ T5155] Bluetooth: hci4: command tx timeout [ 260.351093][ T5850] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 260.365077][ T5850] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 260.366253][ T5850] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 260.368129][ T5850] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 260.368924][ T5850] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 261.692135][ T5155] Bluetooth: hci4: command tx timeout [ 262.492284][ T5155] Bluetooth: hci10: command tx timeout [ 262.878024][ T5850] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 262.899076][ T5850] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 262.900278][ T5850] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 262.901578][ T5850] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 262.924365][ T5850] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 263.772175][ T5850] Bluetooth: hci4: command tx timeout [ 264.572105][ T5850] Bluetooth: hci10: command tx timeout [ 264.972324][ T5850] Bluetooth: hci11: command tx timeout [ 265.901692][ T5155] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 265.921623][ T5155] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 265.931734][ T5155] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 265.948806][ T5155] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 265.950308][ T5155] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 266.652081][ T5155] Bluetooth: hci10: command tx timeout [ 267.052111][ T5155] Bluetooth: hci11: command tx timeout [ 268.732146][ T5155] Bluetooth: hci10: command tx timeout [ 269.132181][ T5155] Bluetooth: hci11: command tx timeout [ 271.212497][ T5155] Bluetooth: hci11: command tx timeout [ 272.252511][ T5155] Bluetooth: hci12: command tx timeout [ 274.332175][ T5155] Bluetooth: hci12: command tx timeout [ 276.412501][ T5155] Bluetooth: hci12: command tx timeout [ 278.492253][ T5155] Bluetooth: hci12: command tx timeout [ 299.550964][ T5850] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 299.571139][ T5850] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 299.572897][ T5850] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 299.588130][ T5850] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 299.589101][ T5850] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 301.692302][ T5850] Bluetooth: hci5: command tx timeout [ 303.782095][ T5850] Bluetooth: hci5: command tx timeout [ 305.852233][ T5850] Bluetooth: hci5: command tx timeout [ 307.932197][ T5850] Bluetooth: hci5: command tx timeout [ 310.632700][ T7752] vxcan1 speed is unknown, defaulting to 1000 [ 316.243411][ T5155] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 316.259965][ T5155] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 316.269444][ T5155] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 316.271317][ T5155] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 316.293227][ T5155] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 317.239818][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.239898][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.311633][ T5847] Bluetooth: hci6: command 0x0406 tx timeout [ 321.003220][ T59] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 321.027221][ T59] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 321.028622][ T59] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 321.030177][ T59] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 321.046493][ T59] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 323.326798][ T7830] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 323.344640][ T7830] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 323.345831][ T7830] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 323.347106][ T7830] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 323.348183][ T7830] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 324.421456][ T7828] Bluetooth: hci7: command 0x0406 tx timeout [ 326.812560][ T38] INFO: task syz.2.719:7618 blocked for more than 143 seconds. [ 326.812596][ T38] Not tainted syzkaller #0 [ 326.812606][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 326.812618][ T38] task:syz.2.719 state:D stack:25128 pid:7618 tgid:7618 ppid:5844 task_flags:0x400040 flags:0x00004004 [ 326.812684][ T38] Call Trace: [ 326.812691][ T38] [ 326.812704][ T38] __schedule+0x16f3/0x4c20 [ 326.812761][ T38] ? __lock_acquire+0xab9/0xd20 [ 326.812784][ T38] ? __pfx___schedule+0x10/0x10 [ 326.812820][ T38] ? schedule+0x91/0x360 [ 326.812843][ T38] schedule+0x165/0x360 [ 326.812865][ T38] schedule_timeout+0x9a/0x270 [ 326.812885][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 326.812917][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 326.812938][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 326.812956][ T38] ? wait_for_completion+0x267/0x5d0 [ 326.812979][ T38] wait_for_completion+0x2bf/0x5d0 [ 326.813012][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 326.813034][ T38] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 326.813055][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 326.813078][ T38] ? __init_swait_queue_head+0xa9/0x150 [ 326.813103][ T38] rcu_barrier+0x463/0x570 [ 326.813132][ T38] rcu_sync_dtor+0xa9/0x180 [ 326.813156][ T38] percpu_free_rwsem+0x43/0x80 [ 326.813177][ T38] hci_uart_tty_close+0x21d/0x290 [ 326.813204][ T38] tty_ldisc_kill+0xa3/0x1a0 [ 326.813231][ T38] tty_ldisc_release+0x1a4/0x200 [ 326.813257][ T38] tty_release_struct+0x2a/0xd0 [ 326.813283][ T38] tty_release+0xcb6/0x1650 [ 326.813319][ T38] ? evm_file_release+0x10b/0x1e0 [ 326.813342][ T38] ? __pfx_tty_release+0x10/0x10 [ 326.813364][ T38] __fput+0x45b/0xa80 [ 326.813395][ T38] task_work_run+0x1d4/0x260 [ 326.813417][ T38] ? __pfx_task_work_run+0x10/0x10 [ 326.813440][ T38] ? exit_to_user_mode_loop+0x40/0x110 [ 326.813466][ T38] exit_to_user_mode_loop+0xec/0x110 [ 326.813488][ T38] do_syscall_64+0x2bd/0x3b0 [ 326.813509][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 326.813528][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.813552][ T38] ? clear_bhb_loop+0x60/0xb0 [ 326.813574][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.813591][ T38] RIP: 0033:0x7f5ea216ebe9 [ 326.813612][ T38] RSP: 002b:00007ffe33e54178 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 326.813630][ T38] RAX: 0000000000000000 RBX: 0000000000027a65 RCX: 00007f5ea216ebe9 [ 326.813642][ T38] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 326.813653][ T38] RBP: 00007f5ea2397da0 R08: 0000000000000001 R09: 0000000333e5446f [ 326.813665][ T38] R10: 0000001b30d20000 R11: 0000000000000246 R12: 00007f5ea2395fac [ 326.813677][ T38] R13: 00007f5ea2395fa0 R14: ffffffffffffffff R15: 00007ffe33e54290 [ 326.813708][ T38] [ 326.813717][ T38] INFO: task syz.0.747:7679 blocked for more than 143 seconds. [ 326.813729][ T38] Not tainted syzkaller #0 [ 326.813738][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 326.813746][ T38] task:syz.0.747 state:D stack:25128 pid:7679 tgid:7679 ppid:5843 task_flags:0x400040 flags:0x00004004 [ 326.813792][ T38] Call Trace: [ 326.813798][ T38] [ 326.813809][ T38] __schedule+0x16f3/0x4c20 [ 326.813855][ T38] ? __pfx___schedule+0x10/0x10 [ 326.813900][ T38] rt_mutex_schedule+0x77/0xf0 [ 326.813918][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 326.813949][ T38] ? rt_mutex_slowlock_block+0x351/0x6d0 [ 326.813971][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 326.813991][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 326.814010][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 326.814039][ T38] ? rcu_barrier+0x4c/0x570 [ 326.814064][ T38] ? rt_mutex_slowunlock+0x493/0x8a0 [ 326.814085][ T38] ? rcu_barrier+0x4c/0x570 [ 326.814100][ T38] mutex_lock_nested+0x16a/0x1d0 [ 326.814117][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 326.814139][ T38] rcu_barrier+0x4c/0x570 [ 326.814168][ T38] kvm_mmu_uninit_vm+0x53/0x90 [ 326.814188][ T38] kvm_arch_destroy_vm+0x23d/0x280 [ 326.814211][ T38] kvm_put_kvm+0xf8e/0x1670 [ 326.814241][ T38] ? __pfx_kvm_vm_release+0x10/0x10 [ 326.814263][ T38] kvm_vm_release+0x46/0x50 [ 326.814283][ T38] __fput+0x45b/0xa80 [ 326.814312][ T38] task_work_run+0x1d4/0x260 [ 326.814333][ T38] ? __pfx_task_work_run+0x10/0x10 [ 326.814356][ T38] ? exit_to_user_mode_loop+0x40/0x110 [ 326.814381][ T38] exit_to_user_mode_loop+0xec/0x110 [ 326.814403][ T38] do_syscall_64+0x2bd/0x3b0 [ 326.814422][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 326.814442][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.814459][ T38] ? clear_bhb_loop+0x60/0xb0 [ 326.814480][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.814496][ T38] RIP: 0033:0x7f34c6faebe9 [ 326.814510][ T38] RSP: 002b:00007ffd2bd63b28 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 326.814528][ T38] RAX: 0000000000000000 RBX: 000000000002b969 RCX: 00007f34c6faebe9 [ 326.814545][ T38] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 326.814556][ T38] RBP: 00007f34c71d7da0 R08: 0000000000000001 R09: 000000032bd63e1f [ 326.814568][ T38] R10: 0000001b30b20000 R11: 0000000000000246 R12: 00007f34c71d5fac [ 326.814580][ T38] R13: 00007f34c71d5fa0 R14: ffffffffffffffff R15: 00007ffd2bd63c40 [ 326.814612][ T38] [ 326.814640][ T38] [ 326.814640][ T38] Showing all locks held in the system: [ 326.814649][ T38] 2 locks held by kworker/u8:0/12: [ 326.814661][ T38] 3 locks held by kworker/u8:1/13: [ 326.814670][ T38] #0: ffff88802fdce938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 326.814717][ T38] #1: ffffc90000127bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 326.814761][ T38] #2: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 326.814804][ T38] 6 locks held by ksoftirqd/1/30: [ 326.814815][ T38] 1 lock held by khungtaskd/38: [ 326.814825][ T38] #0: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 326.814866][ T38] 3 locks held by kworker/u8:2/43: [ 326.814876][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 326.814920][ T38] #1: ffffc90000b47bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 326.814963][ T38] #2: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 326.815010][ T38] 4 locks held by kworker/u9:0/59: [ 326.815021][ T38] #0: ffff888024a8d938 ((wq_completion)hci14#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 326.815068][ T38] #1: ffffc9000125fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 326.815112][ T38] #2: ffff8880900980a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 326.815153][ T38] #3: ffffffff8ee39778 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 326.815213][ T38] 4 locks held by kworker/u9:1/5155: [ 326.815224][ T38] #0: ffff888030ef0138 ((wq_completion)hci13#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 326.815271][ T38] #1: ffffc9001026fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 326.815314][ T38] #2: ffff888062de40a8 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xb1/0x1220 [ 326.815357][ T38] #3: ffffffff8ee39778 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 [ 326.815400][ T38] 2 locks held by getty/5596: [ 326.815410][ T38] #0: ffff88823bf3a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 326.815455][ T38] #1: ffffc90003e832e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 326.815497][ T38] 5 locks held by kworker/u9:2/5847: [ 326.815507][ T38] #0: ffff88805feca138 ((wq_completion)hci7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 326.815559][ T38] #1: ffffc90004c27bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 326.815603][ T38] #2: ffff8880718a8e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 326.815649][ T38] #3: ffff8880718a80a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 326.815688][ T38] #4: ffffffff8ee39778 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 326.815724][ T38] 6 locks held by kworker/u9:4/5850: [ 326.815732][ T38] #0: ffff88802765d938 ((wq_completion)hci6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 326.815773][ T38] #1: ffffc90004c57bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 326.815815][ T38] #2: ffff888070214e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 326.815859][ T38] #3: ffff8880702140a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 326.815901][ T38] #4: ffffffff8ee39778 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 326.815942][ T38] #5: ffff888032a2eb58 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 326.815997][ T38] 3 locks held by syz.2.719/7618: [ 326.816007][ T38] #0: ffff8880609650a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_release+0x5c/0x200 [ 326.816051][ T38] #1: ffff88806104d0a0 (&tty->ldisc_sem/1){+.+.}-{0:0}, at: tty_ldisc_release+0x80/0x200 [ 326.816100][ T38] #2: ffffffff8d9ae530 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 326.816140][ T38] 1 lock held by syz.0.747/7679: [ 326.816150][ T38] #0: ffffffff8d9ae530 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 326.816191][ T38] 1 lock held by syz-executor/7685: [ 326.816200][ T38] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 326.816245][ T38] 1 lock held by syz.4.761/7723: [ 326.816255][ T38] #0: ffffffff8d9ae530 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 326.816295][ T38] 8 locks held by kworker/1:12/7737: [ 326.816306][ T38] 1 lock held by syz.3.768/7742: [ 326.816316][ T38] #0: ffffffff8d9ae530 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 326.816355][ T38] 1 lock held by syz.1.772/7750: [ 326.816365][ T38] #0: ffffffff8d9ae530 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 326.816405][ T38] 2 locks held by syz-executor/7752: [ 326.816415][ T38] #0: ffffffff8ecc4f80 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 326.816457][ T38] #1: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2ab/0x800 [ 326.816498][ T38] 2 locks held by syz-executor/7755: [ 326.816507][ T38] #0: ffffffff8ecc4f80 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 326.816554][ T38] #1: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2ab/0x800 [ 326.816593][ T38] 2 locks held by syz-executor/7760: [ 326.816603][ T38] #0: ffffffff8ecc4f80 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 326.816644][ T38] #1: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2ab/0x800 [ 326.816685][ T38] 6 locks held by syz-executor/7763: [ 326.816694][ T38] #0: ffffffff8ecc4f80 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 326.816735][ T38] #1: ffffffff8ea21cc0 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x19a/0x270 [ 326.816777][ T38] #2: ffffffff8ea21f00 (rdma_nets_rwsem){.+.+}-{4:4}, at: rdma_dev_init_net+0x1d2/0x270 [ 326.816817][ T38] #3: ffff888048721118 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0xee/0x5c0 [ 326.816858][ T38] #4: ffff888048721430 (&rxe->usdev_lock){+.+.}-{4:4}, at: rxe_query_port+0x7e/0x3b0 [ 326.816902][ T38] #5: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: ib_get_eth_speed+0x151/0x7b0 [ 326.816948][ T38] 2 locks held by syz-executor/7772: [ 326.816958][ T38] #0: ffff88808039ce80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 326.816998][ T38] #1: ffff88808039c0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 326.817041][ T38] 1 lock held by syz-executor/7783: [ 326.817051][ T38] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 326.817093][ T38] 1 lock held by syz-executor/7790: [ 326.817103][ T38] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 326.817144][ T38] 1 lock held by syz-executor/7795: [ 326.817154][ T38] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 326.817196][ T38] 1 lock held by syz-executor/7801: [ 326.817205][ T38] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 326.817247][ T38] 1 lock held by syz-executor/7809: [ 326.817257][ T38] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 326.817302][ T38] 1 lock held by syz-executor/7819: [ 326.817312][ T38] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 326.817357][ T38] 1 lock held by syz-executor/7824: [ 326.817367][ T38] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 326.817413][ T38] 1 lock held by syz-executor/7829: [ 326.817423][ T38] #0: ffffffff8ecd1e78 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 326.817469][ T38] 4 locks held by kworker/u9:6/7830: [ 326.817479][ T38] #0: ffff8880292cb938 ((wq_completion)hci15#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 326.817527][ T38] #1: ffffc9000d9e7bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 326.817591][ T38] #2: ffff888061cc00a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 326.817631][ T38] #3: ffffffff8ee39778 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 326.817671][ T38] 1 lock held by syz-executor/7833: [ 326.817682][ T38] [ 326.817687][ T38] ============================================= [ 326.817687][ T38] [ 326.817705][ T38] NMI backtrace for cpu 0 [ 326.817728][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 326.817747][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 326.817757][ T38] Call Trace: [ 326.817764][ T38] [ 326.817771][ T38] dump_stack_lvl+0x189/0x250 [ 326.817797][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 326.817819][ T38] ? __pfx__printk+0x10/0x10 [ 326.817850][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 326.817871][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 326.817892][ T38] ? __pfx__printk+0x10/0x10 [ 326.817914][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 326.817937][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 326.817958][ T38] watchdog+0xf93/0xfe0 [ 326.817984][ T38] ? watchdog+0x1de/0xfe0 [ 326.818009][ T38] kthread+0x70e/0x8a0 [ 326.818034][ T38] ? __pfx_watchdog+0x10/0x10 [ 326.818054][ T38] ? __pfx_kthread+0x10/0x10 [ 326.818079][ T38] ? __pfx_kthread+0x10/0x10 [ 326.818102][ T38] ret_from_fork+0x3fc/0x770 [ 326.818126][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 326.818152][ T38] ? __switch_to_asm+0x39/0x70 [ 326.818168][ T38] ? __switch_to_asm+0x33/0x70 [ 326.818183][ T38] ? __pfx_kthread+0x10/0x10 [ 326.818206][ T38] ret_from_fork_asm+0x1a/0x30 [ 326.818237][ T38] [ 326.818243][ T38] Sending NMI from CPU 0 to CPUs 1: [ 326.818269][ C1] NMI backtrace for cpu 1 [ 326.818282][ C1] CPU: 1 UID: 0 PID: 7737 Comm: kworker/1:12 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 326.818299][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 326.818309][ C1] Workqueue: wg-crypt-wg1 wg_packet_encrypt_worker [ 326.818328][ C1] RIP: 0010:__might_resched+0x86/0x5d0 [ 326.818344][ C1] Code: 91 81 48 8d 5c 24 40 48 c1 eb 03 48 b8 f1 f1 f1 f1 00 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 09 f2 f2 f2 00 66 42 c7 44 2b 0d f3 f3 <42> c6 44 2b 0f f3 e8 6f fa 64 09 85 c0 74 46 48 c7 c7 40 8c 9a 8d [ 326.818356][ C1] RSP: 0018:ffffc9000469dfe0 EFLAGS: 00000a02 [ 326.818368][ C1] RAX: f2f2f200f1f1f1f1 RBX: 1ffff920008d3c04 RCX: 66792222e17f5000 [ 326.818380][ C1] RDX: 0000000000000500 RSI: 0000000000000030 RDI: ffffffff8b0b0b00 [ 326.818390][ C1] RBP: ffffc9000469e0f0 R08: 0000000000000000 R09: ffffffff89673f8e [ 326.818401][ C1] R10: ffff88809805e69a R11: ffffed101300bcd5 R12: dffffc0000000000 [ 326.818412][ C1] R13: dffffc0000000000 R14: ffff888024371dc0 R15: ffff888024372204 [ 326.818423][ C1] FS: 0000000000000000(0000) GS:ffff8881269c2000(0000) knlGS:0000000000000000 [ 326.818435][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 326.818446][ C1] CR2: 0000558d7fc2a410 CR3: 000000000d7a6000 CR4: 00000000003526f0 [ 326.818460][ C1] Call Trace: [ 326.818465][ C1] [ 326.818475][ C1] ? __pfx___might_resched+0x10/0x10 [ 326.818491][ C1] ? rt_set_nexthop+0x1de/0xa80 [ 326.818512][ C1] rt_spin_lock+0xc7/0x2c0 [ 326.818526][ C1] ? nf_hook_slow+0xc5/0x220 [ 326.818542][ C1] ? NF_HOOK+0x206/0x3a0 [ 326.818556][ C1] ? NF_HOOK+0x309/0x3a0 [ 326.818571][ C1] ? __pfx_rt_spin_lock+0x10/0x10 [ 326.818589][ C1] rt_set_nexthop+0x1de/0xa80 [ 326.818603][ C1] ? rt_set_nexthop+0x1c8/0xa80 [ 326.818619][ C1] ip_route_output_key_hash_rcu+0x18eb/0x23d0 [ 326.818643][ C1] ? ip_route_output_key_hash+0xde/0x2e0 [ 326.818663][ C1] ip_route_output_key_hash+0x1b9/0x2e0 [ 326.818681][ C1] ? __lock_acquire+0xab9/0xd20 [ 326.818699][ C1] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 326.818722][ C1] ? ip_route_me_harder+0x4ad/0x1030 [ 326.818740][ C1] ip_route_output_flow+0x2a/0x150 [ 326.818756][ C1] ? ip_route_me_harder+0x6c0/0x1030 [ 326.818771][ C1] ip_route_me_harder+0x6d2/0x1030 [ 326.818796][ C1] ? __pfx_ip_route_me_harder+0x10/0x10 [ 326.818824][ C1] synproxy_send_tcp+0x359/0x6c0 [ 326.818845][ C1] synproxy_send_client_synack+0x8bb/0xe20 [ 326.818869][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 326.818885][ C1] ? nft_tproxy_eval+0x8a8/0x1c00 [ 326.818903][ C1] ? synproxy_pernet+0x45/0x270 [ 326.818924][ C1] nft_synproxy_eval_v4+0x36e/0x560 [ 326.818946][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 326.818967][ C1] ? nf_ip_checksum+0x13c/0x510 [ 326.818987][ C1] nft_synproxy_do_eval+0x345/0x570 [ 326.819008][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 326.819027][ C1] ? nft_synproxy_do_eval+0x345/0x570 [ 326.819051][ C1] nft_do_chain+0x40c/0x1920 [ 326.819074][ C1] ? nft_do_chain+0x169f/0x1920 [ 326.819093][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 326.819109][ C1] ? wg_packet_tx_worker+0x586/0x7c0 [ 326.819144][ C1] nft_do_chain_inet+0x25d/0x340 [ 326.819163][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 326.819180][ C1] ? __lock_acquire+0xab9/0xd20 [ 326.819202][ C1] ? NF_HOOK+0x9a/0x3a0 [ 326.819217][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 326.819236][ C1] nf_hook_slow+0xc5/0x220 [ 326.819254][ C1] NF_HOOK+0x206/0x3a0 [ 326.819270][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 326.819286][ C1] ? NF_HOOK+0x9a/0x3a0 [ 326.819300][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 326.819314][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 326.819331][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 326.819348][ C1] ? skb_dst+0x4f/0xd0 [ 326.819363][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 326.819380][ C1] NF_HOOK+0x309/0x3a0 [ 326.819396][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 326.819411][ C1] ? NF_HOOK+0x9a/0x3a0 [ 326.819426][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 326.819442][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 326.819462][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 326.819477][ C1] __netif_receive_skb+0x143/0x380 [ 326.819492][ C1] ? rt_spin_unlock+0x65/0x80 [ 326.819508][ C1] ? process_backlog+0x27b/0x900 [ 326.819523][ C1] process_backlog+0x31e/0x900 [ 326.819544][ C1] __napi_poll+0xb6/0x540 [ 326.819561][ C1] net_rx_action+0x707/0xe00 [ 326.819585][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 326.819603][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 326.819624][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 326.819650][ C1] handle_softirqs+0x22c/0x710 [ 326.819671][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 326.819692][ C1] __local_bh_enable_ip+0x179/0x270 [ 326.819708][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 326.819725][ C1] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 326.819746][ C1] wg_packet_encrypt_worker+0x327/0x16e0 [ 326.819762][ C1] ? rcu_is_watching+0x15/0xb0 [ 326.819790][ C1] ? wg_packet_encrypt_worker+0xd9/0x16e0 [ 326.819811][ C1] ? __pfx_wg_packet_encrypt_worker+0x10/0x10 [ 326.819835][ C1] ? rcu_read_lock_sched_held+0x89/0x100 [ 326.819854][ C1] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 326.819874][ C1] ? cpuacct_charge+0x117/0x320 [ 326.819892][ C1] ? update_load_avg+0x572/0x1880 [ 326.819911][ C1] ? __lock_acquire+0xab9/0xd20 [ 326.819931][ C1] ? do_raw_spin_lock+0x121/0x290 [ 326.819945][ C1] ? look_up_lock_class+0x74/0x170 [ 326.819962][ C1] ? register_lock_class+0x51/0x320 [ 326.819981][ C1] ? __lock_acquire+0xab9/0xd20 [ 326.820003][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 326.820022][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 326.820037][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 326.820053][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 326.820070][ C1] process_scheduled_works+0xade/0x17b0 [ 326.820099][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 326.820124][ C1] worker_thread+0x8a0/0xda0 [ 326.820152][ C1] kthread+0x70e/0x8a0 [ 326.820172][ C1] ? __pfx_worker_thread+0x10/0x10 [ 326.820187][ C1] ? __pfx_kthread+0x10/0x10 [ 326.820208][ C1] ? __pfx_kthread+0x10/0x10 [ 326.820226][ C1] ret_from_fork+0x3fc/0x770 [ 326.820243][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 326.820263][ C1] ? __switch_to_asm+0x39/0x70 [ 326.820276][ C1] ? __switch_to_asm+0x33/0x70 [ 326.820288][ C1] ? __pfx_kthread+0x10/0x10 [ 326.820306][ C1] ret_from_fork_asm+0x1a/0x30 [ 326.820327][ C1] [ 326.821271][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 326.821284][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 326.821304][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 326.821314][ T38] Call Trace: [ 326.821321][ T38] [ 326.821328][ T38] dump_stack_lvl+0x99/0x250 [ 326.821352][ T38] ? __asan_memcpy+0x40/0x70 [ 326.821371][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 326.821393][ T38] ? __pfx__printk+0x10/0x10 [ 326.821424][ T38] vpanic+0x281/0x750 [ 326.821449][ T38] ? __pfx_vpanic+0x10/0x10 [ 326.821469][ T38] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 326.821487][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 326.821517][ T38] panic+0xb9/0xc0 [ 326.821545][ T38] ? __pfx_panic+0x10/0x10 [ 326.821570][ T38] ? irq_work_queue+0xc3/0x140 [ 326.821593][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 326.821614][ T38] watchdog+0xfd2/0xfe0 [ 326.821640][ T38] ? watchdog+0x1de/0xfe0 [ 326.821665][ T38] kthread+0x70e/0x8a0 [ 326.821691][ T38] ? __pfx_watchdog+0x10/0x10 [ 326.821711][ T38] ? __pfx_kthread+0x10/0x10 [ 326.821738][ T38] ? __pfx_kthread+0x10/0x10 [ 326.821762][ T38] ret_from_fork+0x3fc/0x770 [ 326.821785][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 326.821811][ T38] ? __switch_to_asm+0x39/0x70 [ 326.821826][ T38] ? __switch_to_asm+0x33/0x70 [ 326.821841][ T38] ? __pfx_kthread+0x10/0x10 [ 326.821867][ T38] ret_from_fork_asm+0x1a/0x30 [ 326.821892][ T38] [ 326.822235][ T38] Kernel Offset: disabled