last executing test programs: 2m17.67494786s ago: executing program 4 (id=4991): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') open_tree(r0, &(0x7f0000000080)='./mnt\x00', 0x89801) 2m17.36667836s ago: executing program 4 (id=4996): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x20, 0x80, 0x7, 0x80, {{0x6, 0x4, 0x2, 0x1, 0x18, 0x68, 0x0, 0x8, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x27}, {[@ssrr={0x89, 0x3, 0x6b}]}}}}}) 2m17.188571197s ago: executing program 4 (id=4998): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020ac050f0222000182830109022400010100000009040000020301020009210005000122000009058103"], 0x0) syz_open_dev$mouse(&(0x7f0000000200), 0x1, 0x0) 2m16.415854637s ago: executing program 0 (id=5009): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000740)={0x2, 0x3, 0x0, 0x3, 0x31, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x2, 0x9, 0x8, 0x0, "1c"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}}, @sadb_key={0x21, 0x8, 0x800, 0x0, "b1e5c2aeb6b3a515e65fddda00ee3baa8efb059124a9703c734ff35c9150bdcf987ebc5125908ebb57d0778484f7350ad14ed9a0588394fe7147eeee179a5714063b479865d37bae3678e31115bcec31a5dd85adc10067f4ab8cfd7b993d71fce3f7b1b21b5ffe460d7f8f7e5bbdace570c25132eddc3ffdfbe83d8307e381f241feec9b6a6fbbb75645cdda6f498c4a21767494734c0b9d11c201e296d3442738edc12068da976e5a02314bd92b836335ee032e9ab02514773ae64122c2441f404f7c4744cf04df3024906600687a2e6aec7eacd71f366e12fe729d5f8819332cba664c7ab8bd821f47183776c9edfb9410c482b82bc2c71f1d81df07a5902c"}]}, 0x188}, 0x1, 0x7}, 0x0) 2m14.128458637s ago: executing program 1 (id=5021): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x8840, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000003c80)={0x0, 0x0, 0x380000000000, 0x8}) 2m14.039652741s ago: executing program 2 (id=5022): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x5, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x18, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0xe}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 2m11.615793379s ago: executing program 1 (id=5023): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001d80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000064000000060a010400000000000000000100000008000b40000000003c000480380001800e000100696d6d656469617465000000240002800800014000000000180002801400028008000340fffffffe080001804b00fffc0900010073797a30"], 0xd8}}, 0x0) 2m11.590110241s ago: executing program 3 (id=5024): syz_usb_connect$cdc_ncm(0x4, 0x9b, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x18, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x89, 0x2, 0x1, 0x6, 0x50, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xb3a9}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x3, 0xff, 0x5}, {0x6, 0x24, 0x1a, 0xc, 0x14}, [@network_terminal={0x7, 0x24, 0xa, 0x5, 0x9, 0x5, 0x58}, @mbim={0xc, 0x24, 0x1b, 0x4, 0x2, 0xa9, 0xc, 0x9, 0x3}, @acm={0x4, 0x24, 0x2, 0x2}, @acm={0x3, 0x24, 0x2, 0x12}, @acm={0x4, 0x24, 0x2, 0x2}, @country_functional={0xe, 0x24, 0x7, 0x8, 0x6, [0x7, 0x400, 0xbbc, 0xc00]}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0xe, 0xc}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0xff, 0xb, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x9, 0x3, 0x7}}}}}}}]}}, 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 2m11.589016739s ago: executing program 2 (id=5025): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'fo\x00', 0x11, 0x3240, 0x3a}, {@loopback, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) 2m11.588806547s ago: executing program 2 (id=5026): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000013c0)=@newlink={0x40, 0x10, 0x401, 0x70bd2a, 0x2000, {0x0, 0x0, 0x0, 0x0, 0x683c6, 0x75498}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0xffff}]}}}]}, 0x40}, 0x1, 0xd, 0x0, 0x480c5}, 0x44000) 2m11.588620418s ago: executing program 2 (id=5027): r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 2m11.588388021s ago: executing program 1 (id=5028): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, 0x0) 2m11.588165485s ago: executing program 0 (id=5029): r0 = syz_open_dev$video4linux(&(0x7f0000000200), 0x800000000000004, 0xc0200) ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc0305602, &(0x7f0000000040)={0x1, 0x5, [0x3, 0x0, 0x0, 0x0, 0x7fff]}) 2m11.571481018s ago: executing program 3 (id=5030): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000080), 0x4) 2m11.54142808s ago: executing program 4 (id=5031): r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000080)) 2m11.155538529s ago: executing program 0 (id=5032): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/dev_mcast\x00') pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x41e) 2m11.099113613s ago: executing program 4 (id=5033): r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90d, 0x9, '\x00', @p_u8=0x0}}) 2m10.93123781s ago: executing program 0 (id=5034): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd3}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x6}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) 2m10.913274085s ago: executing program 4 (id=5035): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') preadv(r0, &(0x7f00000026c0)=[{&(0x7f0000000240)=""/4088, 0xff8}], 0x1, 0x15f, 0x0) 2m10.740529193s ago: executing program 0 (id=5036): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="64000000100003040000000000000000000000ef", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e"], 0x64}}, 0x0) 2m10.599693059s ago: executing program 2 (id=5037): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0xf0f041}) 2m10.599390021s ago: executing program 0 (id=5038): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x800, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid}, {@cache_fscache}]}}) 2m10.358557125s ago: executing program 1 (id=5039): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000280)) 2m10.061370817s ago: executing program 2 (id=5040): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) 2m9.639516554s ago: executing program 3 (id=5041): syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011005a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c09000304240202042402000424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 2m9.273666352s ago: executing program 1 (id=5042): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40000000e, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x3e, 0x2, 0x457f1c9146f8f874, "464905e100000000000000007f00", 0xb5315241}) 2m8.838524057s ago: executing program 1 (id=5043): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800800180001ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 2m8.614503731s ago: executing program 3 (id=5044): r0 = fsopen(&(0x7f0000000200)='btrfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 2m8.372859154s ago: executing program 3 (id=5045): syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaa3aa86dd6001010000641100fe8000000000000001000000000000bbfe8000000000000000000000000000aa4e200e2200649078020000000100000004001000628e0960f6d6d3f6ee6dad84b345dccac643e7df3e526ff07833b291322d4a"], 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100033887462023010100fe4a0102030109021b000100000000090400000193723400090582"], &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x1004}}, {0x0, 0x0}]}) 2m1.393841899s ago: executing program 3 (id=5046): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="202301"], 0x0, 0x0, 0x0}, 0x0) 1m37.491592077s ago: executing program 32 (id=5038): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x800, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid}, {@cache_fscache}]}}) 31.321565105s ago: executing program 33 (id=5043): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800800180001ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 0s ago: executing program 34 (id=5040): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): T12721] No source specified [ 449.227275][T12746] netlink: 596 bytes leftover after parsing attributes in process `syz.3.3271'. [ 449.856405][ T5928] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 449.999898][ T5928] usb 1-1: Using ep0 maxpacket: 32 [ 450.003045][ T5928] usb 1-1: config 0 has an invalid interface number: 126 but max is 0 [ 450.003076][ T5928] usb 1-1: config 0 has no interface number 0 [ 450.003132][ T5928] usb 1-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 450.003160][ T5928] usb 1-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 450.003184][ T5928] usb 1-1: config 0 interface 126 has no altsetting 0 [ 450.060519][ T5928] usb 1-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 450.060554][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.060577][ T5928] usb 1-1: Product: syz [ 450.060594][ T5928] usb 1-1: Manufacturer: syz [ 450.060610][ T5928] usb 1-1: SerialNumber: syz [ 450.127174][ T5928] usb 1-1: config 0 descriptor?? [ 450.128116][T12765] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 450.128261][T12765] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 450.346978][ T5928] ir_usb 1-1:0.126: IR Dongle converter detected [ 450.348350][ T5928] usb 1-1: IRDA class descriptor not found, device not bound [ 450.376016][T12784] netlink: 180 bytes leftover after parsing attributes in process `syz.3.3287'. [ 450.400732][ T5928] usb 1-1: USB disconnect, device number 118 [ 450.418057][T12784] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3287'. [ 451.080659][T12802] lo: entered allmulticast mode [ 451.084932][T12802] tunl0: entered allmulticast mode [ 451.085897][T12802] gre0: entered allmulticast mode [ 451.099392][T12802] gretap0: entered allmulticast mode [ 451.100542][T12802] erspan0: entered allmulticast mode [ 451.101547][T12802] ip_vti0: entered allmulticast mode [ 451.102338][T12802] ip6_vti0: entered allmulticast mode [ 451.103110][T12802] sit0: entered allmulticast mode [ 451.103829][T12802] ip6tnl0: entered allmulticast mode [ 451.104519][T12802] ip6gre0: entered allmulticast mode [ 451.154228][T12802] syz_tun: entered allmulticast mode [ 451.157068][T12802] ip6gretap0: entered allmulticast mode [ 451.158114][T12802] bridge0: entered allmulticast mode [ 451.159362][T12802] vcan0: entered allmulticast mode [ 451.159803][T12802] bond0: entered allmulticast mode [ 451.159821][T12802] bond_slave_0: entered allmulticast mode [ 451.159845][T12802] bond_slave_1: entered allmulticast mode [ 451.179544][T12802] team0: entered allmulticast mode [ 451.179571][T12802] team_slave_0: entered allmulticast mode [ 451.179607][T12802] team_slave_1: entered allmulticast mode [ 451.184707][T12802] dummy0: entered allmulticast mode [ 451.229959][T12802] nlmon0: entered allmulticast mode [ 451.313845][T12802] caif0: entered allmulticast mode [ 451.313876][T12802] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 451.925631][ T5847] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 452.002336][T12830] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3310'. [ 452.002368][T12830] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 452.076627][ T5847] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 452.076660][ T5847] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 452.076722][ T5847] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 452.084479][ T5847] usb 2-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 452.084511][ T5847] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.084532][ T5847] usb 2-1: Product: syz [ 452.084547][ T5847] usb 2-1: Manufacturer: syz [ 452.084561][ T5847] usb 2-1: SerialNumber: syz [ 452.118448][ T5847] usb 2-1: config 0 descriptor?? [ 452.160492][ T5847] usb 2-1: Found UVC 34.00 device syz (8086:0b5b) [ 452.160531][ T5847] usb 2-1: No valid video chain found. [ 452.337054][T12840] Non-string source [ 452.345389][T12838] sctp: [Deprecated]: syz.4.3313 (pid 12838) Use of int in max_burst socket option. [ 452.345389][T12838] Use struct sctp_assoc_value instead [ 452.365190][ T5847] usb 2-1: USB disconnect, device number 6 [ 452.740067][T12852] sctp: [Deprecated]: syz.0.3321 (pid 12852) Use of struct sctp_assoc_value in delayed_ack socket option. [ 452.740067][T12852] Use struct sctp_sack_info instead [ 452.796242][T12854] netlink: 'syz.2.3322': attribute type 30 has an invalid length. [ 452.866339][ T5928] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 453.016175][ T5928] usb 4-1: Using ep0 maxpacket: 8 [ 453.025160][ T5928] usb 4-1: config 0 has an invalid interface number: 130 but max is 0 [ 453.025194][ T5928] usb 4-1: config 0 has no interface number 0 [ 453.044224][ T5928] usb 4-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 453.044261][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.044284][ T5928] usb 4-1: Product: syz [ 453.044300][ T5928] usb 4-1: Manufacturer: syz [ 453.044317][ T5928] usb 4-1: SerialNumber: syz [ 453.093404][ T5928] usb 4-1: config 0 descriptor?? [ 453.130855][ T5928] as10x_usb: device has been detected [ 453.131908][ T5928] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 453.185195][ T5928] usb 4-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 453.247016][ T5928] as10x_usb: error during firmware upload part1 [ 453.247877][ T5928] Registered device PCTV Systems picoStick (74e) [ 453.348933][ T6016] usb 4-1: USB disconnect, device number 6 [ 453.512343][ T6016] Unregistered device PCTV Systems picoStick (74e) [ 453.527645][ T6016] as10x_usb: device has been disconnected [ 454.013103][T12886] libceph: resolve '400' (ret=-3): failed [ 454.139682][T12895] random: crng reseeded on system resumption [ 454.874578][T12923] netlink: 'syz.0.3355': attribute type 2 has an invalid length. [ 454.874603][T12923] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3355'. [ 454.874622][T12923] nbd: must specify at least one socket [ 454.895992][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 454.896071][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 455.653230][T12952] netlink: 'syz.2.3370': attribute type 11 has an invalid length. [ 455.745191][ T37] audit: type=1326 audit(1757123619.729:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12953 comm="syz.4.3373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4281abebe9 code=0x7ffc0000 [ 455.745255][ T37] audit: type=1326 audit(1757123619.740:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12953 comm="syz.4.3373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f4281abebe9 code=0x7ffc0000 [ 455.745302][ T37] audit: type=1326 audit(1757123619.740:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12953 comm="syz.4.3373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4281abebe9 code=0x7ffc0000 [ 455.745350][ T37] audit: type=1326 audit(1757123619.740:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12953 comm="syz.4.3373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4281abebe9 code=0x7ffc0000 [ 456.044950][ T5928] usb 1-1: new full-speed USB device number 119 using dummy_hcd [ 456.193863][ T5928] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 456.193915][ T5928] usb 1-1: too many endpoints for config 2 interface 0 altsetting 1: 128, using maximum allowed: 30 [ 456.193966][ T5928] usb 1-1: config 2 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 456.193998][ T5928] usb 1-1: config 2 interface 0 has no altsetting 0 [ 456.197264][ T5928] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 456.197296][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.197317][ T5928] usb 1-1: Product: syz [ 456.197333][ T5928] usb 1-1: Manufacturer: syz [ 456.197349][ T5928] usb 1-1: SerialNumber: syz [ 456.270556][ T5928] usb 1-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 456.270598][ T5928] usb 1-1: selecting invalid altsetting 0 [ 456.288651][ T5928] usb 1-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 456.453250][ T5928] usb 1-1: USB disconnect, device number 119 [ 456.521277][T12979] 9pnet_fd: Insufficient options for proto=fd [ 456.761119][T12987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3386'. [ 456.801669][ T5857] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 456.955189][ T5857] usb 2-1: New USB device found, idVendor=0733, idProduct=0430, bcdDevice=35.fb [ 456.955226][ T5857] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.016767][ T5857] usb 2-1: config 0 descriptor?? [ 457.081161][ T5857] gspca_main: spca505-2.14.0 probing 0733:0430 [ 457.425295][ T5857] gspca_spca505: reg write: error -71 [ 457.425412][ T5857] spca505 2-1:0.0: probe with driver spca505 failed with error -5 [ 457.469603][ T5857] usb 2-1: USB disconnect, device number 7 [ 457.755940][T13014] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (2049) [ 458.111511][T13024] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3402'. [ 458.111544][T13024] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3402'. [ 458.684360][T13049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3413'. [ 458.684401][T13049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3413'. [ 458.737825][ T993] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 458.739613][T13053] netlink: 'syz.0.3415': attribute type 12 has an invalid length. [ 458.739635][T13053] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3415'. [ 458.850061][ T5928] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 458.887205][ T993] usb 5-1: Using ep0 maxpacket: 32 [ 458.889860][ T993] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 458.889910][ T993] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 458.889957][ T993] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 458.889985][ T993] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 458.890010][ T993] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 458.890040][ T993] usb 5-1: config 0 interface 0 has no altsetting 0 [ 458.893412][ T993] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 458.893442][ T993] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 458.893466][ T993] usb 5-1: Product: syz [ 458.893482][ T993] usb 5-1: Manufacturer: syz [ 458.893498][ T993] usb 5-1: SerialNumber: syz [ 458.908508][ T993] usb 5-1: config 0 descriptor?? [ 458.944217][ T993] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 458.957952][ T993] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 459.003388][ T5928] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 459.003484][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.003509][ T5928] usb 3-1: Product: syz [ 459.003524][ T5928] usb 3-1: Manufacturer: syz [ 459.003541][ T5928] usb 3-1: SerialNumber: syz [ 459.084157][ T5928] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 459.158742][T13042] ldusb 5-1:0.0: Couldn't submit interrupt_in_urb -90 [ 459.160982][ T5847] usb 5-1: USB disconnect, device number 122 [ 459.186547][ T5847] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 459.379531][ T9] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 459.653977][T13073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3424'. [ 459.654005][T13073] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3424'. [ 459.794485][T13077] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3426'. [ 459.817647][ T5847] usb 3-1: USB disconnect, device number 106 [ 460.404432][T13096] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 460.476970][T13098] overlayfs: empty lowerdir [ 460.490950][ T9] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 460.491491][ T9] ath9k_htc: Failed to initialize the device [ 460.495704][ T5847] usb 3-1: ath9k_htc: USB layer deinitialized [ 460.584145][T13102] netlink: 'syz.2.3438': attribute type 10 has an invalid length. [ 460.713637][T13102] team0: Port device netdevsim0 added [ 460.848093][T13105] ip6gre1: entered allmulticast mode [ 460.862776][ T5928] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 461.002766][ T5928] usb 1-1: Using ep0 maxpacket: 32 [ 461.024448][ T5928] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 461.024481][ T5928] usb 1-1: config 0 has no interface number 0 [ 461.024542][ T5928] usb 1-1: config 0 interface 2 has no altsetting 0 [ 461.028702][ T5928] usb 1-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 461.028735][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.028757][ T5928] usb 1-1: Product: syz [ 461.028774][ T5928] usb 1-1: Manufacturer: syz [ 461.028790][ T5928] usb 1-1: SerialNumber: syz [ 461.074866][ T5928] usb 1-1: config 0 descriptor?? [ 461.308075][T13124] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 461.311961][ T5928] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 461.637308][ T5928] usb 1-1: USB disconnect, device number 120 [ 461.667772][T13133] netlink: 160 bytes leftover after parsing attributes in process `syz.3.3453'. [ 461.921121][ T6014] udevd[6014]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 462.357457][T13150] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3460'. [ 463.049870][T13163] bond1: entered allmulticast mode [ 463.067415][T13163] 8021q: adding VLAN 0 to HW filter on device bond1 [ 463.172377][T13176] netlink: 129704 bytes leftover after parsing attributes in process `syz.1.3475'. [ 463.243773][T13178] netlink: 'syz.2.3476': attribute type 3 has an invalid length. [ 463.522369][T13187] netlink: 'syz.4.3480': attribute type 1 has an invalid length. [ 463.522398][T13187] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3480'. [ 463.580676][T13185] bond2: entered promiscuous mode [ 463.580717][T13185] bond2: entered allmulticast mode [ 463.581289][T13185] 8021q: adding VLAN 0 to HW filter on device bond2 [ 463.910467][ T37] audit: type=1326 audit(1757123628.484:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13202 comm="syz.2.3488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f762990ebe9 code=0x7ffc0000 [ 463.910529][ T37] audit: type=1326 audit(1757123628.495:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13202 comm="syz.2.3488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f762990ebe9 code=0x7ffc0000 [ 463.922668][ T37] audit: type=1326 audit(1757123628.506:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13202 comm="syz.2.3488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f762990ebe9 code=0x7ffc0000 [ 463.923688][ T37] audit: type=1326 audit(1757123628.516:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13202 comm="syz.2.3488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f762990ebe9 code=0x7ffc0000 [ 463.931385][ T37] audit: type=1326 audit(1757123628.516:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13202 comm="syz.2.3488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f762990ebe9 code=0x7ffc0000 [ 465.336515][T13247] netlink: 'syz.2.3508': attribute type 1 has an invalid length. [ 465.336545][T13247] netlink: 'syz.2.3508': attribute type 1 has an invalid length. [ 465.479181][T13250] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3511'. [ 465.635918][T13255] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3512'. [ 466.353860][T13281] CIFS: VFS: Malformed UNC in devname [ 466.379545][T13283] netlink: 300 bytes leftover after parsing attributes in process `syz.0.3526'. [ 466.380911][T13279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3525'. [ 467.258145][T13313] netlink: 'syz.0.3541': attribute type 1 has an invalid length. [ 468.146323][T13344] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3555'. [ 468.390070][T13351] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3561'. [ 468.494252][T13357] netlink: 'syz.4.3563': attribute type 2 has an invalid length. [ 468.494281][T13357] netlink: 'syz.4.3563': attribute type 1 has an invalid length. [ 468.494296][T13357] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3563'. [ 468.760595][T13367] syz.2.3566 uses obsolete (PF_INET,SOCK_PACKET) [ 468.823284][T13366] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 468.823774][T13366] ip6gretap1: entered allmulticast mode [ 469.691388][T13398] nftables ruleset with unbound set [ 470.954675][T13442] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3607'. [ 471.504688][ T9] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 471.667828][ T9] usb 3-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 471.667866][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.667889][ T9] usb 3-1: Product: syz [ 471.667905][ T9] usb 3-1: Manufacturer: syz [ 471.667922][ T9] usb 3-1: SerialNumber: syz [ 471.733873][ T9] usb 3-1: config 0 descriptor?? [ 471.756956][ T9] hub 3-1:0.0: bad descriptor, ignoring hub [ 471.757007][ T9] hub 3-1:0.0: probe with driver hub failed with error -5 [ 471.777729][ T9] f81232 3-1:0.0: f81534a converter detected [ 471.964043][ T9] usb 3-1: f81534a converter now attached to ttyUSB0 [ 472.271570][ T5847] usb 3-1: USB disconnect, device number 107 [ 472.305980][ T5847] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0 [ 472.306836][ T5847] f81232 3-1:0.0: device disconnected [ 472.896466][T13496] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 473.215986][T13506] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3635'. [ 473.216019][T13506] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3635'. [ 473.650403][ T5928] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 473.802086][ T5928] usb 5-1: config 8 has an invalid interface number: 235 but max is 0 [ 473.802119][ T5928] usb 5-1: config 8 has no interface number 0 [ 473.802174][ T5928] usb 5-1: config 8 interface 235 has no altsetting 0 [ 473.802211][ T5928] usb 5-1: New USB device found, idVendor=06cd, idProduct=0118, bcdDevice=3e.1f [ 473.802237][ T5928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.032871][ T5928] usb 5-1: string descriptor 0 read error: -71 [ 474.034913][ T5928] keyspan 5-1:8.235: Keyspan - (without firmware) converter detected [ 474.083409][ T5928] usb 5-1: USB disconnect, device number 123 [ 474.102756][ T5928] keyspan 5-1:8.235: device disconnected [ 474.243754][T13538] tmpfs: Bad value for 'mpol' [ 474.809795][T13560] netlink: 248 bytes leftover after parsing attributes in process `syz.3.3662'. [ 475.116830][T13564] lo: entered allmulticast mode [ 475.121881][T13564] tunl0: entered allmulticast mode [ 475.135506][T13564] gre0: entered allmulticast mode [ 475.147266][T13564] gretap0: entered allmulticast mode [ 475.169485][T13564] erspan0: entered allmulticast mode [ 475.175544][T13564] ip_vti0: entered allmulticast mode [ 475.179414][T13564] ip6_vti0: entered allmulticast mode [ 475.180553][T13564] sit0: entered allmulticast mode [ 475.184768][T13564] ip6tnl0: entered allmulticast mode [ 475.187577][T13564] ip6gre0: entered allmulticast mode [ 475.188619][T13564] syz_tun: entered allmulticast mode [ 475.191987][T13564] ip6gretap0: entered allmulticast mode [ 475.200392][T13564] bridge0: entered allmulticast mode [ 475.202856][T13564] vcan0: entered allmulticast mode [ 475.203462][T13564] bond0: entered allmulticast mode [ 475.203479][T13564] bond_slave_0: entered allmulticast mode [ 475.203501][T13564] bond_slave_1: entered allmulticast mode [ 475.205828][T13564] team0: entered allmulticast mode [ 475.205846][T13564] team_slave_0: entered allmulticast mode [ 475.205867][T13564] team_slave_1: entered allmulticast mode [ 475.220950][T13564] dummy0: entered allmulticast mode [ 475.224657][T13564] nlmon0: entered allmulticast mode [ 475.281923][T13564] caif0: entered allmulticast mode [ 475.281953][T13564] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 475.691486][T13579] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 475.691526][T13579] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 475.754117][T13579] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 475.754157][T13579] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 475.780669][T13580] Illegal XDP return value 4294967274 on prog (id 300) dev N/A, expect packet loss! [ 475.865850][T13583] nftables ruleset with unbound chain [ 477.357689][T13633] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3692'. [ 477.357730][T13633] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3692'. [ 477.357748][T13633] netlink: 'syz.1.3692': attribute type 5 has an invalid length. [ 477.357764][T13633] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3692'. [ 477.396802][ T993] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 477.554397][ T993] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 477.554481][ T993] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 477.554508][ T993] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.680787][ T993] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 478.267162][T13658] netlink: 'syz.1.3702': attribute type 10 has an invalid length. [ 478.267189][T13658] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3702'. [ 478.267630][T13658] team0: entered promiscuous mode [ 478.267651][T13658] team_slave_0: entered promiscuous mode [ 478.267942][T13658] team_slave_1: entered promiscuous mode [ 478.268379][T13658] team0: entered allmulticast mode [ 478.268396][T13658] team_slave_0: entered allmulticast mode [ 478.268420][T13658] team_slave_1: entered allmulticast mode [ 478.271843][T13658] bridge0: port 3(team0) entered blocking state [ 478.278493][T13658] bridge0: port 3(team0) entered disabled state [ 478.307706][T13658] bridge0: port 3(team0) entered blocking state [ 478.307877][T13658] bridge0: port 3(team0) entered forwarding state [ 478.471964][T13659] ALSA: mixer_oss: invalid OSS volume '' [ 478.471993][T13659] ALSA: mixer_oss: invalid OSS volume '+]OؓOGec9bx'ĮC' [ 478.472009][T13659] ALSA: mixer_oss: invalid OSS volume '_*[bYcq~lr=V' [ 478.479471][T13659] ALSA: mixer_oss: invalid OSS volume '+ͿnU<$^EKʘr+' [ 478.479485][T13659] ALSA: mixer_oss: invalid OSS volume '+8iYJz' [ 478.675514][ T993] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 478.675553][ T993] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 478.687045][ T993] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 478.687069][ T993] stv0680 4-1:4.0: last error: 0, command = 0x0 [ 478.728153][T13668] netlink: 'syz.0.3706': attribute type 1 has an invalid length. [ 478.729866][ T993] usb 4-1: USB disconnect, device number 7 [ 479.856928][T13647] Bluetooth: hci4: command 0x0c1a tx timeout [ 480.220253][T13718] geneve2: entered allmulticast mode [ 480.530444][T13729] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3730'. [ 480.647450][T13731] ieee802154 phy0 wpan0: encryption failed: -22 [ 481.078353][T13746] cgroup: Unexpected value for 'cpuset_v2_mode' [ 481.850560][T13774] netlink: 'syz.0.3752': attribute type 1 has an invalid length. [ 481.850590][T13774] netlink: 'syz.0.3752': attribute type 1 has an invalid length. [ 481.888144][T13777] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3754'. [ 482.123828][T13783] netlink: 'syz.4.3756': attribute type 2 has an invalid length. [ 482.153870][T13784] tipc: Trying to set illegal importance in message [ 482.158603][T13785] netlink: 'syz.1.3759': attribute type 8 has an invalid length. [ 482.256603][T13783] : entered promiscuous mode [ 482.622299][T13790] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3760'. [ 482.728240][ T993] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 482.870762][ T993] usb 5-1: New USB device found, idVendor=040a, idProduct=0002, bcdDevice=b1.c4 [ 482.870799][ T993] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.907681][ T993] usb 5-1: config 0 descriptor?? [ 482.940989][ T993] gspca_main: spca501-2.14.0 probing 040a:0002 [ 482.951882][ T5957] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 483.094448][ T5957] usb 2-1: Using ep0 maxpacket: 16 [ 483.108052][ T5957] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 483.108089][ T5957] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.108112][ T5957] usb 2-1: Product: syz [ 483.108128][ T5957] usb 2-1: Manufacturer: syz [ 483.108144][ T5957] usb 2-1: SerialNumber: syz [ 483.159421][ T5957] usb 2-1: config 0 descriptor?? [ 483.194369][ T5957] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 483.266370][T13807] netlink: 'syz.3.3768': attribute type 3 has an invalid length. [ 483.266399][T13807] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3768'. [ 483.311799][ T993] gspca_spca501: reg write: error -71 [ 483.311819][ T993] spca501 5-1:0.0: Reg write failed for 0x00,0x02,0x01 [ 483.311926][ T993] spca501 5-1:0.0: probe with driver spca501 failed with error -22 [ 483.333659][ T993] usb 5-1: USB disconnect, device number 124 [ 483.365551][ T5957] usb 2-1: clie_3_5_startup: get config number bad return length: 0 [ 483.365745][ T5957] visor 2-1:0.0: probe with driver visor failed with error -5 [ 483.580394][ T993] usb 2-1: USB disconnect, device number 8 [ 484.345058][T13842] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 484.971512][T13868] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3795'. [ 485.102554][T13873] netlink: 172 bytes leftover after parsing attributes in process `syz.2.3798'. [ 485.636020][ T5857] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 485.794417][ T5857] usb 3-1: Using ep0 maxpacket: 16 [ 485.802156][ T5857] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 485.802192][ T5857] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.802215][ T5857] usb 3-1: Product: syz [ 485.802232][ T5857] usb 3-1: Manufacturer: syz [ 485.802248][ T5857] usb 3-1: SerialNumber: syz [ 485.834034][ T5857] usb 3-1: config 0 descriptor?? [ 485.870434][T13902] netlink: 'syz.4.3813': attribute type 1 has an invalid length. [ 485.870460][T13902] netlink: 'syz.4.3813': attribute type 1 has an invalid length. [ 486.092664][ T5857] speedtch 3-1:0.0: speedtch_bind: data interface not found! [ 486.092689][ T5857] speedtch 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 486.094259][T13906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 486.133244][T13906] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 486.167949][T13906] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 486.288811][ T5957] usb 3-1: USB disconnect, device number 108 [ 486.632117][T13925] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 486.782597][ T5847] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 486.926840][ T5847] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 486.926875][ T5847] usb 1-1: config 0 has no interface number 0 [ 486.926934][ T5847] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 486.930231][ T5847] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 486.930264][ T5847] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.930286][ T5847] usb 1-1: Product: syz [ 486.930303][ T5847] usb 1-1: Manufacturer: syz [ 486.930319][ T5847] usb 1-1: SerialNumber: syz [ 487.005854][ T5847] usb 1-1: config 0 descriptor?? [ 487.113920][ T5847] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 487.279529][T13942] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3827'. [ 487.309073][ C1] yurex 1-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8 [ 487.415864][ T5857] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 487.507809][ T9] usb 1-1: USB disconnect, device number 121 [ 487.534734][ T9] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 487.558957][ T5857] usb 3-1: unable to get BOS descriptor or descriptor too short [ 487.562582][ T5857] usb 3-1: config 9 has an invalid interface number: 171 but max is 0 [ 487.562612][ T5857] usb 3-1: config 9 has no interface number 0 [ 487.562650][ T5857] usb 3-1: config 9 interface 171 has no altsetting 0 [ 487.562923][T13949] netlink: 'syz.3.3830': attribute type 1 has an invalid length. [ 487.562943][T13949] netlink: 208 bytes leftover after parsing attributes in process `syz.3.3830'. [ 487.569880][ T5857] usb 3-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice=a7.e9 [ 487.569912][ T5857] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.569932][ T5857] usb 3-1: Product: syz [ 487.569946][ T5857] usb 3-1: Manufacturer: syz [ 487.569961][ T5857] usb 3-1: SerialNumber: syz [ 487.696678][T13952] netlink: 300 bytes leftover after parsing attributes in process `syz.4.3832'. [ 487.912547][ T5857] ftdi_sio 3-1:9.171: FTDI USB Serial Device converter detected [ 487.914805][ T5857] ftdi_sio ttyUSB0: unknown device type: 0xa7e9 [ 487.958082][ T5857] usb 3-1: USB disconnect, device number 109 [ 487.965316][ T5857] ftdi_sio 3-1:9.171: device disconnected [ 488.612880][T13971] bridge0: port 3(veth0_to_bridge) entered blocking state [ 488.613046][T13971] bridge0: port 3(veth0_to_bridge) entered disabled state [ 488.613509][T13971] veth0_to_bridge: entered allmulticast mode [ 488.647573][T13971] veth0_to_bridge: entered promiscuous mode [ 488.647855][T13971] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 488.650675][T13971] bridge0: port 3(veth0_to_bridge) entered blocking state [ 488.652657][T13971] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 489.922666][ T5857] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 490.011369][T13985] syz.2.3845 (13985): drop_caches: 2 [ 490.095035][ T5857] usb 5-1: Using ep0 maxpacket: 16 [ 490.102415][ T5857] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 490.119922][ T5857] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 490.119956][ T5857] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.119977][ T5857] usb 5-1: Product: syz [ 490.119991][ T5857] usb 5-1: Manufacturer: syz [ 490.120007][ T5857] usb 5-1: SerialNumber: syz [ 490.189328][ T5857] usb 5-1: config 0 descriptor?? [ 490.268349][ T5857] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 490.398582][T14020] netlink: 'syz.2.3858': attribute type 5 has an invalid length. [ 490.398608][T14020] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3858'. [ 490.457935][ T73] usb 5-1: Failed to submit usb control message: -71 [ 490.457979][ T73] usb 5-1: unable to send the bmi data to the device: -71 [ 490.457999][ T73] usb 5-1: unable to get target info from device [ 490.458016][ T73] usb 5-1: could not get target info (-71) [ 490.458203][ T73] usb 5-1: could not probe fw (-71) [ 490.464474][ T6016] usb 5-1: USB disconnect, device number 125 [ 490.780321][T14029] affs: No valid root block on device nbd2 [ 491.424047][T14051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3870'. [ 491.961405][T14075] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 492.434535][T14092] netlink: 'syz.4.3888': attribute type 1 has an invalid length. [ 492.434565][T14092] netlink: 232 bytes leftover after parsing attributes in process `syz.4.3888'. [ 493.012385][T14111] netlink: 'syz.3.3896': attribute type 21 has an invalid length. [ 493.012514][T14111] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3896'. [ 494.062843][T14138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3906'. [ 494.142122][T14143] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 494.536455][ T5957] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 494.596829][T14159] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3917'. [ 494.688196][ T5957] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 494.688232][ T5957] usb 2-1: config 0 interface 0 has no altsetting 0 [ 494.691786][ T5957] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 494.691818][ T5957] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 494.691841][ T5957] usb 2-1: Product: syz [ 494.691857][ T5957] usb 2-1: Manufacturer: syz [ 494.691874][ T5957] usb 2-1: SerialNumber: syz [ 494.772314][ T5957] usb 2-1: config 0 descriptor?? [ 494.791167][ T5957] usb 2-1: selecting invalid altsetting 0 [ 495.012906][T14168] netlink: 'syz.0.3922': attribute type 1 has an invalid length. [ 495.012932][T14168] netlink: 232 bytes leftover after parsing attributes in process `syz.0.3922'. [ 495.012950][T14168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3922'. [ 495.096991][ T6016] usb 2-1: USB disconnect, device number 9 [ 495.150458][ T5963] udevd[5963]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 495.565724][T14184] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3930'. [ 495.608510][ T9] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 495.769555][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 495.769594][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 495.773428][ T9] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 495.773463][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.773486][ T9] usb 3-1: Product: syz [ 495.773503][ T9] usb 3-1: Manufacturer: syz [ 495.773518][ T9] usb 3-1: SerialNumber: syz [ 495.799753][ T9] usb 3-1: config 0 descriptor?? [ 495.800942][T14179] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 495.801131][T14179] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 496.003253][T14179] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 496.003537][T14179] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 496.213634][ T9] Error reading MAC address [ 496.233119][ T9] usb 3-1: USB disconnect, device number 110 [ 496.397856][T14206] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3941'. [ 497.029338][T14232] openvswitch: netlink: Missing key (keys=40, expected=80) [ 497.192388][ T5857] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 497.333881][ T5857] usb 3-1: Using ep0 maxpacket: 32 [ 497.336689][ T5857] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 497.336739][ T5857] usb 3-1: too many endpoints for config 0 interface 0 altsetting 5: 69, using maximum allowed: 30 [ 497.336789][ T5857] usb 3-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 69 [ 497.336820][ T5857] usb 3-1: config 0 interface 0 has no altsetting 1 [ 497.338671][ T5857] usb 3-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 497.338701][ T5857] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 497.338723][ T5857] usb 3-1: SerialNumber: syz [ 497.394172][ T5857] usb 3-1: config 0 descriptor?? [ 497.411047][ T5857] usb-storage 3-1:0.0: USB Mass Storage device detected [ 497.475793][ T5857] usb-storage 3-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 497.625686][ T5847] usb 3-1: USB disconnect, device number 111 [ 498.301437][ T5847] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 498.460393][ T5847] usb 2-1: Using ep0 maxpacket: 16 [ 498.481188][ T5847] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 498.481224][ T5847] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.481245][ T5847] usb 2-1: Product: syz [ 498.481262][ T5847] usb 2-1: Manufacturer: syz [ 498.481278][ T5847] usb 2-1: SerialNumber: syz [ 498.532431][ T5847] r8152-cfgselector 2-1: Unknown version 0x0000 [ 498.532463][ T5847] r8152-cfgselector 2-1: config 0 descriptor?? [ 498.955981][ T6016] r8152-cfgselector 2-1: USB disconnect, device number 10 [ 499.140840][ T993] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 499.289696][ T993] usb 3-1: Using ep0 maxpacket: 8 [ 499.292510][ T993] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 499.292541][ T993] usb 3-1: config 179 has no interface number 0 [ 499.292594][ T993] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 499.292626][ T993] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 499.292656][ T993] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 499.292686][ T993] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 499.292714][ T993] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 499.292761][ T993] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 499.292787][ T993] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.315333][T14290] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 499.738734][T14311] netlink: 'syz.1.3989': attribute type 10 has an invalid length. [ 499.739752][T14311] veth1_vlan: entered allmulticast mode [ 499.816885][T14311] team0: Device veth1_vlan failed to register rx_handler [ 499.820167][ T5847] usb 3-1: USB disconnect, device number 112 [ 499.820263][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 499.820405][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 500.781257][T14338] binfmt_misc: register: failed to install interpreter file ./file0 [ 500.884043][T14342] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4001'. [ 501.079378][T14348] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4004'. [ 501.270279][T14356] kernel read not supported for file / (pid: 14356 comm: syz.2.4007) [ 501.309727][ T37] audit: type=1800 audit(1757123668.591:32): pid=14356 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.4007" name=18 dev="mqueue" ino=34340 res=0 errno=0 [ 502.031803][T14385] CIFS mount error: No usable UNC path provided in device string! [ 502.031803][T14385] [ 502.031828][T14385] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 502.195863][T14390] vivid-000: disconnect [ 502.196446][T14388] vivid-000: reconnect [ 502.756933][ T9] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 502.761645][T14414] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4036'. [ 502.853968][T14417] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 502.899804][ T9] usb 5-1: config 0 has an invalid interface number: 114 but max is 0 [ 502.899839][ T9] usb 5-1: config 0 has no interface number 0 [ 502.899876][ T9] usb 5-1: too many endpoints for config 0 interface 114 altsetting 111: 97, using maximum allowed: 30 [ 502.899922][ T9] usb 5-1: config 0 interface 114 altsetting 111 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 502.899953][ T9] usb 5-1: config 0 interface 114 has no altsetting 0 [ 502.899992][ T9] usb 5-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 502.900017][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.917951][ T9] usb 5-1: config 0 descriptor?? [ 503.149283][ T9] usb 5-1: string descriptor 0 read error: -71 [ 503.296857][ T9] usb 5-1: USB disconnect, device number 126 [ 503.630254][T14441] warning: `syz.1.4050' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 503.646402][T14442] netlink: 'syz.3.4049': attribute type 10 has an invalid length. [ 503.820694][T14442] macvlan0: entered allmulticast mode [ 503.839256][T14442] veth1_vlan: entered allmulticast mode [ 503.869939][T14442] team0: Port device macvlan0 added [ 504.071079][T14457] netlink: 'syz.3.4057': attribute type 11 has an invalid length. [ 504.245073][T14464] : renamed from bond_slave_0 (while UP) [ 505.480329][T14509] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4083'. [ 505.522093][T14510] netlink: 136 bytes leftover after parsing attributes in process `syz.1.4082'. [ 505.659799][T14516] netlink: 'syz.2.4085': attribute type 10 has an invalid length. [ 505.693550][T14516] macvlan0: entered allmulticast mode [ 505.733393][T14516] veth1_vlan: entered allmulticast mode [ 505.756922][T14516] team0: Port device macvlan0 added [ 505.757508][ T5847] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 505.925446][ T5847] usb 5-1: Using ep0 maxpacket: 32 [ 505.928142][ T5847] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 505.928181][ T5847] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 505.928210][ T5847] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 505.928235][ T5847] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 505.928265][ T5847] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 505.932971][ T5847] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 505.933005][ T5847] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.933027][ T5847] usb 5-1: Product: syz [ 505.933043][ T5847] usb 5-1: Manufacturer: syz [ 505.933060][ T5847] usb 5-1: SerialNumber: syz [ 506.049414][ T5847] usb 5-1: config 0 descriptor?? [ 506.279701][ T37] audit: type=1107 audit(1757123673.945:33): pid=14532 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 506.457923][ T5847] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 506.457988][ T5847] input input60: Device does not respond to id packet M [ 506.459840][ T5847] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 506.459894][ T5847] input input60: Device does not respond to id packet P [ 506.460424][ T5847] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 506.460475][ T5847] input input60: Device does not respond to id packet B [ 506.460999][ T5847] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 506.461052][ T5847] input input60: Device does not respond to id packet N [ 506.463220][ T5847] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 506.463839][ T5847] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 506.464378][ T5847] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 506.540116][ T5847] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 506.573645][ T5847] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input60 [ 506.615464][ T5847] usb 5-1: USB disconnect, device number 127 [ 507.998894][ T5957] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 508.032871][T14588] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4122'. [ 508.134511][ T5957] usb 4-1: Using ep0 maxpacket: 32 [ 508.137065][ T5957] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 508.137097][ T5957] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.182581][ T5957] usb 4-1: config 0 descriptor?? [ 508.201394][ T5957] gspca_main: sunplus-2.14.0 probing 041e:400b [ 508.592224][ T5957] gspca_sunplus: reg_w_riv err -71 [ 508.592346][ T5957] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 508.628035][ T5957] usb 4-1: USB disconnect, device number 8 [ 508.810382][T14604] : entered promiscuous mode [ 508.821294][T14608] !: renamed from dummy0 (while UP) [ 509.579302][ T5857] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 509.703555][T14637] deleting an unspecified loop device is not supported. [ 509.719271][ T5857] usb 4-1: Using ep0 maxpacket: 16 [ 509.721924][ T5857] usb 4-1: config 4 has an invalid interface number: 51 but max is 0 [ 509.721954][ T5857] usb 4-1: config 4 has no interface number 0 [ 509.722008][ T5857] usb 4-1: config 4 interface 51 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16 [ 509.722036][ T5857] usb 4-1: config 4 interface 51 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 509.722062][ T5857] usb 4-1: config 4 interface 51 has no altsetting 0 [ 509.725452][ T5857] usb 4-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 509.725483][ T5857] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.725505][ T5857] usb 4-1: Product: syz [ 509.725544][ T5857] usb 4-1: Manufacturer: syz [ 509.725560][ T5857] usb 4-1: SerialNumber: syz [ 509.764576][T14625] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 509.769869][T14625] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 510.018788][T14625] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 510.018937][T14625] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 510.099941][T14645] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4151'. [ 510.160995][ T5857] cdc_eem 4-1:4.51 usb0: register 'cdc_eem' at usb-dummy_hcd.3-1, CDC EEM Device, e6:4c:e1:74:c2:b6 [ 510.225010][ T5957] usb 4-1: USB disconnect, device number 9 [ 510.228987][ T5957] cdc_eem 4-1:4.51 usb0: unregister 'cdc_eem' usb-dummy_hcd.3-1, CDC EEM Device [ 510.687207][T14643] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.689485][T14643] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.269125][T14677] netlink: 'syz.2.4164': attribute type 1 has an invalid length. [ 511.472466][T14684] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4167'. [ 511.823096][T14643] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 511.857263][T14643] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 512.153147][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 512.153233][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 513.109311][T14661] bridge0: port 2(bridge_slave_1) entered listening state [ 513.241900][ T43] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.261482][ T43] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.273307][ T43] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.273373][ T43] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.312547][T14698] netlink: 'syz.2.4175': attribute type 3 has an invalid length. [ 513.882457][T14720] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4183'. [ 513.882496][T14720] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4183'. [ 513.882522][T14720] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4183'. [ 514.379960][T14736] MPI: mpi too large (124808 bits) [ 515.064976][ T37] audit: type=1326 audit(1757123683.387:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14763 comm="syz.4.4208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4281abebe9 code=0x7ffc0000 [ 515.065034][ T37] audit: type=1326 audit(1757123683.387:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14763 comm="syz.4.4208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4281abebe9 code=0x7ffc0000 [ 515.067561][ T37] audit: type=1326 audit(1757123683.387:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14763 comm="syz.4.4208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f4281abebe9 code=0x7ffc0000 [ 515.071924][ T37] audit: type=1326 audit(1757123683.387:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14763 comm="syz.4.4208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4281abebe9 code=0x7ffc0000 [ 515.077686][ T37] audit: type=1326 audit(1757123683.398:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14763 comm="syz.4.4208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4281abebe9 code=0x7ffc0000 [ 515.677623][T14784] netlink: 'syz.4.4215': attribute type 1 has an invalid length. [ 515.677651][T14784] netlink: 216 bytes leftover after parsing attributes in process `syz.4.4215'. [ 515.831810][T14786] 8021q: adding VLAN 0 to HW filter on device bond3 [ 515.896838][T14794] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 515.896869][T14794] bond0: (slave ipvlan1): The slave device specified does not support setting the MAC address [ 515.897141][T14794] bond0: (slave ipvlan1): Error -95 calling set_mac_address [ 516.060096][T14798] netlink: 'syz.4.4221': attribute type 4 has an invalid length. [ 516.401482][ T5928] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 516.564039][ T5928] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 516.564074][ T5928] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 516.564096][ T5928] usb 4-1: config 220 has no interface number 2 [ 516.564187][ T5928] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 516.564227][ T5928] usb 4-1: config 220 interface 0 has no altsetting 0 [ 516.564249][ T5928] usb 4-1: config 220 interface 76 has no altsetting 0 [ 516.564270][ T5928] usb 4-1: config 220 interface 1 has no altsetting 0 [ 516.570378][ T5928] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 516.570413][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.570435][ T5928] usb 4-1: Product: syz [ 516.570450][ T5928] usb 4-1: Manufacturer: syz [ 516.570467][ T5928] usb 4-1: SerialNumber: syz [ 516.908247][ T5928] usb 4-1: selecting invalid altsetting 0 [ 516.927856][ T5928] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 516.927905][ T5928] usb 4-1: No valid video chain found. [ 516.958487][ T5928] usb 4-1: selecting invalid altsetting 0 [ 516.958535][ T5928] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 516.988269][ T5928] usb 4-1: USB disconnect, device number 10 [ 517.929328][T14861] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4252'. [ 518.367862][T14882] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4263'. [ 518.530605][T14885] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4265'. [ 519.068792][T14908] Smack: duplicate mount options [ 519.302147][T14917] netlink: 'syz.4.4280': attribute type 1 has an invalid length. [ 519.302175][T14917] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4280'. [ 519.540409][T14927] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4284'. [ 520.301521][T14954] netlink: 'syz.3.4297': attribute type 10 has an invalid length. [ 520.344597][T14954] syz_tun: entered promiscuous mode [ 520.344635][T14954] syz_tun: left allmulticast mode [ 520.393650][T14954] syz_tun: entered allmulticast mode [ 520.395682][T14954] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 520.504137][ T5857] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 520.663061][ T5857] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 520.663099][ T5857] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 4 [ 520.663147][ T5857] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 520.663174][ T5857] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.716107][ T5857] usb 5-1: config 0 descriptor?? [ 520.912312][ T5857] ath6kl: Failed to submit usb control message: -71 [ 520.912376][ T5857] ath6kl: unable to send the bmi data to the device: -71 [ 520.912394][ T5857] ath6kl: Unable to send get target info: -71 [ 520.923687][ T5857] ath6kl: Failed to init ath6kl core: -71 [ 520.925201][ T5857] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 520.955525][ T5857] usb 5-1: USB disconnect, device number 2 [ 521.736748][T15007] program syz.2.4322 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 522.392953][T15030] netlink: 'syz.2.4332': attribute type 5 has an invalid length. [ 522.608804][ T5957] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 522.673075][T15038] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4338'. [ 522.760346][ T5957] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 522.760378][ T5957] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 522.760439][ T5957] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 522.760464][ T5957] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.808906][ T5957] usb 1-1: config 0 descriptor?? [ 523.208734][ T5957] Bluetooth: Can't get state to change to load configuration err [ 523.208757][ T5957] Bluetooth: Loading sysconfig file failed [ 523.208803][ T5957] ath3k 1-1:0.0: probe with driver ath3k failed with error -16 [ 523.239376][ T5957] usb 1-1: USB disconnect, device number 122 [ 525.684734][T15127] netlink: 'syz.4.4382': attribute type 8 has an invalid length. [ 525.712260][ T5957] usb 1-1: new full-speed USB device number 123 using dummy_hcd [ 525.859740][ T5957] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 525.859773][ T5957] usb 1-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 525.859795][ T5957] usb 1-1: config 0 has no interface number 0 [ 525.859851][ T5957] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 12592, setting to 64 [ 525.859882][ T5957] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 525.859912][ T5957] usb 1-1: config 0 interface 52 has no altsetting 0 [ 525.926194][ T5957] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 525.926228][ T5957] usb 1-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 525.926250][ T5957] usb 1-1: Product: syz [ 525.926267][ T5957] usb 1-1: Manufacturer: syz [ 525.926283][ T5957] usb 1-1: SerialNumber: syz [ 525.972638][ T5957] usb 1-1: config 0 descriptor?? [ 526.230603][ T5957] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.52/input/input61 [ 526.292693][T15145] NILFS (nbd4): device size too small [ 526.411899][ T9] usb 1-1: USB disconnect, device number 123 [ 526.412026][ C1] synaptics_usb 1-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 526.625880][T15153] netlink: 'syz.3.4397': attribute type 1 has an invalid length. [ 526.625908][T15153] netlink: 228 bytes leftover after parsing attributes in process `syz.3.4397'. [ 527.491955][T15187] macvlan0: entered promiscuous mode [ 527.716541][ T37] audit: type=1326 audit(1757123696.960:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15194 comm="syz.3.4417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f857aabebe9 code=0x7ffc0000 [ 527.716695][ T37] audit: type=1326 audit(1757123696.971:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15194 comm="syz.3.4417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f857aabebe9 code=0x7ffc0000 [ 527.774527][ T37] audit: type=1326 audit(1757123696.971:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15194 comm="syz.3.4417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f857aabebe9 code=0x7ffc0000 [ 527.774589][ T37] audit: type=1326 audit(1757123696.971:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15194 comm="syz.3.4417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f857aabebe9 code=0x7ffc0000 [ 527.774635][ T37] audit: type=1326 audit(1757123696.971:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15194 comm="syz.3.4417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f857aabebe9 code=0x7ffc0000 [ 527.908195][T15199] netlink: 'syz.2.4418': attribute type 21 has an invalid length. [ 528.028587][T15206] program syz.3.4420 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 528.527732][T15223] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 529.479362][T15262] unsupported nlmsg_type 40 [ 529.702404][T15266] (unnamed net_device) (uninitialized): option mode: invalid value (68) [ 531.380420][ T5857] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 531.502330][T15331] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4479'. [ 531.502370][T15331] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4479'. [ 531.502389][T15331] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4479'. [ 531.541092][ T5857] usb 2-1: not running at top speed; connect to a high speed hub [ 531.542646][ T5857] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 531.542673][ T5857] usb 2-1: config 1 has no interface number 1 [ 531.542725][ T5857] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 531.550046][ T5857] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 531.550076][ T5857] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.550095][ T5857] usb 2-1: Product: syz [ 531.550109][ T5857] usb 2-1: Manufacturer: syz [ 531.550122][ T5857] usb 2-1: SerialNumber: syz [ 531.837256][ T5857] usb 2-1: failed to enable PITCH for EP 0x82 [ 532.007580][ T5857] usb 2-1: USB disconnect, device number 11 [ 532.322043][ T5965] udevd[5965]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 532.468760][ T9] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 532.520418][T15356] netlink: 'syz.1.4494': attribute type 1 has an invalid length. [ 532.618870][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 532.622883][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 532.624525][ T9] usb 1-1: config 8 has an invalid interface number: 255 but max is 0 [ 532.624554][ T9] usb 1-1: config 8 has no interface number 0 [ 532.624591][ T9] usb 1-1: config 8 interface 255 has no altsetting 0 [ 532.644534][ T9] usb 1-1: string descriptor 0 read error: -22 [ 532.644691][ T9] usb 1-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 532.644715][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.776856][ T5857] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 532.944702][ T5857] usb 5-1: Using ep0 maxpacket: 16 [ 532.973579][ T5857] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 532.973722][ T5857] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 34, changing to 9 [ 532.973756][ T5857] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 532.976862][ T5857] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 532.976894][ T5857] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 532.976917][ T5857] usb 5-1: Manufacturer: syz [ 533.056832][ T5857] usb 5-1: config 0 descriptor?? [ 533.161559][ T9] eth%d: CATC EL1210A NetMate USB Ethernet at usb-dummy_hcd.0-1, 00:00:00:00:00:00. [ 533.299814][ T9] usb 1-1: USB disconnect, device number 124 [ 533.314040][ T5857] usb 5-1: USB disconnect, device number 3 [ 533.466486][ T5847] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 533.613257][ T5847] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 533.613293][ T5847] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.613315][ T5847] usb 4-1: Product: syz [ 533.613330][ T5847] usb 4-1: Manufacturer: syz [ 533.613345][ T5847] usb 4-1: SerialNumber: syz [ 533.664872][ T5847] usb 4-1: config 0 descriptor?? [ 533.689176][ T5847] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 534.099669][ T5847] usb 4-1: USB disconnect, device number 11 [ 534.121223][T15391] netlink: 'syz.0.4511': attribute type 21 has an invalid length. [ 534.121339][T15391] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4511'. [ 534.827295][T15412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4521'. [ 535.552100][T15441] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4533'. [ 535.552126][T15441] tc_dump_action: action bad kind [ 537.113229][T15495] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4561'. [ 537.113264][T15495] netlink: 'syz.1.4561': attribute type 1 has an invalid length. [ 537.292993][T15504] i2c i2c-0: Invalid block write size 35 [ 537.634088][T15513] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4571'. [ 537.920467][T15514] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 537.921131][T15514] block device autoloading is deprecated and will be removed. [ 538.151513][T15527] bridge_slave_0: left allmulticast mode [ 538.151554][T15527] bridge_slave_0: left promiscuous mode [ 538.151881][T15527] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.246130][T15533] netlink: 'syz.1.4580': attribute type 2 has an invalid length. [ 538.246158][T15533] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4580'. [ 538.275086][T15527] bridge_slave_1: left allmulticast mode [ 538.275126][T15527] bridge_slave_1: left promiscuous mode [ 538.275813][T15527] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.397752][T15527] bond0: (slave bond_slave_0): Releasing backup interface [ 538.525435][T15527] bond0: (slave bond_slave_1): Releasing backup interface [ 538.705338][T15527] team0: Port device team_slave_0 removed [ 538.802982][T15527] team0: Port device team_slave_1 removed [ 538.806845][T15527] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 538.806880][T15527] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 538.862166][T15527] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 538.862203][T15527] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 539.417729][T15566] gre1: entered allmulticast mode [ 539.795099][T15582] netlink: 276 bytes leftover after parsing attributes in process `syz.1.4604'. [ 540.195587][T15596] ksmbd: Unknown IPC event: 4, ignore. [ 540.297804][ T5857] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 540.446713][ T5857] usb 2-1: Using ep0 maxpacket: 16 [ 540.450381][ T5857] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 540.450413][ T5857] usb 2-1: config 0 has no interface number 0 [ 540.450468][ T5857] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 540.453060][ T5857] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 540.453091][ T5857] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 540.453115][ T5857] usb 2-1: Product: syz [ 540.453132][ T5857] usb 2-1: SerialNumber: syz [ 540.481519][ T5857] usb 2-1: config 0 descriptor?? [ 540.510253][ T5857] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input62 [ 540.722687][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 540.722962][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 540.723223][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 540.723477][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 540.723726][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 540.723973][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 540.724224][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 540.724491][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 540.724738][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 540.724986][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 540.731530][ T5957] usb 2-1: USB disconnect, device number 12 [ 540.732243][ C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 540.915248][ T5957] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 541.118080][ T9] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 541.285714][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 541.288956][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 541.311961][ T9] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 541.311998][ T9] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 541.312021][ T9] usb 1-1: Product: syz [ 541.312037][ T9] usb 1-1: Manufacturer: syz [ 541.312053][ T9] usb 1-1: SerialNumber: syz [ 541.620825][ T9] usb 1-1: Handspring Visor / Palm OS: No valid connect info available [ 541.620853][ T9] usb 1-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 541.620875][ T9] usb 1-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 541.620896][ T9] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2 [ 541.809009][ T9] usb 1-1: palm_os_3_probe - error -71 getting bytes available request [ 541.809115][ T9] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 541.833453][ T9] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 541.868690][ T9] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 541.897312][ T9] usb 1-1: USB disconnect, device number 125 [ 541.930076][ T9] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 541.951529][ T9] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 541.980492][ T9] visor 1-1:1.0: device disconnected [ 542.010925][T15633] netlink: 'syz.3.4629': attribute type 3 has an invalid length. [ 542.133246][T15619] syz.2.4621 (15619): drop_caches: 2 [ 542.719495][T15650] netlink: 10 bytes leftover after parsing attributes in process `syz.2.4637'. [ 542.954167][ T5930] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 543.103067][ T5930] usb 4-1: Using ep0 maxpacket: 16 [ 543.122449][ T5930] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 543.122484][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.122508][ T5930] usb 4-1: Product: syz [ 543.122524][ T5930] usb 4-1: Manufacturer: syz [ 543.122540][ T5930] usb 4-1: SerialNumber: syz [ 543.178506][ T5930] usb 4-1: config 0 descriptor?? [ 543.184781][ T5930] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 543.441746][T15674] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4648'. [ 543.579572][ T5930] ssu100 4-1:0.0: probe with driver ssu100 failed with error -71 [ 543.616274][ T5930] usb 4-1: USB disconnect, device number 12 [ 543.665220][T15680] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4652'. [ 544.095665][T15689] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 544.232634][T15693] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4658'. [ 544.232821][T15693] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4658'. [ 544.482883][ T5930] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 544.613437][T15701] netlink: 'syz.3.4662': attribute type 3 has an invalid length. [ 544.663747][ T5930] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 544.663780][ T5930] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 544.665432][ T5930] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 544.665463][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 544.665486][ T5930] usb 5-1: SerialNumber: syz [ 544.716937][T15705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4663'. [ 544.937424][ T5930] usb 5-1: 0:2 : does not exist [ 544.937533][ T5930] usb 5-1: unit 48 not found! [ 545.016870][ T5930] usb 5-1: USB disconnect, device number 4 [ 545.178515][ T6072] udevd[6072]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 545.242473][T15720] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4670'. [ 545.778354][T15739] block nbd4: Attempted send on invalid socket [ 545.778384][T15739] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 545.778809][T15739] block nbd4: Attempted send on invalid socket [ 545.778828][T15739] I/O error, dev nbd4, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 547.054868][T15776] netlink: 'syz.0.4698': attribute type 2 has an invalid length. [ 547.910226][T15805] netlink: 'syz.0.4710': attribute type 1 has an invalid length. [ 548.236067][T15811] trusted_key: encrypted_key: master key parameter '' is invalid [ 548.775097][T15825] netlink: 'syz.3.4720': attribute type 10 has an invalid length. [ 548.775125][T15825] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4720'. [ 548.775321][T15825] bond0: entered promiscuous mode [ 548.775341][T15825] bond_slave_0: entered promiscuous mode [ 548.775624][T15825] bond_slave_1: entered promiscuous mode [ 548.777083][T15825] bridge0: port 4(bond0) entered blocking state [ 548.780134][T15825] bridge0: port 4(bond0) entered disabled state [ 548.822564][T15825] bridge0: port 4(bond0) entered blocking state [ 548.822725][T15825] bridge0: port 4(bond0) entered forwarding state [ 549.002903][ T37] audit: type=1326 audit(1757123719.803:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15832 comm="syz.0.4724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf2cc8ebe9 code=0x7ffc0000 [ 549.002968][ T37] audit: type=1326 audit(1757123719.803:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15832 comm="syz.0.4724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf2cc8ebe9 code=0x7ffc0000 [ 549.004354][ T37] audit: type=1326 audit(1757123719.814:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15832 comm="syz.0.4724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7fdf2cc8ebe9 code=0x7ffc0000 [ 549.004409][ T37] audit: type=1326 audit(1757123719.814:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15832 comm="syz.0.4724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf2cc8ebe9 code=0x7ffc0000 [ 549.004460][ T37] audit: type=1326 audit(1757123719.814:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15832 comm="syz.0.4724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf2cc8ebe9 code=0x7ffc0000 [ 550.149038][T15870] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4740'. [ 550.351682][T15875] tmpfs: Bad value for 'mpol' [ 550.717575][T15890] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4749'. [ 550.717611][T15890] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4749'. [ 551.026103][T15897] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 551.770633][ T5928] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 551.940482][ T5928] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 551.940520][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.988154][ T5928] usb 4-1: config 0 descriptor?? [ 552.397158][ T5928] ath6kl: Failed to read usb control message: -71 [ 552.397221][ T5928] ath6kl: Unable to read the bmi data from the device: -71 [ 552.397237][ T5928] ath6kl: Unable to recv target info: -71 [ 552.419815][ T5928] ath6kl: Failed to init ath6kl core: -71 [ 552.420509][ T5928] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 552.438597][ T5928] usb 4-1: USB disconnect, device number 13 [ 552.442222][T15940] netlink: 176 bytes leftover after parsing attributes in process `syz.4.4771'. [ 552.525637][ T5930] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 552.665547][ T5930] usb 2-1: Using ep0 maxpacket: 8 [ 552.670129][ T5930] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 552.670160][ T5930] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 552.670219][ T5930] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 552.670249][ T5930] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 100, changing to 10 [ 552.670280][ T5930] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 24936, setting to 1024 [ 552.670338][ T5930] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 552.670364][ T5930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.809129][ T5930] hub 2-1:1.0: bad descriptor, ignoring hub [ 552.809178][ T5930] hub 2-1:1.0: probe with driver hub failed with error -5 [ 552.810332][ T5930] cdc_wdm 2-1:1.0: skipping garbage [ 552.810351][ T5930] cdc_wdm 2-1:1.0: skipping garbage [ 552.810472][ T5930] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 553.113365][ T5930] usb 2-1: USB disconnect, device number 13 [ 553.279541][T15957] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4780'. [ 553.822044][ T9] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 553.961293][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 553.964285][ T9] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 553.964357][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 553.964381][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 553.964409][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 553.964436][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 553.964483][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 553.964509][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.457974][ T5857] usb 1-1: USB disconnect, device number 126 [ 555.098638][T16001] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4799'. [ 555.098709][T16001] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4799'. [ 555.321543][ T5847] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 555.461843][ T5847] usb 4-1: Using ep0 maxpacket: 32 [ 555.465327][ T5847] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 555.465358][ T5847] usb 4-1: config 0 has no interface number 0 [ 555.469624][ T5847] usb 4-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=7d.12 [ 555.469656][ T5847] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.469677][ T5847] usb 4-1: Product: syz [ 555.469692][ T5847] usb 4-1: Manufacturer: syz [ 555.469707][ T5847] usb 4-1: SerialNumber: syz [ 555.534697][ T5847] usb 4-1: config 0 descriptor?? [ 556.049443][ T31] usb 4-1: USB disconnect, device number 14 [ 556.050945][ T31] f81534a_ctrl 4-1:0.88: failed to set register 0x116: -19 [ 556.050972][ T31] f81534a_ctrl 4-1:0.88: failed to enable ports: -19 [ 557.450405][T16063] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4831'. [ 558.241566][T16084] netlink: 'syz.0.4840': attribute type 1 has an invalid length. [ 558.341931][ T5928] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 558.528178][ T5928] usb 3-1: Using ep0 maxpacket: 32 [ 558.530829][ T5928] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 558.530865][ T5928] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 558.530910][ T5928] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 558.530935][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.543461][ T5928] usb 3-1: config 0 descriptor?? [ 558.563045][ T5928] hub 3-1:0.0: USB hub found [ 558.598868][T16092] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 558.713768][T16096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4846'. [ 558.761529][ T5928] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 558.950769][ T5928] usbhid 3-1:0.0: can't add hid device: -71 [ 558.950920][ T5928] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 559.016036][ T5928] usb 3-1: USB disconnect, device number 113 [ 559.686052][T16120] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4858'. [ 560.251791][ T5928] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 560.282411][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 560.397089][ T5928] usb 2-1: Using ep0 maxpacket: 16 [ 560.399853][ T5928] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 560.399889][ T5928] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 560.399914][ T5928] usb 2-1: config 0 interface 0 has no altsetting 0 [ 560.405120][ T5928] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 560.405151][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.405171][ T5928] usb 2-1: Product: syz [ 560.405188][ T5928] usb 2-1: Manufacturer: syz [ 560.405204][ T5928] usb 2-1: SerialNumber: syz [ 560.424696][ T5928] usb 2-1: config 0 descriptor?? [ 560.432427][ T9] usb 5-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=86.cf [ 560.432458][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.501580][ T9] ums-cypress 5-1:1.0: USB Mass Storage device detected [ 560.711637][ T9] usb 5-1: USB disconnect, device number 5 [ 560.895949][ T6016] usb 2-1: USB disconnect, device number 14 [ 561.549219][T16176] openvswitch: netlink: IP tunnel dst address not specified [ 561.788338][T16183] netlink: 'syz.2.4888': attribute type 10 has an invalid length. [ 561.788366][T16183] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4888'. [ 561.788433][T16183] bond0: entered promiscuous mode [ 561.788452][T16183] bond_slave_0: entered promiscuous mode [ 561.788724][T16183] bond_slave_1: entered promiscuous mode [ 561.789021][T16183] bond0: entered allmulticast mode [ 561.789037][T16183] bond_slave_0: entered allmulticast mode [ 561.789061][T16183] bond_slave_1: entered allmulticast mode [ 561.789484][T16183] bridge0: port 3(bond0) entered blocking state [ 561.789647][T16183] bridge0: port 3(bond0) entered disabled state [ 561.831376][T16183] bridge0: port 3(bond0) entered blocking state [ 561.831538][T16183] bridge0: port 3(bond0) entered forwarding state [ 562.467405][T16208] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 562.821257][T16222] netlink: 'syz.4.4908': attribute type 1 has an invalid length. [ 562.821287][T16222] netlink: 'syz.4.4908': attribute type 2 has an invalid length. [ 562.821565][T16222] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4908'. [ 563.113863][ T5928] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 563.248618][T16238] netlink: 'syz.4.4916': attribute type 1 has an invalid length. [ 563.248647][T16238] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4916'. [ 563.286159][ T5928] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 563.286199][ T5928] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 563.286226][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 563.286254][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 563.286277][ T5928] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 563.289986][ T5928] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 563.290018][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.290041][ T5928] usb 2-1: Product: syz [ 563.290055][ T5928] usb 2-1: Manufacturer: syz [ 563.290066][ T5928] usb 2-1: SerialNumber: syz [ 563.317430][ T5928] usb 2-1: config 0 descriptor?? [ 563.419260][ T5928] input: KB Gear Tablet as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input63 [ 563.710810][ T5847] usb 2-1: USB disconnect, device number 15 [ 564.053376][T16258] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 564.292039][T16264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4928'. [ 564.334380][T13647] Bluetooth: hci0: command tx timeout [ 564.486402][T13647] Bluetooth: hci4: command 0x0c1a tx timeout [ 564.847744][T16286] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4939'. [ 565.114680][ T37] audit: type=1326 audit(1757123737.089:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16295 comm="syz.0.4945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf2cc8ebe9 code=0x7ffc0000 [ 565.135112][ T37] audit: type=1326 audit(1757123737.099:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16295 comm="syz.0.4945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf2cc8ebe9 code=0x7ffc0000 [ 565.135168][ T37] audit: type=1326 audit(1757123737.110:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16295 comm="syz.0.4945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7fdf2cc8ebe9 code=0x7ffc0000 [ 565.135221][ T37] audit: type=1326 audit(1757123737.110:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16295 comm="syz.0.4945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf2cc8ebe9 code=0x7ffc0000 [ 565.135494][ T37] audit: type=1326 audit(1757123737.110:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16295 comm="syz.0.4945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf2cc8ebe9 code=0x7ffc0000 [ 565.256097][T16300] netlink: 'syz.1.4946': attribute type 1 has an invalid length. [ 565.256123][T16300] netlink: 244 bytes leftover after parsing attributes in process `syz.1.4946'. [ 565.339243][T16302] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4951'. [ 565.424873][ T37] audit: type=1326 audit(1757123737.421:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16304 comm="syz.3.4950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f857aabebe9 code=0x7ffc0000 [ 565.424944][ T37] audit: type=1326 audit(1757123737.421:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16304 comm="syz.3.4950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f857aabebe9 code=0x7ffc0000 [ 565.644085][ T37] audit: type=1326 audit(1757123737.636:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16304 comm="syz.3.4950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f857aabebe9 code=0x7ffc0000 [ 565.644426][ T37] audit: type=1326 audit(1757123737.657:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16304 comm="syz.3.4950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f857aabebe9 code=0x7ffc0000 [ 565.767184][T16316] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4956'. [ 565.838257][T16319] netlink: 'syz.4.4954': attribute type 1 has an invalid length. [ 566.104544][T16329] netlink: 'syz.4.4961': attribute type 3 has an invalid length. [ 566.710216][T16347] ip6gre1: entered allmulticast mode [ 566.911846][T16352] kAFS: unable to lookup cell '/,' [ 567.381620][ T5847] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 567.528346][ T5847] usb 4-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 567.528382][ T5847] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.528405][ T5847] usb 4-1: Product: syz [ 567.528421][ T5847] usb 4-1: Manufacturer: syz [ 567.528436][ T5847] usb 4-1: SerialNumber: syz [ 567.577839][ T5847] usb 4-1: config 0 descriptor?? [ 567.614170][T16372] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4982'. [ 567.614204][T16372] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4982'. [ 567.614296][T16372] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4982'. [ 567.811133][ T5847] int51x1 4-1:0.0: probe with driver int51x1 failed with error -22 [ 567.982809][T16384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4988'. [ 568.030625][ T993] usb 4-1: USB disconnect, device number 15 [ 568.256831][T16392] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4992'. [ 568.854401][ T5847] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 569.003758][ T5847] usb 5-1: Using ep0 maxpacket: 32 [ 569.007596][ T5847] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 569.007635][ T5847] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 569.007659][ T5847] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 569.010924][ T5847] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 569.010960][ T5847] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 569.010983][ T5847] usb 5-1: Product: syz [ 569.011000][ T5847] usb 5-1: Manufacturer: syz [ 569.011016][ T5847] usb 5-1: SerialNumber: syz [ 569.123700][ T5847] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input64 [ 569.489103][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 569.489194][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 572.498249][ T5930] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 572.642660][ T5930] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 572.642694][ T5930] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 572.642715][ T5930] usb 4-1: config 220 has an invalid interface number: 36 but max is 2 [ 572.642738][ T5930] usb 4-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config [ 572.642761][ T5930] usb 4-1: config 220 has 4 interfaces, different from the descriptor's value: 3 [ 572.642785][ T5930] usb 4-1: config 220 has no interface number 2 [ 572.642804][ T5930] usb 4-1: config 220 has no interface number 3 [ 572.642906][ T5930] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 572.642958][ T5930] usb 4-1: config 220 interface 36 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 572.642997][ T5930] usb 4-1: config 220 interface 0 has no altsetting 0 [ 572.643016][ T5930] usb 4-1: config 220 interface 76 has no altsetting 0 [ 572.643036][ T5930] usb 4-1: config 220 interface 1 has no altsetting 0 [ 572.643056][ T5930] usb 4-1: config 220 interface 36 has no altsetting 0 [ 572.778999][ T5930] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 572.779036][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.779059][ T5930] usb 4-1: Product: syz [ 572.779075][ T5930] usb 4-1: Manufacturer: syz [ 572.779091][ T5930] usb 4-1: SerialNumber: syz [ 573.095872][ T5930] usb 4-1: selecting invalid altsetting 0 [ 573.096396][ T5930] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 573.096431][ T5930] usb 4-1: No valid video chain found. [ 573.187651][ T5930] usb 4-1: selecting invalid altsetting 0 [ 573.187697][ T5930] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 573.284282][ T5930] usb 4-1: USB disconnect, device number 16 [ 573.514319][ T6016] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 573.654247][ T6016] usb 3-1: Using ep0 maxpacket: 16 [ 573.660282][ T6016] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 573.660356][ T6016] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 573.660383][ T6016] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 573.660410][ T6016] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 573.660434][ T6016] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 573.660460][ T6016] usb 3-1: config 1 interface 0 has no altsetting 0 [ 573.660499][ T6016] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 573.660526][ T6016] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.835810][ T6016] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 573.916490][ T5930] usb 5-1: USB disconnect, device number 6 [ 574.281079][ T6016] scsi host1: usb-storage 3-1:1.0 [ 574.449097][ T5847] usb 3-1: USB disconnect, device number 114 [ 574.952378][T16483] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5036'. [ 574.952406][T16483] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5036'. [ 575.165324][T16488] vivid-007: disconnect [ 575.166537][T16486] vivid-007: reconnect [ 575.901773][ T6016] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 576.048207][ T6016] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 576.048240][ T6016] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 576.048263][ T6016] usb 4-1: config 220 has no interface number 2 [ 576.048348][ T6016] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 576.048378][ T6016] usb 4-1: config 220 interface 0 has no altsetting 0 [ 576.048398][ T6016] usb 4-1: config 220 interface 76 has no altsetting 0 [ 576.048420][ T6016] usb 4-1: config 220 interface 1 has no altsetting 0 [ 576.126240][ T6016] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 576.126277][ T6016] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.126301][ T6016] usb 4-1: Product: syz [ 576.126316][ T6016] usb 4-1: Manufacturer: syz [ 576.126331][ T6016] usb 4-1: SerialNumber: syz [ 576.460401][ T6016] usb 4-1: selecting invalid altsetting 0 [ 576.460920][ T6016] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 576.460955][ T6016] usb 4-1: No valid video chain found. [ 576.552517][ T6016] usb 4-1: selecting invalid altsetting 0 [ 576.552565][ T6016] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 576.594788][ T6016] usb 4-1: USB disconnect, device number 17 [ 576.916504][T16503] netlink: 248 bytes leftover after parsing attributes in process `syz.1.5043'. [ 607.588199][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 607.591911][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 607.595676][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 607.599370][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 607.603074][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 607.610582][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 607.614160][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 607.617881][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 607.621637][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 607.625311][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 612.249163][ C0] net_ratelimit: 1153 callbacks suppressed [ 612.249191][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 612.252842][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 612.256624][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 612.261265][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 612.264919][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 612.268707][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 612.272529][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 612.276218][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 612.280070][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 612.283857][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 616.919645][ C0] net_ratelimit: 1123 callbacks suppressed [ 616.919668][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 616.923533][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 616.927168][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 616.931512][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 616.935294][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 616.939028][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 616.942709][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 616.946840][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 616.950521][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 616.954237][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 621.590023][ C0] net_ratelimit: 1161 callbacks suppressed [ 621.590050][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 621.593725][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 621.597965][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 621.601726][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 621.605388][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 621.609173][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 621.612947][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 621.617122][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 621.620836][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 621.624758][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 626.259744][ C0] net_ratelimit: 1177 callbacks suppressed [ 626.259772][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 626.264023][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 626.267803][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 626.271482][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 626.275255][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 626.278893][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 626.283328][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 626.287194][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 626.290811][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 626.294545][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 630.927259][ C0] net_ratelimit: 1154 callbacks suppressed [ 630.927287][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 630.931537][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 630.935638][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 630.939798][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 630.943812][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 630.947703][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 630.951601][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 630.955652][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 630.959620][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 630.963528][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 631.391128][ T5205] udevd[5205]: worker [6075] /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input64/event4 is taking a long time [ 633.079112][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 633.102570][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 635.595762][ C0] net_ratelimit: 1160 callbacks suppressed [ 635.595787][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 635.599604][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 635.603236][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 635.607016][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 635.610896][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 635.614644][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 635.618342][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 635.622158][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 635.625855][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 635.629996][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 640.267878][ C0] net_ratelimit: 1131 callbacks suppressed [ 640.267904][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 640.271649][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 640.275545][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 640.279270][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 640.282288][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 640.286070][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 640.289822][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 640.293559][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 640.297244][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 640.301098][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 644.936495][ C0] net_ratelimit: 1145 callbacks suppressed [ 644.936530][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 644.940144][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 644.943913][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 644.947646][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 644.951236][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 644.954913][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 644.958660][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 644.962325][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 644.965973][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 644.969641][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 649.604846][ C0] net_ratelimit: 2358 callbacks suppressed [ 649.604871][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 649.605558][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 649.606361][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 649.610184][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 649.610879][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 649.611615][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 649.615552][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 649.616223][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 649.616993][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 649.620764][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 654.339555][ C0] net_ratelimit: 2592 callbacks suppressed [ 654.339580][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 654.340260][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 654.340981][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 654.343883][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:0b:8f:e3:b6:f8, vlan:0) [ 654.346731][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 654.347405][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 654.348142][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 654.351017][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:0b:8f:e3:b6:f8, vlan:0) [ 654.354069][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 654.354760][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 659.009042][ C0] net_ratelimit: 2429 callbacks suppressed [ 659.009069][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:0b:8f:e3:b6:f8, vlan:0) [ 659.011943][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 659.012578][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 659.013332][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 659.016325][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:0b:8f:e3:b6:f8, vlan:0) [ 659.019223][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 659.019883][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 659.020682][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 659.024027][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:0b:8f:e3:b6:f8, vlan:0) [ 659.026940][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 663.677539][ C0] net_ratelimit: 2367 callbacks suppressed [ 663.677572][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 663.678680][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 663.679401][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 663.682386][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:0b:8f:e3:b6:f8, vlan:0) [ 663.744828][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 663.745507][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 663.746245][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 663.749206][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:0b:8f:e3:b6:f8, vlan:0) [ 663.752121][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 663.752802][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 668.348546][ C0] net_ratelimit: 2365 callbacks suppressed [ 668.348572][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:0b:8f:e3:b6:f8, vlan:0) [ 668.351461][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 668.352118][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 668.352847][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 668.355830][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:0b:8f:e3:b6:f8, vlan:0) [ 668.358691][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 668.359413][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 668.360629][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 668.363572][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:0b:8f:e3:b6:f8, vlan:0) [ 668.366476][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 673.017328][ C0] net_ratelimit: 2423 callbacks suppressed [ 673.017354][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 673.018054][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 673.018820][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 673.021927][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:0b:8f:e3:b6:f8, vlan:0) [ 673.025104][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 673.025789][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 673.026603][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 673.029780][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:0b:8f:e3:b6:f8, vlan:0) [ 673.032814][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 673.033550][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 677.685311][ C0] net_ratelimit: 2413 callbacks suppressed [ 677.685329][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:0b:8f:e3:b6:f8, vlan:0) [ 677.689738][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 677.690419][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 677.691121][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 677.694135][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:0b:8f:e3:b6:f8, vlan:0) [ 677.697044][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 677.697688][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 677.698418][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 677.701320][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:0b:8f:e3:b6:f8, vlan:0) [ 677.704196][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 682.357799][ C0] net_ratelimit: 2422 callbacks suppressed [ 682.357824][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:0b:8f:e3:b6:f8, vlan:0) [ 682.360783][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 682.361477][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 682.362200][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 682.365173][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:0b:8f:e3:b6:f8, vlan:0) [ 682.368070][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 682.368730][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 682.369426][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 682.372375][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:0b:8f:e3:b6:f8, vlan:0) [ 682.375541][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 685.660278][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.962701][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.025836][ C0] net_ratelimit: 2395 callbacks suppressed [ 687.025863][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 687.026532][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 687.027309][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 687.030207][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:0b:8f:e3:b6:f8, vlan:0) [ 687.035610][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 687.036263][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 687.036981][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 687.039927][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:0b:8f:e3:b6:f8, vlan:0) [ 687.042807][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 687.043465][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 691.732978][ C0] net_ratelimit: 2413 callbacks suppressed [ 691.733002][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:0b:8f:e3:b6:f8, vlan:0) [ 691.736009][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 691.736682][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 691.737430][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 691.740443][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:0b:8f:e3:b6:f8, vlan:0) [ 691.743304][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 691.743936][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 691.744656][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 691.747642][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:0b:8f:e3:b6:f8, vlan:0) [ 691.750559][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 694.665666][ T5859] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 696.400291][ C0] net_ratelimit: 2422 callbacks suppressed [ 696.400316][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:0b:8f:e3:b6:f8, vlan:0) [ 696.403226][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 696.403895][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 696.404678][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 696.407618][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:0b:8f:e3:b6:f8, vlan:0) [ 696.410569][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 696.411222][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 696.412405][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 696.415422][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:0b:8f:e3:b6:f8, vlan:0) [ 696.418328][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 701.070398][ C0] net_ratelimit: 2442 callbacks suppressed [ 701.070424][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:0b:8f:e3:b6:f8, vlan:0) [ 701.073378][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 701.074235][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 701.075024][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 701.077938][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:0b:8f:e3:b6:f8, vlan:0) [ 701.080852][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 701.081496][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 701.082220][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 701.085133][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:0b:8f:e3:b6:f8, vlan:0) [ 701.088103][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 704.708725][T16539] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 704.713094][T16539] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 705.739510][ C0] net_ratelimit: 2371 callbacks suppressed [ 705.739537][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 705.740201][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 705.740960][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 705.743950][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:0b:8f:e3:b6:f8, vlan:0) [ 705.746973][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 705.747761][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 705.748518][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 705.751500][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:0b:8f:e3:b6:f8, vlan:0) [ 705.754456][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 705.755084][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 706.500356][ T5859] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 710.007538][ T5859] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 710.408061][ C0] net_ratelimit: 2458 callbacks suppressed [ 710.408089][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 710.408756][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 710.409489][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 710.412425][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:0b:8f:e3:b6:f8, vlan:0) [ 710.415297][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 710.416021][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 710.416817][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 710.419772][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:0b:8f:e3:b6:f8, vlan:0) [ 710.422682][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 710.423389][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 711.853422][ T5859] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 713.203485][ T38] INFO: task kworker/1:3:5847 blocked for more than 145 seconds. [ 713.203516][ T38] Not tainted syzkaller #0 [ 713.203528][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 713.203539][ T38] task:kworker/1:3 state:D stack:20808 pid:5847 tgid:5847 ppid:2 task_flags:0x4288060 flags:0x00004000 [ 713.203608][ T38] Workqueue: usb_hub_wq hub_event [ 713.203641][ T38] Call Trace: [ 713.203650][ T38] [ 713.203667][ T38] __schedule+0x16f3/0x4c20 [ 713.203719][ T38] ? do_raw_spin_lock+0x121/0x290 [ 713.203751][ T38] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 713.203783][ T38] ? __pfx___schedule+0x10/0x10 [ 713.203836][ T38] ? schedule+0x91/0x360 [ 713.203872][ T38] schedule+0x165/0x360 [ 713.203906][ T38] schedule_timeout+0x9a/0x270 [ 713.203938][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 713.203983][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 713.204016][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 713.204046][ T38] ? wait_for_completion+0x267/0x5d0 [ 713.204092][ T38] wait_for_completion+0x2bf/0x5d0 [ 713.204141][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 713.204176][ T38] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 713.204209][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 713.204246][ T38] ? __init_swait_queue_head+0xa9/0x150 [ 713.204279][ T38] rcu_barrier+0x463/0x570 [ 713.204315][ T38] scsi_host_dev_release+0xab/0x300 [ 713.204343][ T38] ? __pfx_scsi_host_dev_release+0x10/0x10 [ 713.204367][ T38] device_release+0x99/0x1c0 [ 713.204398][ T38] kobject_put+0x22b/0x480 [ 713.204430][ T38] usb_unbind_interface+0x26e/0x910 [ 713.204472][ T38] ? __pfx_usb_unbind_interface+0x10/0x10 [ 713.204503][ T38] device_release_driver_internal+0x4d6/0x800 [ 713.204539][ T38] bus_remove_device+0x355/0x420 [ 713.204578][ T38] device_del+0x515/0x8e0 [ 713.204604][ T38] ? kfree+0x195/0x550 [ 713.204638][ T38] ? __pfx_device_del+0x10/0x10 [ 713.204659][ T38] ? kobject_put+0x446/0x480 [ 713.204693][ T38] usb_disable_device+0x3e9/0x8a0 [ 713.204732][ T38] usb_disconnect+0x316/0x940 [ 713.204767][ T38] hub_even[ 713.204767][ T38] hub_event+0x1cf5/0x4a20 [ 713.204827][ T38] ? do_raw_spin_lock+0x121/0x290 [ 713.204856][ T38] ? register_lock_class+0x51/0x320 [ 713.204907][ T38] ? __pfx_hub_event+0x10/0x10 [ 713.204935][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 713.204973][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 713.205005][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 713.205032][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 713.205072][ T38] process_scheduled_works+0xade/0x17b0 [ 713.205137][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 713.205187][ T38] worker_thread+0x8a0/0xda0 [ 713.205222][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 713.205266][ T38] ? __kthread_parkme+0x7b/0x200 [ 713.205309][ T38] kthread+0x70e/0x8a0 [ 713.205346][ T38] ? __pfx_worker_thread+0x10/0x10 [ 713.205375][ T38] ? __pfx_kthread+0x10/0x10 [ 713.205415][ T38] ? __pfx_kthread+0x10/0x10 [ 713.205450][ T38] ret_from_fork+0x3f9/0x770 [ 713.205484][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 713.205521][ T38] ? __switch_to_asm+0x39/0x70 [ 713.205541][ T38] ? __switch_to_asm+0x33/0x70 [ 713.205561][ T38] ? __pfx_kthread+0x10/0x10 [ 713.205596][ T38] ret_from_fork_asm+0x1a/0x30 [ 713.205638][ T38] [ 713.205680][ T38] INFO: task syz.4.5035:16481 blocked for more than 145 seconds. [ 713.205697][ T38] Not tainted syzkaller #0 [ 713.205709][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 713.205720][ T38] task:syz.4.5035 state:D stack:28136 pid:16481 tgid:16479 ppid:5845 task_flags:0x400140 flags:0x00004004 [ 713.205793][ T38] Call Trace: [ 713.205801][ T38] [ 713.205815][ T38] __schedule+0x16f3/0x4c20 [ 713.205858][ T38] ? sched_clock+0x3f/0x60 [ 713.205885][ T38] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 713.205924][ T38] ? __pfx___schedule+0x10/0x10 [ 713.205985][ T38] rt_mutex_schedule+0x77/0xf0 [ 713.206009][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 713.206053][ T38] ? rt_mutex_slowlock_block+0x351/0x6d0 [ 713.206093][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 713.206125][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 713.206153][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 713.206193][ T38] ? wireless_dev_seq_start+0x60/0x130 [ 713.206235][ T38] ? wireless_dev_seq_start+0x60/0x130 [ 713.206255][ T38] mutex_lock_nested+0x16a/0x1d0 [ 713.206289][ T38] wireless_dev_seq_start+0x60/0x130 [ 713.206315][ T38] traverse+0x15f/0x570 [ 713.206358][ T38] seq_read_iter+0xcff/0xe10 [ 713.206386][ T38] ? futex_unqueue+0x211/0x240 [ 713.206418][ T38] ? __asan_memset+0x22/0x50 [ 713.206451][ T38] seq_read+0x36c/0x480 [ 713.206488][ T38] ? __pfx_seq_read+0x10/0x10 [ 713.206521][ T38] ? __import_iovec+0x5d4/0x7f0 [ 713.206562][ T38] ? __pfx_seq_read+0x10/0x10 [ 713.206584][ T38] proc_reg_read+0x1f3/0x2f0 [ 713.206618][ T38] vfs_readv+0x5b3/0x850 [ 713.206653][ T38] ? __pfx_proc_reg_read+0x10/0x10 [ 713.206682][ T38] ? __pfx_vfs_readv+0x10/0x10 [ 713.206735][ T38] ? __fget_files+0x2a/0x420 [ 713.206772][ T38] ? __fget_files+0x3a6/0x420 [ 713.206802][ T38] ? __fget_files+0x2a/0x420 [ 713.206845][ T38] __x64_sys_preadv+0x19a/0x2a0 [ 713.206879][ T38] ? __pfx___x64_sys_preadv+0x10/0x10 [ 713.206907][ T38] ? rcu_is_watching+0x15/0xb0 [ 713.206948][ T38] ? do_syscall_64+0xbe/0x3b0 [ 713.206975][ T38] do_syscall_64+0xfa/0x3b0 [ 713.206995][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 713.207028][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.207051][ T38] ? clear_bhb_loop+0x60/0xb0 [ 713.207089][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.207112][ T38] RIP: 0033:0x7f4281abebe9 [ 713.207134][ T38] RSP: 002b:00007f427fd1e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 713.207157][ T38] RAX: ffffffffffffffda RBX: 00007f4281cf5fa0 RCX: 00007f4281abebe9 [ 713.207174][ T38] RDX: 0000000000000001 RSI: 00002000000026c0 RDI: 0000000000000003 [ 713.207190][ T38] RBP: 00007f4281b41e19 R08: 0000000000000000 R09: 0000000000000000 [ 713.207204][ T38] R10: 000000000000015f R11: 0000000000000246 R12: 0000000000000000 [ 713.207219][ T38] R13: 00007f4281cf6038 R14: 00007f4281cf5fa0 R15: 00007ffc17d7a198 [ 713.207256][ T38] [ 713.207267][ T38] INFO: task syz.2.5040:16496 blocked for more than 145 seconds. [ 713.207282][ T38] Not tainted syzkaller #0 [ 713.207294][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 713.207305][ T38] task:syz.2.5040 state:D stack:25504 pid:16496 tgid:16494 ppid:5854 task_flags:0x400140 flags:0x00004004 [ 713.207370][ T38] Call Trace: [ 713.207377][ T38] [ 713.207392][ T38] __schedule+0x16f3/0x4c20 [ 713.207441][ T38] ? rcu_is_watching+0x15/0xb0 [ 713.207481][ T38] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 713.207515][ T38] ? __pfx___schedule+0x10/0x10 [ 713.207547][ T38] ? irqentry_exit+0x74/0x90 [ 713.207579][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 713.207631][ T38] rt_mutex_schedule+0x77/0xf0 [ 713.207653][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 713.207680][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 713.207728][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 713.207766][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 713.207795][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 713.207835][ T38] ? register_netdevice_notifier_net+0x1a/0xa0 [ 713.207872][ T38] ? net_generic+0x1e/0x240 [ 713.207914][ T38] ? register_netdevice_notifier_net+0x1a/0xa0 [ 713.207944][ T38] mutex_lock_nested+0x16a/0x1d0 [ 713.207968][ T38] ? net_generic+0x1e/0x240 [ 713.208004][ T38] register_netdevice_notifier_net+0x1a/0xa0 [ 713.208039][ T38] ops_init+0x359/0x5c0 [ 713.208092][ T38] setup_net+0x10c/0x320 [ 713.208121][ T38] ? copy_net_ns+0x304/0x4d0 [ 713.208153][ T38] ? __pfx_setup_net+0x10/0x10 [ 713.208196][ T38] copy_net_ns+0x31b/0x4d0 [ 713.208233][ T38] create_new_namespaces+0x3f3/0x720 [ 713.208267][ T38] ? security_capable+0x7e/0x2e0 [ 713.208304][ T38] ? copy_namespaces+0x5c/0x4b0 [ 713.208326][ T38] copy_namespaces+0x438/0x4b0 [ 713.208352][ T38] ? copy_process+0x979/0x3ae0 [ 713.208383][ T38] copy_process+0x1731/0x3ae0 [ 713.208429][ T38] ? copy_process+0x979/0x3ae0 [ 713.208475][ T38] ? __pfx_copy_process+0x10/0x10 [ 713.208511][ T38] ? futex_wait+0x285/0x360 [ 713.208551][ T38] kernel_clone+0x224/0x7c0 [ 713.208587][ T38] ? __pfx_kernel_clone+0x10/0x10 [ 713.208633][ T38] ? do_futex+0x333/0x420 [ 713.208668][ T38] __x64_sys_clone+0x18b/0x1e0 [ 713.208705][ T38] ? __pfx___x64_sys_clone+0x10/0x10 [ 713.208760][ T38] ? rcu_is_watching+0x15/0xb0 [ 713.208800][ T38] ? do_syscall_64+0xbe/0x3b0 [ 713.208825][ T38] do_syscall_64+0xfa/0x3b0 [ 713.208845][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 713.208876][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.208898][ T38] ? clear_bhb_loop+0x60/0xb0 [ 713.208926][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.208948][ T38] RIP: 0033:0x7f762990ebe9 [ 713.208967][ T38] RSP: 002b:00007f7627b75fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 713.208988][ T38] RAX: ffffffffffffffda RBX: 00007f7629b45fa0 RCX: 00007f762990ebe9 [ 713.209005][ T38] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000640c7400 [ 713.209020][ T38] RBP: 00007f7629991e19 R08: 0000000000000000 R09: 0000000000000000 [ 713.209035][ T38] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 713.209049][ T38] R13: 00007f7629b46038 R14: 00007f7629b45fa0 R15: 00007ffca1d905f8 [ 713.209094][ T38] [ 713.209105][ T38] INFO: task syz.1.5043:16503 blocked for more than 145 seconds. [ 713.209119][ T38] Not tainted syzkaller #0 [ 713.209131][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 713.209141][ T38] task:syz.1.5043 state:D stack:24040 pid:16503 tgid:16502 ppid:5844 task_flags:0x400140 flags:0x00004004 [ 713.209204][ T38] Call Trace: [ 713.209212][ T38] [ 713.209226][ T38] __schedule+0x16f3/0x4c20 [ 713.209289][ T38] ? __pfx___schedule+0x10/0x10 [ 713.209343][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 713.209380][ T38] rt_mutex_schedule+0x77/0xf0 [ 713.209402][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 713.209429][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 713.209476][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 713.209506][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 713.209536][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 713.209559][ T38] ? __lock_acquire+0xab9/0xd20 [ 713.209602][ T38] ? ieee80211_register_hw+0x3048/0x4100 [ 713.209629][ T38] ? __asan_memset+0x22/0x50 [ 713.209652][ T38] ? ieee80211_txq_setup_flows+0xa38/0xf00 [ 713.209693][ T38] ? ieee80211_register_hw+0x3048/0x4100 [ 713.209715][ T38] mutex_lock_nested+0x16a/0x1d0 [ 713.209748][ T38] ieee80211_register_hw+0x3048/0x4100 [ 713.209790][ T38] ? ieee80211_register_hw+0x1451/0x4100 [ 713.209826][ T38] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 713.209856][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 713.209901][ T38] ? __hrtimer_setup+0x18a/0x200 [ 713.209932][ T38] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 713.209967][ T38] mac80211_hwsim_new_radio+0x2c76/0x4e30 [ 713.210014][ T38] ? mac80211_hwsim_new_radio+0x10b/0x4e30 [ 713.210055][ T38] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 713.210088][ T38] ? __nla_validate_parse+0x251c/0x2d40 [ 713.210109][ T38] ? __sock_sendmsg+0x219/0x270 [ 713.210133][ T38] ? ____sys_sendmsg+0x508/0x820 [ 713.210168][ T38] hwsim_new_radio_nl+0xea4/0x1b10 [ 713.210200][ T38] ? __pfx___nla_validate_parse+0x10/0x10 [ 713.210240][ T38] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 713.210273][ T38] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 713.210308][ T38] ? __nla_parse+0x40/0x60 [ 713.210334][ T38] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 713.210370][ T38] genl_family_rcv_msg_doit+0x215/0x300 [ 713.210403][ T38] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 713.210444][ T38] ? bpf_lsm_capable+0x9/0x20 [ 713.210474][ T38] ? security_capable+0x7e/0x2e0 [ 713.210514][ T38] genl_rcv_msg+0x60e/0x790 [ 713.210548][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 713.210571][ T38] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 713.210603][ T38] ? __lock_acquire+0xab9/0xd20 [ 713.210644][ T38] netlink_rcv_skb+0x205/0x470 [ 713.210677][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 713.210702][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 713.210751][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 713.210780][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 713.210816][ T38] genl_rcv+0x28/0x40 [ 713.210836][ T38] netlink_unicast+0x843/0xa10 [ 713.210875][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 713.210906][ T38] ? netlink_sendmsg+0x642/0xb30 [ 713.210936][ T38] ? skb_put+0x11b/0x210 [ 713.210974][ T38] netlink_sendmsg+0x805/0xb30 [ 713.211018][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 713.211068][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 713.211091][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 713.211123][ T38] __sock_sendmsg+0x219/0x270 [ 713.211155][ T38] ____sys_sendmsg+0x508/0x820 [ 713.211186][ T38] ? __pfx_____sys_sendmsg+0x10/0x10 [ 713.211221][ T38] ? import_iovec+0x74/0xa0 [ 713.211255][ T38] ___sys_sendmsg+0x21f/0x2a0 [ 713.211281][ T38] ? __pfx____sys_sendmsg+0x10/0x10 [ 713.211349][ T38] ? __fget_files+0x2a/0x420 [ 713.211379][ T38] ? __fget_files+0x3a6/0x420 [ 713.211425][ T38] __x64_sys_sendmsg+0x1a1/0x260 [ 713.211452][ T38] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 713.211487][ T38] ? rcu_is_watching+0x15/0xb0 [ 713.211527][ T38] ? do_syscall_64+0xbe/0x3b0 [ 713.211554][ T38] do_syscall_64+0xfa/0x3b0 [ 713.211573][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 713.211605][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.211627][ T38] ? clear_bhb_loop+0x60/0xb0 [ 713.211656][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.211678][ T38] RIP: 0033:0x7fb0ba7febe9 [ 713.211696][ T38] RSP: 002b:00007fb0b8a66038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 713.211720][ T38] RAX: ffffffffffffffda RBX: 00007fb0baa35fa0 RCX: 00007fb0ba7febe9 [ 713.211736][ T38] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 713.211751][ T38] RBP: 00007fb0ba881e19 R08: 0000000000000000 R09: 0000000000000000 [ 713.211766][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 713.211781][ T38] R13: 00007fb0baa36038 R14: 00007fb0baa35fa0 R15: 00007fff0cb22f88 [ 713.211820][ T38] [ 713.211842][ T38] [ 713.211842][ T38] Showing all locks held in the system: [ 713.211853][ T38] 4 locks held by kworker/0:0/9: [ 713.211867][ T38] #0: ffff8880361ee538 ((wq_completion)wg-kex-wg1#10){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 713.211932][ T38] #1: ffffc900000e7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 713.212009][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 713.212074][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 713.212131][ T38] 4 locks held by kworker/0:1/10: [ 713.212144][ T38] #0: ffff88805b42c938 ((wq_completion)wg-crypt-wg2#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 713.212204][ T38] #1: ffffc900000f7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 713.212277][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 713.212330][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 713.212385][ T38] 4 locks held by kworker/u8:0/12: [ 713.212398][ T38] #0: ffff88814d628938 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 713.212454][ T38] #1: ffffc90000117bc0 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 713.212512][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 713.212567][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 713.212624][ T38] 2 locks held by kworker/u8:1/13: [ 713.212638][ T38] 2 locks held by ksoftirqd/0/15: [ 714.443094][ T38] #0: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 714.443177][ T38] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 714.443237][ T38] 6 locks held by ktimers/0/16: [ 714.443261][ T38] 4 locks held by pr/legacy/17: [ 714.443276][ T38] 2 locks held by rcuc/0/20: [ 714.443289][ T38] #0: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 714.443347][ T38] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 714.443407][ T38] 2 locks held by rcuc/1/28: [ 714.443419][ T38] #0: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 714.443475][ T38] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 714.443534][ T38] 8 locks held by ktimers/1/29: [ 714.443547][ T38] 2 locks held by ksoftirqd/1/30: [ 714.443560][ T38] #0: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 714.443614][ T38] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 714.443670][ T38] 3 locks held by kworker/1:0/31: [ 714.443683][ T38] #0: ffff888019899938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 714.443743][ T38] #1: ffffc90000a5fbc0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 714.443800][ T38] #2: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x95/0xf30 [ 714.443862][ T38] 1 lock held by khungtaskd/38: [ 714.443875][ T38] #0: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 714.443929][ T38] 3 locks held by kworker/u8:2/43: [ 714.443942][ T38] #0: ffff88814d126938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 714.443997][ T38] #1: ffffc90000b47bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 714.444053][ T38] #2: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 714.444108][ T38] 5 locks held by kworker/u8:3/57: [ 714.444121][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 714.444176][ T38] #1: ffffc9000123fbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 714.444233][ T38] #2: ffff88805d7b0898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 714.444300][ T38] #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 714.444354][ T38] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 714.444411][ T38] 5 locks held by kworker/u8:4/58: [ 714.444424][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 714.444479][ T38] #1: ffffc9000124fbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 714.444535][ T38] #2: ffff88805dd60898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 714.444592][ T38] #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 714.444648][ T38] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 714.444706][ T38] 5 locks held by kworker/u8:5/73: [ 714.444719][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 714.444775][ T38] #1: ffffc9000156fbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 714.444831][ T38] #2: ffff88805daa0898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 714.444887][ T38] #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 714.444941][ T38] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 714.445004][ T38] 4 locks held by kworker/0:2/993: [ 714.445017][ T38] #0: ffff88805aba1538 ((wq_completion)wg-crypt-wg1){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 714.445073][ T38] #1: ffffc9000457fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 714.445148][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 714.445202][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 714.445270][ T38] 4 locks held by kworker/u8:7/1029: [ 714.445283][ T38] #0: ffff88805b19c938 ((wq_completion)wg-kex-wg1#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 714.445344][ T38] #1: ffffc900045cfbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 714.445401][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 714.445457][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 714.445518][ T38] 6 locks held by kworker/u8:8/1436: [ 714.445531][ T38] #0: ffff88801a6f4138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 714.445586][ T38] #1: ffffc900050efbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 714.445641][ T38] #2: ffffffff8ecc6280 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 714.445701][ T38] #3: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x990 [ 714.445759][ T38] #4: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 714.445814][ T38] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 714.445878][ T38] 4 locks held by kworker/u8:10/3554: [ 714.445892][ T38] #0: ffff8880281c5138 ((wq_completion)wg-kex-wg2#9){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 714.445953][ T38] #1: ffffc9000d037bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 714.446010][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 714.446065][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 714.446122][ T38] 5 locks held by kworker/u8:11/4519: [ 714.446134][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 714.446190][ T38] #1: ffffc9000eb17bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 714.446254][ T38] #2: ffff88805e050898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 714.446312][ T38] #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 714.446367][ T38] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 714.446424][ T38] 5 locks held by kworker/1:2/5166: [ 714.446436][ T38] #0: ffff88805aba1138 ((wq_completion)wg-kex-wg1#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 714.446497][ T38] #1: ffffc9000fa1fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 714.446573][ T38] #2: ffff8880322895f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x150/0x900 [ 714.446630][ T38] #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 714.446686][ T38] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 714.446742][ T38] 2 locks held by klogd/5194: [ 714.446755][ T38] 2 locks held by getty/5591: [ 714.446767][ T38] #0: ffff88823bf660a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 714.446828][ T38] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 714.446884][ T38] 2 locks held by dhcpcd/5610: [ 714.446896][ T38] #0: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 714.446951][ T38] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 714.447007][ T38] 3 locks held by syz-executor/5823: [ 714.447020][ T38] #0: ffff88802fb63110 (sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_sendmsg+0x21/0x50 [ 714.447075][ T38] #1: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 714.447129][ T38] #2: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 714.447185][ T38] 2 locks held by syz-executor/5839: [ 714.447198][ T38] #0: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 714.447260][ T38] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 714.447317][ T38] 6 locks held by kworker/1:3/5847: [ 714.447329][ T38] #0: ffff88814469b138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 714.447385][ T38] #1: ffffc90004c3fbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 714.447443][ T38] #2: ffff888027bda188 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 714.447498][ T38] #3: ffff88805d0fb188 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xde/0x940 [ 714.447548][ T38] #4: ffff88805d0fc150 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x800 [ 714.447601][ T38] #5: ffffffff8d9ae570 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 714.447654][ T38] 4 locks held by kworker/R-wg-cr/5876: [ 714.447667][ T38] #0: ffff88805a9cbd38 ((wq_completion)wg-crypt-wg0){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 714.447723][ T38] #1: ffffc90004e1fba0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 714.447781][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 714.447836][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 714.447893][ T38] 4 locks held by kworker/R-wg-cr/5879: [ 714.447906][ T38] #0: ffff88805aba1538 ((wq_completion)wg-crypt-wg1){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 714.447962][ T38] #1: ffffc90004e4fba0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 714.448035][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 714.448090][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 714.448147][ T38] 4 locks held by kworker/R-wg-cr/5882: [ 714.448160][ T38] #0: ffff88805af92d38 ((wq_completion)wg-crypt-wg0#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 714.448220][ T38] #1: ffffc90004e3fba0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 714.448285][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 714.448340][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 714.448395][ T38] 4 locks held by kworker/R-wg-cr/5884: [ 714.448409][ T38] #0: ffff88805b02b938 ((wq_completion)wg-crypt-wg1#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 714.448469][ T38] #1: ffffc90004ebfba0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 714.448543][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 714.448597][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 714.448653][ T38] 4 locks held by kworker/R-wg-cr/5887: [ 714.448666][ T38] #0: ffff8880346ab538 ((wq_completion)wg-crypt-wg0#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 714.448727][ T38] #1: ffffc90004edfba0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 714.448801][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 714.448855][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 714.448911][ T38] 4 locks held by kworker/R-wg-cr/5888: [ 714.448924][ T38] #0: ffff88805b38c938 ((wq_completion)wg-crypt-wg0#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 714.448985][ T38] #1: ffffc90004eefba0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 714.449041][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 714.449096][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 714.449151][ T38] 4 locks held by kworker/R-wg-cr/5889: [ 714.449164][ T38] #0: ffff88805b3f8d38 ((wq_completion)wg-crypt-wg1#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 714.449225][ T38] #1: ffffc90004effba0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 714.449307][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 714.449361][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 714.449417][ T38] 4 locks held by kworker/R-wg-cr/5890: [ 714.449430][ T38] #0: ffff8880361ee138 ((wq_completion)wg-crypt-wg1#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 714.449490][ T38] #1: ffffc90004f0fba0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 714.449548][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 714.449601][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 714.449657][ T38] 4 locks held by kworker/R-wg-cr/5891: [ 714.449670][ T38] #0: ffff888028273d38 ((wq_completion)wg-crypt-wg2#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 714.449731][ T38] #1: ffffc90004f1fba0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 714.449787][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 714.449842][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 714.449900][ T38] 4 locks held by kworker/R-wg-cr/5892: [ 714.449913][ T38] #0: ffff88805b42c938 ((wq_completion)wg-crypt-wg2#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 714.449975][ T38] #1: ffffc90004f3fba0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 714.450025][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 714.450070][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 714.450125][ T38] 2 locks held by napi/wg2-0/5899: [ 714.450138][ T38] #0: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 714.450193][ T38] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 714.450260][ T38] 2 locks held by napi/wg1-0/5911: [ 714.450273][ T38] #0: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 714.450328][ T38] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 714.450384][ T38] 2 locks held by napi/wg2-0/5912: [ 714.450397][ T38] #0: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 714.450453][ T38] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 714.450510][ T38] 2 locks held by napi/wg1-0/5924: [ 714.450523][ T38] #0: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 714.450578][ T38] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 714.450634][ T38] 5 locks held by kworker/0:6/5928: [ 714.450647][ T38] #0: ffff88805aba1138 ((wq_completion)wg-kex-wg1#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 714.450707][ T38] #1: ffffc9000554fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 714.450781][ T38] #2: ffff88804a4983f8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x38/0xbe0 [ 714.450836][ T38] #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 714.450891][ T38] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 714.450948][ T38] 4 locks held by kworker/0:7/5929: [ 714.450961][ T38] #0: ffff888019899938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 714.451016][ T38] #1: ffffc9000555fbc0 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 714.451072][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 714.451126][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 714.451182][ T38] 6 locks held by kworker/1:4/5930: [ 714.451195][ T38] #0: ffff88814469b138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 714.451259][ T38] #1: ffffc9000556fbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 714.451315][ T38] #2: ffff888027c3f188 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 714.451367][ T38] #3: ffff88805df7f188 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xde/0x940 [ 714.451417][ T38] #4: ffff88805df79150 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x800 [ 714.451471][ T38] #5: ffffffff8e73c778 (input_mutex){+.+.}-{4:4}, at: __input_unregister_device+0x328/0x640 [ 714.451529][ T38] 4 locks held by kworker/1:5/5957: [ 714.451544][ T38] 4 locks held by kworker/1:6/6016: [ 714.451557][ T38] #0: ffff8880361ee538 ((wq_completion)wg-kex-wg1#10){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 714.451618][ T38] #1: ffffc9000575fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 714.451692][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 714.451747][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 714.451802][ T38] 4 locks held by kworker/1:7/6017: [ 714.451815][ T38] #0: ffff8880361ee138 ((wq_completion)wg-crypt-wg1#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 714.451876][ T38] #1: ffffc9000570fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 714.451951][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 714.452005][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 714.452062][ T38] 4 locks held by udevd/6072: [ 714.452074][ T38] #0: ffff88806a863ec8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb8/0xe10 [ 714.452127][ T38] #1: ffff888024284878 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x55/0x3c0 [ 714.452189][ T38] #2: ffff88803c4e4968 (kn->active#22){++++}-{0:0}, at: kernfs_seq_start+0x75/0x3c0 [ 714.461980][ T38] #3: ffff88805df7f188 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 714.462038][ T38] 4 locks held by kworker/1:8/6831: [ 714.462051][ T38] #0: ffff88805b02b538 ((wq_completion)wg-kex-wg1#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 714.462114][ T38] #1: ffffc900057cfbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 714.462187][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 714.462251][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 714.462307][ T38] 6 locks held by kworker/u8:12/6941: [ 714.462321][ T38] #0: ffff8880370f8938 ((wq_completion)wg-kex-wg2#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 714.462382][ T38] #1: ffffc900058ffbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 714.462440][ T38] #2: ffff8880319655f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 714.462497][ T38] #3: ffff88804a49d8b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 714.462552][ T38] #4: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 714.462607][ T38] #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 714.462664][ T38] 4 locks held by kworker/u8:13/6942: [ 714.462676][ T38] #0: ffff888026403938 ((wq_completion)wg-kex-wg1#7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 714.462737][ T38] #1: ffffc9000586fbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 714.462794][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 714.462849][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 714.462906][ T38] 4 locks held by kworker/1:9/6998: [ 714.462919][ T38] #0: ffff88805b42c938 ((wq_completion)wg-crypt-wg2#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 714.462980][ T38] #1: ffffc900049cfbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 714.463053][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 714.463109][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 714.463164][ T38] 4 locks held by kworker/u9:0/13647: [ 714.463178][ T38] #0: ffff888027b61138 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 714.463233][ T38] #1: ffffc900053d7bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 714.463297][ T38] #2: ffff888032b80e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 714.463350][ T38] #3: ffff888032b800a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 714.463409][ T38] 4 locks held by kworker/R-bond3/14788: [ 714.463422][ T38] #0: ffff88805e221938 ((wq_completion)bond3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 714.463477][ T38] #1: ffffc9000c04fba0 ((work_completion)(&(&bond->ad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 714.463534][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 714.463589][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 714.463648][ T38] 1 lock held by dhcpcd/16474: [ 714.463660][ T38] #0: ffff88803dd696b8 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 714.463720][ T38] 2 locks held by syz.4.5035/16481: [ 714.463734][ T38] #0: ffff88806a179720 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb8/0xe10 [ 714.463786][ T38] #1: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: wireless_dev_seq_start+0x60/0x130 [ 714.463837][ T38] 1 lock held by syz.0.5038/16489: [ 714.463850][ T38] #0: ffffffff8d9ae570 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 714.463903][ T38] 2 locks held by syz.2.5040/16496: [ 714.463916][ T38] #0: ffffffff8ecc6280 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 714.463974][ T38] #1: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0 [ 714.464034][ T38] 1 lock held by dhcpcd/16499: [ 714.464046][ T38] #0: ffff88805bb66e78 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 714.464106][ T38] 3 locks held by syz.1.5043/16503: [ 714.464119][ T38] #0: ffffffff8ed39180 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 714.464168][ T38] #1: ffffffff8ed38f78 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 714.464217][ T38] #2: ffffffff8ecd3178 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_register_hw+0x3048/0x4100 [ 714.464279][ T38] 5 locks held by kworker/u8:6/16508: [ 714.464292][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 714.464347][ T38] #1: ffffc9000593fbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 714.464405][ T38] #2: ffff88804af40898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 714.464465][ T38] #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 714.464519][ T38] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 714.464576][ T38] 5 locks held by kworker/u8:9/16509: [ 714.464590][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 714.464645][ T38] #1: ffffc9000594fbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 714.464700][ T38] #2: ffff88804afe0898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 714.464759][ T38] #3: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 714.464814][ T38] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 714.464871][ T38] 6 locks held by kworker/u8:14/16510: [ 714.464885][ T38] #0: ffff888036918938 ((wq_completion)wg-kex-wg0){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 714.464943][ T38] #1: ffffc9000595fbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 714.464998][ T38] #2: ffff8880364b55f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 714.465053][ T38] #3: ffff88804a408e90 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 714.465106][ T38] #4: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 714.465161][ T38] #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 714.465218][ T38] 6 locks held by kworker/u8:15/16511: [ 714.465231][ T38] #0: ffff88803644f138 ((wq_completion)wg-kex-wg0#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 714.465304][ T38] #1: ffffc9000596fbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 714.465359][ T38] #2: ffff88805b0e95f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 714.465414][ T38] #3: ffff88804a40ae58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 714.465468][ T38] #4: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 714.465522][ T38] #5: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 714.465578][ T38] 7 locks held by kworker/u8:16/16512: [ 714.465591][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 714.465647][ T38] #1: ffffc9000591fbc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 714.465706][ T38] #2: ffff88804a42e300 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 714.465774][ T38] #3: ffff88804a202d20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 714.465836][ T38] #4: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 714.465891][ T38] #5: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 714.465946][ T38] #6: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 714.466001][ T38] 4 locks held by kworker/u8:17/16513: [ 714.466014][ T38] 1 lock held by dhcpcd/16514: [ 714.466027][ T38] #0: ffff88803dfda438 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 714.466085][ T38] 4 locks held by kworker/0:4/16515: [ 714.466098][ T38] #0: ffff8880361ee138 ((wq_completion)wg-crypt-wg1#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 714.466161][ T38] #1: ffffc9000590fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 714.466236][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 714.466299][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 714.466355][ T38] 4 locks held by kworker/0:5/16516: [ 714.466368][ T38] #0: ffff88805b38c938 ((wq_completion)wg-crypt-wg0#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 714.466429][ T38] #1: ffffc900057bfbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 714.466503][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 714.466558][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 714.466615][ T38] 4 locks held by kworker/0:9/16517: [ 714.466627][ T38] #0: ffff888028271138 ((wq_completion)wg-kex-wg2#8){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 714.466688][ T38] #1: ffffc9000598fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 714.466763][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 714.466818][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 714.466875][ T38] 4 locks held by kworker/0:10/16518: [ 714.466888][ T38] #0: ffff888028273d38 ((wq_completion)wg-crypt-wg2#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 714.466946][ T38] #1: ffffc9000599fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 714.467014][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 714.467070][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 714.467126][ T38] 4 locks held by kworker/1:1/16520: [ 714.467139][ T38] #0: ffff88805b38c938 ((wq_completion)wg-crypt-wg0#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 714.467200][ T38] #1: ffffc900059cfbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 714.467282][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 714.467337][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 714.467394][ T38] 4 locks held by kworker/1:10/16521: [ 714.467407][ T38] #0: ffff88805aba3938 ((wq_completion)wg-crypt-wg2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 714.467463][ T38] #1: ffffc900059dfbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 714.467537][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 714.467592][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 714.467647][ T38] 4 locks held by kworker/1:11/16522: [ 714.467660][ T38] #0: ffff88805af92d38 ((wq_completion)wg-crypt-wg0#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 714.467721][ T38] #1: ffffc900059efbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 714.467795][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 714.467850][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 714.467906][ T38] 1 lock held by dhcpcd/16523: [ 714.467919][ T38] #0: ffff88803ddbccb8 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 714.467978][ T38] 1 lock held by dhcpcd/16524: [ 714.467989][ T38] #0: ffff88803ddbb878 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 714.468047][ T38] 4 locks held by kworker/1:12/16525: [ 714.468061][ T38] #0: ffff88805adcfd38 ((wq_completion)wg-crypt-wg2#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 714.468121][ T38] #1: ffffc90004b1fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 714.468195][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 714.468258][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 714.468315][ T38] 1 lock held by dhcpcd/16527: [ 714.468328][ T38] #0: ffff88803ded8ff8 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 714.468387][ T38] 4 locks held by kworker/0:12/16529: [ 714.468400][ T38] #0: ffff88805b02b538 ((wq_completion)wg-kex-wg1#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 714.468462][ T38] #1: ffffc90005a4fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 714.468537][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 714.468591][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 714.468647][ T38] 4 locks held by kworker/u8:18/16530: [ 714.468660][ T38] #0: ffff88805b515138 ((wq_completion)wg-kex-wg1#9){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 714.468720][ T38] #1: ffffc90004b6fbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 714.468776][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 714.468830][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 714.468885][ T38] 6 locks held by kworker/u8:19/16531: [ 714.468899][ T38] #0: ffff88803644f138 ((wq_completion)wg-kex-wg0#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 714.468959][ T38] #1: ffffc90005a5fbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 714.469015][ T38] #2: ffff88805b0e95f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 714.469069][ T38] #3: ffff88804a40b8f0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 714.469123][ T38] #4: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 714.469178][ T38] #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 714.469235][ T38] 2 locks held by kworker/u8:20/16532: [ 714.469257][ T38] 1 lock held by syz-executor/16533: [ 714.469271][ T38] 7 locks held by kworker/u8:21/16534: [ 714.469283][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 714.469339][ T38] #1: ffffc90005a7fbc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 714.469398][ T38] #2: ffff88803b677300 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 714.469461][ T38] #3: ffff888049eb4120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 714.469522][ T38] #4: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 714.469575][ T38] #5: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 714.469629][ T38] #6: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 714.469685][ T38] 5 locks held by kworker/u8:22/16535: [ 714.469699][ T38] 2 locks held by syz-executor/16536: [ 714.469713][ T38] 7 locks held by kworker/u8:23/16538: [ 714.469725][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 714.469782][ T38] #1: ffffc90005ad7bc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 714.469840][ T38] #2: ffff888023eb8300 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 714.469906][ T38] #3: ffff88804a799920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 714.469967][ T38] #4: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 714.470018][ T38] #5: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 714.470072][ T38] #6: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 714.470128][ T38] 4 locks held by kworker/u9:1/16539: [ 714.470141][ T38] #0: ffff888030e58938 ((wq_completion)krxrpcd){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 714.470197][ T38] #1: ffffc90005ae7bc0 ((work_completion)(&rxnet->peer_keepalive_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 714.470262][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 714.470317][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 714.470374][ T38] 4 locks held by kworker/0:13/16540: [ 714.470386][ T38] #0: ffff888019899938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 714.470443][ T38] #1: ffffc90005af7bc0 ((work_completion)(&(&gc->dwork)->work)#3){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 714.470504][ T38] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 714.470558][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 714.470615][ T38] 6 locks held by kworker/u8:24/16541: [ 714.470629][ T38] #0: ffff8880363d3938 ((wq_completion)wg-kex-wg0#7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 714.470690][ T38] #1: ffffc90004b7fbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 714.470746][ T38] #2: ffff88805b3c95f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 714.470802][ T38] #3: ffff88804a49e350 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 715.076873][ C0] net_ratelimit: 2401 callbacks suppressed [ 715.076897][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:0b:8f:e3:b6:f8, vlan:0) [ 715.079840][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 715.080474][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 715.081198][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 715.084181][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:0b:8f:e3:b6:f8, vlan:0) [ 715.087081][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 715.087743][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 715.088735][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 715.091489][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:22:0b:8f:e3:b6:f8, vlan:0) [ 715.094014][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 715.424123][ T5859] Bluetooth: hci5: command 0x0c39 tx timeout [ 715.428664][T16533] Bluetooth: hci5: Opcode 0x0c39 failed: -110 [ 715.440270][ T38] #4: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 715.440348][ T38] #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 715.440411][ T38] [ 715.440416][ T38] ============================================= [ 715.440416][ T38] [ 715.440426][ T38] NMI backtrace for cpu 0 [ 715.440443][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 715.440470][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 715.440483][ T38] Call Trace: [ 715.440492][ T38] [ 715.440502][ T38] dump_stack_lvl+0x189/0x250 [ 715.440538][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 715.440570][ T38] ? __pfx__printk+0x10/0x10 [ 715.440610][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 715.440642][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 715.440674][ T38] ? __pfx__printk+0x10/0x10 [ 715.440703][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 715.440734][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 715.440767][ T38] watchdog+0xf93/0xfe0 [ 715.440801][ T38] ? watchdog+0x1de/0xfe0 [ 715.440837][ T38] kthread+0x70e/0x8a0 [ 715.440875][ T38] ? __pfx_watchdog+0x10/0x10 [ 715.440902][ T38] ? __pfx_kthread+0x10/0x10 [ 715.440942][ T38] ? __pfx_kthread+0x10/0x10 [ 715.440976][ T38] ret_from_fork+0x3f9/0x770 [ 715.441018][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 715.441055][ T38] ? __switch_to_asm+0x39/0x70 [ 715.441075][ T38] ? __switch_to_asm+0x33/0x70 [ 715.441094][ T38] ? __pfx_kthread+0x10/0x10 [ 715.441128][ T38] ret_from_fork_asm+0x1a/0x30 [ 715.441168][ T38] [ 715.441177][ T38] Sending NMI from CPU 0 to CPUs 1: [ 715.441207][ C1] NMI backtrace for cpu 1 [ 715.441224][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 715.441244][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 715.441254][ C1] RIP: 0010:__lock_acquire+0x5ec/0xd20 [ 715.441287][ C1] Code: fe ff ff 44 89 e0 41 38 c5 76 1a e8 0e 53 18 03 48 8b 3c 24 85 c0 74 0d 83 3d d3 6e 81 0d 00 0f 84 1a 05 00 00 83 7c 24 0c 00 <0f> 84 a9 00 00 00 41 8b 46 20 66 85 c0 0f 88 8d 00 00 00 65 8b 0d [ 715.441302][ C1] RSP: 0018:ffffc90000a3df68 EFLAGS: 00000046 [ 715.441318][ C1] RAX: 0000000000000003 RBX: 0000000000000007 RCX: 0000000000000007 [ 715.441330][ C1] RDX: 0000000000000003 RSI: 0000000000000003 RDI: ffff88801caf1dc0 [ 715.441341][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8172b165 [ 715.441353][ C1] R10: ffffc90000a3e1b8 R11: ffffffff81aae2f0 R12: 0000000000000003 [ 715.441365][ C1] R13: 0000000000000001 R14: ffff88801caf29f8 R15: ffff88801caf2a18 [ 715.441378][ C1] FS: 0000000000000000(0000) GS:ffff8881269bf000(0000) knlGS:0000000000000000 [ 715.441393][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 715.441406][ C1] CR2: 00007f8d4df96038 CR3: 000000000d7a6000 CR4: 00000000003526f0 [ 715.441424][ C1] Call Trace: [ 715.441430][ C1] [ 715.441441][ C1] ? unwind_next_frame+0xa5/0x2390 [ 715.441464][ C1] lock_acquire+0x120/0x360 [ 715.441484][ C1] ? unwind_next_frame+0xa5/0x2390 [ 715.441510][ C1] ? unwind_next_frame+0xa5/0x2390 [ 715.441532][ C1] ? NF_HOOK+0x215/0x3c0 [ 715.441553][ C1] ? unwind_next_frame+0xa5/0x2390 [ 715.441575][ C1] unwind_next_frame+0xc2/0x2390 [ 715.441596][ C1] ? unwind_next_frame+0xa5/0x2390 [ 715.441620][ C1] ? unwind_next_frame+0xa5/0x2390 [ 715.441642][ C1] ? nf_hook_slow+0xc2/0x220 [ 715.441667][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 715.441686][ C1] arch_stack_walk+0x11c/0x150 [ 715.441712][ C1] ? NF_HOOK+0x215/0x3c0 [ 715.441734][ C1] stack_trace_save+0x9c/0xe0 [ 715.441751][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 715.441772][ C1] ? __lock_acquire+0xab9/0xd20 [ 715.441793][ C1] kasan_save_track+0x3e/0x80 [ 715.441811][ C1] ? kasan_save_track+0x3e/0x80 [ 715.441829][ C1] ? kasan_save_free_info+0x46/0x50 [ 715.441844][ C1] ? __kasan_slab_free+0x5b/0x80 [ 715.441863][ C1] ? kmem_cache_free+0x195/0x510 [ 715.441885][ C1] ? br_nf_dev_queue_xmit+0x52d/0x2090 [ 715.441901][ C1] ? NF_HOOK+0x618/0x6b0 [ 715.441922][ C1] ? br_nf_post_routing+0xb66/0xfe0 [ 715.441946][ C1] ? nf_hook_slow+0xc2/0x220 [ 715.441966][ C1] ? NF_HOOK+0x215/0x3c0 [ 715.441986][ C1] ? br_forward_finish+0xd3/0x130 [ 715.442006][ C1] ? br_nf_forward_finish+0xa40/0xe60 [ 715.442021][ C1] ? NF_HOOK+0x618/0x6b0 [ 715.442044][ C1] ? br_nf_forward_ip+0x647/0x7e0 [ 715.442058][ C1] ? nf_hook_slow+0xc2/0x220 [ 715.442080][ C1] ? NF_HOOK+0x215/0x3c0 [ 715.442115][ C1] kasan_save_free_info+0x46/0x50 [ 715.442131][ C1] __kasan_slab_free+0x5b/0x80 [ 715.442150][ C1] ? br_nf_dev_queue_xmit+0x52d/0x2090 [ 715.442165][ C1] kmem_cache_free+0x195/0x510 [ 715.442186][ C1] ? __skb_ext_put+0x218/0x2e0 [ 715.442204][ C1] br_nf_dev_queue_xmit+0x52d/0x2090 [ 715.442223][ C1] ? NF_HOOK+0x9e/0x6b0 [ 715.442245][ C1] NF_HOOK+0x618/0x6b0 [ 715.442278][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 715.442303][ C1] ? net_generic+0x1e/0x240 [ 715.442326][ C1] ? net_generic+0x1e/0x240 [ 715.442348][ C1] ? net_generic+0x1e/0x240 [ 715.442370][ C1] ? skb_pull+0xc1/0x1d0 [ 715.442389][ C1] br_nf_post_routing+0xb66/0xfe0 [ 715.442413][ C1] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 715.442431][ C1] ? __pfx_br_nf_post_routing+0x10/0x10 [ 715.442456][ C1] nf_hook_slow+0xc2/0x220 [ 715.442478][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 715.442500][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 715.442522][ C1] NF_HOOK+0x215/0x3c0 [ 715.442544][ C1] ? NF_HOOK+0x9e/0x3c0 [ 715.442564][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 715.442586][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 715.442613][ C1] br_forward_finish+0xd3/0x130 [ 715.442634][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 715.442657][ C1] br_nf_forward_finish+0xa40/0xe60 [ 715.442677][ C1] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 715.442694][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 715.442718][ C1] ? NF_HOOK+0x9e/0x6b0 [ 715.442741][ C1] ? NF_HOOK+0x9e/0x6b0 [ 715.442763][ C1] NF_HOOK+0x618/0x6b0 [ 715.442788][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 715.442817][ C1] br_nf_forward_ip+0x647/0x7e0 [ 715.442832][ C1] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 715.442849][ C1] ? __pfx_br_nf_forward+0x10/0x10 [ 715.442874][ C1] nf_hook_slow+0xc2/0x220 [ 715.442896][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 715.442918][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 715.442939][ C1] NF_HOOK+0x215/0x3c0 [ 715.442961][ C1] ? NF_HOOK+0x9e/0x3c0 [ 715.442981][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 715.443004][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 715.443030][ C1] __br_forward+0x41e/0x600 [ 715.443051][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 715.443075][ C1] ? __pfx___br_forward+0x10/0x10 [ 715.443098][ C1] ? skb_clone+0x246/0x3a0 [ 715.443116][ C1] maybe_deliver+0xb5/0x160 [ 715.443139][ C1] br_flood+0x31a/0x6a0 [ 715.443164][ C1] br_handle_frame_finish+0x14b4/0x19b0 [ 715.443188][ C1] ? stack_depot_save_flags+0x40/0x860 [ 715.443216][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 715.443239][ C1] ? br_handle_frame+0x982/0x14d0 [ 715.443271][ C1] ? __netif_receive_skb+0x72/0x380 [ 715.443290][ C1] ? process_backlog+0x31e/0x900 [ 715.443311][ C1] ? ipv6_ext_hdr+0x5d/0x80 [ 715.443332][ C1] ? nf_ct_frag6_gather+0x3d0/0x2020 [ 715.443355][ C1] ? nf_hook_slow+0x176/0x220 [ 715.443378][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 715.443402][ C1] br_nf_hook_thresh+0x3c3/0x4a0 [ 715.443429][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 715.443453][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 715.443482][ C1] br_nf_pre_routing_finish_ipv6+0x948/0xd00 [ 715.443499][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 715.443527][ C1] ? br_nf_pre_routing_ipv6+0x42f/0x6b0 [ 715.443544][ C1] br_nf_pre_routing_ipv6+0x37e/0x6b0 [ 715.443562][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 715.443580][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 715.443597][ C1] ? br_nf_pre_routing+0x720/0x1470 [ 715.443623][ C1] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 715.443647][ C1] br_handle_frame+0x982/0x14d0 [ 715.443674][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 715.443697][ C1] ? try_to_take_rt_mutex+0x840/0xb00 [ 715.443720][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 715.443747][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 715.443772][ C1] __netif_receive_skb_core+0x10b9/0x4020 [ 715.443793][ C1] ? __lock_acquire+0xab9/0xd20 [ 715.443816][ C1] ? do_raw_spin_lock+0x121/0x290 [ 715.443838][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 715.443862][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 715.443883][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 715.443906][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 715.443933][ C1] ? __lock_acquire+0xab9/0xd20 [ 715.443957][ C1] ? process_backlog+0x27b/0x900 [ 715.443979][ C1] ? process_backlog+0x27b/0x900 [ 715.443999][ C1] __netif_receive_skb+0x72/0x380 [ 715.444018][ C1] ? rt_spin_unlock+0x65/0x80 [ 715.444040][ C1] ? process_backlog+0x27b/0x900 [ 715.444060][ C1] process_backlog+0x31e/0x900 [ 715.444085][ C1] __napi_poll+0xb3/0x540 [ 715.444107][ C1] net_rx_action+0x707/0xe00 [ 715.444127][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 715.444157][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 715.444190][ C1] handle_softirqs+0x22f/0x710 [ 715.444215][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 715.444239][ C1] run_ktimerd+0xcf/0x190 [ 715.444268][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 715.444290][ C1] ? schedule+0x91/0x360 [ 715.444314][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 715.444334][ C1] smpboot_thread_fn+0x53f/0xa60 [ 715.444355][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 715.444377][ C1] kthread+0x70e/0x8a0 [ 715.444402][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 715.444422][ C1] ? __pfx_kthread+0x10/0x10 [ 715.444447][ C1] ? __pfx_kthread+0x10/0x10 [ 715.444470][ C1] ret_from_fork+0x3f9/0x770 [ 715.444491][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 715.444514][ C1] ? __switch_to_asm+0x39/0x70 [ 715.444529][ C1] ? __switch_to_asm+0x33/0x70 [ 715.444544][ C1] ? __pfx_kthread+0x10/0x10 [ 715.444568][ C1] ret_from_fork_asm+0x1a/0x30 [ 715.444590][ C1] [ 715.445204][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 715.445222][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 715.445248][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 715.445260][ T38] Call Trace: [ 715.445269][ T38] [ 715.445278][ T38] dump_stack_lvl+0x99/0x250 [ 715.445312][ T38] ? __asan_memcpy+0x40/0x70 [ 715.445336][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 715.445368][ T38] ? __pfx__printk+0x10/0x10 [ 715.445407][ T38] vpanic+0x281/0x750 [ 715.445443][ T38] ? __pfx_vpanic+0x10/0x10 [ 715.445472][ T38] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 715.445496][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 715.445540][ T38] panic+0xb9/0xc0 [ 715.445571][ T38] ? __pfx_panic+0x10/0x10 [ 715.445608][ T38] ? irq_work_queue+0xc3/0x140 [ 715.445640][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 715.445672][ T38] watchdog+0xfd2/0xfe0 [ 715.445706][ T38] ? watchdog+0x1de/0xfe0 [ 715.445742][ T38] kthread+0x70e/0x8a0 [ 715.445779][ T38] ? __pfx_watchdog+0x10/0x10 [ 715.445806][ T38] ? __pfx_kthread+0x10/0x10 [ 715.445845][ T38] ? __pfx_kthread+0x10/0x10 [ 715.445879][ T38] ret_from_fork+0x3f9/0x770 [ 715.445911][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 715.445947][ T38] ? __switch_to_asm+0x39/0x70 [ 715.445968][ T38] ? __switch_to_asm+0x33/0x70 [ 715.445988][ T38] ? __pfx_kthread+0x10/0x10 [ 715.446034][ T38] ret_from_fork_asm+0x1a/0x30 [ 715.446074][ T38] [ 715.446354][ T38] Kernel Offset: disabled